Billion BiPAC 8500 User manual

BIPAC-8500/8520
SHDSL VPN Firewall Bridge / Router
User’s Manual
Version Release 1.54c

T
Ta ab bl le e o of f C Co on nt te en nt ts s
C
CH HA AP PT TE ER R 1 1: : I IN NT TR RO OD DU UC CT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 1
INTRODUCTION TO YOUR BIPAC-8500/8520 ROUTER............................................................1
FEATURES ...........................................................................................................................1
BIPAC-8500 / 8520 SHDSL ROUTER APPLICATION ............................................................4
C
CH HA AP PT TE ER R 2 2: : I IN NS ST TA AL LL LI IN NG G T TH HE E R RO OU UT TE ER R. .. .. .. .. .. .. .5 5
IMPORTANT NOTE FOR USING THE BIPAC-8500 / 8520 SHDSL ROUTER ...............................5
PACKAGE CONTENTS ...........................................................................................................5
THE FRONT LEDS OF BIPAC-8500......................................................................................6
THE FRONT LEDS OF BIPAC-8520......................................................................................7
THE REAR PORTS.................................................................................................................8
CABLING..............................................................................................................................9
C
CH HA AP PT TE ER R 3 3: : B BA AS SI IC C I IN NS ST TA AL LL LA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .1 10 0
CONNECTING YOUR ROUTER................................................................................................10
CONFIGURING PCS IN WINDOWS .........................................................................................11
For Windows XP.......................................................................................................................... 11
For Windows 2000...................................................................................................................... 12
For Windows 98 / ME.................................................................................................................. 13
For Windows NT4.0..................................................................................................................... 14
FACTORY DEFAULT SETTINGS.............................................................................................15
Username and Password............................................................................................................ 15
LAN and WAN Port Addresses.................................................................................................... 15
INFORMATION FROM YOUR ISP............................................................................................16
CONFIGURING WITH YOUR WEB BROWSER...........................................................................17
C
CH HA AP PT TE ER R 4 4: : C CO ON NF FI IG GU UR RA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 18 8
STATUS .............................................................................................................................19
ARP Table................................................................................................................................... 19
Routing Table.............................................................................................................................. 20
DHCP Table................................................................................................................................21
Leased Table .........................................................................................21
Expired Table .........................................................................................21
Table of Contents i

Table of Contents ii
Permanent Table....................................................................................21
PPTP Status................................................................................................................................22
IPSec Status ............................................................................................................................... 23
L2TP Status ................................................................................................................................24
Email Status................................................................................................................................24
Event Log.................................................................................................................................... 25
Error Logging .............................................................................................................................. 25
NAT Sessions ............................................................................................................................. 26
UPnP Portmap............................................................................................................................ 26
QUICK START.....................................................................................................................27
CONFIGURATION.................................................................................................................29
LAN (Local Area Network)........................................................................................................... 29
Ethernet..................................................................................................29
Port Setting ............................................................................................29
Port Setting ............................................................................................30
DHCP Server .........................................................................................31
WAN (Wide Area Network).......................................................................................................... 33
ISP .........................................................................................................33
DNS........................................................................................................43
SHDSL ...................................................................................................44
System........................................................................................................................................ 45
Time Zone ..............................................................................................45
Remote Access ......................................................................................46
Firmware Upgrade..................................................................................47
Backup/Restore......................................................................................48
Restart Router........................................................................................49
User Management..................................................................................50
Firewall and Access Control........................................................................................................ 51
General Settings ....................................................................................53
Packet Filter ...........................................................................................54
Intrusion Detection .................................................................................60
MAC Address Filter ................................................................................62
URL Filter ...............................................................................................63
Firewall Log............................................................................................65
VPN (Virtual Private Networks)................................................................................................... 66
PPTP......................................................................................................66
IPSec......................................................................................................71
Advanced Option....................................................................................74
L2TP.......................................................................................................75
QoS (Quality of Service).............................................................................................................. 98
Prioritization ...........................................................................................99

Table of Contents iii
IP Throttling..........................................................................................100
Virtual Server (“Port Forwarding”)..............................................................................................101
Advanced...................................................................................................................................104
Static Routing.......................................................................................104
Dynamic DNS.......................................................................................105
Check Emails .......................................................................................106
Device Management ............................................................................107
SAVE CONFIGURATION TO FLASH ......................................................................................111
LOGOUT...........................................................................................................................112
C
CH HA AP PT TE ER R 5 5: : T TR RO OU UB BL LE ES SH HO OO OT TI IN NG G. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 11 13 3
PROBLEMS STARTING UP THE ROUTER ...............................................................................113
PROBLEMS WITH THE WAN INTERFACE .............................................................................113
PROBLEMS WITH THE LAN INTERFACE ..............................................................................114
A
AP PP PE EN ND DI IX X A A: : P PR RO OD DU UC CT T S SU UP PP PO OR RT T A AN ND D
C
CO ON NT TA AC CT T I IN NF FO OR RM MA AT TI IO ON
N.
.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 11 15 5

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 1: Introduction
Chapter 1: Introduction
Introduction to your BIPAC-8500/8520 Router
Welcome to the Billion BIPAC-8500/8520 Router. Your Billion router is an “all-in-one” unit,
combining an SHDSL modem, SHDSL router and Ethernet network switch, providing everything
you need to get the machines on your network connected to the Internet over your SHDSL
broadband connection. With features such as an SHDSL Quick-Start wizard and DHCP Server,
you can be online in no time at all and with a minimum of fuss and configuration, catering for
first-time users to the guru requiring advanced features and control over their Internet
connection and network.
Features
SHDSL Multi-Mode Standard
Supports downstream and upstream transmission rates of up to 2.3Mbps. It also supports
rate management that allows SHDSL subscribers to select an Internet access speed
suiting their needs and budgets. It is ITU standard PAM16 Line Code, complies with
G.991.2 and G.994.1 standards. Supports Annex A and B mode operation.
Fast Ethernet Switch
A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between MDI
and MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or cross-over cable
can be used directly for auto detection.
Multi-Protocol to Establish A Connection
Supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483
encapsulation over ATM (bridged or routed), PPP over Ethernet (RFC 2516), and IPoA
(RFC1577) to establish a connection with the ISP. The product also supports VC-based
and LLC-based multiplexing.
Quick Installation Wizard
Supports a WEB GUI page to install this device quickly. With this wizard, end users can
enter the information easily which they get from their ISP, then surf the Internet
immediately.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone devices
and PCs from many different vendors. It makes network simple and affordable for users.
UPnP architecture leverages TCP/IP and the Web to enable seamless proximity
networking in addition to control and data transfer among networked devices. With this
feature enabled, users can now connect to Net meeting or MSN Messenger seamlessly.
1

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 1: Introduction
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with
one IP address/one Internet access account. Many application layer gateway (ALG) are
supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping,
NetMeeting, IP phone and others.
Firewall
Supports SOHO firewall with NAT technology, automatically detects and blocks Denial of
Service (DoS) attacks. URL blocking, packet filtering and SPI (Stateful Packet Inspection)
are also supported. The hacker’s attack will be recorded associated with timestamp in the
security logging area. More firewall functions will always be implemented through updated
firmware releases.
Domain Name System (DNS) relay
Provides an easy way to map the domain name (a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this
router’s IP address, every DNS conversion request packet from the PC to this router will
be forwarded to the real DNS in the outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname.
This dynamic IP address is the WAN IP address. For example, to use the service, you
must first apply for an account from a DDNS service like http://www.dyndns.org/. More
than 5 DDNS servers are supported.
Virtual Private Network (VPN)
Allows user to make a tunnel with a remote site directly to secure the data transmission
among the connection. User can use embedded PPTP and L2TP client/server, IKE and
IPSec which are supported by this router to make a VPN connection or users can run the
PPTP client in PC and the router already provides IPSec and PPTP pass through function
to establish a VPN connection if the user likes to run the PPTP client in his local computer.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect
incoming service requests and forward either a single port or a range of ports to the
specific local computer to handle it. For example, a user can assign a PC in the LAN
acting as a WEB server inside and expose it to the outside network. Outside users can
browse inside web servers directly while it is protected by NAT. A DMZ host setting is also
provided to a local computer exposed to the outside network, Internet.
Rich Packet Filtering
Not only filters the packet based on IP address, but also based on Port numbers. It will
filter packets from and to the Internet, and also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) client and server
In the WAN site, the DHCP client can get an IP address from the Internet Service Provider
(ISP) automatically. In the LAN site, the DHCP server can allocate a range of client IP
addresses and distribute them including IP address, subnet mask as well as DNS IP
address to local computers. It provides an easy way to manage the local IP network.
Static and RIP1/2 Routing
Supports an easy static routing table or RIP1/2 routing protocol to support routing
capability.
2

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 1: Introduction
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
Supports web based GUI for configuration and management. It is user-friendly and comes
with on-line help. It also supports remote management capability for remote users to
configure and manage this product.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
Rich management interfaces
Supports flexible management interfaces with local console port, LAN port, and WAN port.
Users can use terminal applications through the console port to configure and manage the
device, or Telnet, WEB GUI, and SNMP through LAN or WAN ports to configure and
manage the device.
3

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 1: Introduction
BIPAC-8500 / 8520 SHDSL Router Application
8500 / 8520
Figure 1.1 Application Diagram of 8500 / 8520
Thank you for your purchase, and welcome to the world of broadband Internet!
4

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 2: Installing the Router
Important note for using the BIPAC-8500 / 8520 SHDSL
Router
 DO NOT use the BIPAC-8500/8520 in high humidity or high
temperatures.
 DO NOT use the same power source for the BIPAC-8500
/
8520
as other equipment.
 DO NOT open or repair the case yourself. If the BIPAC-
8500/8520 is too hot, turn off the power immediately and have it
repaired at a qualified service center.
Warning
A
ttention
 Place the BIPAC-8500/8520 on a stable surface.
 Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage the router.
Package Contents
BIPAC-8500/8520 SHDSL Router
CD-ROM containing the online manual
RJ-11 SHDSL/telephone Cable
Ethernet (CAT-5 LAN) Cable
Console (PS2-RS232) Cable
AC-DC power adapter (12V DC, 1A)
Quick Start Guide
5
Chapter 2: Installing the Router

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
The Front LEDs of BIPAC-8500
6
2
4
1
3
LED Meaning
1 LINE Lit when successfully connected to SHDSL line and it is
synchronized.
2 LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
3 SYS Lit when the system is ready.
4 PWR Lit when power is ON.
Chapter 2: Installing the Router

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 2: Installing the Router
The Front LEDs of BIPAC-8520
3
5
2
1
4
LED Meaning
1
2
LINE 1 & 2
Lit when successfully connected to SHDSL line and it is
synchronized.
3 LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4 SYS Lit when the system is ready.
5 PWR Lit when power is ON.
7

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 2: Installing the Router
The Rear Ports
1
23
4
5
*6
＊Only the BIPAC-8520 has two Line jack ports. BIPAC-8500 has one.
Port Meaning
1 Power Switch Power ON/OFF switch
2 PWR Connect the supplied power adapter to this jack.
3 RESET
After the device is powered on, press it to reset the device or
restore to factory default settings.
0-3 seconds: reset the device
6 seconds above: restore to factory default settings (this is used
when you can not login to the router, e.g. forgot the password)
4 LAN 1X — 4X
(RJ-45 connector)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the
four LAN ports when connecting to a PC or an office/home
network of 10Mbps or 100Mbps.
5 CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a
PC’s RS-232 port (9-pin serial port).
6 LINE 1X — 2X
(RJ-11 connector
Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to the A SHDSL line.
8

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 2: Installing the Router
Cabling
One of the most common causes of problems is bad cabling or SHDSL line(s). Make sure that
all connected devices are turned on. On the front of the product is a bank of LEDs. Verify that
the LAN Link and SHDSL line LEDs are lit. If they are not, verify that you are using the proper
cables.
Ensure that all other devices connected to the same telephone line as your Billion router (e.g.
telephones, fax machines, analogue modems) have a line filter connected between them and
the wall socket (unless you are using a Central Splitter or Central Filter installed by a qualified
and licensed electrician), and ensure that all line filters are correctly installed and the right way
around. Missing line filters or line filters installed the wrong way around can cause problems
with your SHDSL connection, including causing frequent disconnections.
9

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 10
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard
application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me,
etc. The product provides a very easy and user-friendly interface for configuration.
PCs must have an Ethernet interface installed properly and be connected to the router either
directly or through an external repeater hub, and have TCP/IP installed and configured to obtain
an IP address through a DHCP server or a fixed IP address that must be in the same subnet as
the router. The default IP address of the router is 192.168.1.254 and the subnet mask is
255.255.255.0 (i.e. any attached PC must be in the same subnet, and have an IP address in the
range of 192.168.1.1 to 192.168.1.253). The best and easiest way is to configure the PC to get
an IP address automatically from the router using DHCP. If you encounter any problems
accessing the router’s web interface it may also be advisable to uninstall any kind of software
firewall on your PCs, as they can cause problems accessing the 192.168.1.254 IP address of
the router. Users should make their own decisions on how to best protect their network.
Please follow the steps below for your PC’s network environment installation. First of all, please
check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter
must be installed. If not, please refer to your Windows-related or other operating system
manuals.
A
ny TCP/IP capable workstation can be used to communicate with or
through the BIPAC-8500/8520. To configure other types of workstations,
p
lease consult the manufacturer’s documentation.
Connecting your router
1. Connect the Router to a LAN (Local Area Network) and the SHDSL/telephone network.
2. Power on the device.
3. Make sure the PWR and SYS LEDs are lit steadily and that the relevant LAN LED is lit.

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 11
Configuring PCs in Windows
For Windows XP
1. Go to Start / Control Panel (in Classic View). In the
Control Panel, double-click Network Connections.
2. Double-click Local Area Connection. (See Figure 3.1)
3. In the LAN Area Connection Status window, click
Properties. (See Figure 3.2)
4. Select Internet Protocol (TCP/IP) and click
Properties. (See Figure 3.3)
5. Select the Obtain an IP address automatically and
Obtain DNS server address automatically radio
buttons. (See Figure 3.4)
6. Click OK to finish the configuration.
Figure 3.1: LAN Area Connection
Figure 3.2: LAN Connection Status
Figure 3.3: TCP / IP
Figure 3.4: IP Address & DNS
Configuration

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 12
For Windows 2000
1. Go to Start / Settings / Control Panel. In the Control
Panel, double-click Network and Dial-up
Connections.
2. Double-click Local Area (“LAN”) Connection.(See
Figure 3.5)
3. In the LAN Area Connection Status window, click
Properties. (See Figure 3.6)
4. Select Internet Protocol (TCP/IP) and click
Properties. (See Figure 3.7)
5. Select the Obtain an IP address automatically and
Obtain DNS server address automatically radio
buttons. (See Figure 3.8)
6. Click OK to finish the configuration.
Figure 3.5: LAN Area Connection
Figure 3.6: LAN Connection Status
Figure 3.7: TCP / IP
F
igure 3.8: IP Address & DNS
Configuration

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 13
For Windows 98 / ME
1. Go to Start / Settings / Control Panel. In the Control
Panel, double-click Network and choose the
Configuration tab.
2. Select TCP / IP -> NE2000 Compatible, or the name of
any Network Interface Card (NIC) in your PC. (See
Figure 3.9)
3. Click Properties.
4. Select the IP Address tab. In this page, click the Obtain
an IP address automatically radio button. (See Figure
3.10)
5. Then select the DNS Configuration tab. (See Figure
3.11)
6. Select the Disable DNS radio button and click OK to
finish the configuration.
Figure 3.9: TCP / IP
Figure 3.10: IP Address
Figure 3.11: DNS Configuration

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 14
For Windows NT4.0
1. Go to Start / Settings / Control Panel. In the Control
Panel, double-click Network and choose the Protocols
tab.
2. Select TCP/IP Protocol and click Properties. (See
Figure 3.12)
3. Select the Obtain an IP address from a DHCP server
radio button and click OK. (See Figure 3.13)
Figure 3.12: TCP / IP
Figure 3.13: IP Address

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 15
Factory Default Settings
Before configuring your, you need to know the following default settings.
Web Interface:
Username: admin
Password: admin
LAN Device IP Settings:
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
ISP setting in WAN site:
PPPoE
DHCP server:
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100
Username and Password
The default username and password are “admin” and “admin” respectively.
Attention
Attention
If you ever forget the password to log in, you may press the RESET button
up to 6 seconds to restore the factory default settings.
LAN and WAN Port Addresses
The parameters of LAN and WAN ports are pre-set in the factory. The default values are
shown below.
LAN Port WAN Port
IP address 192.168.1.254
Subnet Mask 255.255.255.0
DHCP server function Enabled
IP addresses for
distribution to PCs 100 IP addresses continuing from
192.168.1.100 through 192.168.1.199
The PPPoE function is enabled
to automatically get the WAN
port configuration from the ISP,
but you have to set the
username and password first.

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 3: Basic Installation 16
Information from your ISP
Before configuring this device, you have to check with your ISP (Internet Service Provider) what
kind of service is provided such as PPPoE, PPPoA, RFC1483, or IPoA.
Gather the information as illustrated in the following table and keep it for reference.
PPPoE VPI/VCI, VC-based/LLC-based multiplexing, Username, Password, Service
Name, and Domain Name System (DNS) IP address (it can be automatically
assigned by your ISP when you connect or be set manually).
PPPoA VPI/VCI, VC-based/LLC-based multiplexing, Username, Password, and
Domain Name System (DNS) IP address (it can be automatically assigned by
your ISP when you connect or be set manually).
RFC1483 Bridged VPI/VCI, VC-based/LLC-based multiplexing to use Bridged Mode.
RFC1483 Routed VPI/VCI, VC-based/LLC-based multiplexing, IP address, Subnet mask,
Gateway address, and Domain Name System (DNS) IP address (it is fixed IP
address).
IPoA VPI/VCI, VC-based/LLC-based multiplexing, IP address, Subnet mask,
Gateway address, and Domain Name System (DNS) IP address (it is fixed IP
address).