background image

VoIP/(802.11g) ADSL2+ Router 

 

Appendix A: Product Support and Contact Information 

 

Virtual Server (known as Port Forwarding) 

In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program 
(usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-
assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as 
“well-known ports”. Servers follow the well-known port assignments so clients can locate them. 

If you wish to run a server on your network that can be accessed from the WAN (i.e. from other 
machines on the Internet that are outside your local network), or any application that can accept 
incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and P2P 
file-sharing applications) and are using NAT (Network Address Translation), then you will usually need to 
configure your router to forward these incoming connection attempts using specific ports to the PC on 
your network running the application. You will also need to use port forwarding if you want to host an 
online game server. 

The reason for this is that when using NAT, your publicly accessible IP address will be used by and point 
to your router, which then needs to deliver all traffic to the private IP addresses used by your PCs. 
Please see the 

WAN

 configuration section of this manual for more information on NAT. 

The device can be configured as a virtual server so that remote users accessing services such as Web 
or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the 
LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the 
external service request to the appropriate server within the LAN network

 

 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

97

Содержание BiPAC 7401VGP

Страница 1: ...BiPAC 7401VP VGP VoIP 802 11g ADSL2 Router User Manual Version Release 5 07 Last Revision Date 08 26 2008 ...

Страница 2: ...sses 16 INFORMATION FROM YOUR ISP 17 CONFIGURING WITH YOUR WEB BROWSER 18 CHAPTER 4 CONFIGURATION 19 STATUS 20 ARP Table 20 Wireless Association Table Wireless Router only 20 Routing Table 20 DHCP Table 21 Email Status 22 VoIP Status 22 Event Log 23 Error Log 23 NAT Sessions 24 Diagnostic 24 UPnP Portmap 25 QUICK START 26 CONFIGURATION 28 LAN Local Area Network 28 Bridge Interface 28 Ethernet 29 E...

Страница 3: ...Outbound IP Throttling LAN to WAN 92 Inbound IP Throttling WAN to LAN 93 Virtual Server known as Port Forwarding 97 Add Virtual Server 98 Edit DMZ Host 99 Edit DMZ Host 100 Edit One to One NAT Network Address Translation 101 Time Schedule 104 Configuration of Time Schedule 105 Advanced 106 Static Route 106 Dynamic DNS 107 Check Email 108 Device Management 109 IGMP 113 VLAN Bridge 113 SAVE CONFIGUR...

Страница 4: ...power outage or when the Internet connection is down Express Internet Access The router complies with ADSL worldwide standards It supports downstream rate up to 12 24 Mbps with ADSL2 2 8Mbps with ADSL Users enjoy not only high speed ADSL services but also broadband multimedia applications such as interactive gaming video streaming and real time audio much easier and faster than ever It is complian...

Страница 5: ...C to this router will be forwarded to the real DNS in the outside network Dynamic Domain Name System DDNS The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname This dynamic IP address is the WAN IP address For example to use the service you must first apply for an account from a DDNS service like http www dyndns org More than 5 DDNS servers are supported Quality of ...

Страница 6: ...r RIP1 2 routing protocol Simple Network Management Protocol SNMP It is an easy way to remotely manage the router via SNMP Web based GUI It supports web based GUI for configuration and management It is user friendly and comes with on line help It also supports remote management capability for remote users to configure and manage this product Firmware Upgradeable Device can be upgraded to the lates...

Страница 7: ... the power immediately and have it repaired at a qualified service center Avoid using this product and all accessories outdoors Attention Place this router on a stable surface Only use the power adapter that comes with the package Using a different voltage rating power adaptor may damage this router Package Contents VoIP 802 11g ADSL2 Router CD ROM containing the online manual RJ 11 ADSL telephone...

Страница 8: ...8 WLAN Wireless router only Lit green when the wireless connection is established Flashes when sending receiving data 9 Phone RJ 11 connector Lit green when the phone is off hook 10 LINE Lit when the inbound and outbound calls transmitted through PSTN 11 VoIP Port RJ 11 connector Lit when SIP registration is OK 12 ADSL Lit when successfully connected to an ADSL DSLAM linesync 13 PPP MAIL Lit stead...

Страница 9: ...tton for more than 6 seconds Caution After pressing the RESET button for more than 6 seconds to be sure you power cycle the device again 4 LAN 1X 4X RJ 45 connector Connect a UTP Ethernet cable Cat 5 or Cat 5e to one of the LAN ports when connecting to a PC or an office home network of 10Mbps or 100Mbps Caution Port 4 can be either a LAN or Console port at a time but not both 4 Console Port as LAN...

Страница 10: ... the LAN Link and ADSL line LEDs are lit If they are not verify that you are using the proper cables Ensure that all other devices connected to the same telephone line as your router e g telephones fax machines analogue modems have a line filter connected between them and the wall socket unless you are using a Central Splitter or Central Filter installed by a qualified and licensed electrician and...

Страница 11: ...ure your PCs to obtain an IP address through a DHCP server or a fixed IP address that must be in the same subnet as the router The default IP address of the router is 192 168 1 254 and the subnet mask is 255 255 255 0 i e any attached PC must be in the same subnet and have an IP address in the range of 192 168 1 1 to 192 168 1 253 The best and easiest way is to configure the PC to get an IP addres...

