background image

Chapter 1 

Introduction

 

1.1 An Overview of BIPAC 6600 

BIPAC 6600 functions as an IEEE 802.3 Ethernet-based router.  It provides four 10/100Mbps 
Dual Speed Ethernet ports for connection to a home network and one 10/100Mbps Ethernet 
port for a DSL Modem, Cable Modem, or other broadband access device. 

The product is an integrated Internet IP sharing device with a built-in 4-port 10/100Mbps Base-T 
N-Way Ethernet switch. It is the perfect solution to connect a small group of PCs to a high-
speed broadband Internet connection. Multi-users can have high-speed Internet access 
simultaneously via one single IP address of the Cable/xDSL modem.  

This product also serves as an Internet firewall, protecting your network from being accessed by 
outside users. Not only provide the natural firewall function (Network Address Translation, NAT), 
it also provides rich firewall features to secure user’s network. All incoming data packets are 
monitored and filtered.  Besides, it can also be configured to block internal users from 
accessing to the Internet.   

The product provides three levels of security support.  Firstly, it masks LAN users’ IP addresses 
which are invisible to outside users on the Internet, making it much more difficult for a hacker to 
target a machine on your network.  Secondly it can block and redirect certain ports to limit the 
services that outside users can access.  For example, to ensure that games and other Internet 
applications will run properly, user can open some specific ports for outside users to access 
internal services in network. Finally it can also detect and block many Hacker Patterns and not 
allow hacker into your network. 

Integrated DHCP services, client and server, allow up to 253 users to get their IP addresses 
automatically on boot up from the product.  Simply set local machines as a DHCP client to 
accept a dynamically assigned IP address from DHCP server.  Each time local machine is 
powered up; BIPAC 6600 will recognize it and assign an IP address to instantly connect it to the 
LAN.   

For advanced users, Virtual Server function allows the product to provide limited visibility to local 
machines with specific services for outside users.  An ISP provided IP address can be set to the 
product and then specific services can be rerouted to specific computers on the local network.  
For instance, a dedicated web server can be connected to the Internet via the product and then 
incoming requests for HTML that are received by the product can be rerouted to the dedicated 
local web server, even though the server now has a different IP address.  In this example, the 
product is on the Internet and vulnerable to attacks, but the server is protected. 

Virtual Server can also be used to re-task services to multiple servers.  For instance, the 
product can be set to allow separated FTP, Web, and Multiplayer game servers to share the 
same Internet-visible IP address while still protecting the servers and LAN users from hackers. 

 

 

Содержание BIPAC 6600

Страница 1: ...BIPAC 6600 Broadband Firewall Router User Manual ...

Страница 2: ......

Страница 3: ...3 3 Information from ISP 14 3 4 Configuring with Web Browser 15 3 4 1 Status 16 3 4 1 1 Routing Table 16 3 4 1 2 DHCP Table 17 3 4 1 3 System Log 18 3 4 1 4 Security Log 18 3 4 1 5 UPnP Portmap 19 3 4 2 Quick Start 20 3 4 3 Configuration 21 3 4 3 1 LAN 21 3 4 3 1 1 Ethernet 21 3 4 3 1 2 DHCP Server 22 3 4 3 2 WAN 23 3 4 3 2 1 ISP 23 3 4 3 2 2 DNS 25 3 4 3 3 System 26 3 4 3 3 1 Time Zone 26 3 4 3 3...

Страница 4: ... firmware 44 Can I set a fixed IP address on my PC 44 Is there a tool to check my PC s TCP IP settings in MS Windows 44 How can I test the whole path PC Router outside world to make sure it works fine 46 How can I check the active IP settings for my WAN port 47 Where can I find the WAN port s MAC address 47 How can I explore a local server to be visible to outside users 47 What is DMZ host 48 How ...

Страница 5: ... For example to ensure that games and other Internet applications will run properly user can open some specific ports for outside users to access internal services in network Finally it can also detect and block many Hacker Patterns and not allow hacker into your network Integrated DHCP services client and server allow up to 253 users to get their IP addresses automatically on boot up from the pro...

Страница 6: ... layer gateway ALG are supported such as NetMeeting PPTP pass through IPSec pass through etc Dynamic Domain Name System DDNS The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname This dynamic IP address is the WAN IP address For example to use the service you must first apply an account from this free Web server http www dyndns org There are more than 5 DDNS servers...

Страница 7: ... easy way to manage the local IP network Rich Packet Filtering Not only filter the packet based on IP address but also based on Port numbers and MAC address It will increase the performance in LAN and WAN also provide a higher level security control SNTP An easy way to get the network real time information from an SNTP server Web based GUI Supports web based GUI for configuration and management It...

