Billion BiPAC 7402NX Скачать руководство пользователя страница 100

Страница: 100 / 165

Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router

Chapter 4: Configuration

Example

Application:

Cindy_HTTP

Time Schedule:

Always On

Source / Destination IP Address(es):

0.0.0.0

(I do not wish to active the address-filter, instead I use

the port-filter)

Type:

TCP (Please refer to Table1: Predefined Port Filter)

Source Port:

0-65535

(I allow all ports to connect with the application))

Redirect Port:

80-80

(This is Port defined for HTTP)

Inbound / Outbound:

Allow

4. The new port filter rule for HTTP is shown below:

5. Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80

will be forwarded to the PC running your web server:

Note:

For how to configure the HTTP in Virtual Server, go to Add Virtual Server in Virtual Server section for more

details.

Содержание BiPAC 7402NX

Страница 1: ...Last Revision Date 9 30 2010 BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router User Manual Version released 6 24b dm2...

Страница 2: ...Device LAN IP settings 18 ISP setting in WAN site 18 DHCP server 18 LAN and WAN Port Addresses 18 Information from your ISP 19 Configuring with your Web Browser 20 Chapter 4 Configuration 21 Status 22...

Страница 3: ...int to Point Tunneling Protocol 104 IPSec IP Security Protocol 112 L2TP Layer Two Tunneling Protocol 121 QoS Quality of Service 133 Prioritization 133 Outbound IP Throttling LAN to WAN 135 Inbound IP...

Страница 4: ...Billion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Table of Contents APPENDIX A Product Support and Contact Information 161...

Страница 5: ...User can use embedded PPTP and L2TP client server IKE and IPSec which are supported by this router to make a VPN connection or users can run the PPTP client in PC and the router already provides IPSe...

Страница 6: ...NetMeeting IP phone and others SOHO Firewall Security with DoS and SPI Along with the built in NAT natural firewall feature the router also provides advanced hacker pattern filtering protection It ca...

Страница 7: ...port or a range of ports to the specific local computer to handle it For example a user can assign a PC in the LAN acting as a WEB server inside and expose it to the outside network Outside users can...

Страница 8: ...Router Important note for using this router Package Contents BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router CD containing the on line manual RJ 11 ADSL telephone cable Ethernet CAT 5 LAN cable T...

Страница 9: ...will appear Orange If the speed of transmission hits 10Mbps light will not shine Blinking when data is Transmitted Received 3 USB Lit green when the device is connected to a USB device and ready Flas...

Страница 10: ...onsole Console port 3G HSDPA USB modem backup for Internet access 6 RESET To be sure the device is being turned on press RESET button for 1 3 seconds quick reset the device 6 seconds above and power o...

Страница 11: ...re using the proper cables Ensure that all other devices connected to the same telephone line as your router e g telephones fax machines analogue modems have a line filter connected between them and t...

Страница 12: ...l repeater hub to the router or directly connecting with PCs However to be sure PCs have an Ethernet interface installed properly prior to connecting to the router device You ought to configure your P...

Страница 13: ...ecting Your Router 1 Connect this router to a LAN Local Area Network and the ADSL telephone ADSL network 2 Power on the device 3 Make sure the Power is lit steadily and that the LAN LED is lit 4 Conne...

Страница 14: ...uring PCs in Windows 7 1 Go to Start Click on Control Panel Then click on Network and Internet 2 When the Network and Sharing Center window pops up select and click on Change adapter settings on the l...

Страница 15: ...ocol Version 4 TCP IPv4 then click Properties 5 In the TCP IPv4 properties window select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons Then click OK...

Страница 16: ...Windows Vista 1 Go to Start Click on Network 2 Then click on Network and Sharing Center at the top bar 3 When the Network and Sharing Center window pops up select and click on Manage network connecti...

Страница 17: ...col Version 4 TCP IPv4 then click Properties 6 In the TCP IPv4 properties window select the Obtain an IP address automatically and Obtain DNS Server address automatically radio but tons Then click OK...

