Billion BILLION BIPAC-7500GL Скачать руководство пользователя страница 1

Страница: 1 / 126

BIPAC-7500G / 7500GL

802.11g ADSL VPN Firewall Router with

3DES Accelerator

User’s Manual

Version Release 1.54c

Содержание BILLION BIPAC-7500GL

Страница 1: ...BIPAC 7500G 7500GL 802 11g ADSL VPN Firewall Router with 3DES Accelerator User s Manual Version Release 1 54c...

Страница 2: ......

Страница 3: ...E CONTENTS 5 THE FRONT LEDS 6 THE REAR PORTS 7 CABLING 8 C CH HA AP PT TE ER R 3 3 B BA AS SI IC C I IN NS ST TA AL LL LA AT TI IO ON N 9 9 CONNECTING YOUR ROUTER 9 CONFIGURING PCS IN WINDOWS 10 For W...

Страница 4: ...k 36 ISP 36 DNS 46 ADSL 47 System 48 Time Zone 48 Remote Access 49 Firmware Upgrade 50 Backup Restore 51 Restart Router 52 User Management 53 Firewall and Access Control 54 General Settings 56 Packet...

Страница 5: ...T TR RO OU UB BL LE ES SH HO OO OT TI IN NG G 1 11 18 8 ROBLEMS STARTING UP THE ROUTER A AP PP PE EN ND DI IX X A A P PR RO OD DU UC CT T S SU UP PP PO OR RT T A AN ND D C CO ON NT TA AC CT T I IN NF...

Страница 6: ......

Страница 7: ...their needs and budgets It is compliant with Multi Mode standard ANSI T1 413 Issue 2 G dmt G 992 1 G lite G992 2 The Annex A and B are supported in different H W platforms Wireless Ethernet 802 11g W...

Страница 8: ...ystem DNS relay Provides an easy way to map the domain name a friendly name for users such as www yahoo com and IP address When a local machine sets its DNS server with this router s IP address every...

Страница 9: ...anage the local IP network Static and RIP1 2 Routing Supports an easy static routing table or RIP1 2 routing protocol to support routing capability Simple Network Management Protocol SNMP It is an eas...

Страница 10: ...oduction Billion BIPAC 7500G 7500GL 802 11g Wireless ADSL Router Application Diagram BIPAC 7500G 7500GL Wireless ADSL VPN Firewall Router Figure 1 1 Application Diagram of BIPAC 7500G 7500GL 802 11g W...

Страница 11: ...n or repair the case yourself If the BIPAC 7500G 7500GL is too hot turn off the power immediately and have it repaired at a qualified service center Warning Attention Place the BIPAC 7500G 7500GL on a...

Страница 12: ...Orange for 10Mbps Blinking when data is transmitted received 5 LAN port 3 Lit when connected to an Ethernet device Green for 100Mbps Orange for 10Mbps Blinking when data is transmitted received 6 LAN...

Страница 13: ...ort 9 pin serial port 3 LAN 1X 4X RJ 45 connector Connect a UTP Ethernet cable Cat 5 or Cat 5e to one of the four LAN ports when connecting to a PC or an office home network of 10Mbps or 100Mbps 4 RES...

Страница 14: ...u are using the proper cables Ensure that all other devices connected to the same telephone line as your Billion router e g telephones fax machines analogue modems have a line filter connected between...

Страница 15: ...The best and easiest way is to configure the PC to get an IP address automatically from the router using DHCP If you encounter any problems accessing the router s web interface it may also be advisab...

Страница 16: ...ck Local Area Connection See Figure 3 1 3 In the LAN Area Connection Status window click Properties See Figure 3 2 4 Select Internet Protocol TCP IP and click Properties See Figure 3 3 5 Select the Ob...

Страница 17: ...LAN Connection See Figure 3 5 3 In the LAN Area Connection Status window click Properties See Figure 3 6 4 Select Internet Protocol TCP IP and click Properties See Figure 3 7 5 Select the Obtain an I...

Страница 18: ...Select TCP IP NE2000 Compatible or the name of any Network Interface Card NIC in your PC See Figure 3 9 3 Click Properties 4 Select the IP Address tab In this page click the Obtain an IP address auto...

Страница 19: ...indows NT4 0 1 Go to Start Settings Control Panel In the Control Panel double click Network and choose the Protocols tab 2 Select TCP IP Protocol and click Properties See Figure 3 12 3 Select the Obta...

Страница 20: ...e default username and password are admin and admin respectively Attention Attention If you ever forget the password to log in you may press the RESET button to restore the factory default settings LA...

Страница 21: ...in Name System DNS IP address it can be automatically assigned by your ISP when you connect or be set manually PPPoA VPI VCI VC based LLC based multiplexing Username Password and Domain Name System DN...

Страница 22: ...n your web browser enter the IP address of your router which by default is 192 168 1 254 and click Go a user name and password window prompt will appear The default username and password are admin and...

Страница 23: ...ncluding Status ARP Table Wireless Association Routing Table DHCP Table PPTP Status IPSec Status L2TP Status Email Status Event Log Error Log NAT Sessions and UPnP Portmap Quick Start Configuration LA...

Страница 24: ...work interface of your PCs to use with the router s Firewall MAC Address Filter function See the Firewall section of this manual for more information on this feature IP Address A list of IP addresses...

Страница 25: ...7500GL 802 11g ADSL VPN Firewall Router with 3DES Accelerator Chapter 4 Configuration Wireless Association IP Address It is IP address of wireless client that joins this network MAC The MAC address of...

Страница 26: ...ork Netmask The destination netmask address Gateway Interface The IP address of the gateway or existing interface that this route will use Cost The number of hops counted as the cost of the route RIP...

Страница 27: ...tion Leased Table IP Address The IP address that assigned to client Client UID hw addr The MAC address of client Client Host Name The Host Name Computer Name of client Expiry The current lease time of...

Страница 28: ...d to the particular PPTP connection in your VPN configuration Type The type of connection dial in dial out Enable Whether the connection is currently enabled Active Whether the connection is currently...

Страница 29: ...you assigned to the particular VPN entry Active Whether the VPN Connection is currently Active Connection State Whether the VPN is Connected or Disconnected Statistics Statistics for this VPN Connect...

Страница 30: ...d to the particular L2TP connection in your VPN configuration Type The type of connection dial in dial out Enable Whether the connection is currently enabled Active Whether the connection is currently...

Страница 31: ...such as when the router s ADSL connection is disconnected as well as Firewall events when you have enabled Intrusion or Blocking Logging in the Configuration Firewall section of the terface Please see...

Страница 32: ...s This section lists all current NAT sessions between interface of types external WAN and internal LAN UPnP Portmap The section lists all port mapping established using UPnP Universal Plug and Play Pl...

Страница 33: ...y details you will need for the Quick Start wizard to get you online are your login often in the form of username ispname your password and the encapsulation type Your ISP will be able to supply all t...

Страница 34: ...n types offered by your ISP If the scan is successful you will then be presented with a list of supported options Select the desired option from the list and click Apply to return to the Quick Start i...

Страница 35: ...ons LAN Local Area Network There are four items within the LAN section Ethernet Wireless Wireless Security Port Setting and DHCP Server Ethernet The router supports two Ethernet IP addresses in the LA...

Страница 36: ...our wireless clients must have the same ESSID as the device ESSID Broadcast Disable Any client that using the any setting cannot discover the Access Point AP in question Enable Any client that using t...

Страница 37: ...s disabled WPA Pre Shared Key WPA Algorithms TKIP Temporal Key Integrity Protocol utilizes a stronger encryption method and incorporates Message Integrity Code MIC to provide protection against hacker...

Страница 38: ...a pre defined algorithm in WEP64 or WEP128 You can input the same string in both the AP and Client card settings to generate the same WEP keys Please note that you do not have to enter Key 0 3 as bel...

Страница 39: ...different types to solve compatibility issues The default is Auto which users should keep unless there are specific problems with PCs not being able to access your LAN IPv4 TOS priority Control Advanc...

Страница 40: ...y for each PCs to the IP address of the router by default this is 192 168 1 254 To configure the router s DHCP Server check DHCP Server and click Next You can then configure parameters of the DHCP Ser...

Страница 41: ...ration If you check DHCP Relay Agent and click Next then you will have to enter the IP address of the DHCP server which will assign an IP address back to the DHCP client in the LAN Use this function o...

Страница 42: ...net There are two items within the WAN section ISP DNS and ADSL ISP The factory default is PPPoE If your ISP uses this access protocol click Edit to input other parameters as below If your ISP does no...

Страница 43: ...isabled Encapsulation method Select the encapsulation format the default is LlcBridged Select the one provided by your ISP DHCP client Enable or disable the DHCP client specify if the Router can get a...

Страница 44: ...isabled Username Enter the username provided by your ISP You can input up to 128 alphanumeric characters case sensitive This will usually be in the format of username ispname instead of simply usernam...

Страница 45: ...PPPoE LLC Header Selects encapsulation mode true for using LLC or false for using VC Mux Create Route This setting specifies whether a route is added to the system after IPCP Internet Protocol Control...

Страница 46: ...a remote PPP peer Once IPCP has discovered the DNS server IP address it automatically gives the address to the local DNS client so that a connection can be established Give DNSto DHCP Server Similar t...

Страница 47: ...psulation method Select the encapsulation format this is provided by your ISP Ether Filter Type Specify the type of ethernet filtering performed by the named bridge interface All Allows all types of e...

Страница 48: ...can access the Internet directly the NAT function can be disabled Username Enter the username provided by your ISP You can input up to 128 alphanumeric characters case sensitive This will usually be i...

Страница 49: ...e IP address is obtained during IPCP Internet setting enables disables whether the primary secondary DNS server address is requested from a remote PPP peer using IPCP r a remote PPP peer Once IPCP has...

Страница 50: ...NBNS Discover Secondary NBNS This setting enables disables P The default setting for this command is disabled ive Subnet Mask To DHCP Server Enable to change your DHCP Server settings by using the gi...

Страница 51: ...ess the Internet directly the NAT function can be disabled DHCP client Enable or disable the DHCP client specifying if the router can obtain an IP address from the Internet Service Provider ISP automa...

Страница 52: ...ame As an IP Address is hard to remember the DNS converts the friendly name into its equivalent IP Address You can obtain a Domain Name System DNS IP address automatically if your ISP has provided it...

Страница 53: ...aking it active true again for taking effect with setting of Connect Mode Coding Gain Configure the ADSL coding gain from 0 dB to 7dB or automatic Tx Attenuation Setting ADSL transmission gain the val...

Страница 54: ...he Apply button After a successful connection to the Internet the router will retrieve the correct local time from the SNTP server you have specified If you prefer to specify an SNTP server other than...

Страница 55: ...tside your LAN select a time period the router will permit remote access for and click Enable You may change other configuration options for the web administration interface using Device Management op...

Страница 56: ...ware it runs Over time this software may be improved and modified and your Billion router allows you to upgrade the software it runs to take advantage of these changes Clicking on Browse will allow yo...

Страница 57: ...s before making any significant changes to your router s configuration Press Backup to select where on your local PC to save the settings file You may also change the name of the file when saving if y...

Страница 58: ...configuration If you wish to restart the router using the factory default settings for example after a firmware upgrade or if you have saved an incorrect configuration select Factory Default Settings...

Страница 59: ...terface Once you have clicked on Edit you are shown the following options You can change the user s password whether their account is active and Valid as well as add a comment to each user account The...

Страница 60: ...masks LAN users IP addresses which are invisible to outside users on the Internet making it much more difficult for a hacker to target a machine on your network This natural firewall is on when NAT f...

Страница 61: ...ation MAC Filter rules To prevent unauthorized computers accessing the Internet URL Filter To block PCs on your local network from unwanted websites You can find six items under the Firewall section G...

Страница 62: ...m Low security level the pre defined port filter rules for High Medium and Low security are displayed in Port Filters of Packet Filter Select either High Medium or Low security level to enable the Fir...

Страница 63: ...Billion BIPAC 7500G 7500GL 802 11g ADSL VPN Firewall Router with 3DES Accelerator Chapter 4 Configuration Packet Filter 57...

Страница 64: ...DNS 53 TCP 6 53 53 NO YES NO YES YES YES FTP 21 TCP 6 21 21 NO NO NO YES NO YES Telnet 23 TCP 6 23 23 NO NO NO YES NO YES SMTP 25 TCP 6 25 25 NO YES NO YES NO YES POP3 110 TCP 6 110 110 NO YES NO YES...

Страница 65: ...e is inbound and the other is outbound The rules can be set to prevent unauthorized users hosts or network to access the Internet from LAN outbound and or access LAN from the Internet inbound Host IP...

Страница 66: ...no matter whether the firewall is set to a high medium or low security level To setup a web server located on the local network when the firewall is enabled you have to configure the Port Filters set...

Страница 67: ...will then be presented with the pre defined port filter rules screen in this case for the low security level shown below Click Delete 3 Click Delete to delete the existing HTTP rule 4 Click Add TCP Fi...

Страница 68: ...ur Virtual Server port forwarding settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server To enable the HTTP service in Virtual Server settings input the...

Страница 69: ...ction is false disabled Some attack types are denied immediately without using the Blacklist function such as Land attack and Echo CharGen scan Block Duration DoS Attack Block Duration This is the dur...

Страница 70: ...rt 135 137 139 Flag URG Src IP DoS Yes Yes Smurf ICMP type 8 Des IP is broadcast Dst IP Victim Protection Yes Yes Land attack SrcIP DstIP Yes Yes Echo CharGen Scan UDP Echo Port and CharGen Port Yes Y...

Страница 71: ...ept traffic from specified machines or else to block specific machines from accessing your LAN There are no pre defined MAC address filter rules you can add the filter rules to meet your requirements...

Страница 72: ...lways check the URL filter rules i e at all hours of the day Block from Specify the time period to check the URL filter rules e g during work hours Keywords Filtering Allows blocking by specific keywo...

Страница 73: ...match either of the above two items it is sent to the remote web server 4 Please be note that the domain only should be specified not the full URL For example to block traffic to www sex com enter se...

Страница 74: ...with 3DES Accelerator Chapter 4 Configuration Firewall Log Firewall Log display log information of any unexpected action with your firewall settings Check the Enable box to activate the logs Log infor...

Страница 75: ...works Your router support three main types of VPN Virtual Private Network PPTP IPSec and L2TP and these are the two major section choices from the menu on the left PPTP There are two types of PPTP VPN...

Страница 76: ...er server enter your own password PPP Authentication Type Default is Auto if you want the router to determine the authentication type to use or else manually specify CHAP Challenge Handshake Authentic...

Страница 77: ...s mode The key will be changed every 256 packets when you select Stateful mode If you select Stateless mode the key will be changed in each packet Idle Time Auto disconnect the VPN connection when the...

Страница 78: ...your Host If you are a Dial In user server enter your own username Password If you are a Dial Out user client enter the password provided by the your Host If you are a Dial In user server enter your o...

Страница 79: ...on 128 bit keys provide stronger encryption than 40 bit keys Mode You may select Stateful or Stateless mode The key will be changed every 256 packets when you select Stateful mode If you select Statel...

Страница 80: ...Billion BIPAC 7500G 7500GL 802 11g ADSL VPN Firewall Router with 3DES Accelerator Chapter 4 Configuration IPSec Click Create to configure a new IPSec VPN connection 74...

Страница 81: ...om 192 168 1 1 i e 192 168 1 1 through to 192 168 1 254 IP Range The IP address range of the local network For example IP 192 168 1 1 end IP 192 168 1 10 Remote Secure Gateway Address or hostname The...

Страница 82: ...Stands for Advanced Encryption Standards it uses 128 bits as an encryption method Perfect Forward Secrecy Choose whether to enable PFS using Diffie Hellman public key cryptography to change encryption...

Страница 83: ...SA will stay active before new encryption and authentication key will be exchanged There are two kinds of SAs IKE and IPSec IKE negotiates and establishes SA on behalf of IPSec an IKE SA is used by IK...

Страница 84: ...DSL VPN Firewall Router with 3DES Accelerator Chapter 4 Configuration L2TP There are two types of L2TP VPN supported Remote Access and LAN to LAN please refer below for more information Click Create t...

Страница 85: ...ername Password If you are a Dial Out user client enter the password provided by your Host If you are a Dial In user server enter your own password PPP Authentication Type Default is Auto if you want...

Страница 86: ...ses 168 56 3 bits as an encryption method AES Stands for Advanced Encryption Standards it uses 128 bits as an encryption method Perfect Forward Secrecy Choose whether to enable PFS using Diffie Hellma...

Страница 87: ...based on the Peer Network IP setting Username If you are a Dial Out user client enter the username provided by your Host If you are a Dial In user server enter your own username Password If you are a...

Страница 88: ...andard it uses 56 bits as an encryption method 3DES Stands for Triple Data Encryption Standard it uses 168 56 3 bits as an encryption method AES Stands for Advanced Encryption Standards it uses 128 bi...

Страница 89: ...ation Example Configuring a Remote Access PPTP VPN Dial in Connection A remote worker establishes a PPTP VPN connection with the head office using Microsoft s VPN Adapter included with Windows 2000 ME...

Страница 90: ...2 Private IP Address Assigned to Dialing User 192 168 1 200 An assigned IP address for the remote worker Username username 3 Password 123456 Input username password to authenticate remote worker Auth...

Страница 91: ...Chapter 4 Configuration Example Configuring a Remote Access PPTP VPN Dial out Connection A company s office establishes a PPTP VPN connection with a file server located at a separate location The rout...

Страница 92: ...out Check Dial out 2 Server IP Address or Hostname 69 121 1 33 An Dialed server IP Username username 3 Password 123456 A given username password Auth Type Chap Auto Data Encryption Auto Key Length Aut...

Страница 93: ...uring a LAN to LAN PPTP VPN Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet The routers are installed in the head office a...

Страница 94: ...ned to Dialing User 192 168 1 200 IP address assigned to branch office network Peer Network IP 192 168 0 0 Branch office network 3 Netmask 255 255 255 0 Username username 4 Password 123456 Input usern...

Страница 95: ...ection Dial out Check Dial out 2 Server IP Address or Hostname 69 121 1 33 IP address of the head office router in WAN side Peer Network IP 192 168 1 0 3 Netmask 255 255 255 0 Head office network User...

Страница 96: ...8 1 0 24 Local Router IP 69 1 121 30 69 1 121 3 Remote Network ID 192 168 1 0 24 192 168 0 0 24 Remote Router IP 69 1 121 3 69 1 121 30 IKE Pre shared Key 12345678 12345678 VPN Connection Type Tunnel...

Страница 97: ...net radio button IP Address 192 168 1 0 2 Netmask 255 255 255 0 Head office network 3 Secure Gateway Address or Hostname 69 121 1 30 IP address of the head office router in WAN side Subnet Check Subne...

Страница 98: ...connection Subnet Check Subnet radio button IP Address 192 168 0 0 2 Netmask 255 255 255 0 Branch office network 3 Secure Gateway Address or Hostname 69 121 1 3 IP address of the head office router i...

Страница 99: ...Billion BIPAC 7500G 7500GL 802 11g ADSL VPN Firewall Router with 3DES Accelerator Chapter 4 Configuration Example Configuring a IPSec Host to LAN VPN Connection 93...

Страница 100: ...Subnet Check Subnet radio button IP Address 192 168 1 0 2 Netmask 255 255 255 0 Head office network 3 Secure Gateway Address or Hostname 69 121 1 30 IP address of the head office router in WAN side S...

Страница 101: ...tion Example Configuring a Remote Access L2TP VPN Dial in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft s VPN Adapter included with Windows XP 2000...

Страница 102: ...rivate IP Address Assigned to Dialing User 192 168 1 200 An assigned IP address for the remote worker Username username 3 Password 123456 Input username password to authenticate remote worker 4 Auth T...

Страница 103: ...Chapter 4 Configuration Example Configuring a Remote Access L2TP VPN Dial out Connection A company s office establishes a L2TP VPN connection with a file server located at a separate location The rout...

Страница 104: ...69 121 1 33 An Dialed server IP Username username 3 Password 123456 A given username password 4 Auth Type Chap Auto Keep as default value in most of the cases 5 Idle Timeout 0 The connection will be...

Страница 105: ...ith 3DES Accelerator Chapter 4 Configuration Example Configuring your Router to Dial in to the Server Currently Microsoft Windows operation system does not support L2TP incoming service Additional sof...

Страница 106: ...establishes a L2TP VPN tunnel with head office to connect two private networks over the Internet The routers are installed in the head office and branch office accordingly Attention Both office LAN ne...

Страница 107: ...to Dialing User 192 168 1 200 IP address assigned to branch office network Peer Network IP 192 168 0 0 Branch office network 3 Netmask 255 255 255 0 Username username 4 Password 123456 Input username...

Страница 108: ...l out Check Dial out 2 Server IP Address or Hostname 69 121 1 33 IP address of the head office router in WAN side Peer Network IP 192 168 1 0 3 Netmask 255 255 255 0 Head office network Username usern...

Страница 109: ...ontrol your network traffic for each application from LAN Ethernet and or Wireless to WAN Internet It facilitates you to control the different quality and speed of through put for each application whe...

Страница 110: ...elect it to activate the function Application A name that identifies an existing rule Priority High or Low the priority for existing rule All of traffic will be set to normal priority until you change...

Страница 111: ...plication A name that identifies an existing rule Protocol The name of supported protocol Source Port The source port of packets to be monitored Destination Port The destination port of packets to be...

Страница 112: ...IP address will be used by and point to your router which then needs to deliver all traffic to the private IP addresses used by your PCs Please see the WAN configuration section of this manual for mo...

Страница 113: ...eds to allow outside users to access internal servers e g a web server FTP server Email server or game server the router can act as a virtual server You can set up a local server with a specific port...

Страница 114: ...er entries Using port forwarding does have security implications as outside users will be able to connect to PCs on your network For this reason you are advised to use specific Virtual Server entries...

Страница 115: ...t staff There are four items within the Advanced section Static Route Dynamic DNS Checking Email and Device Management Static Routing Click on Routing Table and then choose Create Route add a routing...

Страница 116: ...register and establish an account with the Dynamic DNS provider using their website for example http www dyndns org There are more than 5 DDNS services supported Disable Check to disable the Dynamic...

Страница 117: ...enable the routers Emailing checking function The following fields will be activated and required Account Name Enter the name login of the POP3 account you wish to check Normally it is the text in yo...

Страница 118: ...ernative if for example they are running a web server on a PC within their LAN Management IP Address You may specify an IP address allowed to logon and access the router s web server Setting the IP ad...

Страница 119: ...ting is 2800 It is highly recommended for users to use this port value If this value conflicts with other ports already being used you may wish to change the port SNMP Access Control Software on a PC...

Страница 120: ...accepted as the SNMPv2 standard SNMPv3 is a strong authentication mechanism authorization with fine granularity for remote monitoring Traps supported Cold Start Authentication Failure The following MI...

Страница 121: ...nfiguration pppLink group pppLqr group From RFC 1472 PPP Security MIB PPP Security Group From RFC 1473 PPP IP MIB PPP IP Group From RFC 1474 PPP Bridge MIB PPP Bridge Group From RFC1573 IfMIB ifMIBObj...

Страница 122: ...apter 4 Configuration Save Configuration to Flash After changing the router s configuration settings you must save all of the configuration parameters to FLASH to avoid them being lost after turning o...

Страница 123: ...d to only one PC accessing the configuration web pages at a time Once a PC has logged into the web interface other PCs cannot get access until the current PC has logged out of the web interface If the...

Страница 124: ...ical support You have forgotten your router login and or password Try the default login and password refer to Chapter 3 If this fails you can restore your router to its factory settings by holding the...

Страница 125: ...ensure that all line filters are correctly installed and the right way around Missing line filters or line filters installed the wrong way around can cause problems with your ADSL connection includin...

Страница 126: ...m with the Troubleshooting chapter please contact the dealer where you purchased this product Contact Billion AUSTRALIA http www billion com au 2004 Billion Electric Co Ltd PC Range P L All Rights Res...

Результаты поиска

Содержание BILLION BIPAC-7500GL

Отзывы:

Похожие инструкции для BILLION BIPAC-7500GL

Бренды по названию

Популярные бренды

Billion BILLION BIPAC-7500GL, Руководство пользователя

Результаты поиска

Содержание BILLION BIPAC-7500GL

Отзывы:

Похожие инструкции для BILLION BIPAC-7500GL

Бренды по названию

Популярные бренды