Amit BDG761-0P1 User manual

User Manual
BDG761-0P1
BDG761-0T1
Business Cellular Gateway
FW: 00PH0.1013
UM: V1.2_20140715

Business Cellular Gateway
TABLE OF CONTENTS
CHAPTER 1 INTRODUCTION....................................................................................................................................7
1.1 CONTENTS LIST.....................................................................................................................................................8
1.2 HARDWARE INSTALLATION...................................................................................................................................9
1.2.1 WARNING................................................................................................................................9
1.2.2 SYSTEM REQUIREMENTS.....................................................................................................9
1.2.3 Hardware Configuration..........................................................................................................10
1.2.4 LED Indication........................................................................................................................11
CHAPTER 2 GETTING STARTED ...........................................................................................................................12
2.1 CONNECT YOUR DEVICE ....................................................................................................................................12
2.2 EASY SETUP BY CONFIGURING WEB UI............................................................................................................12
CHAPTER 3 MAKING CONFIGURATIONS..........................................................................................................26
3.1 BASIC NETWORK ................................................................................................................................................27
3.1.1 WAN Setup.............................................................................................................................27
3.1.1.1 Physical Interface................................................................................................................................28
3.1.1.2 Internet Setup ......................................................................................................................................29
3.1.1.2.1 Wireless WAN – 3G/4G.....................................................................................................................30
3.1.1.2.2 Ethernet WAN...................................................................................................................................32
3.1.1.3 Load Balance.......................................................................................................................................39
3.1.2 LAN & VLAN...........................................................................................................................41
3.1.2.1 Ethernet LAN.......................................................................................................................................41
3.1.2.2 VLAN....................................................................................................................................................42
3.1.2.2.1 VLAN Scenarios...............................................................................................................................43
3.1.2.2.2 Port-Based VLAN.............................................................................................................................47
3.1.2.2.3 Tag-Based VLAN..............................................................................................................................49
3.1.3 WiFi Setup..............................................................................................................................50
3.1.3.1 WiFi Configuration...............................................................................................................................51
3.1.3.1.1 AP Router Mode...............................................................................................................................51
3.1.3.1.2 WDS Only Mode..............................................................................................................................55
3.1.3.1.3 WDS Hybrid Mode...........................................................................................................................58
3.1.3.1.4 WPS Setup........................................................................................................................................61
3.1.3.2 Advanced Configuration......................................................................................................................62
3.1.4 IPv6 Setup..............................................................................................................................63
3.1.4.1 Static IPv6............................................................................................................................................63
3.1.4.2 DHCPv6...............................................................................................................................................65
3.1.4.3 PPPoEv6..............................................................................................................................................66
BDG761 User Manual 2

Business Cellular Gateway
3.1.4.4 6 to 4.....................................................................................................................................................67
3.1.4.5 6 in 4.....................................................................................................................................................68
3.1.5 NAT / Bridging........................................................................................................................70
3.1.5.1 Configuration........................................................................................................................................70
3.1.5.2 VirtualServer & Virtual Computer ......................................................................................................70
3.1.5.2.1 Virtual Server....................................................................................................................................70
3.1.5.2.2 Virtual Computer...............................................................................................................................71
3.1.5.3 SpecialAP & ALG ...............................................................................................................................72
3.1.5.3.1 ALG .................................................................................................................................................72
3.1.5.3.2 Special AP ........................................................................................................................................72
3.1.5.4 DMZ......................................................................................................................................................73
3.1.6 Routing Setup.........................................................................................................................74
3.1.6.1 Static Routing.......................................................................................................................................74
3.1.6.2 Dynamic Routing .................................................................................................................................75
3.1.6.3 Routing Information.............................................................................................................................77
3.1.7 Client/Server/Proxy.................................................................................................................77
3.1.7.1 Dynamic DNS......................................................................................................................................77
3.1.7.2 DHCP Server.......................................................................................................................................78
3.2 ADVANCED NETWORK........................................................................................................................................82
3.2.1 Firewall...................................................................................................................................82
3.2.1.1 Configuration........................................................................................................................................82
3.2.1.2 Packet Filters.......................................................................................................................................83
3.2.1.2.1 Configuration....................................................................................................................................83
3.2.1.2.2 Packet Filter List...............................................................................................................................83
3.2.1.2.3 Packet Filter Rule Configuration........................................................................................................84
3.2.1.3 URL Blocking.......................................................................................................................................85
3.2.1.3.1 Configuration....................................................................................................................................86
3.2.1.3.2 URL Blocking Rule List....................................................................................................................86
3.2.1.3.3 URL Blocking Rule Configuration.....................................................................................................87
3.2.1.4 Web Content Filters.............................................................................................................................87
3.2.1.4.1 Configuration....................................................................................................................................88
3.2.1.4.2 Web Content Filter Rule List .............................................................................................................88
3.2.1.4.3 Web Content Filter Configuration......................................................................................................89
3.2.1.5 MAC Control........................................................................................................................................89
3.2.1.5.1 Configuration....................................................................................................................................90
3.2.1.5.2 MAC Control Rule List .....................................................................................................................90
3.2.1.5.3 MAC Control Rule Configuration......................................................................................................91
3.2.1.6 Application Filters................................................................................................................................91
3.2.1.6.1 Configuration....................................................................................................................................92
BDG761 User Manual 3

Business Cellular Gateway
3.2.1.7 IPS........................................................................................................................................................92
3.2.1.8 Options.................................................................................................................................................93
3.2.2 QoS & BWM...........................................................................................................................94
3.2.2.1 Configuration........................................................................................................................................95
3.2.2.2 Rule-based QoS..................................................................................................................................96
3.2.2.2.1 Configuration....................................................................................................................................97
3.2.2.2.2 QoS Rule List ...................................................................................................................................97
3.2.2.2.3 QoS Rule Configuration....................................................................................................................98
3.2.3 VPN Setup............................................................................................................................102
3.2.3.1 IPSec..................................................................................................................................................102
3.2.3.1.1 IPSec VPN Tunnel Scenarios........................................................................................................... 102
3.2.3.1.2 IPSec Configuration ........................................................................................................................104
3.2.3.1.3 Tunnel List & Status........................................................................................................................104
3.2.3.1.4 Tunnel Configuration ......................................................................................................................105
3.2.3.1.5 Local & Remote Configuration........................................................................................................106
3.2.3.1.6 Authentication.................................................................................................................................106
3.2.3.1.7 IKE Phase....................................................................................................................................... 107
3.2.3.1.8 IKE Proposal Definition..................................................................................................................108
3.2.3.1.9 IPSec Phase....................................................................................................................................108
3.2.3.1.10 IPSec Proposal Definition................................................................................................................108
3.2.3.1.11 Manual Proposal ............................................................................................................................. 109
3.2.3.2 PPTP..................................................................................................................................................110
3.2.3.2.1 PPTP / L2TP VPN TunnelScenarios................................................................................................ 110
3.2.3.2.2 PPTP Server Configuration...............................................................................................................111
3.2.3.2.3 PPTP Server Status.......................................................................................................................... 112
3.2.3.2.4 User Account List............................................................................................................................ 112
3.2.3.2.5 User Account Configuration ............................................................................................................ 112
3.2.3.2.6 PPTP Client.................................................................................................................................... 113
3.2.3.2.7 PPTP Client List & Status................................................................................................................ 113
3.2.3.2.8 PPTP Client Configuration .............................................................................................................. 113
3.2.3.3 L2TP...................................................................................................................................................115
3.2.3.3.1 L2TP Server Configuration.............................................................................................................. 115
3.2.3.3.2 L2TP Server Status.......................................................................................................................... 116
3.2.3.3.3 User Account List............................................................................................................................ 117
3.2.3.3.4 User Account Configuration ............................................................................................................ 117
3.2.3.3.5 L2TP Client .................................................................................................................................... 117
3.2.3.3.6 L2TP Client List & Status................................................................................................................ 117
3.2.3.3.7 L2TP Client Configuration .............................................................................................................. 118
3.2.3.4 GRE....................................................................................................................................................119
BDG761 User Manual 4

Business Cellular Gateway
3.2.3.4.1 GRE VPN Tunnel Scenario.............................................................................................................. 119
3.2.3.4.2 GRE Configuration .........................................................................................................................120
3.2.3.4.3 GRE Tunnel Definitions..................................................................................................................120
3.2.3.4.4 GRE rule Configuration...................................................................................................................120
3.2.4 Redundancy.........................................................................................................................121
3.2.4.1 VRRP.................................................................................................................................................121
3.2.5 System Management............................................................................................................123
3.2.5.1 TR-069 ...............................................................................................................................................123
3.2.5.2 SNMP.................................................................................................................................................123
3.2.5.3 Telnet with CLI...................................................................................................................................125
3.2.5.4 UPnP..................................................................................................................................................125
3.3 SYSTEM .............................................................................................................................................................126
3.3.1 System Related....................................................................................................................127
3.3.1.1 Change Password.............................................................................................................................127
3.3.1.2 SystemInformation............................................................................................................................128
3.3.1.3 System Status....................................................................................................................................128
3.3.1.4 SystemTools.....................................................................................................................................129
3.3.2 Scheduling............................................................................................................................132
3.3.3 MMI......................................................................................................................................133
3.3.3.1 Web UI...............................................................................................................................................133
CHAPTOR 4TROUBLESHOOTING......................................................................................................................134
APPENDIXA. LICENSING INFORMATION.............................................................................................................138
BDG761 User Manual 5