Страница 18: ...a Connection See Figure 3 1 3 In the LAN Area Connection Status window click Properties See Figure 3 2 4 Select Internet Protocol TCP IP and click Properties See Figure 3 3 5 Select the Obtain an IP a...

Страница 19: ...N Connection See Figure 3 5 3 In the LAN Area Connection Status window click Properties See Figure 3 6 4 Select Internet Protocol TCP IP and click Properties See Figure 3 7 5 Select the Obtain an IP a...

Страница 20: ...elect TCP IP NE2000 Compatible or the name of any Network Interface Card NIC in your PC See Figure 3 9 3 Click Properties 4 Select the IP Address tab In this page click the Obtain an IP address automa...

Страница 21: ...ws NT4 0 1 Go to Start Settings Control Panel In the Control Panel double click Network and choose the Protocols tab 2 Select TCP IP Protocol and click Properties See Figure 3 12 3 Select the Obtain a...

Страница 22: ...s 100 LAN and WAN Port Addresses The parameters of LAN and WAN ports are pre set in the factory The default values are shown below LAN Port WAN Port IP address 192 168 1 254 Subnet Mask 255 255 255 0...

Страница 23: ...Service Name and Domain Name System DNS IP address it can be automatically assigned by your ISP when you connect or be set manually PPPoA RFC2364 VPI VCI VC LLC based multiplexing Username Password an...

Страница 24: ...web browser enter the IP address of your router which by default is 192 168 1 254 and click Go a user name and password window prompt will appear The default username and password are admin and admin...

Страница 25: ...rectly to the desired setup page including Status ADSL Status 3G Status EWAN Status IBurst Status ARP Table DHCP Table Routing Table NAT Sessions UPnP Portmap PPTP Status IPSec Status L2TP Status Even...

Страница 26: ...C 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 22 Status ADSL Status This section displays the ADSL overall status which shows a number of helpful information such as DSP firm...

Страница 27: ...strength Network Name The network name that the device is connected to Card Name The name of the 3G card Card Firmware The current firmware for the 3G card Card IMEI the IMEI International Mobile Equ...

Страница 28: ...nfiguration 24 Total Connection Time The cumulative connection time Amount used Show the traffic or hours has been used Billing period The day from which the fee is charged Note Only after you have ch...

Страница 29: ...t 1 as a WAN port to be used to connect to Cable Modems and fiber optic lines This alternative yet faster method to connect to the internet will provide users more flexibility to get online Total TX B...

Страница 30: ...Card Name The name of the card Signal Strength The signal strength bar indicates the current signal strength Current TX Bytes Packets The statistics of data transmission in bytes packets during a call...

Страница 31: ...list of IP addresses of devices on your LAN Local Area Network MAC Address The MAC Media Access Control addresses for each device on your LAN Interface The interface name on the router that this IP A...

Страница 32: ...ask The destination Netmask address Gateway Interface The IP address of the gateway or existing interface that this route will use Cost The number of hops counted as the cost of the route RIP Routing...

Страница 33: ...This section lists all current NAT sessions between interface of types external WAN and internal LAN UPnP Portmap The section lists all port mapping established using UPnP Universal Plug and Play See...

Страница 34: ...l is currently connected Call Connected If the Call for this VPN entry is currently connected Encryption The encryption type used for this VPN connection IPSec Status This shows details of your config...

Страница 35: ...particular L2TP connection in your VPN configuration Type The type of connection dial in dial out Enable Whether the connection is currently enabled Active Whether the connection is currently active...

Страница 36: ...when you have enabled Intrusion or Blocking Logging in the Configuration Firewall section of the interface Please see the Firewall section of this manual for more details on how to enable Firewall lo...

Страница 37: ...l Router Chapter 4 Configuration 33 Error Log Any errors encountered by the router e g invalid names given to entries are logged to this window IDS Log Any records about hacker attacks and intrusion a...

Страница 38: ...hapter 4 Configuration 34 Diagnostic It tests the connection to computer s which is connected to LAN ports and also the WAN Internet connection If PING www google com is shown FAIL and the rest is PAS...