Страница 8: ...ified serviceman repair it Avoid using this product and all accessories outdoors Place the product on the stable surface Only use the power adapter that comes with the package 2 2 The Front LEDs LED Meaning PWR Lit green when power adapter is connected SYS When lit it indicates that the device is ready WAN Lit green when connected at 100 Mbps Lit orange when connected at 10 Mbps Flashes when sendi...

Страница 9: ... 6 seconds above restore to factory default settings this is used when you can not login to the router e g forgot the password WAN Connect an UTP Ethernet cable to this port when connecting to a hub Connect a crossover cable to this port when connecting to a DSL Cable bridge or modem for establishing WAN connections LAN 1x 4x Connect an UTP Ethernet cable to these four ports when connecting to a L...

Страница 10: ...turned on On the top of the product is a bank of LEDs as a first check verifies that the relevant LAN Link and WAN Link LEDs are lit If they are not verify that you are using the proper cables As long as the cables are connected and the LEDs are lit normally follow section 3 2 Configuring the Network Properties below to modify the network settings Since the product cannot auto detect whether your ...

Страница 11: ... address which must be in the same subnet of BIPAC 6600 The default IP address of router is 192 168 1 254 and subnet mask is 255 255 255 0 The best and easy way is to configure the PC to get an IP address from BIPAC 6600 Please follow the steps below for PC s network environment installation Before taking the first step please check your PC s network components If your PC connects the Broadband Ro...

Страница 12: ... Local Area Connection Status window click Properties 4 Select Internet Protocol TCP IP and click Properties 5 Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons 6 Click OK to finish the configuration ...

Страница 13: ...1 Go to Start Settings Control Panel In the Control Panel double click on Network and Dial up Connections 2 Double click Local Area Connection 3 In the Local Area Connection Status window click Properties 4 Select Internet Protocol TCP IP and click Properties ...

Страница 14: ...s automatically radio buttons 6 Click OK to finish the configuration Configuring PC in Windows 95 98 ME 1 Go to Start Settings Control Panel In the Control Panel double click on Network and choose the Configuration tab 2 Select TCP IP NE2000 Compatible or the name of your Network Interface Card NIC in your PC 3 Click Properties ...

Страница 15: ...on 11 4 Select the IP Address tab In this page click the Obtain an IP address automatically radio button 5 Then select the DNS Configuration tab 6 Select the Disable DNS radio button and click OK to finish the configuration ...

Страница 16: ...ng PC in Windows NT4 0 1 Go to Start Settings Control Panel In the Control Panel double click on Network and choose the Protocols tab 2 Select TCP IP Protocol and click Properties 3 Select the Obtain an IP address from a DHCP server radio button and click OK ...

Страница 17: ...erver is enabled IP address pool from IP Address 192 168 1 100 to IP Address 192 168 1 199 3 2 1 Password The password is left blank as the default setting When configuring your router with Web browser just click OK and then you are logged in for the first time It is recommended that you set a password for security and management purpose BIPAC 6600 maintains the password only It means BIPAC 6600 o...

Страница 18: ...assigns this IP address 3 3 Information from ISP Before you start configuring this device you have to check with your ISP what kind of service is provided such as PPPoE Fixed IP and obtain an IP address automatically Gather the information as illustrated in the following table and keep it for reference PPPoE Username Password Service Name Domain Name System DNS IP address it can be automatically a...

Страница 19: ...No user name is required The default password is left blank If you have set a password enter that and click OK to continue At the configuration homepage the left navigation pane where bookmarks are provided links you directly to the desired setup page including Status Routing Table DHCP Table System Log Security Log UPnP Portmap Quick Start Configuration LAN WAN System Firewall Virtual Server Adva...

Страница 20: ...Gateway information LAN and WAN IP and Port status etc LOGOUT Logout the device when you finish configuring the router RESTART In case the router stops responding correctly or in some other way stops functioning you can perform the reboot Your setting won t be changed Performing the reboot click on the Restart button 3 4 1 1 Routing Table Display the current routing paths of BIPAC 6600 ...

Страница 21: ...Chapter 3 Configuration 17 3 4 1 2 DHCP Table If you enable the DHCP server function of this device you can see the assigned IP addresses and their associated MAC addresses from this table ...

Страница 22: ...cal information through this function You can also save the log into a text file by clicking here and select Save Target As 3 4 1 4 Security Log Display the information of security logs If hacker attacks your sever he will be isolated by the firewall function and the router will record related information Hence you know where the hacker comes from ...

Страница 23: ...nd technologies such as TCP IP HTTP and XML to enable these devices to automatically connect with one another and work together to make networking particularly home networking possible for more people The UPnP aware applications will discover that they are behind a NAT router learn the external IP address and configure port mappings on the router to forward packets from the external ports of the r...