Business Cellular Gateway
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored,
transcribed in an information retrieval system, translated into any language, or transmitted
in any form or by any means, mechanical, magnetic, electronic, optical, photocopying,
manual, or otherwise, without the prior written permission.
Trademarks
All products, company, brand names are trademarks or registered trademarks of their
respective companies. They are used for identification purpose only. Specifications are
subject to be changed without prior notice.
BDG761 User Manual 6

Business Cellular Gateway
Chapter 1 Introduction
Congratulations on your purchase of this outstanding product: Business Cellular Gateway.
This device is specifically designed for SMB mobile office. No matter offices are located at
wire unreachable area or on the move, it can connect to Intranet of headquarter instantly.
No bother to apply for expensive leased line in advance. Combing with WiFi LAN access
and NAT, it really becomes an on-the-move hotspot. With multiple wireless WAN failover,
it guarantees non-interrupt operation even no fixed line is available. By Dynamic VPN and
failover technology, it can establish a secure non-stop connection with headquarter even
IP is changing all the time. Built-in mobile application such as SMS and USSD is
convenient for management. Firewall protection is useful to avoid hackers’ attacking. With
embedded robust security and firewall function, it’s suitable for finance networking
requirement, like ATM and vending machine. Overall speaking, this cellular gateway is an
integrated access device, and especially designed for mobile office, mobile shop,
temporary group, branch office, ATM, Kiosk, and different kinds of vending machine.
BDG761 User Manual 7

Business Cellular Gateway
1.1 Contents List
Items Description Contents Quantity
1 Business Cellular
Gateway
1pcs
2 3G/4G Antenna 2pcs
3 WiFi Antenna 2pcs
4 Power Adapter 1pcs
5 RJ45 Cable 1pcs
6 CD 1pcs
BDG761 User Manual 8

Business Cellular Gateway
1.2 Hardware Installation
1.2.1 WARNING
1.2.2 SYSTEM REQUIREMENTS
Network Requirements
•An Ethernet RJ45 cable or DSL modem
•3G or LTE cellular service subscription
•IEEE 802.11n or 802.11b/g wireless clients
•10/100 Ethernet adapter on PC / NB
Web-based Configuration Utility
Requirements
Computer with the following:
•Windows®, Macintosh, orLinux-based
operating system
•An installed Ethernet adapter
Browser Requirements:
•Internet Explorer 6.0 or higher
•Chrome 2.0 or higher
•Firefox 3.0 or higher
•Safari 3.0 or higher
CD Installation Wizard Requirements
Computer with the following:
•Windows®7 / 8, Vista®, or XP with Service
Pack 2
•An installed Ethernet adapter
•CD-ROM drive
Do not use the product in high humidity or high
temperatures.
Only use the power adapter that comes with the
package. Using a different voltage rating power
adaptor is dangerous and may damage the product.
Do not open or repair the case yourself. If the
product is too hot, turn off the power immediately
and have it repaired at a qualified service center.
Place the product on a stable surface and avoid
using this product and all accessories outdoors.
Attention
BDG761 User Manual 9

Business Cellular Gateway
1.2.3 Hardware Configuration
Rear View:
BDG761-0P1 / BDG761-0T1
Front View:
BDG761-0P1 / BDG761-0T1
Auto MDI/MDIX RJ-45 Ports
1x FE WAN to connect Internet,
4x FE LAN to connect local
Reserved
Console Port
WiFi
Antenna Receptor
for Power
Adapter
Reset
Button
Power
ON/OFF
Switch
USIM/SIM Slot3G/4G Antenna
WiFi
Antenna
3G/4G Antenna
BDG761 User Manual 10

Business Cellular Gateway
1.2.4 LED Indication
BDG761-0P1 / BDG761-0T1
LED
Icon
Description
3G/4G Signal
Strength
OFF: no 3G/4G signal, or not in 3G/4G mode
Red and steady on: Connected. Signal strength is in weak
level
Red in fast flash: roaming alert, and 3G/4G signal strength
is in weak level
Amber and steady on: Connected. Signal strength in middle
level
Amber in fast flash: roaming alert, and 3G/4G signal
strength is in middle level
Green and steady on: Connected. Signal strength in strong
level
Green in fast flash: roaming alert, and 3G/4G
signal strength
is in strong level
WAN
OFF: No Ethernet cable attached
Green: Ethernet connection is established
Green in flash: data packet transferred via Ethernet
WiFi
OFF: Wireless Radio is disabled
Green and steady on: Wireless Radio is enabled
Green in flash: data packet transferred
LAN-1 ~ LAN-4
OFF: No Ethernet cable attached or device is not linked
Green: Ethernet connection is established
Green in flash: data packet transferred via Ethernet
3G/4G
OFF: 3G/4G connection is not established
Green: 3G/4G connection is established
Green in flash: data packet transferred via 3G/4G
BDG761 User Manual 11

Business Cellular Gateway
Chapter 2 Getting Started
2.1 Connect Your Device
Before you can use this product, you need to connect your PC or device to this gateway
first. You can connect your PC to one of LAN-1 ~ LAN-4 ports through an Ethernet cable.
Otherwise, your device can also connect to it through WiFi. The default SSID of this
gateway is “default”, and without encryption by default. Your PC or device will get an IP
address automatically after connecting to this gateway.
2.2 Easy Setup by Configuring Web UI
You can browse Web UI to configure the device. Firstly you need to launch the Setup
Wizard browser first and then the Setup Wizard will guide you step-by-step to finish the
basic setup process.
Browse to Activate the Setup Wizard
Type in the IP Address (http://192.168.123.254)
1
When you see the login page, type the password ‘admin’
2
and then click ‘login’
button.
After login, select your language from the list.
1 The default LAN IPaddress of this gatewayis 192.168.123.254. If you change it, you need to type the new
IP address
2 It’s strongly recommending you to change this login password from default value
BDG761 User Manual 12

Business Cellular Gateway
I. Wizard
Select “Wizard” for basic network settings and VPN settings in a simple way. Or, you can
go to Basic Network / Advanced Network / Applications / System to setup the
configuration by your own selection.
A. Configure with the Network Setup Wizard
Step 1
The network setup wizard will guide you to
finish some basic settings, including login
password, time zone, WAN interface,
Ethernet LAN interface and WiFi LAN
interface.
Press “Next” to start the wizard.
Step 2: Change Password
Password setting. You can change the login
password of Web UI here. It’s strongly
recommending you to change this login
password from default value.
Press “Next” to continue.
BDG761 User Manual 13

Business Cellular Gateway
Step 3: Time Zone
Time Zone setting. It will detect your time
zone automatically. If the result of auto
detection is not correct, you can press
“Detect Again” button or select manually.
Press “Next” to continue.
Step 4: WAN
WAN Interface setting. Choose type of WAN
connection. You can select Ethernet WAN if
you want to connect to Internet through
fixed line. Or select 3G/4G if you want to
connect to Internet through 3G/4G network.
A variety of WAN types are available for
Ethernet WAN connection.
Press “Next” to continue.
Step 4-1: Ethernet (Static IP Address)
If choosing Ethernet->Static IP Address, you
need to input all IP address that you get from
ISP (Internet Service Provider) manually. This
option is usually chosen when you get a fixed
IP address from ISP.
Press “Next” to continue.
Step 4-2: Ethernet (Dynamic IP Address)
If choosing Ethernet->Dynamic IP Address,
you can input host name or registered MAC
address when your ISP requests it. In most
cases, you can leave them as blank and go
next. This option is usually chosen when you
get a dynamic IP address from ISP.
Press “Next” to continue.
BDG761 User Manual 14

Business Cellular Gateway
Step 4-3: Ethernet (PPPoE)
If choosing Ethernet->PPP over Ethernet
(so-called PPPoE), you need to input account
and password that you get from ISP. For other
fields, you can leave them as blank in most
cases. This option is usually chosen when you
use ADSL for WAN connection.
Press “Next” to continue.
Step 4-4: Ethernet (PPTP)
If choosing Ethernet->PPTP, you need to input
required dial-up information that you get
from ISP. This option is usually chosen when
your ISP requests it.
Press “Next” to continue.
Step 4-5: Ethernet (L2TP)
If choosing Ethernet->L2TP, you need to input
required dial-up information that you get
from ISP. This option is usually chosen when
your ISP requests it.
Press “Next” to continue.
Step 4-6: 3G/4G
If choosing 3G/4G->3G/4G, please make sure
you have inserted SIM card. If not, please
power off this gateway, and insert SIM card
first. Then you can select “Auto-Detection” to
finish dial-up profile automatically. This
option is chosen when you want to connect
to Internet through 3G/4G network instead of fixed line broadband.
Press “Next” to continue.
BDG761 User Manual 15

Business Cellular Gateway
Step 5: Ethernet LAN
LAN Interface setting. Change the LAN IP
address and subnet mask of this gateway. You
can keep the default setting and go to next
step.
Press “Next” to continue.
Step 6: WiFi LAN
WiFi LAN Interface setting. Change the SSID,
Channel Number, Authentication and
Encryption Algorithm for first virtual AP of this
gateway. You can keep the default setting and
go to next step.
Press “Next” to continue.
Step 7: Confirm and Apply
Check the new settings again. If all
information is correct, please press “Apply”
button to save new settings. Then it will take
65 seconds to restart this gateway and take
new settings effective.
Step 8: Counting Down
Configuration is completed. Press “Finish”
button to close Setup Wizard and browser
counts down for 65 seconds and provides you
with “Click here” button to reconnect to the
device.
B. Configure with the VPN Setup Wizard
BDG761 User Manual 16

Business Cellular Gateway
Step 1
The VPN setup wizard will guide you to finish
profiles of IPSec, PPTP, and L2TP VPN
connection quickly.
Press “Next” to start the wizard.
Step 2: VPN Type
Select type of VPN connection you want to
create. Here you can choose IPSec, PPTP, or
L2TP.
Press “Next” to continue.
Step 2-1: IPSec
If choosing IPSec, there are two options of
tunnel scenario can be chosen. “Site to Site”
is for two offices to create VPN tunnel.
“Dynamic VPN” is for remote users to
connect to office. For other options, please
go to Advanced Network->VPN to setup.
Input the required network information and
pre-shared key for VPN connection.
For Dynamic VPN, you don’t need to input
network information of remote subnet and
remote gateway.
Press “Next” to continue.
BDG761 User Manual 17

Business Cellular Gateway
Step 2-2: PPTP
If choosing PPTP, there are two options of
mode can be chosen. Choose “Client” if you
want this device to connect to another PPTP
server. Or choose “Server” if you want other
PPTP clients to connect to it.
Press “Next” to continue.
If choosing PPTP Client, please input tunnel
name, IP/FQDN of PPTP server,
username/password, authentication, and
MPPE options. Please make sure these
settings are accepted by PPTP server.
Otherwise, remote PPTP server will reject
the connection.
Press “Next” to continue.
If choosing PPTP Server, please select
options of authentication and MPPE. You
also need to create a set of username and
password for PPTP clients. In this wizard,
you can only create one user account. If you
want to create more user accounts, please
go to Advanced Network->VPN-> PPTP to
add more users.
Press “Next” to continue.
BDG761 User Manual 18

Business Cellular Gateway
Step 2-3: L2TP
If choosing L2TP, there are two options of
mode can be chosen. Choose “Client” if you
want this device to connect to another L2TP
server. Or choose “Server” if you want other
L2TP clients to connect to it.
Press “Next” to continue.
If choosing L2TP Client, please input tunnel
name, IP/FQDN of L2TP server,
username/password, authentication, and
MPPE options. Please make sure these
settings are accepted by L2TP server.
Otherwise, remote L2TP server will reject
the connection.
Press “Next” to continue.
If choosing L2TP Server, please select
options of authentication and MPPE. You
also need to create a set of username and
password for L2TP clients. In this wizard, you
can only create one user account. If you
want to create more user accounts, please
go to Advanced Network->VPN-> L2TP to
add more users.
Press “Next” to continue.
BDG761 User Manual 19

Business Cellular Gateway
Step 3: Confirm and Apply
Confirm new settings. If all new settings are
correct, please press “Apply” button to save
these new settings and take them effective.
II. Status
There are 5 kinds of system status to be shown at this window. They are Network Status, WiFi
Status, LAN Client List, Firewall Status and VPN Status.
A. Network Status
In Network Status page, you can review lots information of network status, including a
connection diagram, WAN IPv4 status, WAN IPv6 status, LAN status, and 3G/4G modem status.
You can also check the device time at the bottom of this page.
Connection Diagram
BDG761 User Manual 20