Страница 39: ...DSL from Connect Mode drop down menu and click Continue 2 If your ADSL line is not ready you need to check your ADSL line has been set or not 3 If your ADSL line is ready the screen appears ADSL Line...

Страница 40: ...There are ADSL and 3G Encapsulation Select the encapsulation mode The default mode is PPPoE VPI VCI Enter the VPI and VCI information provided by your ISP Username Enter the username provided by your...

Страница 41: ...ce in order to get connected to your network ESSID Broadcast It is function in which transmits its ESSID to the air so that when wireless client searches for a network router can then be discovered an...

Страница 42: ...and DHCP Server Bridge Interface You can setup member ports for each VLAN group under Bridge Interface section From the example two VLAN groups need to be created Ethernet P1 and P2 Port 1 2 Ethernet1...

Страница 43: ...P Address Specify an IP address on this virtual interface Netmask Specify a subnet mask on this virtual interface Security Interface Specify the firewall setting on this virtual interface Internal The...

Страница 44: ...MAC address and information prefix advertised by routers Routers advertise prefixes that identify the subnet s associated with a link while hosts generate an interface identifier that uniquely identi...

Страница 45: ...Make sure your PC s MAC is listed Blocked check to prevent unwanted device accessing your LAN by insert the MAC Address in the space provided or click Make sure your PC s MAC is not listed The maximum...

Страница 46: ...ault wlan ap to a unique ID name to the AP which is already built in to the router s wireless interface It is case sensitive and must not excess 32 characters Make sure your wireless clients have exac...

Страница 47: ...ts according to 4 categories Voice Video Best Efforts and Background Enable Click to activate WMM feature Disable Click to deactivate WMM feature Wireless Distribution System WDS It is a wireless acce...

Страница 48: ...SK and WPA2 PSK The WPA PSK adapts the TKIP Temporal Key Integrity Protocol encrypted algorithms which incorporates Message Integrity Code MIC to provide protection against hackers The WPA2 PSK adapts...

Страница 49: ...8 You can input the same string in both the AP and Client card settings to generate the same WEP keys Please note that you do not have to enter Key 1 4 as below when the Passphrase is enabled Passphra...

Страница 50: ...MAC is listed Blocked To prevent unwanted device accessing the LAN by insert the MAC Address in the space provided or click Make sure your PC s MAC is not listed The maximum client is 16 The MAC addre...

Страница 51: ...i Protected Setup feature is a standard protocol created by Wi Fi Alliance This feature greatly simplifies the steps needed to create a Wi Fi network for a residential or an office setting WPS support...

Страница 52: ...n the client s Pin e g 16837546 2 Enter the Enrollee s PIN number and then press Start 3 Launch the wireless client s WPS utility eg Ralink Utility Set the Configure Mode as Enrollee press the WPS but...

Страница 53: ...lion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 49 4 The client s SSID and security setting will now be configured to match the SSID and security setting of the regist...

Страница 54: ...Start 2 Jot down the WPS PIN e g 25879810 3 Launch the wireless client s WPS utility e g Ralink Utility Set the Config Mode as Registrar Enter the PIN number in the PIN Code column then choose the cor...

Страница 55: ...Billion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 51 setting of the registrar...

Страница 56: ...apter 4 Configuration 52 5 Now to make sure that the setup is correctly done cross check to see if the SSID and the security setting of the registrar setting match with the parameters found on both Wi...

Страница 57: ...Billion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 53...

Страница 58: ...on 54 PBC Method 1 Press the PBC button of the AP 2 Launch the wireless client s WPS Utility eg Ralink Utility Set the Config Mode as Enrollee Then press the WPS button and choose the correct AP eg wl...

Страница 59: ...uter Chapter 4 Configuration 55 3 When the PBC button is pushed a wireless communication will be established between your router and the PC The client s SSID and security setting will now be configure...

Страница 60: ...s Vista WCN 1 Jot down the AP PIN from the Web eg 25879810 2 In your Vista operating system access the Control Panel page then select Network and Internet View Network Computers and Devices Double cli...

Страница 61: ...1n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 57 4 Enter the passphrase then click Next 5 When you have come to this step you will have completed the Wi Fi network setup using the built in W...

Страница 62: ...Billion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 58...

Страница 63: ...devices and you can configure different types to solve compatibility issues The default is Auto which users should keep unless there are specific problems with PCs not being able to access your LAN I...

Страница 64: ...u can then configure parameters of the DHCP Server including the IP pool starting IP address and ending IP address to be allocated to PCs on your network lease time for each assigned IP address the pe...

Страница 65: ...Here are the items within the WAN section WAN Interface WAN Profile and ADSL Mode WAN Interface The factory default has the Connection Mode as ADSL and the Protocol as PPPoE Main Port Dual WAN In dual...

Страница 66: ...on to change to the backup port is determined by Probe Cycle duration multiplied by connection Decision amount e g From the image above it will be 60 seconds multiplied by 5 consecutive fails Failback...

Страница 67: ...ervice Name This item is for identification purposes If it is required your ISP provides you the information Maximum input is 15 alphanumeric characters NAT The NAT Network Address Translation feature...

Страница 68: ...he optimal MTU size automatically Default is enabled MAC Spoofing This option is required by some service providers You must fill in the MAC address that specify by service provider when it is require...

Страница 69: ...anumeric characters NAT The NAT Network Address Translation feature allows multiple users to access the Internet through a single IP account sharing the single IP address If users on your LAN have pub...

Страница 70: ...er the optimal MTU size automatically Default is enabled Obtain DNS A Domain Name System DNS contains a mapping table for domain name and IP addresses DNS helps to find the IP address for the specific...

Страница 71: ...will attempt to send through the interface IP 0 0 0 0 Auto Your WAN IP address Leave this at 0 0 0 0 to obtain automatically an IP address from your ISP Netmask The default is 0 0 0 0 User can change...

Страница 72: ...DNS similar as IPv4 IPv6 Address Check Automatic to obtain IPv6 address automatically If not please type the IP and the prefix length for the IPv6 address from your ISP Gateway Type the gateway to whi...

Страница 73: ...excluding media specific headers that IP will attempt to send through the interface IP 0 0 0 0 Auto Your WAN IP address Leave this at 0 0 0 0 to obtain automatically an IP address from your ISP Netma...

Страница 74: ...ptable Frame Type Specify which kind of traffic goes through this connection all traffic or only VLAN tagged Filter Type Specify the type of ethernet filtering performed by the named bridge interface...

Страница 75: ...Address Translation feature allows multiple users to access the Internet through a single IP account sharing the single IP address If users on your LAN have public IP addresses and can access the Inte...

Страница 76: ...to enable RIP function TCP MSS Clamp This option helps to discover the optimal MTU size automatically Default is enabled Obtain DNS A Domain Name System DNS contains a mapping table for domain name a...

Страница 77: ...ingle IP address If PCs in LAN should share the WAN IP for WAN access please enable NAT If users on your LAN have public IP addresses and can access the Internet directly the NAT function can be disab...

Страница 78: ...s supplied by your ISP NAT The NAT Network Address Translation feature allows multiple users to access the Internet through a single IP account sharing the single IP address If PCs in LAN should share...

Страница 79: ...to access the Internet Idle Timeout Auto disconnect the router when there is no activity on the line for a predetermined period of time MTU Maximum Transmission Unit The size of the largest datagram e...

Страница 80: ...rimary and Secondary fields Pure Bridge Profile Port Select the profile port as EWAN Protocol Select Pure Bridge Acceptable Frame Type Specify which kind of traffic goes through this connection all tr...

Страница 81: ...PA UMTS EDGE GPRS or GSM Internet connection makes downstream rates of to 14 4 Mbps Profile Port Select the profile port as 3G iBurst Enable or Disable the router s iBurst functionality Usage Allowanc...

Страница 82: ...rs use the APN internet for their portal The default value of APN is internet Username Enter the username provided by your service provider Password Enter the password provided by your service provide...

Страница 83: ...ame time Enabling Connect on Demand will give you an option of Idle Timeout Idle Timeout Auto disconnect the connection when there is no activity on this call for a predetermined period of time The de...

Страница 84: ...synchronization problem Profile Type Please keep the factory settings unless ADSL is detected as the symptom of low link rate or unstable problems You may need to change the profile setting to reach t...

Страница 85: ...he SNTP server you have specified If you prefer to specify an SNTP server other than those in the list simply enter its IP address as shown above Your ISP may provide an SNTP server for you to use Day...

Страница 86: ...ou wish to permanently enable remote access choose a time period of 0 minute Firmware Upgrade Your router s firmware is the software that allows it to operate and provides all its functionality Think...

Страница 87: ...making any significant changes to your router s configuration Press Backup to select where on your local PC to save the settings file You may also change the name of the file when saving if you wish...

Страница 88: ...er using the factory default settings for example after a firmware upgrade or if you have saved an incorrect configuration select Factory Default Settings to reset to factory default settings You may...

Страница 89: ...onfiguration interface Once you have clicked on Edit you are shown the following options You can change the user s password whether their account is active and valid as well as add a comment to each u...

Страница 90: ...you create a user account you check Valid to fill in the blank with User Comment Password and Confirm Password Later click Add button to add your new user account For deleting the user account you cho...

Страница 91: ...e arisen so that the server can be properly maintained SMTP Server Enter the SMTP server that you would like to use for sending emails Username Enter the username of your email account to be used by t...

Страница 92: ...natural firewall This masks LAN users IP addresses which is invisible to outside users on the Internet making it much more difficult for a hacker to target a machine on your network This natural fire...

Страница 93: ...are displayed in Port Filters of Packet Filter Select either High Medium or Low security level to enable the Firewall The only difference between these three security levels is the preset port filter...

Страница 94: ...tion is only available when the Firewall is enabled and one of these four security levels is chosen All blocked High Medium and Low The preset port filter rules in the Packet Filter must modify accord...

Страница 95: ...NO YES NO YES NO YES DNS 53 TCP 6 53 53 NO YES NO YES NO YES FTP 21 TCP 6 21 21 NO YES NO YES NO NO Telnet 23 TCP 6 23 23 NO YES NO YES NO NO SMTP 25 TCP 6 25 25 NO YES NO YES NO YES POP3 110 TCP 6 1...

Страница 96: ...d to allow or block traffic to from particular IP address es Selecting the Subnet Mask of the IP address range you wish to allow block the traffic to or form set IP address and Subnet Mask to 0 0 0 0...

Страница 97: ...ing Select drop down menu to select existing predefined rules IP version select IPv4 or IPv6 Time Schedule It is self defined time period You may specify a time schedule for your prioritization policy...

Страница 98: ...high medium or low security level To setup a web server located on the local network when the firewall is enabled you have to configure the Port Filters setting for HTTP As you can see from the diagr...

Страница 99: ...this case for the low security level shown below Note You may click Edit the predefined rule instead of Delete it This is an example to show to how you add a filter on your own 2 Choose the radio butt...

Страница 100: ...Predefined Port Filter Source Port 0 65535 I allow all ports to connect with the application Redirect Port 80 80 This is Port defined for HTTP Inbound Outbound Allow 4 The new port filter rule for HTT...

Страница 101: ...on This is the duration for blocking Smurf attacks Default value is 600 seconds Scan Attack Block Duration This is the duration for blocking hosts that attempt a possible Scan attack Scan attack types...

Страница 102: ...7 Src IP Scan Yes Yes CharGen Scan UDP Dst Port CharGen 19 Src IP Scan Yes Yes X mas Tree Scan TCP Flag X mas Src IP Scan Yes Yes IMAP SYN FIN Scan TCP Flag SYN FIN DstPort IMAP 143 SrcPort 0 or 65535...

Страница 103: ...es will be monitoring and checking all hours of the day TimeSlot1 TimeSlot16 It is self defined time period You may specify the time period to check the URL filter rules i e during working hours For s...

Страница 104: ...f yes the connection attempt is sent to the remote web server 2 If not check if it is listed in the forbidden list If yes then the connection attempt will be dropped 3 If the packet does not match eit...

Страница 105: ...pt for Trusted Domain BUT not its IP address If this is the situation Block surfing by IP address function can be handy and helpful to Andy Now Andy can prevent Bobby from accessing other sites Restri...

Страница 106: ...ing The default is set to Disabled Disabled Instant Message blocking is not triggered No action will be performed Always On Action is enabled TimeSlot1 TimeSlot16 This is the self defined time period...

Страница 107: ...ll Router Chapter 4 Configuration 103 Firewall Log Firewall Log display log information of any unexpected action with your firewall settings Check the Enable box to activate the logs Log information c...

Страница 108: ...Note When the Active checkbox is checked the function of Edit and Delete will not be available Connection Type It informs your PPTP tunnel connection condition Type This refers to your router operate...

Страница 109: ...s at different periods to ensure that an intruder has not replaced the client Data Encryption Data sent over the VPN connection can be encrypted by an MPPE algorithm Default is Auto so that this setti...

Страница 110: ...nfiguration 106 Example Configuring a Remote Access PPTP VPN Dial out Connection A company s office establishes a PPTP VPN connection with a file server located at a separate location The router is in...

Страница 111: ...N_PPTP Given name of PPTP connection 2 Connection Type Remote Access Select Remote Access from Connection Type drop down menu Type Dial out Select Dial out from Type drop down menu 3 IP Address or Dom...

Страница 112: ...tication type to use or else manually specify CHAP Challenge Handshake Authentication Protocol or PAP Password Authentication Protocol if you know which type the server is using when acting as a clien...

Страница 113: ...PPTP LAN to LAN VPN Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet The routers are installed in the head office and branc...

Страница 114: ...lect LAN to LAN from Connection Type drop down menu Type Dial in Select Dial in from Type drop down menu 3 IP Address 192 168 1 200 IP address assigned to branch office network Peer Network IP 192 168...

Страница 115: ...onnection 2 Connection Type LAN to LAN Select LAN to LAN from Connection Type drop down menu Type Dial out Select Dial out from Type drop down menu 3 IP Address or Domain name 69 121 1 33 IP address o...

Страница 116: ...ice versa Note When the Active checkbox is checked the function of Edit and Delete will not be available Name This is a given name of the connection Local Subnet Displays IP address and subnet of the...

Страница 117: ...et starting from 192 168 1 1 i e 192 168 1 1 through to 192 168 1 254 IP Range The IP address range of the local network For example IP 192 168 1 1 end IP 192 168 1 10 Remote Secure Gateway Address or...

Страница 118: ...istant to brute force attacks than MD5 however it is slower e MD5 A one way hashing algorithm that produces a 128 bit hash f SHA1 A one way hashing algorithm that produces a 160 bit hash Encryption Se...

Страница 119: ...be noted it must be enabled on the both sites PING to the IP It is able to IP Ping the remote PC with the specified IP address and alert when the connection fails Once alter message is received Route...

Страница 120: ...Local Router IP 69 121 1 30 69 121 1 3 Remote Network ID 192 168 1 0 24 192 168 0 0 24 Remote Router IP 69 1 121 3 69 1 121 30 IKE Pre shared Key 12345678 12345678 VPN Connection Type Tunnel mode Tun...

Страница 121: ...t from Local Network drop down menu IP Address 192 168 1 0 2 Netmask 255 255 255 0 Head office network 3 Remote Secure Gateway IP or Hostname 69 121 1 30 IP address of the branch office router in WAN...

Страница 122: ...ubnet from Local Network drop down menu IP Address 192 168 0 0 2 Netmask 255 255 255 0 Branch office network 3 Remote Secure Gateway IP or Hostname 69 121 1 3 IP address of the head office router in W...

Страница 123: ...Billion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 119 Example Configuring a IPSec Host to LAN VPN Connection...

Страница 124: ...t Subnet from Network drop down menu IP Address 192 168 1 0 2 Netmask 255 255 255 0 Head office network 3 Remote Secure Gateway IP or Hostname 69 121 1 30 Remote worker s IP address Remote Network Sin...

Страница 125: ...eate a new VPN connection account Active This function activates or deactivates the L2TP connection Check Active checkbox if you want the protocol of tunnel to be activated and vice versa Note When th...

Страница 126: ...name Password If you are a Dial Out user client enter the password provided by your Host If you are a Dial In user server enter your own password Authentication Type Default is Auto if you want the ro...

Страница 127: ...s it is a tunnel only with no encryption 3DES and AES are more powerful but increase latency DES Stands for Data Encryption Standard it uses 56 bits as an encryption method 3DES Stands for Triple Data...

Страница 128: ...mple Configuring a L2TP VPN Remote Access Dial in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft s VPN Adapter included with Windows XP 2000 ME etc T...

Страница 129: ...ype Remote Access Select Remote Access from Connection Type drop down menu Type Dial in Select Dial in from Type drop down menu 3 IP Address 192 168 1 200 An assigned IP address for the remote worker...

Страница 130: ...nfiguration 126 Example Configuring a Remote Access L2TP VPN Dial out Connection A company s office establishes a L2TP VPN connection with a file server located at a separate location The router is in...

Страница 131: ...m Connection Type drop down menu Type Dial out Select Dial out from Type drop down menu 3 IP Address or Hostname 69 121 1 33 An Dialed server IP Username username 4 Password 123456 A given username pa...

Страница 132: ...wish to connection to k When configuring your router as a server to accept incoming connections enter the Private IP Address Assigned to Dial in User address Peer Network IP Enter Peer network IP add...

Страница 133: ...ne way hashing algorithm that produces a 160 bit hash Encryption Select the encryption method from the pull down menu There are four options DES 3DES AES and NULL NULL means it is a tunnel only with n...

Страница 134: ...shes a L2TP VPN tunnel with head office to connect two private networks over the Internet The routers are installed in the head office and branch office accordingly Both office LAN networks MUST in di...

Страница 135: ...N to LAN from Connection Type drop down menu Type Dial in Select Dial in from Type drop down menu 3 IP Address 192 168 1 200 IP address assigned to branch office network Peer Network IP 192 168 0 0 4...

Страница 136: ...L2TP connection 2 Connection Type LAN to LAN Select LAN to LAN from drop down menu Type Dial out Select Dial out from drop down menu 3 IP Address or Hostname 69 121 1 33 IP address of the head office...

Страница 137: ...To delete the application you can choose Delete option and then click Edit Delete Name User define description to identify this new policy application Time Schedule Scheduling your prioritization poli...

Страница 138: ...ng Table Wireless ADSL Router Standard DSCP Disabled None Best Effort Best Effort 000000 Premium Express Forwarding 101110 Gold service L Class 1 Gold 001010 Gold service M Class 1 Silver 001100 Gold...

Страница 139: ...ion to identify this new policy name Time Schedule Scheduling your prioritization policy Refer to Time Schedule for more information Protocol The name of supported protocol Rate Limit To limit the spe...

Страница 140: ...identify this new policy application Time Schedule Scheduling your prioritization policy Refer to Time Schedule for more information Protocol The name of supported protocol Rate Limit To limit the sp...

Страница 141: ...r Chapter 4 Configuration 137 Example QoS for your Network Connection Diagram Information and Settings Upstream 928 kbps Downstream 8 Mbps VoIP User 192 168 1 1 Normal Users 192 168 1 2 192 168 1 5 Re...

Страница 142: ...n BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 138 0 100 200 300 400 500 kbps VoIP VPN HIGH Others NORMAL Restricted LOW Throughput VoIP VPN HIGH Others NORMAL Restricte...

Страница 143: ...st be sent out smoothly without any dropping Set priority as high level for preventing any other applications to saturate the bandwidth Voice application Voice is latency sensitive application Most Vo...

Страница 144: ...ation 140 Restricted Application Some of companies will setup FTP server for customer downloading or home user sharing their files by using FTP With above settings that help to limit utilization of up...

Страница 145: ...n the same level Upstream 928kbps 29 32kbps Mission critical Application 192kbps 6 32kbps Voice Application 128kbps 4 32kbps Restricted Application 160kbps 5 32kbps Other Applications 448kbps 14 32kbp...

Страница 146: ...and P2P file sharing applications and are using NAT Network Address Translation then you will usually need to configure your router to forward these incoming connection attempts using specific ports t...

Страница 147: ...n Users define description to identify this entry or click drop down menu to select existing predefined rules 20 predefined rules are available Application Protocol and External Redirect Ports will be...

Страница 148: ...have disabled the NAT option in the WAN ISP section the Virtual Server function will hence be invalid If the DHCP server option is enabled you have to be very careful in assigning the IP addresses of...

Страница 149: ...other Virtual Server entries Cautious This Local computer exposing to the Internet may face varies of security risks Go to Configuration Virtual Server Edit DMZ Host o Enabled It activates your DMZ f...

Страница 150: ...s given by your ISP If your ISP has provided this information you may insert it here Otherwise use IP Range method IP Range The IP address range of your public WAN IP addresses For example IP 192 168...

Страница 151: ...IP Define a public WAN IP address for this Application to use This Global IP address must be defined in the Global IP Address External Port The Port number on the Remote WAN side used when accessing...

Страница 152: ...r further information please see IANA s website at http www iana org assignments port numbers For help on determining which private port numbers are used by common applications on this list please see...

Страница 153: ...en up remotely by a network message Select Select MAC address of the computer that you want to wake up or turn on remotely Add After selecting click Add then you can perform the Wake up action Edit De...

Страница 154: ...gh Sunday to restrict or allowing the usage of the Internet by users or applications This Time Schedule correlates closely with router s time since router does not have a real time clock on board it u...

Страница 155: ...s the index of the time slot Name A user define description to identify this time portfolio Day in a week The default is set from Monday through Friday You may specify the days for the schedule to be...

Страница 156: ...VLAN Bridge Static Route Go to Configuration Advanced Static Route Destination This is the destination subnet IP address Netmask Subnet mask of the destination IP addresses based on above destination...

Страница 157: ...our ISP You will first need to register and establish an account with the Dynamic DNS provider using their website for example http www dyndns org There are more than 5 DDNS services supported Dynamic...

Страница 158: ...t Name Give a name for it The Host Name cannot be used with one word only There are two words should be connected with a at least Example Host Name homegateway Incorrect Host Name home gateway or my h...

Страница 159: ...the Internet Connection Sharing client from Windows XP in order to support UPnP Windows 2000 does not support UPnP Disable Check to disable the router s UPnP functionality Enable Check to enable the r...

Страница 160: ...fine granularity for remote monitoring Traps supported Cold Start Authentication Failure The following MIBs are supported From RFC 1213 MIB II System group Interfaces group Address Translation group I...

Страница 161: ...lion BiPAC 7402NX L 802 11n 3G ADSL2 VPN Firewall Router Chapter 4 Configuration 157 From RFC1573 IfMIB ifMIBObjects Group From RFC1695 atmMIB atmMIBObjects From RFC 1907 SNMPv2 only snmpSetSerialNo O...

Страница 162: ...protocol is a component if the Internet Protocol version 6 IPv6 suite MLD is used by IPv6 to discover multicast listeners on a directly attached link much as IGMP used in IPv4 The protocol is embedde...

Страница 163: ...the member Edit Edit your member ports in selected VLAN group Create VLAN To create another VLAN group Logout To exit the router s web interface choose Logout Please ensure that you have saved the con...

Страница 164: ...he router should be on Check that your VPI VCI encapsulation type and type of multiplexing settings are the same as those provided by your ISP Reboot the router GE If you still have problems you may n...

Страница 165: ...erring to the Troubleshooting section in the User s Manual If you cannot resolve the problem with the Troubleshooting chapter please contact the dealer where you purchased this product Contact Billion...

Результаты поиска

Содержание BiPAC 7402NX

Отзывы:

Похожие инструкции для BiPAC 7402NX

Бренды по названию

Популярные бренды

Billion BiPAC 7402NX, Руководство пользователя

Результаты поиска

Содержание BiPAC 7402NX

Отзывы:

Похожие инструкции для BiPAC 7402NX

Бренды по названию

Популярные бренды