Billion BiPAC 7404VGOX Manuel d'utilisateur

BiPAC 7404VNOX /VNPX 3G/VoIP/802

7 The Rear Ports Port Meaning 1 Antenna Connect the detachable antenna to this port. 2 DSL Connect this port to the ADSL/telephone networ

97 Mail Alert Mail alert is designed to keep system administrator or other relevant personnel alerted of any unexpected events that might have occ

98 Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from your LAN,

99 Listed are the items under the Firewall section: General Settings, Packet Filter, Intrusion Detection, URL Filter, IM/P2P Blocking and Firewall L

100 Packet Filter This function is only available when the Firewall is enabled and one of these four security levels is chosen (All blocked, High,

101 Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1. Note

102 Inbound: Internet to LAN Outbound: LAN to Internet YES: Allowed NO: Blocked N/A: Not Applicable Packet Filter – Add TCP/UDP Filter Rule Nam

103 Packet Filter – Add Raw IP Filter Go to “Type” drop-down menu, select “Use Protocol Number”. Rule Name Helper: Users-define description to i

104 Example: Configuring your firewall to allow a publicly accessible web server on your LAN The predefined port filter rule for HTTP (TCP port 80)

105 Configuring Packet Filter: 1. Click Packet Filters. You will then be presented with the predefined port filter rules screen (in this case for th

106 Example: Application: Cindy_HTTP Time Schedule: Always On Source / Destination IP Address(es): 0.0.0.0 (I do not wish to active the address-fil

8 Cabling One of the most common causes of problem is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front

101

102 Intrusion Detection The router’s Intrusion Detection System (IDS) is used to detect hacker attacks and intrusion attempts from the Internet.

103 Max ICMP Count: This is a threshold to decide whether an ICMP flood is occurring or not. Default value is 100 ICMP packets per seconds except IC

104 Table 2: Hacker attack types recognized by the IDS Intrusion Name Detect Parameter BlacklistType of BlockDuration Drop Packet Show LogAscen

105 Src IP: Source IP Src Port: Source Port Dst Port: Destination Port Dst IP: Destination IP

106 URL Filter URL (Uniform Resource Locator – e.g. an address in the form of http://www.abcde.com or http:// www.example.com) filter rules allow y

107 Domains Filtering: This function checks the whole URL not the IP address, in URLs accessed against your list of domains to block or allow.

108 Example: Andy wishes to disable all WEB traffic except for ones listed in the trusted domain, which would prevent Bobby from accessing other we

109 IM / P2P Blocking IM, short for Instant Message, is required to use client program software that allows users to communicate, in exchanging tex

110 Firewall Log Firewall Log display log information of any unexpected action with your firewall settings. Check the Enable box to activate t

9 Chapter 3: Basic Installation The router can be configured through your web browser. A web browser is included as a standard application in the f

111 VPN - Virtual Private Networks Virtual Private Networks is ways to establish secured communication tunnels to an organization’s network via the

112 you wish to connect to. When configuring your router as a server, enter the Private IP Address assigned to the Dial in User. Sever IP Address(o

113 Example: Configuring a Remote Access PPTP VPN Dial-out Connection A company’s office establishes a PPTP VPN connection with a file server locat

114 Configuring the PPTP VPN in the Office Click Configuration/VPN/PPTP. Choose Remote Access from Connect Type drop-down menu. You can either inpu

115 PPTP Connection - LAN to LAN Click Configuration/VPN/PPTP. Choose LAN to LAN from Connect Type drop-down menu. Name: A given name for the co

116 Mode: You may select Stateful or Stateless mode. The key will be changed every 256 packets when you select Stateful mode. If you select Stateles

117 Example: Configuring a Remote Access PPTP VPN Dial-out Connection The branch office establishes a PPTP VPN tunnel with head office to connect t

118 Configuring the PPTP VPN in the Head Office The IP address 192.168.1.201 will be assigned to the router located in the branch office. Please ma

119 Configuring the PPTP VPN in the Head Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you re

120 IPSec (IP Security Protocol) Active: This function activates or deactivates the IPSec connection. Check Active checkbox if you want the prot

10 Connecting Your Router 1. Connect this router to a LAN (Local Area Network) and the ADSL/telephone (ADSL) net work. 2. Power on the device.

121 IPSec VPN Connection Name: A given name for the connection (e.g. “connection to office”). Local Network: Set the IP address, subnet or addre

122 Pre-shared Key: This is for the Internet Key Exchange (IKE) protocol, a string from 4 to 128 characters. Both sides should use the same key. IK

123 DES: Stands for Data Encryption Standard, it uses 56 bits as an encryption method. 3DES: Stands for Triple Data Encryption Standard, it

124 xxx.xxx.xxx.xxx(A valid IP Address) 2000 Yes, activate it in every 2000 second. Disconnection Time after no traffic: It is the NO Response tim

125 Example: Configuring an IPSec LAN to LAN VPN Connection Table 3: Network Configuration and Security Plan Branch Office Head Office Local

126 Configuring IPSec VPN in the Head Office Function Description Name IPSec_HeadOffice Give a name of IPSec Connection Local Network Subne

127 Configuring IPSec VPN in the Branch Office Function Description Name IPSec_BranchOffice Give a name of IPSec Connection Local Network

128 Example: Configuring an IPSec Host to LAN VPN Connection

129 Configuring IPSec VPN in the Office Function Description Name IPSec Give a name of IPSec Connection Local Network Subnet Select Subnet

130 L2TP (Layer Two Tunneling Protocol) Two types of L2TP VPN are supported Remote Access and LAN-to-LAN (please refer below for more informatio

11 Network Configuration Configuring PC in windows 7 1. Go to Start. Click on Control Panel. Then click on Network and Internet. 2. When the Net

131 Connection Type: Remote Access or LAN to LAN Name: A given name for the connection (e.g. “connection to office”). Connection Type: Remote Acce

132 SHA1: A one-way hashing algorithm that produces a 160−bit hash. Encryption: Select the encryption method from the pull-down menu. There are

133 Example: Configuring a L2TP VPN - Remote Access Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using

134 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not us

135 Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’s office establishes a L2TP VPN connection with a file server locat

136 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not us

137 L2TP Connection - LAN to LAN L2TP VPN Connection Name: A given name for the connection Connection Type: Remote Access or LAN to LAN. Type:

138 Active as default route: Commonly used by the Dial-out connection which all packets will route through the VPN tunnel to the Internet; therefor

139 Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office establishes a L2TP VPN tunnel with head office to connect two private net

140 Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located in the branch office. Please make s

12 4. Select Internet Protocol Version 4 (TCP/IPv4), then click Properties. 5. In the TCP/IPv4 properties window, select the Obtain an IP address

141 Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you regi

142 VoIP - Voice over Internet Protocol VoIP enables telephone calls through existing Internet connection instead of going through the PSTN (Public

143 SIP Device Parameters This section provides easy setup for your VoIP service. Phone port 1 and 2 can be registered to different SIP Service Pr

144 Advanced – Parameters VoIP through IP Interface: IP Interface decides where to send/receive the voip traffic; it includes: ipwan and iplan.

145 PSTN dialtone, not your VoIP dialtone. Wait several seconds and then press Check Level. You should check the OFFHOOK value for each telephone y

146 SIP Accounts This section reflects and contains basic settings for the VoIP module from selected provider in the Wizard section. Fail to provid

147 Phone Port This section displays status and allows you to edit the account information of your Phones. Click Edit to update your phone informat

148 Codec Preference Codec is known as Coder-Decoder used for data signal conversion. Set the priority of voice compression; Priority 1 owns the t

148 PSTN Dial Plan (Router with LINE port only) This section enables you to configure “VoIP with PSTN switching” on your system. You can define a r

149 Note: The actual dialed number of valid digits length MUST NOT exceed in the Number of Digits filed.

13 Configuring PC in Windows Vista 1. Go to Start. Click on Network. 2. Then click on Network and Sharing Center at the top bar. 3

150 PSTN Dial Plan Examples: 1. Dial with Prefix If you dial 01223 707070, number 01223707070 will be dialed out via FXO to make a regular ph

151 Even though 7070 (only 4 digits) does not match with number of digits 6 defined in the filed, 7070 is still a valid phone number since it has no

152 VoIP Dial Plan This section helps you to make a telephony number dialed as making a regular call via VoIP. You no longer need to memorize a lon

153 Main Digit Sequence: The call(s) can be called out via SIP or PSTN or ENUM. x: Any numeric number between 0 and 9. . ( period ): Repeat numeric

154 **xx*x. Starting with ‘** sign’ + any two digit numbers between 0 + any number (0-9) in variable length. Maximum length is 16. #xx. Startin

155 Call Features VoIP has all the basic features of a traditional phone. Besides the provided basic features, VoIP also comes with several enhance

156 Ring & Tone This section allows advanced user to change the existing or newly defined parameters for the various ring tones (dial tone, bus

157 Tone Parameters You may need to check with your local telephone service provider for such information. Also, it is recommended that this option

158 QoS - Quality of Service QoS function helps you to control your network traffic for each application from LAN (Ethernet and/or Wireless) to WA

159 Destination IP address Range: The destination IP address or range of packets to be monitored. Destination Port: The destination port of packet

14 5. Select Internet Protocol Versio4 (TCP/IPv4) then click Properties. 6. In the TCP/IPv4 properties window, sel

160 Time Schedule: Scheduling your prioritization policy. Refer to Time Schedule for more information. Protocol: The name of supported protocol. R

161 Inbound IP Throttling (WAN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the app

162 Example: QoS for your Network Connection Diagram VoIP Normal PCs Restricted PC

163 Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restrict

164 Mission-critical application Mostly the VPN connection is mission-critical application for doing data exchange between head and branch office.

165 files by using FTP. With above settings that help to limit utilization of upstream of FTP. Time schedule also help you to only limit utilizat

166 Sometime your customers or friends may upload their files to your FTP server and that will saturate your downstream bandwidth. The settings

167 Virtual Server In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming co

168 Porting Forwarding Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users

169 Example: If you like to remote accessing your Router through the Web/HTTP at all time, you would need to enable port number 80 (Web/HTTP) and ma

15 Configuring PC in Windows XP 1. Go to Start > Control Panel (in Classic View). In the Control Panel, double-click on Network Connections. 2.

170 Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all inco

171 Edit One-to-One NAT (Network Address Translation) One-to-One NAT maps a specific private/local IP address to a global/public IP address. If yo

172 Application: Users-defined description to identify this entry or click drop-down menu to select existing predefined rules. : 20 predefined

173 Table 5: Well-known and registered Ports Port Number Protocol Description 20 TCP FTP Data 21 TCP FTP Control 22 TCP & UDP SSH Remot

174 Wake on LAN Wake on LAN (WOL, sometimes WoL) is an Ethernet computer networking standard that allows a computer to be turned on or woken up rem

175 Time Schedule The Time Schedule supports up to 16 time slots which helps you to manage your Internet connection. In each time profile, you ma

176 Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit radio button. Note: Watc

177 Delete a Time Slot Click on the Delete radio button of the Time Slot you wish to delete under the Time Slot section, and then click the Edit/D

178 Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router

179 Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign th

16 Configuring PC in Windows 2000 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and Dial-up Conne

180 Device Management The Device Management advanced configuration settings allow you to control your router’s security options and device monitori

181 Management IP Address: You may specify an IP address allowed to logon and access the router’s web server. Setting the IP address to 0.0.0.0 wil

182 SNMP V3: Specify a name and password for authentication. And define the access right from identified IP address. Once the authentication has su

183 IGMP IGMP, known as Internet Group Management Protocol, is used to manage hosts from multicast group. IGMP Proxy: Enables or disables the ro

184 multicast packets will be forwarded to ports set according to the MLD Snooping below. MLD Snooping: similar to IGMP snooping, listens in on the

185 This section allows you to create VLAN group and specify the member. VLAN Bridge Edit: Edit your member ports in selected VLAN group. Crea

186 Chapter 5: Troubleshooting If your router is not functioning properly, please refer to the suggested solutions provided in this chapter. If you

187 Problem with LAN interface Problem Suggested Action Cannot PING any PC on LAN Check the Ethernet LEDs on the front panel. The LED should be

188 Logout To exit the router web interface, choose Logout. Please save your configuration setting before logging out of the system. Be aware tha

189 Appendix: Product Support & Contact The suggestions listed in the Troubleshooting section of the user manual can help you solve most of yo

Table of Contents Chapter 1: Introduction ...

17 Configuring PC in Windows 95/98/Me 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose th

18 Configuring PC in Windows NT4.0 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the P

19 Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Passwor

20 Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of

21 Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click “Go”

22 Chapter 4: Configuration At the configuration homepage, the left navigation column provides you the link to each configuration page. The categor

23 Status ADSL Status This section displays the ADSL overall status, which shows a number of helpful information such as DSP firmware version.