Страница 12: ...ower on the device 3 Make sure the PWR and SYS LEDs are lit steadily and that the LAN LED is lit 4 Connect an RJ11 cable to VoIP port when connecting to an analog phone set 5 Connect RJ 11 cable to LINE Port when connecting to the telephone wall jack 802 11g is not supported in BiPAC 7401VP Connect more computers Analog Phone ADSL Splitter ADSL Phone Line Switching HUB ...

Страница 13: ... Figure 3 1 3 In the LAN Area Connection Status window click Properties See Figure 3 2 4 Select Internet Protocol TCP IP and click Properties See Figure 3 3 5 Select the Obtain an IP address automatically and Obtain DNS server address automatically radio buttons See Figure 3 4 6 Click OK to finish the configuration Figure 3 1 LAN Area Connection Figure 3 2 LAN Connection Status Figure 3 3 TCP IP F...

Страница 14: ... Figure 3 5 3 In the LAN Area Connection Status window click Properties See Figure 3 6 4 Select Internet Protocol TCP IP and click Properties See Figure 3 7 5 Select the Obtain an IP address automatically and Obtain DNS server address automatically radio buttons See Figure 3 8 6 Click OK to finish the configuration Figure 3 5 LAN Area Connection Figure 3 6 LAN Connection Status Figure 3 7 TCP IP F...

Страница 15: ...000 Compatible or the name of any Network Interface Card NIC in your PC See Figure 3 9 3 Click Properties 4 Select the IP Address tab In this page click the Obtain an IP address automatically radio button See Figure 3 10 5 Then select the DNS Configuration tab See Figure 3 11 6 Select the Disable DNS radio button and click OK to finish the configuration Figure 3 9 TCP IP Figure 3 10 IP Address Fig...

Страница 16: ... Start Settings Control Panel In the Control Panel double click Network and choose the Protocols tab 2 Select TCP IP Protocol and click Properties See Figure 3 12 3 Select the Obtain an IP address from a DHCP server radio button and click OK See Figure 3 13 Figure 3 12 TCP IP Figure 3 13 IP Address ...

Страница 17: ...ESET button for more than 6 seconds to be sure you power cycle the device again LAN Device IP Settings IP Address 192 168 1 254 Subnet Mask 255 255 255 0 ISP setting in WAN site PPPoE DHCP server DHCP server is enabled Start IP Address 192 168 1 100 IP pool counts 100 LAN and WAN Port Addresses The parameters of LAN and WAN ports are pre set in the factory The default values are shown below LAN Po...

Страница 18: ...VPI VCI VC LLC based multiplexing Username Password Service Name and Domain Name System DNS IP address it ca be automatically assigned by your ISP when you connect or be set manually In addition additional WAN address can be assigned using PPPoE dialer PPPoA VPI VCI VC LLC based multiplexing Username Password and Domain Name System DNS IP address it ca be automatically assigned by your ISP when yo...

Страница 19: ... the IP address of your router which by default is 192 168 1 254 and click Go a user name and password window prompt will appear The default username and password are admin and admin See Figure 3 14 Figure 3 14 User name Password Prompt Widonw Congratulation You are now successfully logon to the VoIP ADSL2 Router 18 ...

Страница 20: ...eless Association Routing Table DHCP Table Email Status VoIP Status Event Log Error Log NAT Sessions Diagnostic UPnP Portmap Quick Start Configuration LAN WAN System Firewall VoIP QoS Virtual Server Time Schedule Advanced Save Config to FLASH Language provides user interface in English and French languages Please click the links to see the relevant sections of this manual for detailed instructions...

Страница 21: ...ion of this manual for more information on this feature IP Address A list of IP addresses of devices on your LAN Local Area Network MAC Address The MAC Media Access Control addresses for each device on your LAN Interface The interface name on the router that this IP Address connects to Static Static status of the ARP table entry no for dynamically generated ARP table entries yes for static ARP tab...

Страница 22: ... the destination network Netmask The destination netmask address Gateway The IP address of the gateway that this route will use Cost The number of hops counted as the cost of the route DHCP Table Leased The DHCP assigned IP addresses information IP Address A list of IP addresses of devices on your LAN Local Area Network Expired The expired IP addresses information Permanent The fixed host mapping ...

Страница 23: ...MAC Address that you want to assign the fixed IP address Maximum Lease Time The maximum lease time interval you allow to clients Email Status Details and status for the Email Account you have configured the router to check Please see the Advanced section of this manual for details on this function VoIP Status Here you can check details and status of VoIP Account you have configured Please see the ...

Страница 24: ...r s ADSL connection is disconnected as well as Firewall events when you have enabled Intrusion or Blocking Logging in the Configuration Firewall section of the interface Please see the Firewall section of this manual for more details on how to enable Firewall logging Error Log Any errors encountered by the router e g invalid names given to entries are logged to this window 23 ...

Страница 25: ... sessions between interface of types external WAN and internal LAN Diagnostic It tests the connection to computer s which is connected to LAN ports and also the WAN Internet connection If PING www google com is shown FAIL and the rest is PASS you ought to check your PC s DNS settings is set correctly 24 ...

Страница 26: ... 3 Basic Installation UPnP Portmap The section lists all port mapping established using UPnP Universal Plug and Play Please see the Advanced section of this manual for more details on UPnP and the router s UPnP configuration options 25 ...

