Billion BiPAC 7402VGO User manual

BiPAC 7402VGO
VoIP/802.11g ADSL2+ VPN
Firewall Router
User’s Manual
Version Release 2.02

T
Ta ab bl le e o of f C Co on nt te en nt ts s
CHAPTER 1: INTRODUCTION............................................................................................................. 3
INTRODUCTION TO YOUR ROUTER ............................................................................................................. 3
FEATURES.................................................................................................................................................. 3
CHAPTER 2: INSTALLING THE ROUTER......................................................................................... 6
IMPORTANT NOTE FOR USING THIS ROUTER ............................................................................................... 6
PACKAGE CONTENTS................................................................................................................................. 6
THE FRONT LEDS...................................................................................................................................... 7
THE REAR PORTS....................................................................................................................................... 8
CABLING.................................................................................................................................................... 9
CHAPTER 3: BASIC INSTALLATION ............................................................................................... 10
CONNECTING YOUR ROUTER.................................................................................................................... 11
FACTORY DEFAULT SETTINGS................................................................................................................. 16
Web Interface (Username and Password).......................................................................................... 16
LAN Device IP Settings ...................................................................................................................... 16
ISP setting in WAN site....................................................................................................................... 16
DHCP server ...................................................................................................................................... 16
LAN and WAN Port Addresses........................................................................................................... 16
INFORMATION FROM YOUR ISP................................................................................................................ 17
CONFIGURING WITH YOUR WEB BROWSER.............................................................................................. 18
CHAPTER 4: CONFIGURATION ........................................................................................................ 19
STATUS.................................................................................................................................................... 20
ARP Table........................................................................................................................................... 20
Wireless Association Table................................................................................................................. 20
DHCP Table....................................................................................................................................... 22
PPTP Status........................................................................................................................................ 23
IPSec Status........................................................................................................................................ 23
L2TP Status ........................................................................................................................................ 24
Email Status........................................................................................................................................ 24
VoIP Status......................................................................................................................................... 25
Event Log............................................................................................................................................ 25
Error Log............................................................................................................................................ 25
NAT Sessions ...................................................................................................................................... 26
UPnP Portmap ................................................................................................................................... 26
QUICK START .......................................................................................................................................... 27
CONFIGURATION...................................................................................................................................... 29
LAN (Local Area Network)................................................................................................................. 29
Bridge Interface.............................................................................................................................. 29
Ethernet........................................................................................................................................... 30
Ethernet Client Filter...................................................................................................................... 31
Wireless .......................................................................................................................................... 33
Wireless Security............................................................................................................................ 35
Wireless Client (MAC Address) Filter........................................................................................... 37
Port Setting..................................................................................................................................... 38
DHCP Server.................................................................................................................................. 39
WAN (Wide Area Network) ................................................................................................................ 40
ISP .................................................................................................................................................. 40
DNS................................................................................................................................................ 50
Table of Contents i

ADSL.............................................................................................................................................. 51
System................................................................................................................................................. 52
Time Zone ...................................................................................................................................... 52
Remote Access ............................................................................................................................... 53
Firmware Upgrade.......................................................................................................................... 54
Backup / Restore............................................................................................................................. 55
Restart Router................................................................................................................................. 56
User Management........................................................................................................................... 57
Firewall and Access Control.............................................................................................................. 58
General Settings.............................................................................................................................. 59
Packet Filter.................................................................................................................................... 60
Intrusion Detection......................................................................................................................... 67
URL Filter ...................................................................................................................................... 69
Firewall Log ................................................................................................................................... 72
VPN (Virtual Private Networks)......................................................................................................... 73
PPTP (Point-to-Point Tunneling Protocol)..................................................................................... 73
IPSec (IP Security Protocol)........................................................................................................... 78
L2TP (Layer Two Tunneling Protocol).......................................................................................... 84
VoIP (Voice over Internet Protocol) ................................................................................................ 109
Wizard .......................................................................................................................................... 110
General Settings............................................................................................................................ 112
Phone Ports................................................................................................................................... 114
PSTN Dial Plan (BiPAC 7402VGP/7402VGO Only) ................................................................. 116
VoIP Dial Plan.............................................................................................................................. 120
Ring & Tone................................................................................................................................. 123
Special dial codes......................................................................................................................... 124
QoS (Quality of Service)................................................................................................................... 125
Prioritization................................................................................................................................. 126
Outbound IP Throttling (LAN to WAN)...................................................................................... 128
Inbound IP Throttling (WAN to LAN) ........................................................................................ 129
Virtual Server (“Port Forwarding”)................................................................................................ 133
Add Virtual Server ....................................................................................................................... 134
Edit DMZ Host............................................................................................................................. 135
Edit DMZ Host............................................................................................................................. 136
Edit One-to-One NAT (Network Address Translation)............................................................... 137
Time Schedule................................................................................................................................... 140
Configuration of Time Schedule .................................................................................................. 141
Advanced .......................................................................................................................................... 142
Static Route .................................................................................................................................. 142
Dynamic DNS .............................................................................................................................. 143
Check Email ................................................................................................................................. 144
Device Management..................................................................................................................... 145
IGMP............................................................................................................................................ 149
VLAN Bridge............................................................................................................................... 149
SAVE CONFIGURATION TO FLASH.......................................................................................................... 153
LOGOUT................................................................................................................................................. 153
CHAPTER 5: TROUBLESHOOTING................................................................................................ 154
PROBLEMS STARTING UP THE ROUTER ................................................................................................... 154
PROBLEMS WITH THE WAN INTERFACE................................................................................................ 154
PROBLEMS WITH THE LAN INTERFACE ................................................................................................. 155
APPENDIX A: PRODUCT SUPPORT AND CONTACT INFORMATION .................................. 156
Table of Contents iii

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 1: Introduction
Chapter 1: Introduction
Introduction to your Router
Welcome to the VoIP/802.11g ADSL2+ VPN Firewall Router. The router is an “all-in-one” VoIP ADSL
router, combining an ADSL modem, ADSL router, Ethernet network switch and 2 ports for Voice over IP
functionalities, providing everything you need to get the machines on your network connected to the
Internet over your ADSL broadband connection. With features such as an ADSL Quick-Start wizard and
DHCP Server, you can be online in no time at all and with a minimum of fuss and configuration, catering
for first-time users to the guru requiring advanced features and control over their Internet connection and
network.
Features
Voice over IP compliance with SIP standard
The router supports cost-effective, toll-quality voice calls over the Internet. It complies with the
most popular industrial standard, SIP protocol, to ensure the interoperability with SIP devices and
major VoIP Gateways. The VoIP ADSL router supports call waiting, silence suppression, voice
activity detection (VAD), comfort noise generation (CNG), line echo cancellation, caller ID (Bell
202, V3) and so on.
Lifeline Support
The router integrates RJ-11 FXO port for inbound and outbound calls transmitted through PSTN.
Users can receive phone calls from PSTN while enjoying VoIP call service at the same time. In
addition, the device automatically fallbacks to lifeline POTS to enable making normal phone calls
when there is power outage, or when the Internet connection is down.
Express Internet Access – ADSL2/2+ firmware upgradeable
The router complies with ADSL worldwide standards. It supports downstream rates up to 8Mbps
with ADSL, capable of up to 12/24 Mbps with ADSL2/2+, and upstream rates up to 1 Mbps. Users
enjoy not only high-speed ADSL services but also broadband multimedia applications such as
interactive gaming, video streaming and real-time audio much easier and faster than ever. It is
compliant with Multi-Mode standard (ANSI T1.413, Issue 2; G.dmt (ITU G.992.1); G.hs (ITU
G994.1); G.dmt.bis (ITU G.992.3); G.dmt.bisplus (ITU G.992.5)).
Virtual Private Network (VPN)
Allows user to make a tunnel with a remote site directly to secure the data transmission among the
connection. User can use embedded PPTP and L2TP client/server, IKE and IPSec which are
supported by this router to make a VPN connection or users can run the PPTP client in PC and the
router already provides IPSec and PPTP pass through function to establish a VPN connection if
the user likes to run the PPTP client in his local computer.
802.11g Wireless AP with WPA Support
With integrated 802.11g Wireless Access Point in the router, the device offers a quick and easy
access among wired network, wireless network and broadband connection (ADSL) with single
device simplicity, and as a result, mobility to the users. In addition to 54 Mbps 802.11g data rate, it
also interoperates backward with existing 802.11b equipment. The Wireless Protected Access
(WPA) and Wireless Encryption Protocol (WEP) supported features enhance the security level of
data protection and access control via Wireless LAN.
Fast Ethernet Switch
A 3-port 10/100Mbps fast Ethernet switch is built in with automatic switching between MDI and
MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or crossover cable can be used
directly for auto detection.
3

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 1: Introduction
Multi-Protocol to Establish A Connection
Supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation over
ATM (bridged or routed), PPP over Ethernet (RFC 2516), and IPoA (RFC1577) to establish a
connection with the ISP. The product also supports VC-based and LLC-based multiplexing.
Quick Installation Wizard
Supports a WEB GUI page to install this device quickly. With this wizard, end users can enter the
information easily which they get from their ISP, then surf the Internet immediately.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone devices and
PCs from many different vendors. It makes network simple and affordable for users. UPnP
architecture leverages TCP/IP and the Web to enable seamless proximity networking in addition to
control and data transfer among networked devices. With this feature enabled, users can now
connect to Net meeting or MSN Messenger seamlessly.
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with one IP
address/one Internet access account. Many application layer gateway (ALG) are supported such
as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and
others.
SOHO Firewall Security with DoS and SPI
Along with the built-in NAT natural firewall feature, the router also provides advanced hacker
pattern-filtering protection. It can automatically detect and block Denial of Service (DoS) attacks.
The router is built with Stateful Packet Inspection (SPI) to determine if a data packet is allowed
through the firewall to the private LAN.
Domain Name System (DNS) relay
Provides an easy way to map the domain name (a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this router’s IP
address, every DNS conversion request packet from the PC to this router will be forwarded to the
real DNS in the outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This
dynamic IP address is the WAN IP address. For example, to use the service, you must first apply
for an account from a DDNS service like http://www.dyndns.org/. More than 5 DDNS servers are
supported.
Quality of Service (QoS)
QoS gives you full control over which types of outgoing data traffic should be given priority by the
router, ensuring important data like gaming packets, customer information, or management
information move through the router ay lightning speed, even under heavy load. The QoS features
are configurable by source IP address, destination IP address, protocol, and port. You can throttle
the speed at which different types of outgoing data pass through the router, to ensure P2P users
don’t saturate upload bandwidth, or office browsing doesn’t bring client web serving to a halt. In
addition, or alternatively, you can simply change the priority of different types of upload data and let
the router sort out the actual speeds.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect incoming
service requests and forward either a single port or a range of ports to the specific local computer
to handle it. For example, a user can assign a PC in the LAN acting as a WEB server inside and
expose it to the outside network. Outside users can browse inside web servers directly while it is
4

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 1: Introduction
protected by NAT. A DMZ host setting is also provided to a local computer exposed to the outside
network, Internet.
Rich Packet Filtering
Not only filters the packet based on IP address, but also based on Port numbers. It will filter
packets from and to the Internet, and also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) client and server
In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP)
automatically. In the LAN site, the DHCP server can allocate a range of client IP addresses and
distribute them including IP address, subnet mask as well as DNS IP address to local computers. It
provides an easy way to manage the local IP network.
Static and RIP1/2 Routing
Supports an easy static routing table or RIP1/2 routing protocol to support routing capability.
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
Supports web based GUI for configuration and management. It is user-friendly and comes with on-
line help. It also supports remote management capability for remote users to configure and
manage this product.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
Rich management interfaces
Supports flexible management interfaces with local console port, LAN port, and WAN port. Users
can use terminal applications through the console port to configure and manage the device, or
Telnet, WEB GUI, and SNMP through LAN or WAN ports to configure and manage the device.
5

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 2: Installing the router
Chapter 2: Installing the Router
Important note for using this router
Warnin
g
 Do not use this router in high humidity or high temperatures.
 Do not use the same power source for this router as othe
r
equipment.
 Do not open or repair the case yourself. If this router is too hot,
turn off the power immediately and have it repaired at a qualified
service center.
 Avoid using this product and all accessories outdoors.
A
ttention
 Place this router on a stable surface.
 Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage this router.
Package Contents
VoIP/802.11g ADSL2+ VPN Firewall Router
CD-ROM containing the online manual
RJ-11 ADSL/telephone Cable
Ethernet (CAT-5 LAN) Cable
Console (PS2-RS232) Cable
AC-DC power adapter (12VDC, 1.2A)
A detachable antenna
Quick Start Guide
6

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 2: Installing the router
The Front LEDs
LED Meaning
1 PWR Lit when power is ON.
2 SYS Lit when the system is ready.
3 - 5 LAN Port
1X — 3X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
7 WLAN
Lit green when the wireless connection is established.
Flashes when sending/receiving data.
8 – 9 Phone 1X — 2X
(RJ-11 connector)
Lit green when the phone is off-hook.
10 LINE
Lit when the inbound and outbound calls transmitted
through PSTN.
11 VoIP Lit when SIP registration is OK.
12 PPP / MAIL
Lit steady when there is a PPPoA / PPPoE connection.
Lit and flashed periodically when there is email in the
Inbox.
13 ADSL Lit when successfully connected to an ADSL DSLAM
(“linesync”).
7

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 2: Installing the router
The Rear Ports
3
5
6 1
2
4
9
7
8
Port Meaning
1 Power Switch Power ON/OFF switch
2 PWR Connect the supplied power adapter to this jack.
3 RESET
After the device is powered on, press it to reset the device or
restore to factory default settings.
0-3 seconds: reset the device
6 seconds above: restore to factory default settings (this is
used when you can not login to the router, e.g. forgot the
password)
4
LAN
1X — 3X
(RJ-45 connector)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the
four LAN ports when connecting to a PC or an office/home
network of 10Mbps or 100Mbps.
5 CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a
PC’s RS-232 port (9-pin serial port).
6
Phone
1X ─2X
(RJ-11 connector)
Connect RJ-11 cable to this port when connecting to an analog
phone set.
7 ADSL Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to the ADSL/telephone network.
8
Antenna Connect the detachable antenna to this port.
9 LINE Connect RJ-11 cable to this port when connecting to the
telephone wall jack.
8

VoIP/802.11g ADSL2+ VPN Firewall Router
Chapter 2: Installing the router
Cabling
One of the most common causes of problems is bad cabling or ADSL line(s). Make sure that all
connected devices are turned on. On the front of the product is a bank of LEDs. Verify that the LAN Link
and ADSL line LEDs are lit. If they are not, verify that you are using the proper cables.
Ensure that all other devices connected to the same telephone line as your router (e.g. telephones, fax
machines, analogue modems) have a line filter connected between them and the wall socket (unless
you are using a Central Splitter or Central Filter installed by a qualified and licensed electrician), and
ensure that all line filters are correctly installed and the right way around. Missing line filters or line filters
installed the wrong way around can cause problems with your ADSL connection, including causing
frequent disconnections.
9