24 3G Status This section displays the 3G Card’s overall status, which shows you a number of helpful information such as the current signal strengt

25 Total Connection Time: The cumulative connection time. Amount used: Show the traffic or hours has been used. Billing period: The day from which t

26 iBurst Status Displays additional information of the 3G status when iBurst function is enabled in the 3G configuration such as its signal strengt

Wi-Fi Network Setup ...

27 ARP Table This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethe

28 Leased Table IP Address: The IP address that assigned to client. MAC Address: The MAC address of client. Client Host Name: The Host Name (

29 Routing Table Routing table displays information of both the routing table and the RIP Routing table in terms of the destination of the network

30 NAT Sessions This section lists all current NAT sessions between interface of types external (WAN) and internal (LAN). UPnP Portmap The s

31 PPTP Status This shows details of your configured PPTP VPN Connections. Name: The name you assigned to the particular PPTP connecti

32 IPSec Status This shows details of your configured IPSec VPN Connections. Name: The name you assigned to the particular VPN entry. Active: W

33 VoIP Status This table shows the status of the phone ports after they are being used for the VoIP feature. It will display some information suc

34 Event Log This page displays the router’s Event Log entries. Major events are logged to this window, such as when the router’s ADSL connection i

35 Error Log Any errors encountered by the router (e.g. invalid names given to entries) are logged to this window. IDS Log Any records about h

36 Quick Start The step “Quick start” provides users do some primary and necessary configuration of your Router. 1. Click Quick Start. Sele

1 Chapter 1: Introduction Introduction to your Router Welcome to the 3G/VoIP/ 802.11n ADSL2+ (VPN) Firewall Router. The router is an “all-in-one”

37 4. The list below has different mode applied for your choice. Choose 0/33/PPPoE(Recommended) and click Apply. 5. Please enter “Username”

38 IP Address: Your WAN IP address. Leave this at 0.0.0.0 to obtain automatically an IP address from your ISP. Obtain DNS automatically: Click to ac

39 7. Set up VoIP. SIP: To use VoIP SIP as VoIP call signaling protocol. Default is set to Disable. Region: This selection is a drop-down box,

40 8. Wait for the configuration. 9. When ADSL is synchronic, it will appear “check”.

41 Configuration When you click this item, the column will expand to display the sub-items that will allow you to further configure your ADSL rou

42 Note: You should setup each VLAN group with caution. Each Bridge Interface is arranged in this order. Bridge Interface VLAN Port (Always start

43 IP Alias This function creates multiple virtual IP interfaces on this router. It helps to connect two or more local networks to the ISP or remot

44 IPv6 Autoconfig The IPv6 address composes of two parts, thus, the prefix and the interface ID. BiPAC 7404VNO(P)X dynamically configure IPv6 add

45 Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines that helps you to manage your network control to

46 Active PC in LAN: Active PC in LAN displays a list of individual Ethernet device’s IP Address &MAC Address which connecting to the router

2 Multi-Protocol to Establish a Connection It supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation overATM (b

47 Mode: The default setting is 802.11b+g+n (Mixed mode). If you do not know or have both 11g and 11b devices in your network, then keep the default

48 In addition, WDS enhances its link connection security in WEP mode, WEP key encryption must be the same for both access points. WDS Service: The

49 Wireless Security WPA-PSK / WPA2-PSK Security Mode: You can disable or enable with WPA or WEP for protecting wireless network. The defa

50 WEP WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers secure d

51 Wireless Client / MAC Address Filter The MAC Address supports up to 16 wireless network machines and helps you manage your network control to ac

52 Associate Wireless Client: Displays a list of individual wireless device’s MAC Address that currently connects to the router. You can easily by

53 3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Configure Mode as Enrollee, press the WPS button on the top bar, select

54 4. The client’s SSID and security setting will now be configured to match the SSID and security setting of the registrar. PIN Method: Configur

55 3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Registrar. Enter the PIN number in the PIN Code column t

56 4. The router’s (AP’s) SSID and security setting will now be configured to match the SSID and security setting of the registrar.

3 IPv6 supported Internet Protocol version 6 (IPv6) is a version of the Internet Protocol that is designed to succeed IPv4. IPv6 has a vastly lar

57 5. Now to make sure that the setup is correctly done, cross check to see if the SSID and the security setting of the registrar setting match with

58

59 PBC Method: 1. Press the PBC button of the AP. 2. Launch the wireless client’s WPS Utility (eg. Ralink Utility). Set the Config Mode as Enrolle

60 3. When the PBC button is pushed, a wireless communication will be established between your router and the PC. The client’s SSID and security se

61 Wi-Fi Network Setup with Windows Vista WCN: 1. Jot down the AP PIN from the Web (eg. 25879810). 2. In your Vista operating system, access the C

62 3. Enter the AP SSID then click Next. 4. Enter the AP SSID then click Next.

63 5. When you have come to this step, you will have completed the Wi-Fi network setup using the built-in WCN feature in Windows Vista.

64 6. When you have come to this step, you will have completed the Wi-Fi network setup using the built-in WCN feature in Windows Vista.

65 Port Setting This section allows you to configure the settings for the router’s Ethernet ports to solve some of the compatibility problems that

66 DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHC

4 It supports flexible management interfaces with local console port, LAN port, and WAN port. Users can use terminal applications through the conso

67 WAN - Wide Area Network WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and the Internet. Here are th

68 EWAN EWAN is another way of getting connected to the Internet, the router offers its Ethernet port 1 as a WAN port to be used to connect to Cabl

69 Time Schedule: A self defined time period. You may specify a time schedule for failover/failback functioning. For setup and detail, refer to Time

70 WAN Profile ADSL PPPoE Connection PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP

71 Auth. Protocol: Default is Auto. Your ISP should advise you on whether to use Chap or Pap. Connection: Always on: If you want the router t

72 PPPoA Connection Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given

73 Idle Timeout: Auto-disconnect the broadband firewall gateway when there is no activity on the line for a predetermined period of time. Detail:

74 MPoA Connection Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given

75 addresses. DNS helps to find the IP address for the specific domain name. Check the checkbox to obtain DNS automatically. Primary DNS: Enter

76 IPoA Connection Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given na

5 Chapter 2: Installing the Router Important note for using this router Package Contents 3G/VoIP/802.11n ADSL2+ (VPN) Firewall Route

77 addresses. DNS helps to find the IP address for the specific domain name. Check the checkbox to obtain DNS automatically. Primary DNS: Enter the

78 Pure Bridge Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given name f

79 Multiple Session Profile Port: Select the profile port as ADSL. Protocol: The Multiple Session protocol will be used in the device. Description

80 Internet). Idle Timeout: Auto-disconnect the router when there is no activity on the line for a predetermined period of time. MTU: Maximum Trans

81 3G Profile mode: Select 3G as the profile port. iBurst: Check the check box to determine whether to enable the iBurst function. Usage Allo

82 Mode: Two methods are provided, that is, Volume-based and Time-based. Volume-based: The volume amount you can use per month. Only Download: Only

83 will give you an option of Keep Alive. Keep Alive: Set Enable to allow the router automatically reconnects the connection when ISP disconnects

84 EWAN

85 Obtain an IP Address Automatically When connecting to the ISP, This router also functions as a DHCP client. It can automatically obtain an IP add

86 Fixed IP Address Select this option to set static IP information. You will need to enter the Connection type, IP address, netmask, and gateway

6 Device Description The Front LEDs LED Meaning 1 Power Both red and green LEDs lit together when power is ON. Lit red means system

87 PPPoE PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP. Profile Port: Select the pr

88 mode. IPv6 Address: type the IPv6 address from your ISP, or get it automatically. ” ::” means to obtain IPv6 address automatically. Obtain IPv6

89 Pure Bridge Profile Port: Select the profile port as EWAN. Protocol: Select Pure Bridge. Acceptable Frame Type: Specify which kind of traffi

90 ADSL Mode Connect Mode: This mode will automatically detect your ADSL line code, ADSL2+, ADSL2, AnnexM2 and AnnexM2+, ADSL, All. Please keep

91 System Here are the items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart, User Management and Ma

92 Remote Access To temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will pe

93 Backup / Restore These functions allow you to save and backup your router’s current settings to a file on your PC, or to restore from a previo

94 Restart Router Click Restart with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to

95 User Management In order to prevent unauthorized access to your router’s configuration interface, it requires all users to login with a passw

96 When you create a user account, check Valid box and fill in the respective information for User, Comment, Password and Confirm Password in the