Billion BiPAC 4700AZ User manual

Last revised date: November 22, 2017
BiPAC 4700AZ
Wireless-AC 4G/LTE VPN Outdoor Router
User Manual
Version release: 1.04.1.x

1
Table of Contents
Chapter 1: Introduction ..............................................................................................................................1
Introduction to your Router....................................................................................................................1
Features & Specifications........................................................................................................................3
Hardware Specifications .........................................................................................................................6
Application Diagram...............................................................................................................................7
Chapter 2: Product Overview ......................................................................................................................8
Important Note for Using This Router......................................................................................................8
Device Description..................................................................................................................................9
The detail instruction in Reset Button ...................................................................................................12
Chapter 3: Basic Installation ..................................................................................................................... 13
Installation Reference........................................................................................................................... 14
Cabling................................................................................................................................................. 17
Default Settings....................................................................................................................................18
Information from Your ISP .................................................................................................................... 19
Chapter 4: Device Configuration ............................................................................................................... 20
Login to your Device ............................................................................................................................. 20
Status................................................................................................................................................... 22
Device Info ...................................................................................................................................................23
System Status...............................................................................................................................................25
System Log ...................................................................................................................................................26
4G/LTE Status...............................................................................................................................................27
Wireless Status ............................................................................................................................................29
Hotspot Status .............................................................................................................................................30
Statistics.......................................................................................................................................................31
DHCP Table...................................................................................................................................................36
IPSec Status..................................................................................................................................................37
PPTP Status ..................................................................................................................................................38
L2TP Status...................................................................................................................................................39
GRE Status....................................................................................................................................................40
OpenVPN Status...........................................................................................................................................41
ARP Table .....................................................................................................................................................42
VRRP Status..................................................................................................................................................43
Quick Start ...........................................................................................................................................44
Configuration ....................................................................................................................................... 47
Interface Setup ............................................................................................................................................48
Internet ....................................................................................................................................................49
LAN...........................................................................................................................................................56
Wireless 2.4G...........................................................................................................................................60
Wireless 2.4G MAC Filter.........................................................................................................................69

2
Wireless 5G .............................................................................................................................................70
Wireless 5G MAC Filter ...........................................................................................................................74
Loopback..................................................................................................................................................75
Dual WAN.....................................................................................................................................................76
General Setting ........................................................................................................................................76
Outbound Load Balance ..........................................................................................................................79
Protocol Binding.......................................................................................................................................80
Hotspot ........................................................................................................................................................81
General Setting ........................................................................................................................................82
Bult-in User Account ................................................................................................................................84
Authorized of Client.................................................................................................................................85
Walled Garden .........................................................................................................................................86
Advertisement .........................................................................................................................................87
Session Log...............................................................................................................................................88
Customization ..........................................................................................................................................89
Advanced Setup ...........................................................................................................................................97
Firewall ....................................................................................................................................................98
Routing.....................................................................................................................................................99
Dynamic Routing....................................................................................................................................100
NAT.........................................................................................................................................................102
Static DNS ..............................................................................................................................................107
Time Schedule .......................................................................................................................................108
Mail Alert ...............................................................................................................................................109
VPN ............................................................................................................................................................110
IPSec.......................................................................................................................................................111
PPTP Server............................................................................................................................................121
PPTP Client.............................................................................................................................................123
L2TP........................................................................................................................................................132
GRE Tunnel.............................................................................................................................................142
OpenVPN Server ....................................................................................................................................147
OpenVPN Client .....................................................................................................................................149
Access Management..................................................................................................................................154
Device Management..............................................................................................................................155
SNMP .....................................................................................................................................................156
Remote Syslog........................................................................................................................................157
Universal Plug & Play .............................................................................................................................158
Dynamic DNS .........................................................................................................................................159
Access Control........................................................................................................................................161
Packet Filter ...........................................................................................................................................163
CWMP (TR-069) .....................................................................................................................................166
Parental Control.....................................................................................................................................168
Maintenance..............................................................................................................................................169
User Management .................................................................................................................................170
Certificate Management........................................................................................................................173
Time Zone..............................................................................................................................................175
Firmware & Configuration .....................................................................................................................176
System Restart .......................................................................................................................................178
Auto Reboot...........................................................................................................................................179
Diagnostics Tool .....................................................................................................................................180
Chapter 5: Troubleshooting .................................................................................................................... 182

3
Problems with the Router .........................................................................................................................182
Problem with LAN Interface ......................................................................................................................182
Recovery Procedures .................................................................................................................................182
Appendix: Product Support & Contact..................................................................................................... 184

