Billion 810VGTX User Manual Download Page 91

Page: 91 / 130

Billion 810VGTX Router

Page | 90

Example: Configuring a Remote Access L2TP VPN Dial-out Connection

A company’s office establishes a L2TP VPN connection with a file server located at a separate location. The router is
installed in the office, connected to a couple of PCs and Servers.

Configuring L2TP VPN in the Office

The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not used in the
Office LAN.

Summary of Contents for 810VGTX

Page 1: ...Billion 810VGTX Router Page 1...

Page 2: ...iguration 11 Factory Default Settings 16 Information from your ISP 17 Configuring with your Web Browser 17 CHAPTER4 CONFIGURATION 18 Status 19 ADSL Status 19 3G Status 19 ARP Table 20 DHCP Table 21 Ro...

Page 3: ...VoIP Voice over Internet Protocol 96 SIP Accounts 98 Phone Port 99 QoS Quality of Service 107 Virtual Server known as Port Forwarding 114 Time Schedule 120 Advanced 122 Logout 127 Chapter 5 Troublesho...

Page 4: ...with automatic fail over to ensure an always on Internet connection in the event that one of your Internet services fails Secure WLAN setup is simplified by the web browser based configuration for ea...

Page 5: ...its DNS server with this router s IP address every DNS conversion request packet from the PC to this router will be forwarded to the real DNS in the outside network Dynamic Domain Name System DDNS Th...

Page 6: ...upports web based GUI for configuration and management It is user friendly and comes with on line help It also supports remote management capability for remote users to configure and manage this produ...

Page 7: ...o Filter ADSL Splitter Quick Start Guide Warning Do not use the router in high humidity or high temperatures Do not use the same power source for the router as other equipment Do not open or repair th...

Page 8: ...USB device Flashing when data is received transmitted 4 Wireless Lit green when the wireless connection is established Flashes when sending receiving data 5 Phone 1X 2X RJ 11 connector Lit green when...

Page 9: ...able to this port 6 Ethernet 1X 4X RJ 45 connector Connect a UTP Ethernet cable Cat 5 or Cat 5e to one of the LAN ports when connecting to a PC or an office home network of 10Mbps or 100Mbps Caution P...

Page 10: ...oper cables Make sure that all devices e g telephones fax machines analogue modems connected to the same telephone line as your router have a line filter connected between them and the wall outlet unl...

Page 11: ...e in the same subnet as the router The default IP address of the router is 10 0 0 2 and the subnet mask is 255 255 255 0 i e any attached PC must be in the same subnet and have an IP address in the ra...

Page 12: ...Network connections on the left window column 4 Select the Local Area Connection and right click the icon to select Properties 5 Select Internet Protocol Version 4 TCP IP then Click Next 6 In the TCP...

Page 13: ...uble click Network Connections 2 Double click Local Area Connection 3 In the LAN Area Connection Status window click Properties 4 Select Internet Protocol TCP IP and click Properties 5 Select the Obta...

Page 14: ...etwork and Dial up Connections 2 Double click Local Area Connection LAN 3 In the Local Area Connection status window click Properties 4 Select Internet Protocol TCP IP and click Properties 5 Select th...

Page 15: ...k and choose the Configuration tab 2 Select TCP IP NE2000 Compatible or the name of any Network Interface Card NIC in your PC 3 Select the IP Address tab In this page click the Obtain an IP address au...

Page 16: ...Windows NT4 0 1 Go to Start Settings Control Panel In the Control Panel double click Network and choose the Protocols tab 2 Select TCP IP Protocol and click Properties 3 Select the Obtain an IP addre...

Page 17: ...ettings IP Address 10 0 0 2 Subnet Mask 255 255 255 0 ISP setting in WAN site PPPoE DHCP server DHCP server is enabled Start IP Address 10 0 0 100 IP pool counts 100 LAN and WAN Port Addresses The par...

Page 18: ...twork but be set manually should this be required In addition additional WAN address can be assigned using PPPoE dialler PPPoA VPI VCI VC LLC based multiplexing Username Password and Domain Name Syste...

Page 19: ...e The category of each configuration page is listed as below Status ADSL Table 3G Status ARP Table DHCP Table Routing Table NAT Sessions UpnP Portmap PPTP Status IPSec Status L2TP Status Email Status...

