Billion BiPAC 8500/8520 User manual

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
Last revision 11-08-08
BiPAC 8500/8520
SHDSL VPN Firewall Bridge/ Router
BiPAC 8501/8521
SHDSL.bis (VPN) Firewall Bridge/Router
User Manual

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
i
T
Ta ab bl le e o of f C Co on nt te en nt ts s
C
CH HA AP PT TE ER R 1 1: : I IN NT TR RO OD DU UC CT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 1
I NTRODUCTION TO YOUR R OUTER ........................................................................................................ 1
F EATURES ............................................................................................................................................. 1
C
CH HA AP PT TE ER R 2 2: : I IN NS ST TA AL LL LI IN NG G T TH HE E R RO OU UT TE ER R. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .4 4
I MPORTANT NOTE FOR USING THIS R OUTER .......................................................................................... 4
P ACKAGE C ONTENTS ............................................................................................................................ 4
T HE F RONT LED S OF B I PAC 8500....................................................................................................... 5
T HE F RONT LED S OF B I PAC 8520....................................................................................................... 6
T HE F RONT LED S OF B I PAC 8501....................................................................................................... 7
T HE F RONT LED S OF B I PAC 8521....................................................................................................... 8
T HE R EAR P ORTS OF B I PAC 8500 / 8520 ............................................................................................. 9
T HE R EAR P ORTS OF B I PAC 8501...................................................................................................... 10
T HE R EAR P ORTS OF B I PAC 8521.......................................................................................................11
C ABLING ............................................................................................................................................ 12
C
CH HA AP PT TE ER R 3 3: : B BA AS SI IC C I IN NS ST TA AL LL LA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 13 3
C ONNECTING YOUR ROUTER .............................................................................................................. 13
Network Configuration................................................................................................................. 14
F ACTORY D EFAULT S ETTINGS ............................................................................................................. 23
Web Interface (Username and Password): ................................................................................... 23
Device LAN IP Settings: .............................................................................................................. 23
ISP setting in WAN site:............................................................................................................... 23
DHCP server:................................................................................................................................ 23
LAN and WAN Port Addresses .................................................................................................... 23
I NFORMATION FROM YOUR ISP........................................................................................................... 24
C ONFIGURING WITH YOUR W EB B ROWSER ........................................................................................ 25
C
CH HA AP PT TE ER R 4 4: : C CO ON NF FI IG GU UR RA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .2 26 6
S TATUS ............................................................................................................................................... 27
ARP Table..................................................................................................................................... 27
Routing Table ............................................................................................................................... 28
DHCP Table.................................................................................................................................. 29
PPTP Status (BiPAC 8500/ 8501/ 8520 Only) ............................................................................. 30
IPSec Status (BiPAC 8500/ 8501/ 8520 Only)............................................................................. 31
L2TP Status (BiPAC 8500/ 8501/ 8520 Only) ............................................................................. 32
Email Status.................................................................................................................................. 32
Event Log ..................................................................................................................................... 33
Error Log ...................................................................................................................................... 33

ii
NAT Sessions ............................................................................................................................... 34
Diagnostic..................................................................................................................................... 34
UPnP Portmap .............................................................................................................................. 35
Q UICK S TART ..................................................................................................................................... 36
C ONFIGURATION ................................................................................................................................ 38
LAN (Local Area Network) ......................................................................................................... 38
WAN (Wide Area Network) ......................................................................................................... 46
System .......................................................................................................................................... 74
Firewall and Access Control......................................................................................................... 80
VPN (Virtual Private Networks) (BiPAC 8500/ 8501/ 8520 Only) ............................................. 97
QoS (Quality of Service)............................................................................................................ 136
Virtual Server (“Port Forwarding”)............................................................................................ 144
Time Schedule ............................................................................................................................ 151
Advanced.................................................................................................................................... 153
S AVE C ONFIGURATION TO F LASH ..................................................................................................... 165
L OGOUT ........................................................................................................................................... 165
C
CH HA AP PT TE ER R 5 5: : T TR RO OU UB BL LE ES SH HO OO OT TI IN NG G. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 16 66 6
A
AP PP PE EN ND DI IX X A A: : P PR RO OD DU UC CT T S SU UP PP PO OR RT T A AN ND D C CO ON NT TA AC CT T I IN NF FO OR RM MA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 16 67 7

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction
1
Chapter 1: Introduction
Introduction to your Router
Welcome to the Billion BiPAC 8500/ 8501/ 8520/ 8521 SHDSL Router. Your SHDSL router is an
“all-in-one” unit, combining an SHDSL modem, SHDSL router and Ethernet network switch,
providing everything you need to get the machines on your network connected to the Internet
over your SHDSL broadband connection. With features such as an SHDSL Quick-Start wizard
and DHCP Server, you can be online in no time at all and with minimum fuss and configuration,
catering for both first-time users and professionals who require advanced features to control
their Internet connection and network.
Features
SHDSL Multi-Mode Standard
BiPAC 8500 / 8520 SHDSL supports downstream and upstream transmission rates of up
to 2.3 / 4.6 Mbps, respectively, and BiPAC 8501 SHDSL.bis can support up to 5.7 Mbps
on 2-wire and 8521 SHDSL.bis can support up to 11.4 Mbps on 4-wire. BiPAC 85xx
series also supports rate management that allows SHDSL subscribers to select an
Internet access speed suiting their needs and budgets. BiPAC 8500/ 8520 and 8501/
8521 follows ITU standard PAM16 Line Code complies with G.991.2 and G.994.1
standards, and BiPAC 8501 follows PAM 32 Line code with G.991.2 and G.991.2.bis
standards. These three models can support Annex A and B operating mode.
Fast Ethernet Switch
A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between
MDI and MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or crossover
cable can be used directly for auto detection.
Multi-Protocol to establish a connection
It supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483
encapsulation over ATM (bridged or routed), PPP over Ethernet (RFC 2516), and IPoA
(RFC1577) to establish a connection with the ISP. The product also supports VC-based
and LLC-based multiplexing.
Quick Installation Wizard
It supports a WEB GUI page to install this device quickly. With this wizard, end users not
only can enter the information they get from their ISP easily, it also enables immediate
internet suffing.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone
devices and PCs from many different vendors. It makes networking simple and
affordable for users. UPnP architecture leverages TCP/IP and the Web to enable
seamless proximity networking in addition to controling data transfer among networked

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction 2
devices. With this feature enabled, users can now connect to Net meeting or MSN
Messenger seamlessly.
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with
one IP address/one Internet access account. Many application layer gateways (ALG) are
supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping,
NetMeeting, IP phone and others.
SOHO Firewall Security with DoS and SPI
Along with the built-in NAT natural firewall feature, the router also provides advanced
hacker pattern-filtering protection. It can automatically detect and block Denial of Service
(DoS) attacks. The router is built with Stateful Packet Inspection (SPI) to determine if a
data packet is allowed access to the private LAN through the firewall.
Domain Name System (DNS) relay
It provides an easy way to map the domain name (a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this
router IP address, every DNS conversion request packet from the PC to this router will
be forwarded to the real DNS of an outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname.
This dynamic IP address is the WAN IP address. For example, to use the service, you
must first apply for an account from a DDNS service like http://www.dyndns.org/. More
than 5 DDNS servers are supported.
Quality of Service (QoS)
QoS gives you full control over which type of outgoing data traffic should be given priority
by the router, ensuring important data like gaming packets, customer information, or
management information move through the router speed fast, even under heavy load.
The QoS features are configurable by source IP address, destination IP address,
protocol, and port. You can throttle the speed of different types of outgoing data passing
through the router to ensure P2P users don’t saturate the upload bandwidth, or office
browsing doesn’t bring client web serving to a halt. Alternatively, you can simply change
the priority of different types of upload data and let the router sort out the actual speeds
of each data transmission.
Virtual Private Network (VPN) (BiPAC 8500/ 8501/ 8520 Only)
It allows user to establish a virtual network with a remote computer. In this way data can
be transmitted securedly through the virtual tunnel formed within the network. User can
use embedded PPTP and L2TP client/server, IKE and IPSec which are supported by this
router to make a VPN connection or run the PPTP client in PC and the router which
provides IPSec and PPTP pass through function to establish a VPN connection if the
user likes to run the PPTP client in his local computer.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect
incoming service requests and forward either a single port or a range of ports to specific
local computer for handling. For example, a user can assign a PC in the LAN acting as a
WEB server inside and expose it to the outside network. Outside users can browse
inside web servers directly while it is protected by NAT. A DMZ host setting is also
provided to a local computer exposed to the outside network, Internet.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction
3
Rich Packet Filtering
Not only filters the packet based on IP address, but also based on Port numbers. It will
filter packets from and to the Internet. It also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) client and server
In the WAN site, the DHCP client can get an IP address from the Internet Service
Provider (ISP) automatically. In the LAN site, the DHCP server can allocate a range of
client IP addresses including IP address, subnet mask as well as DNS IP address and
distribute them to local computers. It provides an easy way to manage the local IP
network.
Static and RIP1/2 Routing
It has routing capability and supports easy static routing table or RIP1/2 routing protocol.
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
It supports web based GUI for configuration and management. It is user-friendly and
comes with on-line help. It also supports remote management capability for remote users
to configure and manage this product.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
Rich Management Interfaces
It supports flexible management interfaces with local console port, LAN port, and WAN
port. Users can use terminal applications through the console port to configure and
manage the device, or Telnet, WEB GUI, and SNMP through LAN or WAN ports to
configure and manage the device.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 4
Chapter 2: Installing the Router
Important note for using this Router
Package Contents
SHDSL Firewall Bridge/Router (BiPAC 8500/8520) or SHDSL.bis Firewall Bridge/Router
(BiPAC 8501/8521)
CD-ROM containing the online manual
RJ-11 SHDSL/telephone Cable (One Cable for BiPAC 8500/8501) (Two Cables for
BiPAC 8520/8521)
Ethernet (CAT-5 LAN) Cable
Console (PS2-RS232) Cable
AC-DC power adapter (12V DC, 1A)
Quick Start Guide


Place the router on a stable surface.



Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage the router.
Attention


Do not use the router in high humidity or high temperatures.


Do not use the same power source for the router as other
equipment.


Do not open or repair the case yourself. If the router is too
hot, turn off the power immediately and have it repaired at a
qualified service center.


Avoid using this product and all accessories outdoors.
Warning

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router
5
The Front LEDs of BiPAC 8500
LED Meaning
1 LINE Lit when successfully connected to SHDSL line and when it is
synchronized.
2
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
3 SYS Lit when the system is ready.
4 PWR Lit when power is ON.
2
3
4
1

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 6
The Front LEDs of BiPAC 8520
LED Meaning
1
2
LINE 1 & 2
Lit when successfully connected to SHDSL line and when it is
synchronized.
3
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4 SYS Lit when the system is ready.
5 PWR Lit when power is ON.
3
4
5
2
1