Billion BiPAC 8500/8520 User manual

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
Last revision 11-08-08
BiPAC 8500/8520
SHDSL VPN Firewall Bridge/ Router
BiPAC 8501/8521
SHDSL.bis (VPN) Firewall Bridge/Router
User Manual

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
i
T
Ta ab bl le e o of f C Co on nt te en nt ts s
C
CH HA AP PT TE ER R 1 1: : I IN NT TR RO OD DU UC CT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 1
I NTRODUCTION TO YOUR R OUTER ........................................................................................................ 1
F EATURES ............................................................................................................................................. 1
C
CH HA AP PT TE ER R 2 2: : I IN NS ST TA AL LL LI IN NG G T TH HE E R RO OU UT TE ER R. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .4 4
I MPORTANT NOTE FOR USING THIS R OUTER .......................................................................................... 4
P ACKAGE C ONTENTS ............................................................................................................................ 4
T HE F RONT LED S OF B I PAC 8500....................................................................................................... 5
T HE F RONT LED S OF B I PAC 8520....................................................................................................... 6
T HE F RONT LED S OF B I PAC 8501....................................................................................................... 7
T HE F RONT LED S OF B I PAC 8521....................................................................................................... 8
T HE R EAR P ORTS OF B I PAC 8500 / 8520 ............................................................................................. 9
T HE R EAR P ORTS OF B I PAC 8501...................................................................................................... 10
T HE R EAR P ORTS OF B I PAC 8521.......................................................................................................11
C ABLING ............................................................................................................................................ 12
C
CH HA AP PT TE ER R 3 3: : B BA AS SI IC C I IN NS ST TA AL LL LA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 13 3
C ONNECTING YOUR ROUTER .............................................................................................................. 13
Network Configuration................................................................................................................. 14
F ACTORY D EFAULT S ETTINGS ............................................................................................................. 23
Web Interface (Username and Password): ................................................................................... 23
Device LAN IP Settings: .............................................................................................................. 23
ISP setting in WAN site:............................................................................................................... 23
DHCP server:................................................................................................................................ 23
LAN and WAN Port Addresses .................................................................................................... 23
I NFORMATION FROM YOUR ISP........................................................................................................... 24
C ONFIGURING WITH YOUR W EB B ROWSER ........................................................................................ 25
C
CH HA AP PT TE ER R 4 4: : C CO ON NF FI IG GU UR RA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .2 26 6
S TATUS ............................................................................................................................................... 27
ARP Table..................................................................................................................................... 27
Routing Table ............................................................................................................................... 28
DHCP Table.................................................................................................................................. 29
PPTP Status (BiPAC 8500/ 8501/ 8520 Only) ............................................................................. 30
IPSec Status (BiPAC 8500/ 8501/ 8520 Only)............................................................................. 31
L2TP Status (BiPAC 8500/ 8501/ 8520 Only) ............................................................................. 32
Email Status.................................................................................................................................. 32
Event Log ..................................................................................................................................... 33
Error Log ...................................................................................................................................... 33

ii
NAT Sessions ............................................................................................................................... 34
Diagnostic..................................................................................................................................... 34
UPnP Portmap .............................................................................................................................. 35
Q UICK S TART ..................................................................................................................................... 36
C ONFIGURATION ................................................................................................................................ 38
LAN (Local Area Network) ......................................................................................................... 38
WAN (Wide Area Network) ......................................................................................................... 46
System .......................................................................................................................................... 74
Firewall and Access Control......................................................................................................... 80
VPN (Virtual Private Networks) (BiPAC 8500/ 8501/ 8520 Only) ............................................. 97
QoS (Quality of Service)............................................................................................................ 136
Virtual Server (“Port Forwarding”)............................................................................................ 144
Time Schedule ............................................................................................................................ 151
Advanced.................................................................................................................................... 153
S AVE C ONFIGURATION TO F LASH ..................................................................................................... 165
L OGOUT ........................................................................................................................................... 165
C
CH HA AP PT TE ER R 5 5: : T TR RO OU UB BL LE ES SH HO OO OT TI IN NG G. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 16 66 6
A
AP PP PE EN ND DI IX X A A: : P PR RO OD DU UC CT T S SU UP PP PO OR RT T A AN ND D C CO ON NT TA AC CT T I IN NF FO OR RM MA AT TI IO ON N. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .1 16 67 7

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction
1
Chapter 1: Introduction
Introduction to your Router
Welcome to the Billion BiPAC 8500/ 8501/ 8520/ 8521 SHDSL Router. Your SHDSL router is an
“all-in-one” unit, combining an SHDSL modem, SHDSL router and Ethernet network switch,
providing everything you need to get the machines on your network connected to the Internet
over your SHDSL broadband connection. With features such as an SHDSL Quick-Start wizard
and DHCP Server, you can be online in no time at all and with minimum fuss and configuration,
catering for both first-time users and professionals who require advanced features to control
their Internet connection and network.
Features
SHDSL Multi-Mode Standard
BiPAC 8500 / 8520 SHDSL supports downstream and upstream transmission rates of up
to 2.3 / 4.6 Mbps, respectively, and BiPAC 8501 SHDSL.bis can support up to 5.7 Mbps
on 2-wire and 8521 SHDSL.bis can support up to 11.4 Mbps on 4-wire. BiPAC 85xx
series also supports rate management that allows SHDSL subscribers to select an
Internet access speed suiting their needs and budgets. BiPAC 8500/ 8520 and 8501/
8521 follows ITU standard PAM16 Line Code complies with G.991.2 and G.994.1
standards, and BiPAC 8501 follows PAM 32 Line code with G.991.2 and G.991.2.bis
standards. These three models can support Annex A and B operating mode.
Fast Ethernet Switch
A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between
MDI and MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or crossover
cable can be used directly for auto detection.
Multi-Protocol to establish a connection
It supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483
encapsulation over ATM (bridged or routed), PPP over Ethernet (RFC 2516), and IPoA
(RFC1577) to establish a connection with the ISP. The product also supports VC-based
and LLC-based multiplexing.
Quick Installation Wizard
It supports a WEB GUI page to install this device quickly. With this wizard, end users not
only can enter the information they get from their ISP easily, it also enables immediate
internet suffing.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone
devices and PCs from many different vendors. It makes networking simple and
affordable for users. UPnP architecture leverages TCP/IP and the Web to enable
seamless proximity networking in addition to controling data transfer among networked

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction 2
devices. With this feature enabled, users can now connect to Net meeting or MSN
Messenger seamlessly.
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with
one IP address/one Internet access account. Many application layer gateways (ALG) are
supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping,
NetMeeting, IP phone and others.
SOHO Firewall Security with DoS and SPI
Along with the built-in NAT natural firewall feature, the router also provides advanced
hacker pattern-filtering protection. It can automatically detect and block Denial of Service
(DoS) attacks. The router is built with Stateful Packet Inspection (SPI) to determine if a
data packet is allowed access to the private LAN through the firewall.
Domain Name System (DNS) relay
It provides an easy way to map the domain name (a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this
router IP address, every DNS conversion request packet from the PC to this router will
be forwarded to the real DNS of an outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname.
This dynamic IP address is the WAN IP address. For example, to use the service, you
must first apply for an account from a DDNS service like http://www.dyndns.org/. More
than 5 DDNS servers are supported.
Quality of Service (QoS)
QoS gives you full control over which type of outgoing data traffic should be given priority
by the router, ensuring important data like gaming packets, customer information, or
management information move through the router speed fast, even under heavy load.
The QoS features are configurable by source IP address, destination IP address,
protocol, and port. You can throttle the speed of different types of outgoing data passing
through the router to ensure P2P users don’t saturate the upload bandwidth, or office
browsing doesn’t bring client web serving to a halt. Alternatively, you can simply change
the priority of different types of upload data and let the router sort out the actual speeds
of each data transmission.
Virtual Private Network (VPN) (BiPAC 8500/ 8501/ 8520 Only)
It allows user to establish a virtual network with a remote computer. In this way data can
be transmitted securedly through the virtual tunnel formed within the network. User can
use embedded PPTP and L2TP client/server, IKE and IPSec which are supported by this
router to make a VPN connection or run the PPTP client in PC and the router which
provides IPSec and PPTP pass through function to establish a VPN connection if the
user likes to run the PPTP client in his local computer.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect
incoming service requests and forward either a single port or a range of ports to specific
local computer for handling. For example, a user can assign a PC in the LAN acting as a
WEB server inside and expose it to the outside network. Outside users can browse
inside web servers directly while it is protected by NAT. A DMZ host setting is also
provided to a local computer exposed to the outside network, Internet.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 1: Introduction
3
Rich Packet Filtering
Not only filters the packet based on IP address, but also based on Port numbers. It will
filter packets from and to the Internet. It also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) client and server
In the WAN site, the DHCP client can get an IP address from the Internet Service
Provider (ISP) automatically. In the LAN site, the DHCP server can allocate a range of
client IP addresses including IP address, subnet mask as well as DNS IP address and
distribute them to local computers. It provides an easy way to manage the local IP
network.
Static and RIP1/2 Routing
It has routing capability and supports easy static routing table or RIP1/2 routing protocol.
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
It supports web based GUI for configuration and management. It is user-friendly and
comes with on-line help. It also supports remote management capability for remote users
to configure and manage this product.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
Rich Management Interfaces
It supports flexible management interfaces with local console port, LAN port, and WAN
port. Users can use terminal applications through the console port to configure and
manage the device, or Telnet, WEB GUI, and SNMP through LAN or WAN ports to
configure and manage the device.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 4
Chapter 2: Installing the Router
Important note for using this Router
Package Contents
SHDSL Firewall Bridge/Router (BiPAC 8500/8520) or SHDSL.bis Firewall Bridge/Router
(BiPAC 8501/8521)
CD-ROM containing the online manual
RJ-11 SHDSL/telephone Cable (One Cable for BiPAC 8500/8501) (Two Cables for
BiPAC 8520/8521)
Ethernet (CAT-5 LAN) Cable
Console (PS2-RS232) Cable
AC-DC power adapter (12V DC, 1A)
Quick Start Guide


Place the router on a stable surface.



Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage the router.
Attention


Do not use the router in high humidity or high temperatures.


Do not use the same power source for the router as other
equipment.


Do not open or repair the case yourself. If the router is too
hot, turn off the power immediately and have it repaired at a
qualified service center.


Avoid using this product and all accessories outdoors.
Warning

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router
5
The Front LEDs of BiPAC 8500
LED Meaning
1 LINE Lit when successfully connected to SHDSL line and when it is
synchronized.
2
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
3 SYS Lit when the system is ready.
4 PWR Lit when power is ON.
2
3
4
1

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 6
The Front LEDs of BiPAC 8520
LED Meaning
1
2
LINE 1 & 2
Lit when successfully connected to SHDSL line and when it is
synchronized.
3
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4 SYS Lit when the system is ready.
5 PWR Lit when power is ON.
3
4
5
2
1

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router
7
The Front LEDs of BiPAC 8501
LED Meaning
1
PWR Lit when power is ON.
2
SYS Lit when the system is ready.
3
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4
LINE Lit when successfully connected to SHDSL line and when it is
synchronized.
3
2
1
4

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 8
The Front LEDs of BiPAC 8521
LED Meaning
1
PWR Lit green when power is ON.
2
SYS Flashes when the system is being started. Then lit green when the
system is ready.
3
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4
5 LINE 1 & 2 The green LED will flash steadily when successfully connected to
SHDSL line and when it is synchronized.
1
2
3
4
5

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router
9
The Rear Ports of BiPAC 8500 / 8520
Port Meaning
1 Power Switch Power ON/OFF switch
2 PWR Connect the supplied power adapter to this jack.
3 RESET
To be sure the device is being turned on press RESET button
for:
1-3 seconds: quick reset the device.
6 seconds above, and power off, power on the device:
restore to factory default settings. (Cannot login to the router or
forgot your Username/Password. Press the button for more than
6 seconds).
Caution: After pressing the RESET button for more than 6
seconds, to be sure you power cycle the device again.
4
LAN
1X — 4X
(RJ-45 connector)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the
four LAN ports when connecting to a PC or an office/home
network of 10Mbps or 100Mbps.
5 CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a
PC’s RS-232 port (9-pin serial port).
6
LINE
1X — 2X
(RJ-11 connector)
Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to the SHDSL line.
1
2
3
4
5
6
Only BiPAC 8520 has two Line jack ports. BiPAC 8500 has one.
.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 10
The Rear Ports of BiPAC 8501
Port Meaning
1
Power Switch Power ON/OFF switch
2
PWR Connect the supplied power adapter to this jack.
3
RESET
To be sure the device is being turned on->press RESET button for:
1-3 seconds: quick reset the device.
6 seconds above, and power off, power on the device: restore to
factory default settings. (Cannot login to the router or forgot your
Username/Password. Press the button for more than 6 seconds).
Caution: After pressing the RESET button for more than 6 seconds, to
be sure you power cycle the device again.
4
LAN
1X — 4X
(RJ-45 connector)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four
LAN ports when connecting to a PC or an office/home network of
10Mbps or 100Mbps.
5
CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a PC’s
RS-232 port (9-pin serial port).
6
LINE Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to SHDSL line.
3
1
2
4
6
5

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router
11
The Rear Ports of BiPAC 8521
Port Meaning
1 Power Switch Power ON/OFF switch
2 PWR Connect the supplied power adapter to this jack.
3 RESET
To be sure the device is being turned on->press RESET button for:
1-3 seconds: quick reset the device.
Press 6 seconds above to power off the device, then power on the
device to restore the factory default settings. (Used when cannot login
to the router or forgot your Username/Password. Press the button for
more than 6 seconds).
Caution: After pressing the RESET button for more than 6 seconds, to
be sure you power cycle the device again.
4
LAN
1X — 4X
(RJ-45 connector)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four
LAN ports when connecting to a PC or an office/home network of
10Mbps or 100Mbps.
5 CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a PC’s
RS-232 port (9-pin serial port).
6
LINE
1X — 2X
(RJ-11 connector)
Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to SHDSL line.
3
1
2
4
6
5

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 2: Installing the router 12
Cabling
One of the most common causes to problem is bad cabling or SHDSL line(s). Make sure that all
connected devices are turned on. On the front panel of the product is a row of LEDs. Verify that
the LAN Link and SHDSL line LEDs are lit. If they are not, verify that you are using the proper
cables.

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
Chapter 3: Basic Installation
13
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard
application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me,
etc. The product provides an easy and user-friendly interface for configuration.
Please check your PC’s network components. The TCP/IP protocol stack and Ethernet network
adapter must be installed. If not, please refer to your Windows-related or other operating
system manuals.
There are ways to connect to the router, either through an external repeater hub to the router or
directly connecting with PCs. However, to be sure PCs have an Ethernet interface installed
properly prior to connecting to the router. You ought to configure your PCs to obtain an IP
address through a DHCP server or a fixed IP address that must be in the same subnet as the
router. The default IP address of the router is 192.168.1.254 and the subnet mask is
255.255.255.0 (i.e. any attached PC must be in the same subnet, and have an IP address in the
range of 192.168.1.1 to 192.168.1.253). The best and easiest way is to configure the PC to get
an IP address automatically from the router using DHCP. If you encounter any problem
accessing the router’s web interface it may also be advisable to uninstall any kind of software
firewall on your PCs, as they can cause problems accessing the 192.168.1.254 IP address of
the router. Users should make their own decisions on how to best protect their network.
Please follow the steps below for your PC’s network environment installation.
Connecting your router
1. Connect the Router to a LAN (Local Area Network) and the SHDSL LINE.
2. Power on the device.
3. Make sure the PWR and SYS LEDs are lit steadily and that the relevant LAN LED are lit.
Any TCP/IP capable workstation can be used to communicate with or
through the SHDSL Router. To configure other types of workstations, please
consult the manufacturer’s documentation.

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
Chapter 3: Basic Installation
14
Network Configuration
For Windows Vista
1. Go to Start. Click on
Network.
2. Then click on Network and
Sharing Center at the top
bar.
3. When the Network and
Sharing Center window
pops up, select and click on
Manage network
connections on the left
window pane.
4. Select the Local Area
Connection, and right click
the icon to select
Properties.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 3: Basic Installation
15
5. Select Internet Protocol
Version 4 (TCP/IPv4) then
click Properties.
6. In the TCP/IPv4 properties
window, select the Obtain
an IP address
automatically and Obtain
DNS Server address
automatically radio
buttons. Then click OK to
exit the setting.
7. Click OK again in the Local
Area Connection
Properties window to apply
the new configuration.

Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router
Chapter 3: Basic Installation
16
For Windows XP
1. Go to Start / Control Panel
(in Classic View). In the
Control Panel, double-click
on Network Connections
2. Double-click Local Area
Connection.
3. In the Local Area
Connection Status window,
click Properties.