Page 20: ...as DSP firmware version Operational mode Upstream downstream rate SNR margin Line Attenuation CRC Errors and Latency rate 3G Status This section displays the 3G Card overall status with information s...

Page 21: ...f total data received in bytes packets since system ready ARP Table This section displays the router ARP Address Resolution Protocol Table which shows the mapping of Internet IP addresses to Ethernet...

Page 22: ...hows the MAC address of each client Client Host Name Shows the Host Name Computer Name of the client Expiry Shows the current lease time of each client Routing Table Routing Table Valid A check mark i...

Page 23: ...that this route will use Cost The number of hops counted as the cost of the route NAT Sessions This section lists all the current NAT sessions between external WAN and internal LAN interface UPnP Por...

Page 24: ...hether the Call for this VPN entry is currently connected Encryption Shows the encryption type used for this VPN connection IPSec Status This shows the details of your configured IPSec VPN Connections...

Page 25: ...is currently enabled Active Shows whether the connection is currently active Tunnel Connected Shows the current connection status of the VPN Tunnel Call Connected Shows the current connection status...

Page 26: ...of the calls information about the missed calls and also incoming calls Event Log This page displays all the event Log entries of the router such as when the ADSL gets disconnected and during Firewall...

Page 27: ...es given to entries are logged to this window Diagnostic It tests the connection to computer s which is connected to the LAN ports and also the WAN Internet connection If PING www google com is shown...

Page 28: ...p down menu and click Continue 2 If your ADSL line is not ready you need to check your ADSL line has been set or not 3 If your ADSL line is ready the ADSL Line is Ready screen will appear Choose the A...

Page 29: ...password provided by your ISP Service Name This item is for identification purposes If it is required your ISP provides you the information Authentication Protocol Default is Auto Your ISP advises on...

Page 30: ...A wireless client will not be able to view your wireless network unless they enter your ESSID manually Default setting is Enable Enable When Enable is selected anybody with a wireless network adapter...

Page 31: ...ws you to select the service provider When the selection is done respective parameters below are automatically displayed Phone Number This parameter holds the registration ID of the user within the Vo...

Page 32: ...Billion 810VGTX Router Page 31 8 When the ADSL line has synchronized a check mark will appear next to the ADSL Port...

Page 33: ...ess Security Wireless Client Filter WPS Port Setting and DHCP Server Bridge Interface You can setup member ports for each VLAN group under Bridge Interface section Ethernet P1 P2 Port 1 2 Ethernet1 P3...

Page 34: ...node In this case an internal router is not required IP Address Specify an IP address for this virtual interface Netmask Specify a subnet mask for this virtual interface Security Interface Specify the...

Page 35: ...Address in the space provided or click the Candidate button Make sure your PC s MAC is not listed The maximum number of clients is 16 The MAC addresses should be 6 bytes long and are represented only...

Page 36: ...ID It is case sensitive and must not exceed 32 characters Make sure your wireless clients have the same ESSID as the device in order to connect to your network Note It is case sensitive and must not e...

Page 37: ...y to install simply by defining the peer s MAC address of the connected AP WDS takes advantage of the cost saving and flexibility because no extra wireless client device is required to bridge between...

Page 38: ...re two options to select from Open System and Share key WEP Encryption To prevent unauthorized wireless stations from accessing data transmitted over the network the router offers highly secured data...

Page 39: ...provided or by clicking on the Candidate button Make sure your PC s MAC is not listed The maximum number of clients is 16 The MAC addresses are 6 bytes long they are represented only in hexadecimal ch...

Page 40: ...M half duplex 100M full duplex and Disable Sometimes there are Ethernet compatibility problems with legacy Ethernet devices and you can configure different types to solve compatibility issues The defa...

Page 41: ...of the DHCP Server including the IP pool starting IP address and ending IP address to be allocated to PCs on your network lease time for each assigned IP address the period of time the IP address assi...

Page 42: ...nection fails the secondary connection will start up and connect to the internet automatically Time Schedule Select the time schedule when failover should be active Always on is the default value Keep...

Page 43: ...l be 3 seconds multiplied by 5 consecutive fails Detect Rule Rule 1 ADSL Down Rule 2 Ping Fail No Ping It will not send any ping packets to determine if the connection is active It disables ping detec...