1
Chapter 1: Introduction
Introduction to your Router
Integrated with Latest 4G LTE Network and Dual-Polarized MIMO Antenna Technology
BiPAC 4700AZ integrates the latest high speed 4G/LTE module enabling support of multiple high
bandwidth applications. Areas with a weak or nonexistent wireless signal can benefit from the
extended range and reach of the Dual-Polarized MIMO antenna technology for their environment or
application whether LOS(Line of Sight) or NLOS(Non-Line of Sight).
Carrier-Grade Dual-Band Wireless LAN with 2000 Mbps Wireless Speed
BiPAC 4700AZ supports concurrent dual-band 802.11a/n/ac (5GHz) and 802.11b/g/n (2.4GHz)
Wireless LAN with 2000 Mbps wireless speed, allowing for Wi-Fi Hotspot functionality anywhere there
is cellular signal. The captive portal enables highly secure connectivity with multiple authentication
options and extensive controls for access and bandwidth management. Customization options allow
for operator logos, branding or advertisement placement.
IP67 Industrial-Grade Secure Design
BiPAC 4700AZ is an industrial-grade design with an IP67 rated enclosure to withstand the extreme
weather conditions, Also, built-in ±6K surge(K.21) and ±15KV ESD(EN 61000-4-5) protection design
protects against storm/lightning surges and ensuring robust and reliable operation.
Easy Installation with PoE Support
Easy Installation is realized with integrated IEEE 802.3at Power over Ethernet (PoE) support,
eliminating the need for separate power and data cables.
High Availability
BiPAC 4700AZ supports either Giga EWAN or 4G/LTE as the main WAN interface or backup WAN
interface. Automatic failover between Giga EWAN and/or 4G/LTE is implemented to assure the always
on internet connectivity.
Secure VPN Connections
BiPAC 4700AZ supports comprehensive and robust IPSec/ PPTP/ L2TP/ GRE/ OpenVPN VPN(Virtual
Private Network) protocols for business users to establish private encrypted tunnels over the public
Internet to secure data transmission between headquarters and branch offices. It also supports VPN
dial in from smart phones for secure remote Internet connection via your home broadband. With a
built-in VPN accelerator, the router enhances IPSec VPN performance significantly.
IPv6 Supported
Internet Protocol version 6 (IPv6) is a version of the Internet Protocol that is designed to succeed IPv4.
IPv6 has a vastly larger address space than IPv4. The router is already supporting IPv6, you can use

2
it in IPv6 environment no need to change device. The dual-stack protocol implementation in an
operating system is a fundamental IPv4-to-IPv6 transition technology. It implements IPv4 and IPv6
protocol stacks either independently or in a hybrid form. The hybrid form is commonly implemented in
modern operating systems supporting IPv6.
Quick Start Wizard
Support a WEB GUI page to install this device quickly. With this wizard, simple steps will get you
connected to the Internet immediately.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI or CWMP(TR-069).

3
Features & Specifications
• 4G/LTE for high speed mobile broadband connectivity
• High performance antenna for increased coverage, signal reception and efficiency
• Gigabit Ethernet WAN for Cable/Fiber/xDSL high WAN throughput
• Gigabit Ethernet LAN (PoE)
• IPv6 ready (IPv4/IPv6 dual stack)*1
•Support to obtain power via 802.3at PoE(Power over Ethernet)
• Simultaneous dual-band (2.4GHz/ 5GHz) wireless access point
•Multiple wireless SSIDs with wireless guest access and client isolation
•IEEE 802.11 a/b/g/n/ac compliant WirelessAccess Point with Wi-Fi Protected Setup (WPS),
Wi-Fi Protected Access (WPA-PSK/ WPA2-PSK) and Wired Equivalent Privacy (WEP) support
• Wireless Hotspot
• Enterprise level routing functionality - OSPF, BGP
• Firewall Security with DoS Preventing and Packet Filtering
• Universal Plug and Play (UPnP) Compliance
• Ease of Use with Quick Installation Wizard
• IPSec VPN with powerful DES/ 3DES/ AES
•PPTP VPN with Pap/ Chap/ MPPE authentication
•L2TP VPN with Pap/Chap authentication
•GRE VPN tunnel
•OpenVPN tunnel
•CWMP(TR-069)
•Industrial-grade design with an IP67 rated enclosure
•Built-in ±6K surge(K.21) and ±15KV ESD(EN 61000-4-5) protection design protects against
storm/lightning surges
High-speed mobile wireless data communication
•Embedded 4G/LTE module
•High performance antenna
Network Protocols and Features
• IPv4, IPv6, IPv4/ IPv6 Dual Stack*1
•NAT
•Static Routing and Dynamic Routing - RIP-1/2, OSPF, BGP
•Virtual Server and DMZ

4
•DHCPv4/v6
•Universal Plug and Play(UPnP) Compliant
•Dynamic Domain Name System(DDNS)
•SNTP, DNS proxy
•IGMP snooping and IGMP proxy
•MLD snooping and MLD proxy
•VRRP(Virtual Router Redundancy Protocol)
Firewall
•Built-in NAT Firewall
• Stateful Packet Inspection (SPI)
• DoS attack prevention including Land Attack, Ping of Death, etc
•Access control
• IP&MAC filter, URL Content Filter
• Password protection for system management
•VPN pass-through
Virtual Private Network (VPN)
• Secured IPSec VPN with powerful DES/ AES
•Secured PPTP VPN with Pap/ Chap/ MPPE authentication
•Secured L2TP VPN with Pap/Chap authentication
•Secured GRE VPN tunnels
•Secured OpenVPN Server and Client
Wireless LAN
• Concurrent dual-band 802.11a/n/ac (5GHz) and 802.11b/g/n (2.4GHz)
• 802.11ac (5GHz) up to 1700Mbps wireless operation rate
• 802.11n (2.4GHz) up to 300Mbps wireless operation rate
• Up to 2000 Mbps wireless operation rate
• Wireless security with 64/128 bits WEP, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK
support
• WPS (Wi-Fi Protected Setup) for easy setup
• WDS repeater function support
• Multiple SSIDs
•Wireless MAC Filtering
• Wireless Client Isolation

5
Hotspot
•Captive Portal: External UAM or Built-in
•Authentication: External RADIUS or Built-in
Management
•Quick Installation wizard
• Web-based GUI for remote and local management
• Firmware upgrades and configuration data upload and download via web-based GUI
• Supports DHCP server / client / relay
• Supports SNMP v1, v2, v3, MIB-I and MIB-II
• CWMP(TR-069)*1 supports remote management
1. Only upon request for Telco/ ISP projects.
2. Specifications on this datasheet are subject to change without prior notice.

6
Hardware Specifications
Physical interface
•One(1) Embeded 4G/LTE module
•One(1) mini-SIM(2FF) card slot
•One(1) Gigabit Ethernet WAN for Cable/Fiber/xDSL high WAN throughput
•One(1) Gigabit Ethernet LAN with PoE, can obtain power via 802.3at PoE - equipped switch or
power injector.
•Four(4) detachable 5GHz wireless antennas
•Two(2) detachable 2.4GHz wireless antennas
•Factory default reset button

7
Application Diagram
BiPAC 4700AZ:

8
Chapter 2: Product Overview
Important Note for Using This Router
Do not use the router in high humidity or high temperature.
Do not open or repair the case yourself. If the device becomes
too hot, turn off the power immediately and have it repaired at
a qualified service center.
Place the router on a stable surface.
Warning

9
Device Description
Index
Item
Description
1
WiFi Antenna
Connectors for 2.4GHz
Manually screw the two supplied wireless antennas (2.4G) tight to the connectors for
the 802.11n(2.4GHz).
2
Reset
After the device is powered on, press it 6 seconds or above: to restore to factory
default settings (this is used when you cannot login to the router, e.g. forgot your
password).
Waring: After pressing the RESET button for more than 6 seconds then release
it, to be sure you power cycle the device again.
1
1
5
3
2
6
4
7
8
9
10
11

10
3
SIM Card Slot
Insert the mini SIM card (2FF) with the gold contact facing down.
Push the mini SIM card (2FF) inwards to eject it
Warning: Before inserting or removing the SIM card, you must disconnect the
router from the power adapter.
4
WiFi LED for 2.4G
The single-colour LED behaves as follows:
Green
Wireless connection established
Green blinking
Data being transmitted / received
5
WiFi LED for 5G
The single-colour LED behaves as follows:
Green
Wireless connection established
Green blinking
Data being transmitted / received
6
LTE LED
(Received Signal
Strength Indicator)
The 4G/LTE received signal dual-colar LED behaves as shown below.
Green
RSSI greater than -69 dBm. Excellent signal condition
Green Flashing quickly
RSSI from -81 to -69 dBm. Good signal condition
Orange Flashing quickly
RSSI from -99 to -81 dBm. Fair signal condition.
Orange Flashing slowly
RSSI less than -99 dBm. Poor signal condition.
Orange
No signal and the 4G LTE module is in service
Off
No LTE module or LTE module fails
7
Power LED
The Power dual-colour LED behaves as shown below.
Green
System is up and ready
Red
Boot failure
8
Internet LED
The Internet dual-colar LED behaves as shown below.
Green
IP connected and traffic is passing through the device.
Red
IP request failed.
Off
Either in bridged mode or WAN connection not present.
9
Gigabit Ethernet WAN
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four LAN ports when
connecting to a PC or an office/home network of 10Mbps/ 100Mbps/ 1000Mbps.
Note: The EWAN port is a configurable LAN/WAN port, which automatically
becomes an EWAN port when EWAN internet interface is being selected in the
GUI.
10
LAN (PoE interface)
The PoE interface, pleae connect to supplied 802.3at PoE- equipped switch or power
injector.
11
Ethernet LED
The dual-colour LED behaves as shown below.
Green
Transmission speed is at Gigabit speed (1000Mbps)
Orange
Transmission speed is at 10/100Mbps
Blinking
Data being transmitted/received

11
Index
Item
Description
12
WiFi Antenna
Connectors for 5GHz
Manually screw the two supplied wireless antennas (5G) tight to the connectors for
the 802.11ac(5GHz).
12
12
12
12

12
The detail instruction in Reset Button
Recovery procedures for non-working devices (e.g. after a failed firmware upgrade flash):
Please follow the steps, the router’s emergency-reflash web interface will then be accessible via
http://192.168.1.1 where you can upload a firmware image to restore the router to a functional state.
Please note that the router will only respond with its web interface at this address (192.168.1.1), and
will not respond to ping request from your PC or other telnet operations.
Steps:
Before starting recovery process, please configure the IP address of the PC as 192.168.1.100 and
proceed with the following step-by-step guide.
1. Power the router off.
2. Press reset button and power on the router, once the Power flashes Red and Green, keeping press
reset button over 6 seconds.
3. Internet led flashes Green and Red, router entering recovery procedure and router's IP will reset to
Emergency IP address (Say 192.168.1.1).
4. Open browser and access http://192.168.1.1 to upload the firmware.
5. Internet led lit Red, and router starts to write firmware into flash. Please DO NOT power off the
router at this step.
6. Internet led lit Green when successfully upgrade firmware.
7. Power the router off and then on again.

13
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard
application in the following operating systems: Windows, Linux, Mac OS, etc. The product provides an
easy and user-friendly interface for configuration.
PCs must have an Ethernet interface installed properly and be connected to the router either directly
or through an external repeater hub, and have TCP/IPinstalled and configured to obtain an IPaddress
through a DHCP server or a fixed IP address that must be in the same subnet as the router. The
default IP address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any
attached PC must be in the same subnet, and have an IP address in the range of 192.168.1.1 to
192.168.1.253). The best and easiest way is to configure the PC to get an IP address automatically
from the router using DHCP. If you encounter any problems accessing the router’s web interface it may
also be advisable to uninstall any kind of software firewall on your PCs, as they can cause problems
accessing the 192.168.1.254 IP address of the router. Users should make their own decisions on how
to best protect their network.
Please follow the steps below for your PC’s network environment installation. First of all, please check
your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be
installed. If not, please refer to your Windows-related or other operating system manuals.
Any TCP/IP capable workstation can be used to communicate with or
through the router. To configure other types of workstations, please
consult the manufacturer’s documentation.

14
Installation Reference
IMPORTANT: It is recommended to put the Gigabit PoE Injector on an UPS or Surge Protector.
Use the supplied grounding wire to ground your BiPAC 4700ZU/ 4700ZUL ODU is REQUIRED!
I. Grounding the BiPAC 4700AZ

15
II. Insert SIM card
1. Unscrew the cap of SIM card slot.
2. Slide the SIM card with the mental contacts (gold plate) facing down to the SIM slot then push it all
the way in until you hear the clicking sound.
3. Screw the cap back tightly.
Attention: Please power off the device before inserting or removing the SIM card.
It is recommended to use an Industrial-grade SIM card.

16
III. Power on BiPAC 4700AZ
Step 1: Assemble M25 cable gland
Step 2: Unscrew the LAN (PoE) port and insert the supplied outdoor Ethernet cable (RJ-45) through
material A-D, and then connect the RJ-45 Ethernet cable into the LAN (PoE) port.
2.1: Insert C at the back end of D
2.2: clip B on C
2.3: keep B close to D
2.4: then tighten A.
Step 3: Insert the other end of outdoor Ethernet cable (RJ-45) to the supplied Gigabit PoE injector
Data+Power port. Connect another Ethernet cable (RJ-45) directly to the Data port and the other end
of cable to a switch or broadband router.
IMPORTANT: It is recommended to put the Gigabit PoE Injector on an UPS or Surge Protector. Use
the supplied grounding wire to ground your BiPAC 4700ZUL ODU is REQUIRED!