Страница 27: ...al you have the option to provide specific DNS as your desire or check the Enable box to get the DNS automatically from your ISP Your ISP will be able to supply all the details you need alternatively if you have deleted the current WAN Connection in the WAN ISP section of the interface you can use the router s PVC Scan feature to attempt to determine the Encapsulation types offered by your ISP Cli...

Страница 28: ...tallation Select the desired option from the list and click Apply to return to the Quick Start interface to continue configuring your ISP connection Please note that the contents of this list will vary depending on what is supported by your ISP 27 ...

Страница 29: ...t Setting and DHCP Server Bridge Interface You can setup member ports for each VLAN group under Bridge Interface section From the example two VLAN groups need to be created Ethernet P1 Port 1 Ethernet1 P2 P3 and P4 Port 2 3 4 Please uncheck P2 P3 P4 from Ethernet VLAN port first Note You should setup each VLAN group with caution Each Bridge Interface is arranged in this order Bridge Interface VLAN...

Страница 30: ...cify an IP address on this virtual interface SubNetmask Specify a subnet mask on this virtual interface Security Interface Specify the firewall setting on this virtual interface Internal The network is behind NAT All traffic will do network address translation when sending out to Internet if NAT is enabled External There is no NAT on this IP interface and connected to the Internet directly Mostly ...

Страница 31: ... to Disable Allowed check to authorize specific device accessing your LAN by insert the MAC Address in the space provided or click Make sure your PC s MAC is listed Blocked check to prevent unwanted device accessing your LAN by insert the MAC Address in the space provided or click Make sure your PC s MAC is not listed The maximum client is 16 The MAC addresses are 6 bytes long they are presented o...

Страница 32: ...isplays a list of individual Ethernet device s IP Address MAC Address which connecting to the router You can easily by checking the box next to the IP address to be blocked or allowed Then Add to insert to the Ethernet Client Filter table The maximum Ethernet client is 16 31 ...

Страница 33: ... ESSID as the device in order to get connected to your network Note It is case sensitive and must not excess 32 characters ESSID Broadcast It is function in which transmits its ESSID to the air so that when wireless client searches for a network router can then be discovered and recognized Default setting is Enable Disable If you do not want broadcast your ESSID Any client uses any wireless settin...

Страница 34: ...ss Distribution System WDS It is a wireless access point mode that enables wireless link and communication with other access point It is easy to be installed simply define peer s MAC address of the connected AP WDS takes advantages of cost saving and flexibility which no extra wireless client device is required to bridge between two access points and extending an existing wired or wireless infrast...

Страница 35: ...hentication Code Protocol of the AES Advanced Encryption Security algorithms WPA Shared Key The key for network authentication The input format is in character style and key size should be in the range between 8 and 63 characters Group Key Renewal The period of renewal time for changing the security key automatically between wireless client and Access Point AP Default value is 3600 seconds Idle Ti...

Страница 36: ...he router offers highly secure data encryption known as WEP If you require high security for transmissions there are two alternatives to select from WEP 64 and WEP 128 WEP 128 will offer increased security over WEP 64 Passphrase This is used to generate WEP keys automatically based upon the input string and a pre defined algorithm in WEP64 or WEP128 Default Used WEP Key Select the encryption key I...

Страница 37: ...sert the MAC Address in the space provided or click Make sure your PC s MAC is listed Blocked To prevent unwanted device accessing the LAN by insert the MAC Address in the space provided or click Make sure your PC s MAC is not listed The maximum client is 16 The MAC addresses are 6 bytes long they are presented only in hexadecimal characters The number 0 9 and letters a f are acceptable The maximu...

Страница 38: ...0M full duplex 100M half duplex 100M full duplex and Disable Sometimes there are Ethernet compatibility problems with legacy Ethernet devices and you can configure different types to solve compatibility issues The default is Auto which users should keep unless there are specific problems with PCs not being able to access your LAN IPv4 TOS priority Control Advanced users TOS Type of Services is the...

Страница 39: ...ure parameters of the DHCP Server including the IP pool starting IP address and ending IP address to be allocated to PCs on your network lease time for each assigned IP address the period of time the IP address assigned will be valid DNS IP address and the gateway IP address These details are sent to the DHCP client i e your PC when it requests an IP address from the DHCP server Click Apply to ena...

Страница 40: ...r parameters as below If your ISP does not use PPPoE you can change the default WAN connection entry by clicking Change Some of ISP may provide more service via different WAN connection In case you can create more connections by clicking Create The device can support maximum up to 8 WAN connections Note The application of multiple WAN connections is depend on your Service Provider A simpler altern...

Страница 41: ...Internet directly the NAT function can be disabled Encapsulation method Selects the encapsulation format the default is LLC Bridged Select the one provided by your ISP IP Assignment Obtain an IP address automatically via DHCP client specify if the Router can get an IP address from the ISP Internet Service Provider automatically Use the following IP Address Specify the IP address manually the IP sh...

Страница 42: ... for ATM layer Encapsulation method Select the encapsulation format this is provided by your ISP Acceptable Frame Type Specify what kind of traffic can through this connection all traffic or only VLAN tagged Filter Type Specify the type of ethernet filtering performed by the named bridge interface All Allows all types of ethernet packets through the port Ip Allows only IP ARP types of ethernet pac...

Страница 43: ...SP You can input up to 128 alphanumeric characters case sensitive This will usually be in the format of username ispname instead of simply username Password Enter the password provided by your ISP You can input up to 128 alphanumeric characters case sensitive IP Address Specify an IP address allowed to logon and access the router s web server Note IP 0 0 0 0 indicates all users who are connected t...

Страница 44: ...or false for using VC Mux Create Route This setting specifies whether a route is added to the system after IPCP Internet Protocol Control Protocol negotiation is completed If set to enabled a route will be created which directs packets to the remote end of the PPP link Specific Route Specifies whether the route created when a PPP link comes up is a specific or default route If set to enabled the r...

Страница 45: ...s the Internet directly the NAT function can be disabled IP Assignment Obtain an IP address automatically via DHCP client specify if the Router can get an IP address from the ISP Internet Service Provider automatically Use the following IP Address Specify the IP address manually the IP should be given by you our ISP RIP RIP v1 RIP v2 and RIP v2 Multicast Check to enable RIP function MTU Maximum Tr...

Страница 46: ... usually be in the format of username ispname instead of simply username Password Enter the password provided by your ISP You can input up to 128 alphanumeric characters case sensitive Service Name This item is for identification purposes If it is required your ISP will provide you the information Maximum input is 20 alphanumeric characters IP Address specify if the Router can get an IP address fr...

Страница 47: ...l in the MAC address that specify by service provider when it is required Default is disabled Advanced Options PPPoE LLC Header Selects encapsulation mode true for using LLC or false for using VC Mux Create Route This setting specifies whether a route is added to the system after IPCP Internet Protocol Control Protocol negotiation is completed If set to enabled a route will be created which direct...

Страница 48: ... allows multiple users to access the Internet through a single ISP account sharing a single IP address If users on your LAN have public IP addresses and can access the Internet directly the NAT function can be disabled Username Enter the username provided by your ISP You can input up to 128 alphanumeric characters case sensitive This will usually be in the format of username ispname instead of sim...

Страница 49: ...will attempt to send through the interface TCP MSS Clamp This option helps to discover the optimal MTU size automatically Default is enabled Advanced Options PPPoE LLC Header Selects encapsulation mode true for using LLC or false for using VC Mux Create Route This setting specifies whether a route is added to the system after IPCP Internet Protocol Control Protocol negotiation is completed If set ...

Страница 50: ... the DNS converts the friendly name into its equivalent IP Address You can obtain a Domain Name System DNS IP address automatically if your ISP has provided it when you logon check the Enable box Usually when you choose PPPoE or PPPoA as your WAN ISP protocol the ISP will provide the DNS IP address automatically You may leave the configuration field blank Alternatively your ISP may provide you wit...

Страница 51: ...true again for taking effect with setting of Connect Mode Coding Gain It reduces router s transmit power which will effect to router s downstream performance Higher the gain will increase the downstream rate but it sometimes causes unstable ADSL line The configurable ADSL coding gain is from 0 dB to 7dB or automatic Tx Attenuation It is the ADSL transmission power that the modem is using The lower...

Страница 52: ...eed THE LOWER THE BETTER CRC Errors It is known as Cyclic Redundancy Check Error Its checksum is to detect the transmission error Latency It includes two channels Fast and Interleaved It displays the channel adapted by your ISP Capability There are more combinational ADSL modulation modes to be selected GDMT ADSL connection will be limited to ADSL1 G DMT G Lite only BIS ADSL connection will be lim...

Страница 53: ...d to ADSL2 ADSL2 and ADS1 G DMT G Lite only DISABLE This disable function will disconnect your ADSL synch Select it with cautious S 1 2 Mode It is ADSL1 protocols which can increase the downstream speed up to 12Mpb Please check further with your ISP about this option is being enabled or not 52 ...

Страница 54: ...have specified If you prefer to specify an SNTP server other than those in the list simply enter its IP address as shown above Your ISP may provide an SNTP server for you to use Daylight Saving is also known as Summer Time Period Many places in the world adapt it during summer time to move one hour of daylight from morning to the evening in local standard time Check Automatic box to auto set your ...

Страница 55: ...om outside your LAN select a time period the router will permit remote access for and click Enable You may change other configuration options for the web administration interface using Device Management options in the Advanced section of the GUI If you wish to permanently enable remote access choose a time period of 0 minutes 54 ...

Страница 56: ...this software may be improved and modified and your router allows you to upgrade the software it runs to take advantage of these changes Clicking on Browse will allow you to select the new firmware image file you have downloaded to your PC Once the correct file is selected click Upgrade to update the firmware in your router 55 DO NOT power down the router or interrupt the firmware upgrading while ...

Страница 57: ...cant changes to your router s configuration Press Backup to select where on your local PC to save the settings file You may also change the name of the file when saving if you wish to keep multiple backups Press Browse to select a file from your PC to restore You should only restore settings files that have been generated by the Backup function and that were created when using the current version ...

Страница 58: ...y default settings for example after a firmware upgrade or if you have saved an incorrect configuration select Factory Default Settings to reset to factory default settings You may also reset your router to factory settings by holding the small Reset pinhole button more than 6 seconds on the back of your router Caution After pressing the RESET button for more than 6 seconds to be sure you power cy...

Страница 59: ...ed on Edit you are shown the following options You can change the user s password whether their account is active and Valid as well as add a comment to each user account These options are the same when creating a user account with the exception that once created you cannot change the username You cannot delete the default admin account however you can delete any other created accounts by clicking ...