Page 44: ...urposes If it is required your ISP will provide you the information Maximum input is 15 alpha numeric characters NAT The NAT Network Address Translation feature allows multiple users to access the Int...

Page 45: ...nction TCP MSS Clamp This option enables discovery of the optimal MTU size automatically Default is enabled MAC Spoofing Some service providers require the configuration of this option You must fill i...

Page 46: ...ernet through a single ISP account sharing a single IP address If users on your LAN have public IP addresses and can access the Internet directly the NAT function can be disabled IP 0 0 0 0 Auto Your...

Page 47: ...cription A given name for the connection VPI VCI Enter the information provided by your ISP ATM Class The Quality of Service for ATM layer Username Enter the username provided by your ISP You can inpu...

Page 48: ...MSS Clamp This option enables discovery of the optimal MTU size automatically Default is enabled MAC Spoofing Some service providers require the configuration of this option You must fill in the MAC a...

Page 49: ...ype of Ethernet filtering performed by the named bridge interface All Allows all types of Ethernet packets through the port Ip Allows only IP ARP types of Ethernet packets through the port Pppoe Allow...

Page 50: ...r PAP Password Authentication Protocol if you know which authentication type the server is using when acting as a client or the authentication type you want the clients to use when they are connecting...

Page 51: ...m on your computer attempts to access the Internet In this mode you must set Idle Timeout value Enabling Connect on Demand will give you the option of Idle Timeout Idle Timeout Auto disconnect the con...

Page 52: ...stable then consider changing the value You may need to change the profile setting to reach the best ADSL line rate it depends on the DSLAM and location Activate Line Aborting false your ADSL line and...

Page 53: ...ecified If you prefer to specify a SNTP server other than those in the list simply enter its IP address as shown above Your ISP may provide a SNTP server for you to use Daylight Saving is also known a...

Page 54: ...t the time period to 0 minute Firmware Upgrade Your router firmware is the software that enables it to operate and provides all its functionality Think of your router as a dedicated computer and the f...

Page 55: ...on of the router click Browse to locate the configuration file on your computer Once the file has been located click on the file then click on the Restore button to load the setting Note You should on...

Page 56: ...ccess to the device configuration interface Edit Account Information You can change the information of any account whether the account is active or not 1 To edit an account select the Edit radio butto...

Page 57: ...firm Password 2 When this is done click the Add button To delete a user Account 1 Click on the Delete radio button of the account you want to delete 2 Then click the Edit Delete button to confirm the...

Page 58: ...asks LAN users IP addresses which are invisible to users on the Internet thus making it more difficult for a hacker to target a machine on your network This natural firewall is turned on when the NAT...

Page 59: ...es to access the Internet High Medium Low security level the predefined port filter rules for High Medium and Low security are displayed in the Port Filters of the Packet Filter Select either High Med...

Page 60: ...when Firewall is enabled with one of the four security levels selected All blocked High Medium and Low The preset port filter rules in the Packet Filter must be modified accordingly to the security le...

Page 61: ...ES NO YES NO YES POP3 110 TCP 6 110 110 NO YES NO YES NO YES NEWS NNTP Network News Transfer Protocol TCP 6 119 119 NO YES NO YES NO NO RealAudio RealVideo 7070 UDP 17 7070 7070 YES YES YES YES NO NO...

Page 62: ...range you wish to allow block the traffic to or from Set the IP address and Subnet Mask to 0 0 0 0 to de activate the Address Filter rule Tip To block access to from a single IP address enter that IP...

Page 63: ...ct TCP UDP or both TCP UDP Protocol Number Insert the port number i e GRE 47 Source Port This Port or Port Ranges defines the port allowed to be used by the Remote WAN to connect to the application De...

Page 64: ...e presented with the predefined port filter rules screen in this case for the low security level shown below Note You may choose to Edit the predefined rule instead of Deleting0 it This is an example...

Page 65: ...on Example Application Cindy_HTTP Time Schedule Always On Source Destination IP Address es 0 0 0 0 I do not wish to activate the address filter using the port filter instead Type TCP Please refer to T...

Page 66: ...erver please refer to the Add Virtual Server sub section under the Virtual Server section The new port filter rule for HTTP is shown below 1 Configure your Virtual Server port forwarding settings so t...

Page 67: ...otection Block Duration This is the duration for blocking Smurf attacks Default value is 600 seconds Scan Attack Block Duration This is the duration for blocking hosts that attempt a possible Scan att...

Page 68: ...Dst Port Echo 7 Src IP Scan Yes Yes CharGen Scan UDP Dst Port CharGen 19 Src IP Scan Yes Yes X mas Tree Scan TCP Flag X mas Src IP Scan Yes Yes IMAP SYN FIN Scan TCP Flag SYN FIN DstPort IMAP 143 Src...

Page 69: ...ilter rules will be monitoring and checking at all hours of the day TimeSlot1 TimeSlot16 It is a self defined time period You may specify the time period to check the URL filter rules i e during worki...

Page 70: ...ww abc com will be sent to the remote web server because it is listed in the trusted list whilst the URL request for www google or www google com will be dropped because www google is in the forbidden...

Page 71: ...tion will be taken Always On Instant Message blocking is enabled IM messages will be blocked TimeSlot1 TimeSlot16 This is the self defined time period You may specify the time period to activate block...

Page 72: ...Private Networks Virtual Private Networks is a way to establish a secured communication tunnel with an organization network via the Internet Your router supports three main types of VPN Virtual Priva...

Page 73: ...now which authentication type the server is using when acting as a client you may manually specify the Authentication type whether CHAP Challenge Handshake Authentication Protocol or PAP Password Auth...

Page 74: ...h office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet The routers are installed in the head office and branch offices accordingly Attention Configur...

Page 75: ...iven username password to authenticate the branch office network Password 123456 Auth Type Chap Auto Keep as the default value in most cases PPTP server client will determine the value automatically R...

Page 76: ...er to manual for details if you want to change the setting Data Encryption Auto Key Length Auto Mode Stateful PPTP Connection Remote Access Name A given name for the connection e g connection to offic...

Page 77: ...is set to Auto so that this setting is negotiated when establishing a connection you can also manually Enable or Disable the encryption Key Length The data can be encrypted by MPPE algorithm with 40...

Page 78: ...type Remote Access Select Remote Access from the Connection Type drop down menu Type Dial out Select Dial out from the Type drop down menu IP Address or Domain name 69 121 1 33 A Dialed server IP User...

Page 79: ...e class C subnet starting from 192 168 1 1 i e 192 168 1 1 through to 10 0 0 2 IP Range The IP address range of the local network For Example IP 192 168 1 1 end IP 192 168 1 10 IP Address Enter the IP...

Page 80: ...red communication channel i e over the Internet There are three modes MODP 768 bit MODP 1024 bit and MODP 1536 bit MODP stands for Modular Exponentiation Groups IPSec Proposal Select the IPSec securit...

Page 81: ...tion DPD is a keep alive mechanism that enables the router to be detected when the connection between the router and a remote IPSec peer has been lost Please note it must be enabled on both sites PING...

Page 82: ...ing an IPSec LAN to LAN VPN Connection Table 3 Network Configuration and Security Plan Branch Office Head Office Local Network ID 192 168 0 0 24 192 168 0 0 24 Local Router IP 69 1 121 30 69 1 121 3 R...

Page 83: ...IP Address 192 168 1 0 Head office network Netmask 255 255 255 0 Remote Secure Gateway IP or Hostname 69 121 1 30 A given username password to authenticate branch office network Remote Network Subnet...

Page 84: ...down menu IP Address 192 168 0 0 Branch office network Netmask 255 255 255 0 Remote Secure Gateway IP or Hostname 69 121 1 3 IP address of the head office router in WAN side Remote Network Subnet Sele...

Page 85: ...Billion 810VGTX Router Page 84 Example Configuring an IPSec Host to LAN VPN Connection Configuring IPSec VPN in the Office...

Page 86: ...ess 192 168 1 0 Branch office network Netmask 255 255 255 0 Remote Secure Gateway IP or Hostname 69 121 1 30 IP address of the head office router in WAN side Remote Network Subnet Select Subnet from t...

