Billion BiGuard 2 User manual

BiGuard 10
iBusiness Security Gateway Small-Office
BiGuard 2
iBusiness Security Gateway Home-Office
User’s Manual
Version Release 3.00 (FW:1.03)

2
BiGuard 2/10 User’s Manual
(Updated December 1, 2005)
Copyright Information
© 2005 Billion Electric Corporation, Ltd.
The contents of this publication may not be reproduced in whole or in part,
transcribed, stored, translated, or transmitted in any form or any means, without
the prior written consent of Billion Electric Corporation.
Published by Billion Electric Corporation. All rights reserved.
Disclaimer
Billion does not assume any liability arising out of the application of use of any
products or software described herein. Neither does it convey any license under its
patent rights nor the patent rights of others. Billion reserves the right to make
changes in any products described herein without notice. This publication is subject
to change without notice.
Trademarks
Mac OS is a registered trademark of Apple Computer, Inc.
Windows 98, Windows NT, Windows 2000, Windows Me and Windows XP are
registered trademarks of Microsoft Corporation.

3
Safety Warnings
Your BiGuard 2/10 is built for reliability and long service life. For your
safety, be sure to read and follow the following safety warnings.
•Read this installation guide thoroughly before attempting to set up your BiGuard
2/10.
•Your BiGuard 2/10 is a complex electronic device. DO NOT open or attempt to
repair it yourself. Opening or removing the covers can expose you to high
voltage and other risks. In the case of malfunction, turn off the power
immediately and have it repaired at a qualified service center. Contact your
vendor for details.
•Connect the power cord to the correct supply voltage.
•Carefully place connecting cables to avoid people from stepping or tripping on
them. DO NOT allow anything to rest on the power cord and DO NOT place the
power cord in an area where it can be stepped on.
•DO NOT use BiGuard 2/10 in environments with high humidity or high
temperatures.
•DO NOT use the same power source for BiGuard 2/10 as other equipment.
•DO NOT use your BiGuard 2/10 and any accessories outdoors.
•If you mount your BiGuard 2/10, make sure that no electrical, water or gas pipes
will be damaged during installation.
•DO NOT install or use your BiGuard 2/10 during a thunderstorm.
•DO NOT expose your BiGuard 2/10 to dampness, dust, or corrosive liquids.
•DO NOT use your BiGuard 2/10 near water.
•Be sure to connect the cables to the correct ports.
•DO NOT obstruct the ventilation slots on your BiGuard 2/10 or expose it to direct
sunlight or other heat sources. Excessive temperatures may damage your
device.
•DO NOT store anything on top of your BiGuard 2/10.
•Only connect suitable accessories to your BiGuard 2/10.
•Keep packaging out of the reach of children.
•If disposing of the device, please follow your local regulations for the safe
disposal of electronic products to protect the environment.

4
Table of Contents
Chapter 1: Introduction
1.1 Overview
1.2 Product Highlights
1.2.1 Virtual Private Network Support
1.2.2 Advanced Firewall Security
1.2.3 Intelligent Bandwidth Management
1.3 Package Contents
1.3.1 BiGuard 10
1.3.1.1 Front Panel
1.3.1.2 Rear Panel
1.3.1.3 Rack Mounting
1.3.1.4 Cabling
1.3.2 BiGuard 2
1.3.2.1 Front Panel
1.3.2.2 Rear Panel
1.3.2.3 Cabling
Chapter 2: Router Applications
2.1 Overview
2.2 Bandwidth Management with QoS
2.2.1 QoS Technology
2.2.2 QoS Policies for Different Applications
2.2.3 Guaranteed / Maximum Bandwidth
2.2.4 Policy Based Traffic Shaping
2.2.5 Priority Bandwidth Utilization
2.2.6 Management by IP or MAC address
2.2.7 DiffServ (DSCP Marking)
2.3 Virtual Private Networking
2.3.1 General VPN Setup
2.3.2 Concentrator

5
Chapter 3: Getting Started
3.1 Overview
3.2 Before You Begin
3.3 Connecting Your Router
3.4 Configuring PCs for TCP/IP Networking
3.4.1 Overview
3.4.2 Windows XP
3.4.2.1 Configuring
3.4.2.2 Verifying Settings
3.4.3 Windows 2000
3.4.3.1 Configuring
3.4.3.2 Verifying Settings
3.4.4 Windows 98 / ME
3.4.4.1 Installing Components
3.4.4.2 Configuring
3.4.4.3 Verifying Settings
3.5 Factory Default Settings
3.5.1 Username and Password
3.5.2 LAN and WAN Port Addresses
3.6 Information From Your ISP
3.6.1 Protocols
3.6.2 Configuration Information
3.7 Web Configuration Interface

6
Chapter 4: Router Configuration
4.1 Overview
4.2 Status
4.2.1 ARP Table
4.2.2 Routing Table
4.2.3 Session Table
4.2.4 DHCP Table
4.2.5 IPSec Status
4.2.6 PPTP Status
4.2.7 System Log
4.2.8 IPSec Log
4.3 Quick Start
4.3.1 DHCP
4.3.2 Static IP
4.3.3 PPPoE
4.3.4 PPTP
4.3.5 Big Pond
4.4 Configuration
4.4.1 LAN
4.4.1.1 Ethernet
4.4.1.2 DHCP Server
4.4.2 WAN
4.4.2.1 DHCP
4.4.2.2 Static IP
4.4.2.3 PPPoE
4.4.2.4 PPTP
4.4.2.5 Big Pond
4.4.3 Bandwidth Settings
4.4.4 System
4.4.4.1 Time Zone
4.4.4.2 Remote Access
4.4.4.3 Firmware Upgrade
4.4.4.4 Backup / Restore
4.4.4.5 Restart
4.4.4.6 Password
4.4.4.7 System Log Server
4.4.4.8 E-mail Alert

7
4.4.5 Firewall
4.4.5.1 Packet Filter
4.4.5.2 URL Filter
4.4.5.3 LAN MAC Filter
4.4.5.4 Block WAN Request
4.4.5.5 Intrusion Detection
4.4.6 VPN
4.4.6.1 IPSec
4.4.6.1.1 IPSec Wizard
4.4.6.1.2 IPSec Policy
4.4.6.2 PPTP
4.4.7 QoS
4.4.8 Virtual Server
4.4.8.1 DMZ
4.4.8.2 Port Forwarding
4.4.9 Advanced
4.4.9.1 Static Route
4.4.9.2 Dynamic DNS
4.4.9.3 Device Management
4.5 Save Configuration To Flash
4.6 Logout
Chapter 5: Troubleshooting
5.1 Basic Functionality
5.1.1 Router Won’t Turn On
5.1.2 LEDs Never Turn Off
5.1.3 LAN or Internet Port Not On
5.1.4 Forgot My Password
5.2 LAN Interface
5.2.1 Can’t Access BiGuard 2/10 from the LAN
5.2.2 Can’t Ping Any PC on the LAN
5.2.3 Can’t Access Web Configuration Interface
5.2.3.1 Pop-up Windows
5.2.3.2 Javascripts
5.2.3.3 Java Permissions

8
5.3 WAN Interface
5.3.1 Can’t Get WAN IP Address from the ISP
5.4 ISP Connection
5.5 Problems with Date and Time
5.6 Restoring Factory Defaults
Appendix A: Product Specifications
A.1 BiGuard 10 Product Specifications
A.2 BiGuard 2 Product Specifications
Appendix B: Customer Support
Appendix C: FCC Interference Statement
Appendix D: Network, Routing, and Firewall Basics
D.1 Network Basics
D.1.1 IP Addresses
D.1.1.1 Netmask
D.1.1.2 Subnet Addressing
D.1.1.3 Private IP Addresses
D.1.2 Network Address Translation (NAT)
D.1.3 Dynamic Host Configuration Protocol (DHCP)
D.2 Router Basics
D.2.1 What is a Router?
D.2.2 Why use a Router?
D.2.3 Routing Information Protocol (RIP)
D.3 Firewall Basics
D.3.1 What is a Firewall?
D.3.1.1 Stateful Packet Inspection
D.3.1.2 Denial of Service (DoS) Attack
D.3.2 Why Use a Firewall?

9
Appendix E: Virtual Private Networking
E.1 What is a VPN?
E.1.1 VPN Applications
E.2 What is IPSec?
E.2.1 IPSec Security Components
E.2.1.1 Authentication Header (AH)
E.2.1.2 Encapsulating Security Payload (ESP)
E.2.1.3 Security Associations (SA)
E.2.2 IPSec Modes
E.2.3 Tunnel Mode AH
E.2.4 Tunnel Mode ESP
E.2.5 Internet Key Exchange (IKE)
Appendix F: IPSec Logs and Events
F.1 IPSec Log Event Categories
F.2 IPSec Log Event Table
Appendix G: Bandwidth Management with QoS
G.1 Overview
G.2 What is Quality of Service?
G.3 How Does QoS Work?
G.4 Who Needs QoS?
G.4.1 Home Users
G.4.2 Office Users
Appendix H: Router Setup Examples
H.1 VPN Configuration
H.1.1 LAN to LAN
H.1.2 Host to LAN
H.2 VPN Concentrator
H.3 Intrusion Detection
H.4 PPTP Remote Access by Windows XP
H.5 PPTP Remote Access by BiGuard

10
Chapter 1: Introduction
1.1 Overview
Congratulations on purchasing BiGuard 2/10 Router from Billion. Combining a
router with an Ethernet network switch, BiGuard 2/10 is a state-of-the-art device
that provides everything you need to get your network connected to the Internet
over your Cable or DSL connection quickly and easily. The Quick Start Wizard and
DHCP Server will get first-time users up and running with minimal fuss and
configuration, while sophisticated Quality of Service (QoS) and traffic management
features grant advanced users total control over their network and Internet
connection.
This manual illustrates the many features and functions of BiGuard 2/10, and even
takes you through the various ways you can apply this versatile device to your home
or office. Take the time now to familiarize yourself with BiGuard 2/10.
1.2 Product Highlights
1.2.1 Virtual Private Network Support
BiGuard 2/10 supports comprehensive IPSec VPN protocols for businesses to
establish private encrypted tunnels over the Internet to ensure data transmission
security among multiple sites, such as a branch office or dial-up connection. Up to 2
simultaneous IPSec VPN connections are possible on BiGuard 2/10, with
performance of up to 4Mbps.
1.2.2 Advanced Firewall Security
Aside from intelligent broadband sharing, BiGuard 2/10 offers integrated firewall
protection with advanced features to secure your network from outside attacks.
Stateful Packet Inspection (SPI) determines if a data packet is permitted to enter
the private LAN. Denial of Service (DoS) prevents hackers from interrupting
network services via malicious attacks. In addition, BiGuard 2/10 firewall can be
configured to alert you via email should your network come under fire, offering both
tight network security and peace of mind.