Страница 24: ...t without a problem Please check Chapter 3 3 Information from the ISP then enter the proper values into this web page click the Apply button to save all of the configuration parameters to FLASH Then you may check the Status web page to check whether the router is connected to the ISP or not In most cases you can access the Internet immediately If not please refer to the sections below for more inf...

Страница 25: ...uration When you click this item you get following sub items to configure BIPAC 6600 LAN WAN System Firewall Virtual Server and Advanced 3 4 3 1 LAN This screen contains settings for LAN interface attached to the LAN port 3 4 3 1 1 Ethernet ...

Страница 26: ...will be activated If you check Disable remember to specify a static IP address subnet Mask and DNS setting for each of your local computers Be careful not to assign the same IP address to different computers Range Start Enter the start address of this local IP network address pool The pool is a piece of continuous IP address segment The default value is 192 168 1 100 Range End Enter the last addre...

Страница 27: ...m ISP automatically In other words the ISP provides an IP address to the router dynamically when logon Host Name Enter the host name provided by your ISP The maximum input is 20 alphanumeric characters case sensitive Domain Name Enter the domain name provided by your ISP The maximum input is 20 alphanumeric characters case sensitive MAC Address Specify the MAC address if your ISP needs it The Defa...

Страница 28: ...f you select this configuration Username Enter the username provided by your ISP You can input up to 128 alphanumeric characters case sensitive Password Enter the password provided by your ISP You can input up to 128 alphanumeric characters case sensitive NAT The NAT feature allows multiple users to access Internet through a single IP account sharing the single IP address If users in the LAN site ...

Страница 29: ... Configure this WAN interface with a specific IP address This IP address should be given from ISP directly IP Address Enter the information provided by your ISP Subnet Mask Enter the information provided by your ISP Gateway Address Enter the information provided by your ISP NAT The NAT feature allows multiple users to access Internet through a single IP account sharing the single IP address If use...

Страница 30: ...ust enter the DNS IP address Moreover if you set Fixed IP as your ISP protocol you can only enter the DNS IP Address instead of obtaining the address automatically 3 4 3 3 System There are five items under the System section Time Zone Firmware Upgrade Backup Restore Settings Default Settings Restart and User Management 3 4 3 3 1 Time Zone BIPAC 6600 does not have a real time clock on board instead...

Страница 31: ...e To upgrade the firmware of BIPAC 6600 you should download or copy the firmware to your local environment first Press the Browse button to specify the path of the firmware file Then click Upgrade to start upgrading When the procedure is completed BIPAC 6600 will reset automatically to make the new firmware work ...

Страница 32: ...tart the device If you want to keep the current configuration please use Backup first to save current configuration 3 4 3 3 4 Default Setting If for any reason you have to reset this router back to factory default settings be careful that the current settings will be lost and the settings are reset back to its default value The factory default values is detailed in the section 3 2 Factory Default ...

Страница 33: ...ration 29 3 4 3 3 5 Restart In case the router stops responding correctly or in some other way stops functioning you can perform the restart Your setting won t be changed Performing the restart click on the Apply button ...

Страница 34: ...cket Filtering Packet filtering function enables you to configure your router to check specified internal external user IP address from Internet access or you can disable specific service request Port number to from Internet This configuration program allows you to set up different filter rules up to 10 for different users based on their IP addresses or their network Port number The relationship a...

Страница 35: ...elete Then click the Delete button Active Choose Yes to enable the rule or choose No to disable the rule Type Specify the packet type TCP UDP or both that the rule will be applied to Select TCP if you want to scope for the connection based application service on the remote server using the port number Or select UDP if you want to scope for the connectionless application service on the remote serve...

Страница 36: ... order to avoid conflicts because you do not know which PC in LAN is assigned to which IP address The easiest and safest way is that the filtered IP address is assigned to specific PC that is not allowed to access outside resource such as Internet You configure the filtered IP address manually to this PC but it is still in the same subnet with the router 3 4 3 4 2 URL Filtering URL filtering funct...

Страница 37: ...settings IP specify the IP address in terms of ranges you want URL enter the URL string you would like to block 3 4 3 4 3 MAC Address Filtering MAC address filtering function enables you to configure your router to block specified internal user MAC address from Internet access ...

Страница 38: ...ton to make the following settings activated MAC Select Select Manual Setting to enter MAC address and Comment you need or select default MAC address MAC Enter the MAC address you want to configure Then click the Apply button to save your setting 3 4 3 4 4 Intrusion Detection ...