Страница 60: ...sers on the Internet making it much more difficult for a hacker to target a machine on your network This natural firewall is on when NAT function is enabled 59 When using Virtual Servers your PCs will be exposed to the degree specified in your Virtual Server settings provided the ports specified are opened in your firewall packet filter settings Firewall Security and Policy General Settings Inboun...

Страница 61: ...e predefined port filter rules for High Medium and Low security are displayed in Port Filters of Packet Filter Select either High Medium or Low security level to enable the Firewall The only difference between these three security levels is the preset port filter rules in the Packet Filter Firewall functionality is the same for all levels it is only the list of preset port filters that changes bet...

Страница 62: ... when the Firewall is enabled and one of these four security levels is chosen All blocked High Medium and Low The predefined port filter rules in the Packet Filter must modify accordingly to the level of Firewall which is selected See Table1 Predefined Port Filter for more detailed information 61 ...

Страница 63: ...YES DNS 53 TCP 6 53 53 NO YES NO YES NO YES FTP 21 TCP 6 21 21 NO YES NO YES NO NO Telnet 23 TCP 6 23 23 NO YES NO YES NO NO SMTP 25 TCP 6 25 25 NO YES NO YES NO YES POP3 110 TCP 6 110 110 NO YES NO YES NO YES NEWS NNTP Network News Transfer Protocol TCP 6 119 119 NO YES NO YES NO NO RealAudio RealVideo 7070 UDP 17 7070 7070 YES YES YES YES NO NO PING ICMP 1 N A N A NO YES NO YES NO YES H 323 1720...

Страница 64: ...er Chapter 4 Configuration 63 MSN 7001 UDP 17 7001 7001 YES YES N A N A N A N A MSN VEDIO 9000 TCP 6 9000 9000 NO YES N A N A N A N A Inbound Internet to LAN Outbound LAN to Internet YES Allowed NO Blocked N A Not Applicable ...

Страница 65: ... allow block the traffic to or form set IP address and Subnet Mask to 0 0 0 0 to inactive the Address Filter rule Tip To block access to from a single IP address enter that IP address as the Host IP Address and use a Host Subnet Mask of 255 255 255 255 Type It is the packet protocol type used by the application select either TCP or UDP Source Port This Port or Port Ranges defines the port allowed ...

Страница 66: ...edefined rules Time Schedule It is self defined time period You may specify a time schedule for your prioritization policy For setup and detail refer to Time Schedule section Protocol Number Insert the port number i e GRE 47 Inbound Outbound Select Allow or Block the access to the Internet Outbound or from the Internet Inbound Click Apply button to apply your changes 65 ...

Страница 67: ...ow security level To setup a web server located on the local network when the firewall is enabled you have to configure the Port Filters setting for HTTP As you can see from the diagram below when the firewall is enabled with one of the three presets Low Medium High inbound HTTP access is not allowed which means remote access through HTTP to your router is not allowed Note Inbound indicates access...

Страница 68: ... Delete to delete the existing HTTP rule 3 Click Add TCP UDP Filter Click Add TCP UDP Filter 4 Input the Rule Name Time Schedule Source Destination IP Type Source Destination Port Inbound and Outbound Example Application Cindy_HTTP Time Schedule Always On Source Destination IP Address es 0 0 0 0 I do not wish to active the address filter instead I use the port filter Type TCP Please refer to Table...

Страница 69: ...s shown below 6 Configure your Virtual Server port forwarding settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server Note For how to configure the HTTP in Virtual Server go to Add Virtual Server in Virtual Server section for more details 68 ...

Страница 70: ...Protection Block Duration This is the duration for blocking Smurf attacks Default value is 600 seconds Scan Attack Block Duration This is the duration for blocking hosts that attempt a possible Scan attack Scan attack types include X mas scan IMAP SYN FIN scan and similar attempts Default value is 86400 seconds DoS Attack Block Duration This is the duration for blocking hosts that attempt a possib...

Страница 71: ...es CharGen Scan UDP Dst Port CharGen 19 Src IP Scan Yes Yes X mas Tree Scan TCP Flag X mas Src IP Scan Yes Yes IMAP SYN FIN Scan TCP Flag SYN FIN DstPort IMAP 143 SrcPort 0 or 65535 Src IP Scan Yes Yes SYN FIN RST ACK Scan TCP No Existing session And Scan Hosts more than five Src IP Scan Yes Yes Net Bus Scan TCP No Existing session DstPort Net Bus 12345 12346 3456 SrcIP Scan Yes Yes Back Orifice S...

Страница 72: ...and detail refer to Time Schedule section Keywords Filtering Allows blocking by specific keywords within a particular URL rather than having to specify a complete URL e g to block any image called advertisement gif When enabled your specified keywords list will be checked to see if any keywords are present in URLs accessed to determine if the connection attempt should be blocked Please note that t...

Страница 73: ...ll WEB traffic except for ones listed in the trusted domain which would prevent Bobby from accessing other web sites Andy selects both functions in the Domain Filtering and thinks that it will stop Bobby But Bobby knows this function Domain Filtering ONLY disables all WEB traffic except for Trusted Domain BUT not its IP address If this is the situation Block surfing by IP address function can be h...

Страница 74: ...set to Disabled Disabled Instant Message blocking is not triggered No action will be performed Always On Action is enabled TimeSlot1 TimeSlot16 This is the self defined time period You may specify the time period to trigger the blocking i e during working hours For setup and detail refer to Time Schedule section Yahoo MSN Messenger Check the box to block either or both Yahoo or and MSN Messenger T...

Страница 75: ...er 4 Configuration Firewall Log Firewall Log display log information of any unexpected action with your firewall settings Check the Enable box to activate the logs Log information can be seen in the Status Event Log after enabling 74 ...

Страница 76: ...tched Telephone Network It is not only cost effective especially for a long distance telephone charges but also toll quality voice calls over the Internet After completing VoIP configuration remember to apply the changes SAVE CONFIG and restart to activate your VoIP Attention Here are the items within the VoIP section Wizard General Settings Phone Port PSTN Dial Plan VoIP Dial Plan and Ring Tone 7...

Страница 77: ...k have the capability in executing and checking the DSCP through out the QoS network Settings for Phone Port 1 SIP Service Provider This section allows you to select the service provider When the selection is done respective parameters below are automatically displayed Phone Number This parameter holds the registration ID of the user within the SIP registrar Authentication Username If the username...

Страница 78: ...ing the echo while you are on the phone This helps you not to hear much of your own voice reflecting on the phone while you talk Default is set to Enable RTP Port Provide the based value from the media RTP ports that are assigned for various endpoints and the different call sessions that may exist within an end point Range from 5100 to 65535 default value is 5100 Region This selection is a drop do...

Страница 79: ...tton to apply the settings 3 In General Settings make sure general SIP information are correctly inserted 4 In General Settings click Apply button to apply the settings 5 In General Settings click Synch Now button to register the account s with your SIP server Advanced Parameters VoIP through IP Interface IP Interface decides where to send receive the voip traffic it includes ipwan and iplan Easy ...

Страница 80: ...tected properly e g calls being terminated within 5 seconds of being answered The actual levels are determined by your environment including the number and type of telephones used Note ONHOOK means hung up To take your phone OFFHOOK lift the receiver then press Hook Flash until you hear your normal PSTN dialtone not your VoIP dialtone Wait several seconds and then press Check Level You should chec...

Страница 81: ...e information Login Account Configuration Phone Number This parameter holds the registration ID of the user within the VoIP SIP registrar Authentication Username Same as Phone Number Authentication Password This parameter holds the password used for authentication within VoIP SIP registrar Confirm Password Re enter the password for confirmation Display Name This parameter will be appeared on the C...

Страница 82: ...order as G 729 G 711µ LAW G 711A LAW Speed Dial Speed Dial comes handy to store frequently used telephone numbers which you can press number from 0 to 9 and the pound sign on the phone keypad to activate the function For example speed dial to phone number lists on 9 just press keypad 9 then Your router will automatically call out to number listed on entry 9 For examples If your friend Tim gives yo...

Страница 83: ...15 Action Specify a dialing method you wish to make PSTN call s Dial with Prefix The dialed number with prefix will be sent call through the PSTN Note The actual dialed number of valid digits length requires matching in the Number of Digits filed Dial without Prefix The dialed number will be sent call through the PSTN without prefix Note The actual dialed number of valid digits length requires mat...

Страница 84: ... not accessible This excludes when User manually disables Registration User inserts a wrong authentication username or password User dials a wrong SIP number only and if the PSTN Auto Fallback function is not enabled See VoIP General Setting Advanced for information PSTN Dial Plan Examples 1 Dial with Prefix If you dial 01223 707070 number 01223707070 will be dialed out via FXO to make a regular p...

Страница 85: ... does not match with number of digits 6 defined in the filed 7070 is still a valid phone number since it has not exceeded 6 digits 4 Dial at Timeout no Prefix If you only dial 97070 and no more numbers after the timeout activates 7070 will be dialed without prefix to make a regular call via FXO port Even though 7070 only 4 digits does not match with number of digits 6 defined in the filed 7070 is ...

Страница 86: ... tone when someone calls 90x Blind Call Transfer Dial 90 phone number to translate a call to a third party This feature is enabled by default x Speed Dial x 2 9 Refer to Phone Port section in the Web GUI Set up your Speed Dial phone book first before accessing the Speed Dial feature It is enabled by default Redial Press to redial the latest number you dialed This feature is enabled by default 74 x...

Страница 87: ...refix can also be included with any number and or character such as Note For special service with you may need to check with your VoIP or Local Telephone Service Provider for information If Prefix is xxx delete it Prefix xxx is removed from the dialing numbers before making a call If Prefix is xxx replace with Prefix xxx is appended to the front of the dialing numbers when making a call No prefix ...

Страница 88: ... number 0 9 in variable length Maximum length is 16 xx Starting with sign any 2 digit numbers between 0 and 9 Total length including the is 3 Note No period is needed xx x Starting with sign any two digit numbers between 0 any number 0 9 in variable length Maximum length is 16 xx Starting with sign any digit number 0 9 in variable length but no shorter than 1 digits Maximum length is 16 xx x Start...

Страница 89: ...Time1 Off Time1 On Time2 Off Time2 and On Time3 Off Time3 Frequency is specified in Hertz Time is given in milliseconds Tone Parameters You may need to check with your local telephone service provider for such information Also it is recommended that this option be configured by an advanced user unless you are instructed to do so Click Apply to apply the settings 88 ...

Страница 90: ...ged tone and phone B does not ring 80 Set do not disturb off 74 x number Set the number for Speed dial code x where x is a number between 2 and 9 Note Where x is a number between 2 and 9 and number is the number to dial The code needed to dial a speed dial from a phone connected to a VoIP Router is x where x is a number between 2 and 9 The settings will infect to your setting in Speed Dial on WEB ...

Страница 91: ...ment Prioritization There are three priority settings to be provided in the Router High Normal The default is normal priority for all of traffic without setting Low And the balances of utilization for each priority are High 60 Normal 30 and Low 10 Click Clear You can click Clear to delete the existing Application Application A user define description to identify this new policy application Time Sc...

Страница 92: ... next Router See Table 4 Here is the DSCP Mapping Table Note To be sure the router s in the backbones network have the capability in executing and checking the DSCP through out the QoS network Table 4 DSCP Mapping Table DSCP Mapping Table Wireless ADSL Router Standard DSCP Disabled None Best Effort Best Effort 000000 Premium Express Forwarding 101110 Gold service L Class 1 Gold 001010 Gold service...

Страница 93: ...ion A user define description to identify this new policy application Time Schedule Scheduling your prioritization policy Refer to Time Schedule for more information Protocol The name of supported protocol Source Port The source port of packets to be monitored Destination Port The destination port of packets to be monitored Source IP Address Range The source IP address or range of packets to be mo...

Страница 94: ...n A user define description to identify this new policy application Time Schedule Scheduling your prioritization policy Refer to Time Schedule for more information Protocol The name of supported protocol Source Port The source port of packets to be monitored Destination Port The destination port of packets to be monitored Source IP Address Range The source IP address or range of packets to be moni...

Страница 95: ...ion Diagram VoIP Normal PCs Restricted Information and Settings Upstream 928 kbps Downstream 8 Mbps VoIP User 192 168 1 1 Normal Users 192 168 1 2 192 168 1 5 Restricted User 192 168 1 100 0 100 200 300 400 500 kbps VoIP VPN HIGH Others NORMAL Restricted LOW Throughput VoIP VPN HIGH Others NORMAL Restricted LOW 94 ...

Страница 96: ...r catching VoIP packets as high priority Above settings will help to improve quality of your VoIP service when traffic is full loading Restricted Application Some of companies will setup FTP server for customer downloading or home user sharing their files by using FTP With above settings that help to limit utilization of upstream of FTP Time schedule also help you to only limit utilization at dayt...

Страница 97: ...uct Support and Contact Information Sometime your customers or friends may upload their files to your FTP server and that will saturate your downstream bandwidth The settings below help you to limit bandwidth for the restricted application 96 ...

Страница 98: ...P file sharing applications and are using NAT Network Address Translation then you will usually need to configure your router to forward these incoming connection attempts using specific ports to the PC on your network running the application You will also need to use port forwarding if you want to host an online game server The reason for this is that when using NAT your publicly accessible IP ad...

Страница 99: ...orresponding internal server Time Schedule A self defined time period to enable your virtual server You may specify a time schedule or Always on for the usage of this Virtual Server Entry For setup and detail refer to Time Schedule section Application Users define description to identify this entry or click to select existing predefined rules 20 predefined rules are available Click the Radio butto...

Страница 100: ...lick it to delete this virtual server application Using port forwarding does have security implications as outside users will be able to connect to PCs on your network For this reason you are advised to use specific Virtual Server entries just for the ports your application requires instead of using DMZ As doing so will result in all connections from the WAN attempt to access to your public IP of ...

Страница 101: ... number used by any other Virtual Server entries Cautious This Local computer exposing to the Internet may face varies of security risks Disabled As set in default setting it disables the DMZ function Enabled It activates your DMZ function Internal IP Address Give a static IP address to the DMZ Host when Enabled radio button is checked Be aware that this IP will be exposed to the WAN Internet List...

Страница 102: ...to utilize these IP addresses NAT Type Select desired NAT type As set in default setting it disables the One to One NAT function Global IP Address Subnet The subnet of the public WAN IP address given by your ISP If your ISP has provided this information you may insert it here Otherwise use IP Range method IP Range The IP address range of your public WAN IP addresses For example IP 192 168 1 1 end ...

Страница 103: ...ol for the virtual server In addition to specifying the port number to be used you will also need to specify the protocol used The protocol used is determined by the particular application Most applications will use TCP or UDP Global IP Define a public WAN IP address for this Application to use This Global IP address must be defined in the Global IP Address External Port The Port number on the Rem...

Страница 104: ...her information please see IANA s website at http www iana org assignments port numbers For help on determining which private port numbers are used by common applications on this list please see the FAQs Frequently Asked Questions at http www billion com Table 5 Well known and registered Ports Port Number Protocol Description 20 TCP FTP Data 21 TCP FTP Control 22 TCP UDP SSH Remote Login Protocol ...

Страница 105: ...t or allowing the usage of the Internet by users or applications This Time Schedule correlates closely with router s time since router does not have a real time clock on board it uses the Simple Network Time Protocol SNTP to get the current time from an SNTP server from the Internet Refer to Time Zone for details You router time should correspond with your local time If the time is not set correct...

Страница 106: ... be shown ID This is the index of the time slot Name A user define description to identify this time portfolio Day The default is set from Monday through Friday You may specify the days for the schedule to be applied Start Time The default is set at 8 00 AM You may specify the start time of the schedule End Time The default is set at 18 00 6 00PM You may specify the end time of the schedule Select...

Страница 107: ...in the Advanced section Static Route Dynamic DNS Check Email Device Management IGMP and VLAN Bridge Static Route Click on Routing Table and then choose Create Route add a routing table Destination This is the destination subnet IP address Netmask Subnet mask of the destination IP addresses based on above destination subnet IP Gateway This is the gateway IP address to which packets are to be forwar...

Страница 108: ...ll first need to register and establish an account with the Dynamic DNS provider using their website for example http www dyndns org There are more than 5 DDNS services supported Disable Check to disable the Dynamic DNS function Enable Check to enable the Dynamic DNS function The following fields will be activated and required Dynamic DNS Server Select the DDNS service you have established an acco...

Страница 109: ...Emailing checking function The following fields will be activated and required Account Name Enter the name login of the POP3 account you wish to check Normally it is the text in your email address before the symbol If you have trouble with it please contact your ISP Password Enter the account s password POP3 Mail Server Enter your POP mail server name You Internet Service Provider ISP or network a...

Страница 110: ...r for web based configuration will use The default value is the standard HTTP port 80 Users may specify an alternative if for example they are running a web server on a PC within their LAN Management IP Address You may specify an IP address allowed to logon and access the router s web server Setting the IP address to 0 0 0 0 will disable IP address restrictions allowing users to login from any IP ...

Страница 111: ...PnP functionality Enable Check to enable the router s UPnP functionality UPnP Port Its default setting is 2800 It is highly recommended for users to use this port value If this value conflicts with other ports already being used you may wish to change the port SNMP Access Control Software on a PC within the LAN is required in order to utilize this function Simple Network Management Protocol SNMP V...

Страница 112: ...ng authentication mechanism authorization with fine granularity for remote monitoring Traps supported Cold Start Authentication Failure The following MIBs are supported From RFC 1213 MIB II System group Interfaces group Address Translation group IP group ICMP group TCP group UDP group EGP not applicable Transmission SNMP group From RFC1650 EtherLike MIB dot3Stats From RFC 1493 Bridge MIB dot1dBase...

Страница 113: ...om RFC 1472 PPP Security MIB PPP Security Group From RFC 1473 PPP IP MIB PPP IP Group From RFC 1474 PPP Bridge MIB PPP Bridge Group From RFC1573 IfMIB ifMIBObjects Group From RFC1695 atmMIB atmMIBObjects From RFC 1907 SNMPv2 only snmpSetSerialNo OID 112 ...

Страница 114: ...eate VLAN To create another VLAN group Advanced VLAN Setup Example Triply Play VLAN_data Ethernet Port 1 Wireless and Wireless WDS are reserving for Internet On Ethernet port 1 I also need VC 0 40 bridged VLAN_Vedio Ethernet ports 2 3 and 4 0 33 Bi directional IP 0 34 Video 0 35 Video 0 36 Video Subscriber Services EPG EAS etc 0 37 Video 0 38 Video 0 39 Spare Step 1 Setup Member Ports Go to Config...

Страница 115: ... If your ISP uses this access protocol click Edit to input other parameters if needed If your ISP does not use PPPoE you can change the default WAN connection entry by clicking Change From the example 0 40 is used for data internet and assumes PPPoE is used click the Edit to change the VPI VCI to 0 40 Click Create to setup up additional WAN interface for video applications Total of 8 VLAN is suppo...

Страница 116: ...ion all traffic or only VLAN tagged Filter Type Specify the type of ethernet filtering performed by the named bridge interface All Allows all types of ethernet packets through the port Ip Allows only IP ARP types of ethernet packets through the port Pppoe Allows only PPPoE types of ethernet packets through the port PVID for Untagged Frames PVID is known as Port VLAN Identifier When an untagged pac...

Страница 117: ... the example two VLAN groups are requested Data and Video To create another VLAN group for Video by clicking Create VLAN Given a name and ID PVID to identify the Video group The valid value range for PVID is 1 4094 From the example VLAN untagged ports for Data Internet ethernet wireless and wireless_wds VLAN untagged ports for Video ethernet1 rfc 1483 0 rfc 1483 6 Click Apply to made change effect...

Страница 118: ... VLAN Bridge with Bridge Interface created in Step1 you will see the conformable relationship in these two screenshots Step 4 IGMP Snooping Enable Go Configuration Advanced IGMP IGMP Snooping must be enabled in order to allow video stream forwarding correctly 117 ...

Страница 119: ...that you have saved the configuration settings before you logout Be aware that the router is restricted to only one PC accessing the configuration web pages at a time Once a PC has logged into the web interface other PCs cannot get access until the current PC has logged out of the web interface If the previous PC forgets to logout the second PC can access the page after a user defined period by de...

Страница 120: ... LED on the front panel of the router should be on Check that your VPI VCI encapsulation type and type of multiplexing settings are the same as those provided by your ISP Reboot the router GE If you still have problems you may need to verify these settings with your ISP Frequent loss of ADSL linesync disconnections Ensure that all other devices connected to the same telephone line as your router e...

Страница 121: ...ou cannot resolve the problem with the Troubleshooting chapter please contact the dealer where you purchased this product Contact Billion AUSTRALIA http www billion com au 2006 Billion Electric Co Ltd PC Range P L All Rights Reserved WORLDWIDE http www billion com Mac OS is a registered Trademark of Apple Computer Inc Windows 98 Windows NT Windows 2000 Windows Me and Windows XP are registered Trad...

Отзывы: