Billion BiPAC 7402(G)(L) R3 Series User manual

Version Release 552g.s4.ds2
Last Revision Date: 25-02-2008
BiPAC 7402(G)(L) R3
Series
ADSL2+ (802.11g) (VPN)
irewall Router
User’s Manual

Table of Contents i
T
Ta ab bl le e o of f C Co on nt te en nt ts s
CHAPTER 1: INTRODUCTION ............................................................................................................. 1
INTRODUCTION TO YOUR ROUTER................................................................................................. 1
FEATURES .............................................................................................................................................. 1
CHAPTER 2: INSTALLING THE ROUTER ......................................................................................... 4
IMPORTANT NOTE FOR USING THIS ROUTER............................................................................... 4
PACKAGE CONTENTS.......................................................................................................................... 4
THE FRONT LEDS ................................................................................................................................. 5
THE REAR PORTS.................................................................................................................................. 6
CABLING ................................................................................................................................................ 7
CHAPTER 3: BASIC INSTALLATION .................................................................................................. 8
CONNECTING YOUR ROUTER ........................................................................................................... 9
FACTORY DEFAULT SETTINGS........................................................................................................ 14
Web Interface (Username and Password) .......................................................................................... 14
Device LAN IP settings....................................................................................................................... 14
ISP setting in WAN site ....................................................................................................................... 14
D CP server ...................................................................................................................................... 14
LAN and WAN Port Addresses............................................................................................................ 14
INFORMATION FROM YOUR ISP ..................................................................................................... 15
CONFIGURING WITH YOUR WEB BROWSER ............................................................................... 16
CHAPTER 4: CONFIGURATION......................................................................................................... 17
STATUS.................................................................................................................................................. 18
ADSL Status ........................................................................................................................................ 18
ARP Table ........................................................................................................................................... 18
D CP Table........................................................................................................................................ 19
Routing Table...................................................................................................................................... 20
NAT Sessions ...................................................................................................................................... 21
UPnP Portmap ................................................................................................................................... 21
PPTP Status ........................................................................................................................................ 21
IPSec Status ........................................................................................................................................ 22
L2TP Status......................................................................................................................................... 22
Email Status........................................................................................................................................ 23
Event Log............................................................................................................................................ 23
Error Log ............................................................................................................................................ 23
Diagnostic........................................................................................................................................... 23
QUICK START ...................................................................................................................................... 4
CONFIGURATION................................................................................................................................ 7
LAN - Local Area Network ................................................................................................................. 27
Bridge Interface .............................................................................................................................. 8
Ethernet........................................................................................................................................... 8
IP Alias............................................................................................................................................ 9
Ethernet Client Filter ...................................................................................................................... 30
Wireless
(Wireless Router only) ........................................................................................................... 31
Wireless Security (Wireless Router only) ...................................................................................... 33
Wireless Client / MAC Address Filter
(Wireless Router only) ............................................................ 35
WPS................................................................................................................................................ 36
Port Setting ..................................................................................................................................... 36
DHCP Server .................................................................................................................................. 37

Table of Contents ii
WAN - Wide Area Network.................................................................................................................. 38
WAN Profile ................................................................................................................................... 38
ADSL Mode.................................................................................................................................... 44
System ................................................................................................................................................. 45
Time Zone....................................................................................................................................... 45
Remote Access................................................................................................................................ 46
Firmware Upgrade.......................................................................................................................... 47
Backup / Restore............................................................................................................................. 48
Restart Router................................................................................................................................. 49
User Management........................................................................................................................... 50
Firewall and Access Control .............................................................................................................. 51
General Settings.............................................................................................................................. 5
(Changed the format only.)............................................................................................................. 53
Packet Filter.................................................................................................................................... 54
Intrusion Detection ......................................................................................................................... 61
URL Filter....................................................................................................................................... 64
IM / P P Blocking .......................................................................................................................... 66
Firewall Log ................................................................................................................................... 67
VPN - Virtual Private Networks (VPN router only) ........................................................................... 68
PPTP (Point-to-Point Tunneling Protocol) ..................................................................................... 68
IPSec (IP Security Protocol)........................................................................................................... 77
L TP (Layer Two Tunneling Protocol) .......................................................................................... 86
QoS - Quality of Service ..................................................................................................................... 98
Prioritization ................................................................................................................................... 98
Outbound IP Throttling (LAN to WAN)....................................................................................... 100
Inbound IP Throttling (WAN to LAN) ......................................................................................... 101
Virtual Server (known as Port Forwarding)..................................................................................... 106
Add Virtual Server........................................................................................................................ 107
Edit DMZ Host ............................................................................................................................. 108
Edit DMZ Host ............................................................................................................................. 109
Edit One-to-One NAT (Network Address Translation) .................................................................110
Time Schedule....................................................................................................................................113
Configuration of Time Schedule ...................................................................................................114
Advanced ...........................................................................................................................................115
Static Route....................................................................................................................................115
Dynamic DNS ...............................................................................................................................116
Check Email ..................................................................................................................................117
Device Management......................................................................................................................118
IGMP ............................................................................................................................................ 1 1
VLAN Bridge ............................................................................................................................... 1 1
LOGOUT.............................................................................................................................................. 1
CHAPTER 5: TROUBLESHOOTING ................................................................................................ 123
PROBLEMS STARTING UP THE ROUTER ..................................................................................... 1 3
PROBLEMS WITH THE WAN INTERFACE .................................................................................... 1 3
PROBLEMS WITH THE LAN INTERFACE ..................................................................................... 1 3
APPENDIX A: PRODUCT SUPPORT AND CONTACT INFORMATION.................................... 124

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 1: Introduction
1
Chapter 1: Introduction
Introduction to your Router
Welcome to the ADSL2+ 802.11g) VPN) Firewall Router. The router is an “all-in-one” ADSL router,
combining an ADSL modem, ADSL router and Ethernet network switch functionalities, providing
everything you need to get the machines on your network connected to the Internet over your ADSL
broadband connection. With features such as an ADSL Quick-Start wizard and DHCP Server, you can be
online in no time at all and with a minimum of fuss and configuration, catering for first-time users to the
guru requiring advanced features and control over their Internet connection and network.
eatures
Express Internet Access
The router complies with ADSL worldwide standards. It supports downstream rate up to 12/24 Mbps
with ADSL2/2+, 8Mbps with ADSL. Users enjoy not only high-speed ADSL services but also
broadband multimedia applications such as interactive gaming, video streaming and real-time
audio much easier and faster than ever. It is compliant with Multi-Mode standard ANSI T1.413,
Issue 2; G.dmt ITU G.992.1); G.lite ITU G.992.2); G.hs ITU G994.1); G.dmt.bis ITU G.992.3);
G.dmt.bis.plus ITU G.992.5)).
Virtual Private Network (VPN)
It allows user to make a tunnel with a remote site directly to secure the data transmission among
the connection. User can use embedded PPTP and L2TP client/server, IKE and IPSec which are
supported by this router to make a VPN connection or users can run the PPTP client in PC and the
router already provides IPSec and PPTP pass through function to establish a VPN connection if the
user likes to run the PPTP client in his local computer.
802.11g Wireless AP with WPA Support (Wireless Router only)
With integrated 802.11g Wireless Access Point in the router, the device offers a quick and easy
access among wired network, wireless network and broadband connection ADSL) with single
device simplicity, and as a result, mobility to the users. In addition to 54 Mbps 802.11g data rate, it
also interoperates backward with existing 802.11b equipment. The Wireless Protected Access
WPA1 and WPA2) and Wireless Encryption Protocol WEP) supported features enhance the
security level of data protection and access control via Wireless LAN.
ast Ethernet Switch
A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between MDI and
MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or crossover cable can be used
directly for auto detection.
Multi-Protocol to Establish a Connection
It supports PPPoA RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation over
ATM bridged or routed), PPP over Ethernet RFC 2516), and IPoA RFC1577) to establish a
connection with the ISP. The product also supports VC-based and LLC-based multiplexing.
Quick Installation Wizard
It supports a WEB GUI page to install this device quickly. With this wizard, end users can enter the
information easily which they get from their ISP, then surf the Internet immediately.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone devices and PCs
from many different vendors. It makes network simple and affordable for users. UPnP architecture

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 1: Introduction
2
leverages TCP/IP and the Web to enable seamless proximity networking in addition to control and
data transfer among networked devices. With this feature enabled, users can now connect to Net
meeting or MSN Messenger seamlessly.
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with one IP
address/one Internet access account. Many application layer gateway ALG) are supported such as
web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.
SOHO irewall Security with DoS and SPI
Along with the built-in NAT natural firewall feature, the router also provides advanced hacker
pattern-filtering protection. It can automatically detect and block Denial of Service DoS) attacks.
The router is built with Stateful Packet Inspection SPI) to determine if a data packet is allowed
through the firewall to the private LAN.
Domain Name System (DNS) Relay
It provides an easy way to map the domain name a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this router’s IP
address, every DNS conversion request packet from the PC to this router will be forwarded to the
real DNS in the outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This
dynamic IP address is the WAN IP address. For example, to use the service, you must first apply for
an account from a DDNS service like http://www.dyndns.org/. More than 5 DDNS servers are
supported.
Quality of Service (QoS)
QoS gives you full control over which types of outgoing data traffic should be given priority by the
router, ensuring important data like gaming packets, customer information, or management
information move through the router ay lightning speed, even under heavy load. The QoS features
are configurable by source IP address, destination IP address, protocol, and port. You can throttle
the speed at which different types of outgoing data pass through the router, to ensure P2P users
don’t saturate upload bandwidth, or office browsing doesn’t bring client web serving to a halt. In
addition, or alternatively, you can simply change the priority of different types of upload data and let
the router sort out the actual speeds.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect incoming
service requests and forward either a single port or a range of ports to the specific local computer to
handle it. For example, a user can assign a PC in the LAN acting as a WEB server inside and
expose it to the outside network. Outside users can browse inside web servers directly while it is
protected by NAT. A DMZ host setting is also provided to a local computer exposed to the outside
network, Internet.
Rich Packet iltering
Not only filters the packet based on IP address, but also based on Port numbers. It will filter packets
from and to the Internet, and also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) Client and Server
In the WAN site, the DHCP client can get an IP address from the Internet Service Provider ISP)
automatically. In the LAN site, the DHCP server can allocate a range of client IP addresses and
distribute them including IP address, subnet mask as well as DNS IP address to local computers. It
provides an easy way to manage the local IP network.
Static and RIP1/2 Routing
It has routing capability and supports easy static routing table or RIP1/2 routing protocol.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 1: Introduction
3
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
It supports web based GUI for configuration and management. It is user-friendly and comes with
on-line help. It also supports remote management capability for remote users to configure and
manage this product.
irmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
Rich Management Interfaces
It supports flexible management interfaces with local console port, LAN port, and WAN port. Users
can use terminal applications through the console port to configure and manage the device, or
Telnet, WEB GUI, and SNMP through LAN or WAN ports to configure and manage the device.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 2: Installing the router
4
Chapter 2: Installing the Router
Important note for using this router
Package Contents
BiPAC 7402 G) L) R3 Series ADSL2+ Router
CD containing the on-line manual
RJ-11 ADSL/telephone cable
Ethernet CAT-5 LAN) cable
One 2dbi detachable antenna Optional)
AC-DC power adapter
RJ-45 to RS-232 Console Kit
This Quick Start Guide
Splitter/ Micro-filter Optional)



Do not use this router
under
high humidity or high temperatures.


 Do not use the same power source for this router as other
equipment.


 Do not open or repair the case by yourself. If this router is too
hot, turn off the power immediately and have it repaired at a
qualified service center.


 Avoid using this product and all accessories outdoors.
Warning


 Place this router on a stable surface.


 Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage this router.
Attention

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 2: Installing the router
5
The ront LEDs
LED Meaning
1 Power Lit when power turns ON. Lit in red means the system is failed. To
restart the device or connect Billion for searching support.
2
LAN Port
1X — 4X
RJ-45 connector)
Lit when one of LAN ports connected to an Ethernet device.
The speed of transmission hits 100Mbps appears Green; The
speed of transmission hits 10Mbps appears Orange.
Blinking when data is Transmitted / Received.
3 Wireless
Lit green when the wireless connection is established.
Flashes when the device is sending/receiving data.
4 Mail Lit and flashed periodically when there are emails in the Inbox.
5 ADSL Lit Green when the device is successfully connected to an ADSL
DSLAM. “line synch”).
6 Internet
Lit red when WAN port fails to get IP address.
Lit green when WAN port gets IP address successfully.
1
2
4
5
6
3

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 2: Installing the router
6
The Ethernet Port #
4
can be
used as a
console
port
. You need a special
console tool which already includes in the package to connect with LAN
port 4 and PC’s RS-232 port (9-pin serial port).
The Rear Ports
Port
Meaning
1
Antenna
(Wireless Router only)
Connect the detachable antenna to this port.
2 ADSL Connect the supplied RJ-11 “telephone”) cable on this port
when connecting to the ADSL/telephone network.
3
LAN
1X — 4X
RJ-45 connector)
Connect a UTP Ethernet cable Cat-5 or Cat-5e) to one of the
LAN ports when connecting to a PC or an office/home network
of 10Mbps or 100Mbps.
Caution: Port 4 can be either a LAN or Console port at a time but not
both.
4
WPS Push WPS button to trigger Wi-Fi Protected Setup
function.
5 RESET
To be sure the device is being turned on  press RESET
button for:
1-3 seconds: quick reset the device.
6 seconds above, and power off, power on the device:
restore to factory default settings. Cannot login to the router
or forgot your Username/Password. Press the button for
more than 6 seconds).
Caution: After pressing the RESET button for more than 6 seconds,
to be sure you power cycle the device again.
6 Power Connect the supplied power adapter to this jack.
7 Power Switch Power ON/OFF switch
3
1
2
4
6
7
5

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 2: Installing the router
7
Cabling
One of the most common causes of problems is the bad cabling or ADSL line s). Make sure that all
connected devices are turned on. On the front of the product is a bank of LEDs. Verify that the LAN Link
and ADSL line LEDs are lit. If they are not, verify that you are using the proper cables.
Ensure that all other devices connected to the same telephone line as your router e.g. telephones, fax
machines, analogue modems) have a line filter connected between them and the wall socket unless you
are using a Central Splitter or Central Filter installed by a qualified and licensed electrician), and ensure
that all line filters are correctly installed and the right way around. Missing line filters or line filters installed
the wrong way around can cause problems with your ADSL connection, including causing frequent
disconnections.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
8
Any TCP/IP capable workstation can be used t
o communicate with
or through the router. To configure other types of workstations,
please consult the manufacturer’s documentation.
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard application
in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me, etc. The product
provides an easy and user-friendly interface for configuration.
Please check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter
must be installed. If not, please refer to your Windows-related or other operating system manuals.
There are ways to connect with the router, either through an external repeater hub to the router or directly
connecting with PCs. However, to be sure PCs have an Ethernet interface installed properly prior to
connecting to the router device. You ought to configure your PCs to obtain an IP address through a
DHCP server or a fixed IP address that must be in the same subnet as the router. The default IP address
of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 i.e. any attached PC must be in the
same subnet, and have an IP address in the range of 192.168.1.1 to 192.168.1.253). The best and
easiest way is to configure the PC to get an IP address automatically from the router using DHCP. If you
encounter any problem accessing the router’s web interface it may also be advisable to uninstall any
kind of software firewall on your PCs, as they can cause problems accessing the 192.168.1.254 IP
address of the router. Users should make their own decisions on how to best protect their network.
Please follow the steps below for your PC’s network environment installation.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
9
Connecting Your Router
1. Connect this router to a LAN Local Area Network) and the ADSL/telephone ADSL) network.
2. Power on the device.
3. Make sure the Power is lit steadily and that the LAN LED is lit.
4. Connect RJ-11 cable to LINE Port when connecting to the telephone wall jack.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
10
Configuring PCs in Windows in Window XP
1. Go to Start / Control Panel in Classic View). In the Control
Panel, double-click Network Connections.
2. Double-click Local Area Connection. (See igure 3.1)
3. In the LAN Area Connection Status window, click
Properties. See igure 3.2)
4. Select Internet Protocol (TCP/IP) and click Properties.
See igure 3.3)
5. Select the Obtain an IP address automatically and Obtain
DNS server address automatically radio buttons. See
igure 3.4)
6. Click OK to finish the configuration.
Figure 3.1: LAN Area Connection
Figure 3.2: LAN Connection Status
Figure 3.3: TCP / IP
Figure 3.4: IP Address & DNS
Configuration

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
11
Configuring PCs in Windows 2000
1. Go to Start / Settings / Control Panel. In the Control Panel,
double-click Network and Dial-up Connections.
2. Double-click Local Area (“LAN”) Connection. (See igure
3.5)
3. In the LAN Area Connection Status window, click
Properties. (See igure 3.6)
4. Select Internet Protocol (TCP/IP) and click Properties.
(See igure 3.7)
5. Select the Obtain an IP address automatically and Obtain
DNS server address automatically radio buttons. (See
igure 3.8)
6. Click OK to finish the configuration.
Figure 3.5: LAN Area Connection
Figure 3.6: LAN Connection Status
Figure 3.7: TCP / IP
Figure 3.8: IP Address & DNS
Configuration

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
12
Configuring PC in Windows 95/98/ME
1. Go to Start / Settings / Control Panel. In the Control Panel,
double-click Network and choose the Configuration tab.
2. Select TCP / IP -> NE2000 Compatible, or the name of any
Network Interface Card NIC) in your PC. See igure 3.9)
3. Click Properties.
4. Select the IP Address tab. In this page, click the Obtain an IP
address automatically radio button. See igure 3.10)
5. Then select the DNS Configuration tab. (See igure 3.11)
6. Select the Disable DNS radio button and click OK to finish
the configuration.
Figure 3.9: TCP / IP
Figure 3.10: IP Address
Figure 3.11: DNS Configuration

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
13
Configuring PC in Windows NT4.0
1.
Go to Start / Settings / Control Panel. In the Control
Panel, double-click Network and choose the Protocols tab.
2. Select TCP/IP Protocol and click Properties. See igure
3.12)
3. Select the Obtain an IP address from a DHCP server radio
button and click OK. See igure 3.13)
Figure 3.12: TCP / IP
Figure 3.13: IP Address

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
14
actory Default Settings
Before configuring your, you need to know the following default settings.
Web Interface (Username and Password)
Username: admin
Password: admin
The default username and password are “admin” and “admin” respectively.
Device LAN IP settings
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
ISP setting in WAN site
PPPoE
DHCP server
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100
LAN and WAN Port Addresses
The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown below.
LAN Port WAN Port
IP address 192.168.1.254
Subnet Mask 255.255.255.0
DHCP server function Enabled
IP addresses for
distribution to PCs
100 IP addresses continuing from
192.168.1.100 through 192.168.1.199
The PPPoE function is enabled
to automatically get the WAN
port configuration from the ISP.
Attention
If you ever forget the
username/
password to login
to the router
, you may
press the RESET button up to 6 seconds to restore the factory default
settings.
Caution: After pressing the RESET button for more than 6 seconds, to be sure you power
cycle the device again.
Attention

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
15
Information from your ISP
Before configuring this device, you have to check with your ISP Internet Service Provider) to find out
what kind of service is provided such as DHCP Obtain an IP Address Automatically, Static IP Fixed IP
Address) and PPPoE.
Gather the information as illustrated in the following table and keep it for reference.
PPPoE(R C2516)
VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service Name,
and Domain Name System DNS) IP address it can be automatically
assigned by your ISP when you connect or be set manually).
PPPoA(R C2684)
VPI/VCI, VC / LLC-based multiplexing, Username, Password and Domain
Name System DNS) IP address it can be automatically assigned by your ISP
when you connect or be set manually).
MPoA(R C1483/R
C2684)
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System DNS) IP address it is a fixed IP
address).
IPoA(R C1577)
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System DNS) IP address it is a fixed IP
address).
Pure Bridge VPI/VCI, VC / LLC-based multiplexing to use Bridged Mode.

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 3: Basic Installation
16
Configuring with your Web Browser
Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click
“Go”, a user name and password window prompt will appear. The default username and password
are “admin” and “admin” respectively. (See igure 3.14)
Figure 3.14: User name & Password Prompt Window
Congratulations! You are now successfully logon to the Router!

ADSL2+ (802.11g) (VPN) irewall Router
Chapter 4: Configuration 17
Chapter 4: Configuration
At the configuration homepage, the left navigation pane where bookmarks are provided links you directly
to the desired setup page, including:
Status
- ADSL Status
- ARP Table
- DHCP Table
- Routing Table
- NAT Sessions
- UPnP Portmap
- PPTP Status
- IPSec Status
- L2TP Status
- Email Status
- Event Log
- Error Log
- Diagnostic
Quick Start
Configuration
- LAN
- WAN
- System
- Firewall
- VPN
- QoS
- Virtual Server
- Time Schedule
- Advanced
Language provides user interface in English and French languages)