Page 87: ...LAN please refer below for more information Fill in the blank with the information you need and click Add to create a new VPN connection account L2TP Connection Remote Access Connection Type Remote A...

Page 88: ...ould be 16 characters which may include numbers and characters Active as default route Commonly used by the Dial out connection all packets will route through the VPN tunnel to the Internet therefore...

Page 89: ...e shared Key This is for the Internet Key Exchange IKE protocol a string from 4 to 128 characters Both sides should use the same key IKE is used to establish a shared security policy and authenticated...

Page 90: ...ct Remote Access from the Connection Type drop down menu Type Dial in Select Dial in from the Type drop down menu IP Address 192 168 1 200 An IP assigned to the remote client Username username Enter t...

Page 91: ...lishes a L2TP VPN connection with a file server located at a separate location The router is installed in the office connected to a couple of PCs and Servers Configuring L2TP VPN in the Office The inp...

Page 92: ...ly Microsoft Windows operating systems do not support L2TP incoming services Additional software may be required to set up your L2TP incoming service L2TP Connection LAN to LAN L2TP VPN Connection Nam...

Page 93: ...l VPN device that is connected established a VPN tunnel By default the router s default hostname is home gateway IPSec Enable to enhance your L2TP VPN security Authentication Authentication establishe...

Page 94: ...hanges Example Configuring L2TP LAN to LAN VPN Connection The branch office establishes a L2TP VPN tunnel with head office to connect two private networks over the Internet The routers are installed i...

Page 95: ...1 200 IP address assigned to the branch office network Peer Network IP 192 168 0 0 Branch office network Username username A username and password assigned to authenticate the branch office network P...

Page 96: ...Select LAN to LAN from the Connection Type drop down menu Type Dial in Select Dial in from the Type drop down menu IP Address 69 121 1 33 IP address assigned to the branch office network Peer Network...

Page 97: ...e the items within the VoIP section SIP Device Parameters SIP Accounts Phone Port PSTN Dial Plan VoIP Dial Plan Call Features Speed Dial and Ring Tone SIP Device Parameters This section provides easy...

Page 98: ...here to send receive the VoIP traffic it includes ipwan and iplan Easy way to select the interface is to check the location of the SIP server If it is located somewhere on the Internet then select ipw...

Page 99: ...o this device Set the OFFHOOK voltage to the lowest setting registered for all your telephones e g if your telephones return values of 4 5 and 7 then you should set your OFFHOOK voltage to 4 Note The...

Page 100: ...information of the Phones Click Edit to update your phone information Port It allows you to change the phone port setting for a specific FXS port 69 Return Call Dial 69 to return the last missed call...

Page 101: ...ulation PCM encoder and decoder to convert a 13 bit linear sample G 726 32 It is used to encode and decode voice information into a single packet to reduce bandwidth consumption Currently only support...

Page 102: ...en making a regular call Note The prefix number dialed has to match the number of digits specified Dial without Prefix With this selected the prefix which is dialed together with the phone number will...

Page 103: ...will be dialed out via FXO port for making a regular phone call 3 Dial at Timeout If you dial 01223 7070 the number 012237070 will be dialed to make a regular call via FXO port after a defined timeout...

Page 104: ...s not exceeded the number of digits defined VoIP Dial Plan This feature makes dialing a phone number more convenient and easy Instead of having to memorize the phone number of every contact VoIP Dial...

Page 105: ...Service Provider Current Profile Refer to the VoIP account registered on the VoIP Wizard for Port 1 or 2 PSTN Making a telephone call via the PSTN line ENUM Making a VoIP SIP direct call via an Electr...

Page 106: ...length is 16 xx Starting with sign any digit number 0 9 in variable length but no shorter than 1 digits Maximum length is 16 xx x Starting with sign any two digit numbers sign any number 0 9 in varia...

Page 107: ...pound sign on the phone keypad to activate the function For example to speed dial to the phone number listed on 9 just press keypad 9 then Your router will automatically call the number listed on ent...

Page 108: ...n Also it is recommended that this option be configured by an advanced user unless you are instructed to do so Click Apply to apply the settings QoS Quality of Service The QoS function helps you contr...

Page 109: ...P Marking Differentiated Services Code Point DSCP it is the first 6 bits in the ToS byte DSCP Marking allows users to classify the traffic of the application to be executed according to the DSCP value...

Page 110: ...l The name of the supported protocol Rate Limit To limit the speed of the outbound traffic Source IP Address Range The source IP address or the range of packets to be monitored Source Port s The sourc...

Page 111: ...e Limit To limit the speed of the inbound traffic Source IP Address Range The source IP address or the range of the packets to be monitored Source Port s The source port of the packets to be monitored...

Page 112: ...Billion 810VGTX Router Page 111 Information and Settings Upstream 928 kbps Downstream 8 Mbps VoIP User 192 168 1 1 Normal Users 192 168 1 2 192 168 1 5 Restricted User 192 168 1 100...

Page 113: ...ut any drop out Set the level of priority as high to prevent other applications from saturating the bandwidth Voice application Voice is a latency sensitive application Most VoIP devices use SIP proto...

Page 114: ...dules also help to limit its utilization during daytime Advanced settings by using IP throttling IP throttling enables you to set parameters for bandwidth allocation although the applications may be l...

Page 115: ...ections e g Peer to peer P2P software such as instant messaging applications and P2P file sharing applications and are using NAT Network Address Translation then you will usually need to configure you...

Page 116: ...protocol for the virtual server In addition to specifying the port number to be used you will also need to specify the protocol used The protocol used is determined by a particular application Most ap...

Page 117: ...ill not function If the DHCP option is enabled you must be careful while assigning IP addresses to Virtual Servers in order to avoid IP conflicts The easiest way of configuring a Virtual Server is to...

Page 118: ...cked Be aware that this IP will be exposed to the WAN Internet Lists all PC s connected to the network You may assign a PC with an IP address from this list Select the Apply button to apply your chang...

Page 119: ...ber on the Remote WAN side used when accessing the virtual server Redirect Port The Port number used by the Local server in the LAN network Internal IP Address The private IP in the LAN network which...

Page 120: ...TCP SMTP Simple Mail Transfer Protocol 53 TCP UDP DNS Domain Name Server 69 UDP TFTP Trivial File Transfer Protocol 80 TCP World Wide Web HTTP 110 TCP POP3 Post Office Protocol Version 3 119 TCP NEWS...

Page 121: ...rict or allow the use of the Internet by users or applications Time Schedules correlate closely with router time Since the router does not have a real time clock on board it uses the Simple Network Ti...

Page 122: ...tailed setting of this Time Slot will be shown ID This is the index of the time slot Name A user defined description to identify this time portfolio Day in a week The default is set from Monday throug...

Page 123: ...do so by support staff These are the items within the Advanced section Static Route Dynamic DNS Check Email Device Management IGMP and VLAN Bridge Static Route Go to Configuration Advanced Static Rout...

Page 124: ...to register and establish an account with the Dynamic DNS provider using their website for example http www dyndns org There are more than 5 DDNS services supported Dynamic DNS Disable Check to disabl...

Page 125: ...to control your routers security options and device monitoring features Device Host Name Host Name Assign it a name Note The Host Name must have more than one word These two words should be separated...

Page 126: ...ems This makes tasks such as port forwarding easier by letting the application control the required settings remove the need for the user to control the advanced configuration of their device Both ope...

Page 127: ...unity string paradigm for security but is widely accepted as the SNMPv2 standard SNMPv3 is a strong authentication mechanism authorization with fine granularity for remote monitoring Traps supported C...

Page 128: ...he router web interface choose Logout Please save your configuration setting before logging out of the system Be aware that the router configuration interface can only be accessed by one PC at a time...

Page 129: ...ncapsulation type and type of multiplexing settings are the same as those provided to you by your ISP Reboot the router If you still have a problem you may need to verify these settings with your ISP...

Page 130: ...ere you purchased this product Contact Telkom ADSL Support Telephone 0800 375 375 Operating Hours 24hrs 7 days a week Contact Modem Support Telephone 0860 110 041 Website www sizwebroadband co za Oper...

Search results

Summary of Contents for 810VGTX

Reviews:

Related manuals for 810VGTX

Brands by name

Popular brands

Billion 810VGTX, User Manual

Search results

Summary of Contents for 810VGTX

Reviews:

Related manuals for 810VGTX

Brands by name

Popular brands