Страница 39: ...hacker patterns implemented as below IP Spoofing Smurf Attack ICMP Echo with x x x 0 or x x x 255 Ping of Death Length 65535 Land Attack Same source destination IP address Snork Attack UDP port loop TCP NULL scan Sync flooding Short Packet 3 4 3 4 5 Block WAN Request Check Enable if you want to exclude outside PING request from reaching to this router 3 4 3 5 Virtual Server Being a natural Interne...

Страница 40: ...specified port is received it will be forwarded to the corresponding internal server For example if you set the Public Port number 21 FTP to be mapped to the IP Address 192 168 1 100 then all the ftp requests from outside users will be forwarded to the local server with IP address of 192 168 1 100 Here the Router provides three modes for users to select including Port Forwarding Port Mapping and D...

Страница 41: ...e port number Or select UDP if you want to scope for the connectionless application service on the remote server using the port number Private IP Enter the IP address of certain internal server to which requests from the specified port is forwarded Public Private Port Enter the port number you want to configure 3 4 3 5 2 Port Mapping ...

Страница 42: ...d NAT algorithms in the router then passed to the DMZ host when packet is not sent from hacker and not matched by virtual server list 3 4 3 6 Advanced There are four items under the Advanced section Static Route Dynamic DNS Device Management and HELP 3 4 3 6 1 Static Route If you have another router with a LAN to LAN connection you may create a static routing on the router that is the gateway to I...

Страница 43: ...en you click this button the next figure appears Edit Check the item you want to edit Then click the Edit button Delete Check the item you want to delete Then click the Delete button Destination Netmask Gateway Address Fill in these fields required by this Static Routing function ...

Страница 44: ...Enable button to access the Dynamic DNS service Dynamic DNS Server You may sign up Dynamic DNS service at http www dyndns org and there you can also register domain names Domain Name Enter one domain name you have registered User Name Enter the username used for sign up Password Enter the password used for sign up Period Set the time period for the Router to exchange information with the DDNS serv...

Страница 45: ...uration 41 3 4 3 6 3 Device Management 3 4 3 6 4 HELP After click on the hyperlink of HELP in the left pane the following html page will jump out This page would be a good reference for your preceding the configuration ...

Страница 46: ...Billion BIPAC 6600 Broadband Firewall Router 42 ...

Страница 47: ...ort that has a station connected If it is off check the cables between your Broadband Router and the station Can t ping any station on the LAN Verify that the IP address and the subnet mask are consistent between the Broadband Router and the workstations Why do I get IP conflict information in my computer When you see the message box prompted for IP address conflict in your computer it could be ca...

Страница 48: ...n t find the necessary information call the software maker and ask what ports need to be opened for the software to work through a firewall Can I upgrade the gateway s firmware We provide two firmwares one bfw is for boot code and the other afw is application code Usually you do not need to upgrade boot code in stead there is a specific description to upgrade boot code first for upgrading applicat...

Страница 49: ...leases if allowed by the network and get the current IP address assignments through this program 1 From Windows go to Start Run enter WINIPCFG and click OK 2 The following figure displays the adapter address and current TCP IP address Select the correct Ethernet adapter that is installed in this computer at the Ethernet Adapter Information Select the correct Ethernet adapter 3 Click the More Info ...

Страница 50: ...ould list the product s local port address the device s IP address 3 The DNS server IP addresses should match the DNS server IP addresses set in the device IPCONFIG EXE For WinNT Win2000 and WinXP go to Start Programs Accessories Command Prompt to open the Command Prompt Type in IPCONFIG ALL and hit Enter to see the adapter s information Type in IPCONFIG RELEASE to release all adapters IP address ...

Страница 51: ...hen you need this WAN port MAC address you can refer the MAC label in the enclosure But the easiest way is to use Web based GUI to check it Please enter Status Device Info or WAN Obtain an IP address automatically then you will see the MAC address for WAN port Usually some cable operators need this information for registration How can I explore a local server to be visible to outside users When be...

Страница 52: ...gure my Mac OS to surf Internet through BIPAC 6600 Please make sure the Mac OS open transport networking protocols is installed We will suggest that the router has DHCP server enabled and Mac OS gets an IP address automatically because Mac OS will get the other information at that same time such as DNS IP address subnet mask and Gateway IP address Click the Apple Manual Control Panel TCP IP and th...

Страница 53: ...connection method should I select in WAN ISP setting window The broadband firewall router supports four kinds of access method to establish a connection as below PPPoE Username Password Service Name Domain Name System DNS IP address it can be automatically assigned from ISP or be set fixed Fixed IP IP address Subnet mask Gateway address Domain Name System DNS IP address it is fixed IP address Obta...

Страница 54: ...tact Information Most problems can be solved by referring to the Troubleshooting section in the User s Manual If you cannot resolve the problem with the Troubleshooting chapter please contact the dealer where you purchased this product Contact Billion WORLDWIDE http www billion com ...

Отзывы: