Amit BDE702-001 User manual

User Manual
V0.91_20140227
BDE702-001
BDE761-001
BDE771-001
Business Security Gateway

Business Security Gateway
TABLE OF CONTENTS
CHAPTER 1 INTRODUCTION ...................................................................................................6
1.1 CONTENTS LIST .............................................................................................................................................6
1.2 HARDWARE INSTALLATION ............................................................................................................................8
1.2.1 ATTENTION.............................................................................................................................. 8
1.2.2 SYSTEM REQUIREMENTS...................................................................................................... 8
1.2.3 Hardware Configuration ............................................................................................................ 9
1.2.4 LED Indicators......................................................................................................................... 11
CHAPTER 2 GETTING STARTED ...........................................................................................13
2.1 CONNECT YOUR DEVICE .............................................................................................................................13
2.2 EASY SETUP BY CONFIGURING WEB UI ......................................................................................................13
CHAPTER 3 MAKING CONFIGURATIONS ..........................................................................17
3.1 BASIC NETWORK .........................................................................................................................................19
3.1.1 WAN Setup.............................................................................................................................. 19
3.1.1.1 Physical Interface..........................................................................................................................20
3.1.1.2 Network Setup ..............................................................................................................................21
3.1.1.2.1 Ethernet WAN..........................................................................................................................................22
3.1.1.2.2 Wireless WAN – 3G/4G...........................................................................................................................31
3.1.1.3 Load Balance................................................................................................................................33
3.1.2 LAN & VLAN Setup................................................................................................................. 36
3.1.2.1 Network Setting.............................................................................................................................37
3.1.2.2 LAN & VLAN .................................................................................................................................38
3.1.2.2.1 Port-Based VLAN....................................................................................................................................38
3.1.2.2.2 Tag-Based VLAN.....................................................................................................................................40
3.1.2.3 DHCP Server ................................................................................................................................41
3.1.3 WiFi Setup............................................................................................................................... 44
3.1.3.1 WiFi Configuration ........................................................................................................................44
3.1.3.1.1 AP Router Mode.......................................................................................................................................45
3.1.3.1.2 WDS Hybrid Mode ..................................................................................................................................49
3.1.3.1.3 WDS Only Mode......................................................................................................................................51
3.1.3.2 Wireless Client List........................................................................................................................53
3.1.3.3 Advanced Configuration................................................................................................................53
3.1.4 IPv6 Setup............................................................................................................................... 55
3.1.4.1 Static IPv6.....................................................................................................................................55
3.1.4.2 DHCP v6.......................................................................................................................................57
3.1.4.3 PPPoE ..........................................................................................................................................58
BDE702 / BDE761 / BDE771 User Manual 2

Business Security Gateway
3.1.4.4 6 to 4.............................................................................................................................................59
3.1.4.5 IPv6 in IPv4 Tunnel.......................................................................................................................60
3.1.5 NAT Setup............................................................................................................................... 61
3.1.5.1 Virtual Server ................................................................................................................................61
3.1.5.2 Virtual Computers .........................................................................................................................62
3.1.5.3 Special AP ....................................................................................................................................62
3.1.5.4NAT Loopback ..............................................................................................................................63
3.1.5.5 DMZ..............................................................................................................................................64
3.1.6 Routing Setup.......................................................................................................................... 65
3.1.6.1 Static Routing................................................................................................................................65
3.1.6.2 Dynamic Routing...........................................................................................................................66
3.1.6.3 Routing Information.......................................................................................................................68
3.1.7 Client/Server/Proxy ................................................................................................................. 69
3.1.7.1 Dynamic DNS ...............................................................................................................................69
3.2 ADVANCED NETWORK.................................................................................................................................71
3.2.1 Firewall.................................................................................................................................... 71
3.2.1.1 Packet Filters ................................................................................................................................71
3.2.1.2 URL Blocking................................................................................................................................73
3.2.1.3 Web Content Filter........................................................................................................................75
3.2.1.4 MAC Control .................................................................................................................................76
3.2.1.5 L7 Filter.........................................................................................................................................77
3.2.1.6 Access Control..............................................................................................................................78
3.2.1.7 IPS................................................................................................................................................78
3.2.1.8 Others ...........................................................................................................................................79
3.2.2 QoS (Quality of Service).......................................................................................................... 80
3.2.2.1 QoS Configuration ........................................................................................................................80
3.2.2.2 Rule-based QoS ...........................................................................................................................81
3.2.2.2.1 Creating a QoS Rule based on IP Grouping .............................................................................................82
3.2.2.2.2 Creating a QoS Rule based on MAC Grouping........................................................................................86
3.2.3 VPN Setup............................................................................................................................... 88
3.2.3.1 IPSec ............................................................................................................................................88
3.2.3.1.1 IPSec VPN Tunnel Scenarios...................................................................................................................88
3.2.3.1.2 IPSec Configuration.................................................................................................................................90
3.2.3.1.3 Tunnel List & Status.................................................................................................................................91
3.2.3.1.4 Tunnel Configuration ...............................................................................................................................91
3.2.3.1.5 Local & Remote Configuration................................................................................................................92
3.2.3.1.6 Authentication..........................................................................................................................................92
3.2.3.1.7 IKE Phase.................................................................................................................................................93
3.2.3.1.8 IKE Proposal Definition...........................................................................................................................94
BDE702 / BDE761 / BDE771 User Manual 3

Business Security Gateway
3.2.3.1.9 IPSec Phase..............................................................................................................................................94
3.2.3.1.10 IPSec Proposal Definition ........................................................................................................................95
3.2.3.1.11 Manual Proposal.......................................................................................................................................95
3.2.3.2 PPTP.............................................................................................................................................96
3.2.3.2.1 PPTP Server .............................................................................................................................................96
3.2.3.2.2 PPTP Client..............................................................................................................................................97
3.2.3.3 L2TP .............................................................................................................................................99
3.2.3.3.1 L2TP Server .............................................................................................................................................99
3.2.3.3.2 L2TP Client............................................................................................................................................101
3.2.3.4 GRE Tunnel ................................................................................................................................102
3.2.3.4.1 GRE Configuration ................................................................................................................................102
3.2.3.4.2 GRE Tunnel Definitions.........................................................................................................................102
3.2.3.4.3 GRE rule Configuration .........................................................................................................................103
3.2.4 Redundancy .......................................................................................................................... 104
3.2.4.1 VRRP..........................................................................................................................................104
3.2.5 System Management ............................................................................................................ 105
3.2.5.1 UPnP...........................................................................................................................................105
3.2.5.2 SNMP..........................................................................................................................................106
3.2.5.3 TR-069........................................................................................................................................108
3.3 SYSTEM .....................................................................................................................................................109
3.3.1 System Information ............................................................................................................... 109
3.3.2 System Status ....................................................................................................................... 110
3.3.2.1 Web Log......................................................................................................................................110
3.3.2.2 Syslog .........................................................................................................................................110
3.3.2.3 Email Alert...................................................................................................................................111
3.3.3 System Tools......................................................................................................................... 111
3.3.3.1 Change Password.......................................................................................................................111
3.3.3.2 FW Upgrade................................................................................................................................112
3.3.3.3 System Time...............................................................................................................................113
3.3.3.4 Others .........................................................................................................................................113
3.3.4 Scheduling............................................................................................................................. 115
3.3.5 MMI........................................................................................................................................ 116
3.3.5.1 Web UI........................................................................................................................................116
CHAPTOR 4TROUBLESHOOTING......................................................................................117
APPENDIX A. LICENSING INFORMATION........................................................................121
BDE702 / BDE761 / BDE771 User Manual 4

Business Security Gateway
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored,
transcribed in an information retrieval system, translated into any language, or transmitted
in any form or by any means, mechanical, magnetic, electronic, optical, photocopying,
manual, or otherwise, without the prior written permission.
Trademarks
All products, company, brand names are trademarks or registered trademarks of their
respective companies. They are used for identification purpose only. Specifications are
subject to be changed without prior notice.
BDE702 / BDE761 / BDE771 User Manual 5

Business Security Gateway
Chapter 1 Introduction
Congratulations on your purchase of this outstanding product: BDE702-001 / BDE761-001
/ BDE771-001 Business Security Gateway.This device is specifically designed for SMB &
SOHO offices, small shops, and chain stores. No matter offices are located at wire
unreachable area, it can connect to Intranet of headquarter instantly via fixed line and / or
cellular network. No bother to apply for expensive leased line in advance. With multiple
WAN load balance and fail-over, it guarantees non-interrupt operation.
By IPSec/PPTP/L2TP VPN tunneling and failover technology, it can establish a secure
non-stop connection with headquarter even IP is changing all the time. Firewall protection
is useful to avoid hackers attacking. With embedded robust security and firewall function,
it’s suitable for remote branch offices to access the corporate database & servers located
in headquarter data center through internet. Besides, this device also provides VoIP
feature to enable secure and cost effective Intranet voice communication through internet.
Instructions for installing and configuring this product can be found in this manual. Before
you install and use this product, please read this manual carefully for fully exploiting the
functions of this product.
1.1 Contents List
Items Description Contents Quantity
1 Device 1pce
2 WiFi Antenna 2pce
(only for wireless product)
3
Power Adapter
1pce
4 RJ45 Cable
1pce
BDE702 / BDE761 / BDE771 User Manual 6

Business Security Gateway
5 CD
1pce
BDE702 / BDE761 / BDE771 User Manual 7

Business Security Gateway
1.2 Hardware Installation
1.2.1 ATTENTION
1.2.2 SYSTEM REQUIREMENTS
Network Requirements
•An Ethernet RG-45 Cable or DSL modem
•3G/4G cellular service subscription
•IEEE 802.11n or 802.11b/g wireless clients
•10/100/1000 Ethernet adapter on PC / NB.
Web-based Configuration Utility
Requirements
Computer with the following:
•Windows®, Macintosh, or Linux-based
operating system
•An installed Ethernet adapter
Browser Requirements:
•Internet Explorer 6.0 or higher
•Chrome 2.0 or higher
•Firefox 3.0 or higher
•Safari 3.0 or higher.
CD Installation Wizard Requirements
Computer with the following:
•Windows®7 / 8, Vista®, or XP with Service
Pack 2
•An installed Ethernet adapter
•CD-ROM drive
Do not use the product in high humidity or high
temperatures.
Only use the power adapter that comes with the
package. Using a different voltage rating power
adaptor may damage the product.
Do not open or repair the case yourself. If the
Product is too hot, turn off the power immediately
and have it repaired at a qualified service center.
Place the Product on a stable surface and avoid
using this product and all accessories outdoors.
Attention
BDE702 / BDE761 / BDE771 User Manual 8

Business Security Gateway
1.2.3 Hardware Configuration
Rear View:
BDE702-001 / BDE761-001
BDE771-001
Auto MDI/MDIX RJ-45 Ports
1~2 x FE WAN to connect
Internet,
4~3 x FE LAN to connect
local devices
WiFi Ant.
(for BDE761)
Receptor
for Power
Adapter
Reset
Button
Power
ON/OFF
Switch
WiFi Ant.
(for BDE761)
Auto MDI/MDIX RJ-45 Ports
1x GE WAN to connect
Internet,
4x GE LAN to connect local
devices
WiFi
Antenna
Receptor
for Power
Adapter
Power
ON/OFF
Switch
WiFi
Antenna
BDE702 / BDE761 / BDE771 User Manual 9

Business Security Gateway
Front View:
BDE702-001 / BDE761-001
BDE771-001
USB
Reset Button
USB
BDE702 / BDE761 / BDE771 User Manual 10

Business Security Gateway
1.2.4 LED Indicators
BDE702-001 / BDE761-001
LED
Description
Power
OFF: Device is powered down.
Orange: Device is booting up.
Green: Device is powered on.
Orange in flash: Device is in recovery mode or abnormal.
WAN
Green: Ethernet connection is established
Green in flash: data packet transferred through WAN
OFF: No Ethernet cable attached or Device not linked
Wi-Fi
(for BDE761)
Green: Wireless Radio is enabled, and on client connected.
Green in flash: data packet transferred.
Green in flash per second during 2min: WPS PBC status
OFF: Wireless Radio is disabled
LAN1 ~ LAN4
Green: Ethernet connection is established
Green
in flash: data packet transferred via Ethernet
OFF: No Ethernet cable attached or Device not linked
BDE702 / BDE761 / BDE771 User Manual 11

Business Security Gateway
BDE771-001
LED
Description
Power
OFF: Device is powered down.
Orange: Device is booting up.
Green: Device is powered on.
Orange in flash: Device is in recovery mode or abnormal.
WAN
Green: Ethernet connection is established
Green in flash: data packet transferred through WAN
OFF: No Ethernet cable attached or Device not linked
USB
OFF: USB 3G/4G connection is not established
Green: USB 3G/4G connection is established
Green in flash: data packet transferred via USB 3G/4G
LAN1 ~ LAN4
Green
: Ethernet connection is established
Green in flash: data packet transferred via Ethernet
OFF: No Ethernet cable attached or Device not linked
Wi-Fi
Green: Wireless Radio is enabled, and on client connected.
Green
in flash: data packet transferred.
Green in flash per second during 2min: WPS PBC status
OFF: Wireless Radio is disabled
BDE702 / BDE761 / BDE771 User Manual 12

Business Security Gateway
Chapter 2 Getting Started
2.1 Connect Your Device
Before you can use this product, you need to connect your PC or NB to this gateway first.
You can connect your PC to one of LAN1~LAN4 ports through an Ethernet cable.
Otherwise, your device can also connect to it through Wi-Fi. The default SSID of this
gateway is “default_2.4g”, and without encryption by default. Your PC or device will get an
IP address automatically after connecting to this gateway.
2.2 Easy Setup by Configuring Web UI
You can browse web UI to configure the device. Firstly you need to launch the Setup
Wizard browser first and then the Setup Wizard will guide you step-by-step to finish the
basic setup process.
Browse to Activate the Setup Wizard
Type in the IP Address (http://192.168.123.254) *
Type the default Username and password
‘admin’ in the System Password and then
click ‘login’ button.
Remark:
* 1. The default LAN IP address of this gateway is 192.168.123.254. If you change it,
you need to type the new IP address.
*2. It’s strongly recommending you to change this login password from default value.
BDE702 / BDE761 / BDE771 User Manual 13

Business Security Gateway
Select your language.
Select “Wizard” for basic settings in a simple way.
Or, you can go to Basic Network / Advanced Network / Applications / System to setup
the configuration by your own selection.
Press “Next” to start the Setup Wizard.
Configure with the Setup Wizard
Step 1
You can change the password of
administrator here.
BDE702 / BDE761 / BDE771 User Manual 14

Business Security Gateway
Step 2
Select Time Zone.
Step 3
You can select Auto detecting WAN type
or setup WAN type manually for the
WAN-1 interface.
Step 4
The system will detect the WAN type if
you choose to let the system detect
automatically for the WAN-1 interface.
Step 5
Type in Host name and ISP registered
MAC address. If you don’t have such
information, you can keep in blank and go
to next page
BDE702 / BDE761 / BDE771 User Manual 15

Business Security Gateway
Step 5-1
Wireless setting. You can change SSID or
channel here, or keep them with default
settings. SSID is the name that you will
see on your PC when doing wireless
network scan.
Step 5-2
Wi-Fi authentication and encryption
settings. It’s strongly recommending you
to add authentication and encryption in
your wireless network to prevent any
unknown Wi-Fi clients connecting to your
wireless network and keep transferred
data secured.
Step 6
Check the information again. If all settings
are correct, please press “Apply Settings”
button to save new settings. Then it will
take 70 seconds to take new settings
effective.
Step 7
Configuration is completed. Press “Finish”
button to close Setup Wizard and go back
to main menu.
BDE702 / BDE761 / BDE771 User Manual 16

Business Security Gateway
Chapter 3 Making Configurations
Whenever you want to configure your network or this device, you can access the
Configuration Menu by opening the web-browser and typing in the IP Address of the
device. The default IP Address is: 192.168.123.254. In the configuration section you may
want to check the connection status of the device, to do Basic or Advanced Network setup
or to check the system status. These task buttons can be easily found in the cover page of
the UI (User Interface).
Enter the default username and password “admin” in the System Password and then
click ‘login’ button.
BDE702 / BDE761 / BDE771 User Manual 17

Business Security Gateway
Afterwards, you can go Wizard, Basic Network, Advanced Network, Application or
System respectively on left hand side of web page.
Note: You can see the Network Status screen below after you logged in.
You can also check status of wired clients at LAN Client List page, Wi-Fi at Wireless
Status page, and other advanced function status at Firewall Status page, VPN Status
page or System Management Status page.
BDE702 / BDE761 / BDE771 User Manual 18

Business Security Gateway
3.1 Basic Network
You can enter Basic Network for WAN, LAN&VLAN, Wireless, IPv6, NAT / Bridging,
Routing, and Client/Server/Proxy settings as the icon here shown
3.1.1 WAN Setup
This device is equipped with two or three WAN Interfaces to support different WAN types
of connections. You can configure one by one to get proper internet connection setup.
USB 3G/4G WAN: The product has one USB port for 3G/4G access, please plug in your
USB 3G/4G modem and follow UI setting to setup.
Ethernet WAN: The product has one or two RJ45 Ethernet WAN port(s). Please plug in
RJ45 cable from your external DSL modem and follow UI setting to setup.
BDE702 / BDE761 / BDE771 User Manual 19

Business Security Gateway
3.1.1.1 Physical Interface
Click on the “Edit” button for each WAN interface and you can get the detail physical
interface settings and then configure the settings as well.
By default, the WAN-1 interface is forced to “Always-on” mode, and operates as the
primary internet connection; the interface WAN-2 / WAN-3 are disabled.
1. Physical Interface: Select the WAN interface from the available list. For this
device, there are “Ethernet 1”, “Ethernet 2” and “3G/4G” items. If you would like
BDE702 / BDE761 / BDE771 User Manual 20