Billion 810VGTX Router Page | 1
Table of Contents CHAPTER 1: INTRODUCTION ..........................................................................................................................................3 Introduction to your Router ..............................................................................................................................................3 Features .....................................................................................................................................................
Billion 810VGTX Router Firewall and Access Control ..................................................................................................................................... 57 VPN - Virtual Private Networks ................................................................................................................................. 71 L2TP (Layer Two Tunneling Protocol) .......................................................................................................................
Billion 810VGTX Router CHAPTER 1: INTRODUCTION Introduction to your Router Welcome to the 3G/VoIP/802.11g/ADSL2+/VPN Firewall Router. The router is an “all-in-one” ADSL router, combining an ADSL modem, ADSL router and Ethernet network switch functionalities, providing everything you need to get the machines on your network connected to the Internet over your ADSL broadband connection.
Billion 810VGTX Router Quick Installation Wizard It supports a WEB GUI page to install this device quickly. With this wizard, end users can enter the information easily which they get from their ISP, then surf the Internet immediately. Universal Plug and Play (UPnP) and UPnP NAT Traversal This protocol is used to enable simple and robust connectivity among stand-alone devices and PCs from many different vendors. It makes network simple and affordable for users.
Billion 810VGTX Router Rich Packet Filtering Not only filters the packet based on IP address, but also based on Port numbers. It will filter packets from and to the Internet, and also provides a higher level of security control. Dynamic Host Configuration Protocol (DHCP) Client and Server In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically.
Billion 810VGTX Router CHAPTER 2: INSTALLING THE ROUTER Important note for using this router Warning Do not use the router in high humidity or high temperatures. Do not use the same power source for the router as other equipment. Do not open or repair the case yourself. If the router is too hot, turn off the power immediately and have it repaired at a qualified service center. Avoid using this product and all accessories outdoors. Place the router on a stable surface.
Billion 810VGTX Router Device Description The Front LEDs LED Meaning Both red and green LEDs lit together when power is ON. 1 Power Ethernet Port 2 1X — 4X (RJ-45 connector) 3 USB Lit red means system failure. Restart the device or contact Billion for support. Lit green when the device is ready. Lit when one of LAN ports is connected to an Ethernet device. Lit green when the speed of transmission is 100Mbps; Lit orange when the speed of transmission is 10Mbps.
Billion 810VGTX Router The Rear Ports Ethernet port #4 can be used as a console port. You need a special console connector which is included in the package to connect with the LAN. LED Meaning 1 Antenna Connect the detachable antenna to this port. 2 DSL Connect this port to the ADSL/telephone network with the RJ-11 cable (telephone) provided. 3 Line Connect this port to the telephone jack on the wall with RJ-11 cable.
Billion 810VGTX Router Cabling One of the most common causes of problems is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the LAN Link and ADSL line LEDs are lit. If they are not, verify if you are using the proper cables. Make sure that all devices (e.g.
Billion 810VGTX Router CHAPTER 3: BASIC INSTALLATION The router can be configured through your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me/Vista, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC network components. The TCP/IP protocol stack and Ethernet network adapter must be installed.
Billion 810VGTX Router Network Configuration Configuring PC in Windows Vista 1. Go to Start. Click on Network. 2. Then click on Network and Sharing Center at the top bar. 3. When t h e Network and Sharing Center Window pops up, select and click on Manage Network connections on the left window column. 4. Select the Local Area Connection, and right click the icon to select Properties. 5. Select Internet Protocol Version 4 (TCP/IP) then Click Next. 6.
Billion 810VGTX Router Configuring PC in Windows XP 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click Network Connections. 2. Double-click Local Area Connection. 3. In the LAN Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.
Billion 810VGTX Router Configuring PC in Windows 2000 1. Go to Start / Settings / Control Panel. In the Control Panel, doubleclick Network and Dial-up Connections. 2. Double-click Local Area Connection (“LAN”) 3. In the Local Area Connection status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. .
Billion 810VGTX Router Configuring PC in Windows 95/98/Me 1. Go to Start / Settings / Control Panel. In the Control Panel, doubleclick Network and choose the Configuration tab. 2. Select TCP / IP -> NE2000 Compatible, or the name of any Network Interface Card (NIC) in your PC. 3. Select the IP Address tab. In this page, click the Obtain an IP address automatically radio button. 4. Then select the DNS Configuration tab. 5.
Billion 810VGTX Router Configuring PC in Windows NT4.0 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and choose the Protocols tab 2. Select TCP/IP Protocol and click Properties. 3. Select the Obtain an IP address from a DHCP server radio button and click OK.
Billion 810VGTX Router Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password) Username: admin Password: admin If you ever forget the login password, please press and hold the reset button for longer than 6 seconds to restore the factory default settings. A Attention The default username and password are “admin” and “admin” respectively. Device LAN IP settings IP Address: 10.0.0.2 Subnet Mask: 255.255.255.
Billion 810VGTX Router Information from your ISP Telkom ADSL connections use PPPoE, and automatically assign a WAN IP address to your router. The following information is provided should you wish to connect to an alternative ISP. Gather the information as illustrated in the following table and keep it for reference.
Billion 810VGTX Router CHAPTER4: CONFIGURATION At the configuration homepage, the left navigation column provides you the link to each configuration page. The category of each configuration page is listed as below.
Billion 810VGTX Router Status ADSL Status This section displays the overall status of ADSL, such as DSP firmware version, Operational mode, Upstream/downstream rate, SNR margin, Line Attenuation, CRC Errors and Latency rate. 3G Status This section displays the 3G Card overall status with information such as the current signal strength, statistics of current data transmission and total data transmission.
Billion 810VGTX Router Status: The current status of the 3G card. Signal Strength: The signal strength bar indicates the current 3G signal strength. Network Name: The network name that the device is connected to. Card Name: The name of the 3G card. Card Firmware: The current firmware of the 3G card. Current TX Bytes / Packets: The statistics of data transmission in bytes / packets during a call. Current RX Bytes / Packets: The statistics of data received in bytes / packets during a call.
Billion 810VGTX Router DHCP Table Leased: Shows the information of the DHCP assigned IP addresses. Expired: Shows the information of all expired IP addresses. Permanent: Shows the fixed host mapping information. Leased Table IP Address: Shows the IP address that is assigned to each client. MAC Address: Shows the MAC address of each client. Client Host Name: Shows the Host Name (Computer Name) of the client. Expiry: Shows the current lease time of each client.
Billion 810VGTX Router RIP Routing Table Destination: Shows the IP address of the destination network. Netmask: Shows the destination Netmask address. Gateway: Shows the IP address of the gateway that this route will use. Cost: The number of hops counted as the cost of the route. NAT Sessions This section lists all the current NAT sessions between external (WAN) and internal (LAN) interface. UPnP Portmap This section lists all the established port-mapping using UPnP (Universal Plug and Play).
Billion 810VGTX Router PPTP Status This shows details of your configured PPTP VPN Connections. Name: Shows the name you assign to a particular PPTP connection in your VPN configuration. Type: Shows the type of connection (dial-in/dial-out). Enable: Shows whether the connection is currently enabled. Active: Shows whether the connection is currently active. Tunnel Connected: Shows whether the VPN Tunnel is currently connected. Call Connected: Shows whether the Call for this VPN entry is currently connected.
Billion 810VGTX Router L2TP Status This shows the details of your configured L2TP VPN Connections. Name: Shows the name you assign to a particular L2TP connection in your VPN configuration. Type: Shows the type of connection (dial-in/dial-out). Enable: Shows whether the connection is currently enabled. Active: Shows whether the connection is currently active. Tunnel Connected: Shows the current connection status of the VPN Tunnel.
Billion 810VGTX Router VoIP Call Log The call log records the data from your VoIP devices such as the date / time of dial out calls, the duration of the calls, information about the missed calls and also incoming calls. Event Log This page displays all the event Log entries of the router such as when the ADSL gets disconnected and during Firewall triggered events like Intrusion or Blocking Logging. Please see the Firewall section of this manual for more details on how to enable Firewall logging.
Billion 810VGTX Router Error Log Any errors encountered by the router (e.g. invalid names given to entries) are logged to this window. Diagnostic It tests the connection to computer(s) which is connected to the LAN ports and also the WAN Internet connection. If PING www.google.com is shown as FAIL and the rest is shown as PASS, you should check if your PC’s DNS settings are correct.
Billion 810VGTX Router Quick Start 1. Click Quick Start. Select the connect mode you want. There are 3 options to choose from: ADSL, EWAN or 3G. Select ADSL mode from the drop down menu and click Continue. 2. If your ADSL line is not ready, you need to check your ADSL line has been set or not. 3. If your ADSL line is ready, the ADSL Line is Ready screen will appear. Choose the Auto radio button and click Apply. It will automatically scan the recommended mode for you.
Billion 810VGTX Router 4. Please enter your “Username” and “Password” as supplied by your ISP (Internet Service Provider) and click Apply to continue. Profile Port: Select the connection mode. Protocol: Select the protocol mode. The default mode is PPPoE. VPI/VCI: Enter the VPI and VCI information provided by your ISP. Username: Enter the username provided by your ISP. Password: Enter the password provided by your ISP. Service Name: This item is for identification purposes.
Billion 810VGTX Router 5. Configure the Wireless LAN setting. WLAN Service: Default setting is set to Enable. If you want to use wireless, both 802.11g and 802.11b, you can select Enable. ESSID: The ESSID is the unique name of a wireless access point (AP). For security proposes, change the SSID to an ID other than the default ID set on the Access Point (AP). It is case sensitive and must not exceed 32 characters. Make sure your wireless clients have the correct ESSID, in order to connect to your network.
Billion 810VGTX Router 6. Set up VoIP. SIP: To use VoIP SIP as VoIP call signaling protocol. Default is set to Disable. Region: This selection is a drop-down box, which allows user to select the country for which the VoIP device must work. When a country is selected, the country parameters are automatically loaded. SIP Service Provider: This section allows you to select the service provider. When the selection is done, respective parameters below are automatically displayed.
Billion 810VGTX Router 8. When the ADSL line has synchronized, a “check” mark will appear next to the ADSL Port.
Billion 810VGTX Router Configuration When you click configuration, the column will expand to display the sub-items that will allow you to further configure your ADSL router. LAN, WAN, System, Firewall, VoIP, QoS, Virtual Server, Time Schedule and Advanced The function of each sub-item is described in the following sections.
Billion 810VGTX Router Ethernet The router supports more than one Ethernet IP address. The LAN allows multiple PC’s to access the internet at the same time. Users usually only have one subnet in their LAN. The default IP address for the router is 10.0.0.2. Primary IP Address: IP Address: The default IP on this router. Subnet Mask: The default subnet mask on this router. RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function.
Billion 810VGTX Router Ethernet Client Filter The Ethernet Client Filter can support up to 16 Ethernet network computers. It enables you to accept traffic from specific authorized computers or t o restrict unwanted computer(s) f r o m accessing your LAN. There are no pre-defined Ethernet MAC address filter rules; you can add the filter rules to meet your requirements. Ethernet Client Filter: Default setting is set to ‘Disable’.
Billion 810VGTX Router Wireless Parameters WLAN Service: Default setting is set to ‘Enable’. If you do not have any wireless devices, select ‘Disable’. Mode: The default setting is 802.11b+g+n (Mixed mode). If you do not know or you have both 11g and 11b devices on your network, then keep the setting in mixed mode. From the drop-down menu, you can select 802.11g if you know that there are only 802.11g cards. You may do the same for 802.11b as well as 802.11n.
Billion 810VGTX Router Channel ID: Select the wireless channel ID that you would like to use. Note: Wireless performance may degrade if the selected channel ID is already being occupied by other AP(s). TX Power Level: It is a function that enhances the wireless transmission signal strength. Users may adjust this power level from minimum 1 up to maximum 100 or 127 depending on the models used. Please refer to the note table for the appropriate power level range of your model.
Billion 810VGTX Router WPA-PSK / WPA2-PSK Security Mode: You can disable or enable security mode with WPA or WEP for protecting your wireless network. The default mode of wireless security is set to ‘Disable’. WPA Shared Key: The key for network authentication. The input format is in character style and key size should be between 8 and 63 characters. Group Key Renewal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP).
Billion 810VGTX Router The MAC Address filter supports up to 16 wireless network clients. I t a l lo ws you to manage your network to allow traffic from authorized clients or to restrict unwanted clients from accessing your Wireless network. There are no pre-defined MAC Address filter rules; you can add the filter rules to meet your requirements. Wireless Client Filter: Default setting is set to ‘Disable’.
Billion 810VGTX Router WPS The WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This protocol is used to build a Wi-Fi network within a home / small office environment in an easy and secured manner. This feature thus provides a much simplified method to configure Wi-Fi Protected Access to those who know very little about wireless security.
Billion 810VGTX Router DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to the PCs on your network if they are configured to obtain IP addresses automatically. To disable the router DHCP Server, check Disabled and click Next, then click Apply.
Billion 810VGTX Router WAN - Wide Area Network WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and the Internet. Here are the items within the WAN section: WAN Interface, WAN Profile and ADSL Mode. WAN Interface WAN Connection-ADSL Mode The default setting for Connection Mode is ADSL and the default Protocol is PPPoE. Main Port: User can select either ADSL, 3G mode or Dual WAN.
Billion 810VGTX Router Failback Probe Cycle: Set the duration for the Failback Probe Cycle to determine when the router will switch back to the main connection (main port) from the backup connection (backup port) once the main connection is communicating again. Note: The time set is for each probe cycle, but the decision to change to the backup port is determined by the Probe Cycle duration multiplied by the Connection Decision amount (e.g.
Billion 810VGTX Router WAN Profile PPPoE Connection PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP. Profile Port: Select the profile port as ADSL. Protocol: The PPPoE protocol will be used. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. Username: Enter the username provided by your ISP.
Billion 810VGTX Router Idle Timeout: Auto-disconnect the broadband firewall gateway when there is no activity on the line for a predetermined period of time. MTU: Maximum Transmission Unit. The size of the largest datagram, excluding media-specific headers, that IP will attempt to send through the interface. RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. TCP MSS Clamp: This option enables discovery of the optimal MTU size automatically. Default is enabled.
Billion 810VGTX Router PPPoA Connection Profile Port: Select the profile port as ADSL. Protocol: The PPPoA protocol will be used. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. Username: Enter the username provided by your ISP. You can input up to 128 alpha-numeric characters (case sensitive). This is the format of username “username@ispname” instead of “username”.
Billion 810VGTX Router RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. TCP MSS Clamp: This option enables discovery of the optimal MTU size automatically. Default is enabled. MAC Spoofing: Some service providers require the configuration of this option. You must fill in the MAC address that is specified by the service provider when it is required. Default is disabled. Obtain DNS: A Domain Name System (DNS) contains a mapping table for domain name and IP addresses.
Billion 810VGTX Router Auth. Protocol: Default is Auto. Your ISP should advise you on whether to use Chap or Pap. Connection: Always on: If you want the router to establish an MPoA session when starting up and to automatically reestablish the PPPoE session when disconnected by the ISP. Connect on Demand: If you want to establish an MPoA session only when there is a packet requesting access to the Internet (i.e. when a program on your computer attempts to access the Internet).
Billion 810VGTX Router Filter Type: Specify the type of Ethernet filtering performed by the named bridge interface. All Allows all types of Ethernet packets through the port. Ip Allows only IP/ARP types of Ethernet packets through the port. Pppoe Allows only PPPoE types of Ethernet packets through the port.
Billion 810VGTX Router 3G TEL No.: The dial string to make a GPRS / 3G user internetworking call. It may be provided by your mobile service provider. APN: An APN is similar to a URL; it is the unit makes a GPRS / UMTS call. The service provider is able to attach anything to an APN to create a data connection. Requirements for APN assignment varies between service providers. Most service providers have an internet portal which they connect a DHCP Server to, giving you access to the internet i.e.
Billion 810VGTX Router Connection: Always On: A UMTS/GPRS call will be made when the router starts up. Enabling Always On will give you the option of Keep Alive. Keep Alive: Set Enable to allow the router to automatically reconnect the connection when the ISP disconnects it. Connect to Demand: If you want to make a UMTS/GPRS call only when there is a packet re- questing access to the Internet (i.e. when a program on your computer attempts to access the Internet).
Billion 810VGTX Router ADSL Mode Connect Mode: This mode will automatically detect your ADSL line code, ADSL2+, ADSL2, AnnexM2 and AnnexM2+, ADSL, All. Please keep the factory settings unless ADSL is the reason for a synchronization problem. Modulation: It will automatically detect capability of your ADSL line mode. Please keep the factory settings unless ADSL is reason for a synchronization problem. Profile Type: Please keep the default factory settings.
Billion 810VGTX Router System Here are the items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart and User Management. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from a SNTP server outside your network. Choose your local time zone, click Enable and click the Apply button.
Billion 810VGTX Router Remote Access This feature enables a system administrator to set the time interval where the router can be accessed for administration purpose from a remote site (i.e. from outside your LAN). If you wish to permanently enable remote access, set the time period to 0 minute. Firmware Upgrade Your router firmware is the software that enables it to operate and provides all its functionality. Think of your router as a dedicated computer, and the firmware as the software it runs.
Billion 810VGTX Router Backup / Restore This function allows you to save a backup of the current configuration of your router to a file on your PC, or to restore a previously saved configuration. This is very useful if you wish to customize the settings of the router, knowing in advance that you can always restore the settings if any mistakes are made. Therefore, it is advisable that you create a backup of the configuration of your router before customizing its configuration.
Billion 810VGTX Router User Management In order to prevent unauthorized access to your router’s configuration interface, it requires that all users login to the GUI with a password. You can set up multiple user accounts, each with their own password. You can Edit any existing user accounts and Add new user account to grant access to the device configuration interface. Edit Account Information You can change the information of any account whether the account is active or not. 1.
Billion 810VGTX Router To Add an Account 1. Check the Valid checkbox, fill in all the information: User name, Comment (optional), Password, and Confirm Password. 2. When this is done, click the Add button. To delete a user Account: 1. Click on the Delete radio button of the account you want to delete. 2. Then click the Edit/Delete button to confirm the deletion. Note: You can delete any user account except for the default admin account. Thus there is no delete radio button available for this account.
Billion 810VGTX Router Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall to control Internet access on your network. This feature also protects your system from being attacked by hackers. When using NAT, the router acts as a “natural” Internet firewall, as all PCs on your LAN will have their own private IP address which is not directly accessible from the Internet. The router provides three levels of security support.
Billion 810VGTX Router General Settings You can choose to disable Firewall and still be able to access the URL Filter and IM/P2P Blocking or enable the Firewall using the preset filter rules and modify the port filter rules as required. The Packet Filter is used to filter packets based on Applications (Port) or IP addresses.
Billion 810VGTX Router Packet Filter This function is only available when Firewall is enabled with one of the four security levels selected (All blocked, High, Medium and Low). The preset port filter rules in the Packet Filter must be modified accordingly to the security level selected. See Table1: Predefined Port Filter for more detailed information.
Billion 810VGTX Router Table 1: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed below.
Billion 810VGTX Router Inbound: Internet to LAN Outbound: LAN to Internet YES: Allowed NO: Blocked N/A: Not Applicable Packet Filter – Add TCP/UDP Filter Rule Name Helper: User defined description for entry identification. You may also choose from the Select drop-down menu for an existing predefined rule. The maximum name length is 32 characters. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy. For setup and detail, refer to Time Schedule section.
Billion 810VGTX Router Packet Filter – Add Raw IP Filter Go to “Type” drop-down menu, select “Use Protocol Number”. Rule Name Helper: User defined description for entry identification. You may also choose from the Select drop-down menu for an existing predefined rule. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy. For setup and detail, refer to Time Schedule section.
Billion 810VGTX Router Note: Inbound indicates accessing from the Internet to the LAN and Outbound is from the LAN to the Internet. Configuring Packet Filter: 1. Click Packet Filters. You will then be presented with the predefined port filter rules screen (in this case for the low security level), shown below: Note: You may choose to Edit the predefined rule instead of Deleting0 it. This is an example to show you how to add a filter on your own. 2.
Billion 810VGTX Router 3. To add a new rule, Input the Rule Name, Time Schedule, Source/Destination IP, Type, Source/Destination Port, Inbound and Outbound. Then click the Add button. Example: Application: Cindy_HTTP Time Schedule: Always On Source / Destination IP Address (es): 0.0.0.
Billion 810VGTX Router The new port filter rule for HTTP is shown below: 1. Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: For instructions on how to configure the HTTP in Virtual Server, please refer to the Add Virtual Server sub-section under the Virtual Server section.
Billion 810VGTX Router Intrusion Detection The router Intrusion Detection System (IDS) is used to detect hacker’s attacks, and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
Billion 810VGTX Router Table 2: Hacker attack types recognized by the IDS Intrusion Name Detect Parameter Blacklist Type of Block Duration Drop Packet Show Log Ascend Kill Ascend Kill data Src IP DoS Yes Yes Src IP DoS Yes Yes Dst IP Victim Protection Yes Yes TCP WinNuke Smurf Port 135, 137~139, Flag: URG ICMP type 8 Des IP is broadcast Land attack SrcIP = DstIP Yes Yes Echo/CharGen Scan UDP Echo Port and CharGen Port Yes Yes Echo Scan UDP Dst Port = Echo(7) Src IP Scan Y
Billion 810VGTX Router URL Filter URL (Uniform Resource Locator) (e.g. an address in the form of http://www.abcde.com or http:// www.example.com) filter rule allows you to prevent users on your network from accessing specific websites defined by their URL. There are no predefined URL filter rules, therefore you can add filter rules to meet your requirements. Enable/Disable: Select to enable or disable URL Filter feature.
Billion 810VGTX Router Domains Filtering: This function checks the whole URL address but not the IP address against your list of domains to block or allow. If it is matched, the URL request will either be sent (Trusted) or dropped (Forbidden). For this function to be activated, both the enable and disable checkboxes of Domain Filtering must be checked. Here is the checking procedure: 1. Check the domain in the URL to determine if it is in the trusted list.
Billion 810VGTX Router IM / P2P Blocking IM, short for Instant Message, is client software that allows users to communicate & exchange text messages with other IM users in real time over the Internet. A P2P application, known as Peer- to-peer, is a group of users who share files with each other over the Internet. Both Instant Message and Peer-to-peer applications make communication faster and easier but your network may become increasingly insecure.
Billion 810VGTX Router Firewall Log The Firewall Log contains information of any unexpected actions that occur to your firewall. Check the Enable checkbox to activate event logging. Log information can be seen in the Status – Event Log after the feature is enabled. VPN - Virtual Private Networks Virtual Private Networks is a way to establish a secured communication tunnel with an organization network via the Internet.
Billion 810VGTX Router Name: A given name for the connection (e.g. “connection to office”). Connection Type: Remote Access or LAN to LAN. Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check Dial In if it operates as a VPN server. When configuring your router as a Client, enter the remote Server IP Address (or Domain Name) you wish to connect to.
Billion 810VGTX Router Example: Configuring a Remote Access PPTP VPN Dial-out Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet. The routers are installed in the head office and branch offices accordingly. Both office LAN networks must be in different subnets with LANLAN application Attention Configuring the PPTP VPN in the Head Office The IP address 192.168.1.201 will be assigned to the router located in the branch office.
Billion 810VGTX Router Function Description Name Head Office Given name of PPTP connection Connection type LAN to LAN Select LAN to LAN from the Connection Type drop-down menu Type Dial in Select Dial in from the Type drop-down menu IP Address 192.168.1.200 IP address assigned to branch office network Peer Network IP 192.168.0.0 Netmask 255.255.255.0 Username Username Password 123456 Auth.
Billion 810VGTX Router Function Description Name Head Office Given name of PPTP connection Connection type LAN to LAN Select LAN to LAN from the Connection Type drop-down menu Type Dial in Select Dial in from the Type drop-down menu IP Address 69.121.1.33 IP address assigned to branch office network Peer Network IP 192.168.1.0 Head office network Netmask 255.255.255.0 Username Username Password 123456 Auth.
Billion 810VGTX Router Password: If you are a Dial-Out user (client), enter the password provided by your Host. If you are a Dial-In user (server), enter your own password. Authentication Type: Default is Auto if you want the router to automatically determine the authentication type to use.
Billion 810VGTX Router Configuring the PPTP VPN in the Office Click Configuration > VPN > PPTP. Choose Remote Access from the Connect Type drop-down menu. You can either input the IP address (69.121.1.33 in this case) or hostname to reach the server. Function Description Name VPN PPTP Connection type Remote Access Type Dial out IP Address (or Domain name) 69.121.1.33 A Dialed server IP Username Username A given username & password to authenticate branch office network.
Billion 810VGTX Router IPSec (IP Security Protocol) IPSec VPN Connection Name: A given name for the connection (e.g. “connection to office”). Local Network: Set the IP address, subnet or address range of the local network. Single Address: The IP address of the local host. Subnet: The subnet of the local network. For example, IP: 192.168.1.0 with netmask 255.255.255.0 specifies one class C subnet starting from 192.168.1.1 (i.e. 192.168.1.1 through to 10.0.0.2).
Billion 810VGTX Router Pre-shared Key: This is for the Internet Key Exchange (IKE) protocol, a string from 4 to 128 characters. Both sides should use the same key. IKE is used to establish a shared security policy and authenticated keys for services (such as IPSec) that require a key. Before any IPSec traffic can be passed, each router must be able to verify the identity of its peer. This can be done by manually entering the pre-shared key into both sides (router or hosts).
Billion 810VGTX Router SA Lifetime: Specify the number of minutes that a Security Association (SA) will stay active before new encryption and authentication keys will be exchanged. There are two kinds of SAs, IKE and IPSec. IKE negotiates and establishes SA on behalf of IPSec; an IKE SA is used by IKE. Phase 1 (IKE): To issue an initial connection request for a new VPN tunnel. The range can be from 5 to 15,000 minutes, and the default is 480 minutes.
Billion 810VGTX Router Example: Configuring an IPSec LAN to LAN VPN Connection Table 3: Network Configuration and Security Plan Branch Office Head Office Local Network ID 192.168.0.0/24 192.168.0.0/24 Local Router IP 69.1.121.30 69.1.121.3 Remote Network ID 192.168.0.0/24 192.168.0.0/24 Remote Router IP 69.1.121.3 69.1.121.
Billion 810VGTX Router Configuring IPSec VPN in the Head Office Function Description Name IPSec_HeadOffice Local Area Subnet IP Address 192.168.1.0 Netmask 255.255.255.0 A given name for the IPSec Connection. Select Subnet from the Local Network drop-down menu. Head office network. 69.121.1.30 A given username & password to authenticate branch office network. Remote Network Subnet Select Subnet from the Remote Network drop- down menu. IP Address 192.168.1.0 Netmask 255.255.255.
Billion 810VGTX Router Configuring IPSec VPN in the Branch Office Function Description Name IPSec_HeadOffice Local Area Subnet IP Address 192.168.0.0 Netmask 255.255.255.0 Remote Secure Gateway IP (or Hostname) 69.121.1.3 Select Subnet from the Local Network drop-down menu. Branch office network. IP address of the head office router (in WAN side Remote Network Subnet IP Address 192.168.1.0 Netmask 255.255.255.
Billion 810VGTX Router Example: Configuring an IPSec Host to LAN VPN Connection Configuring IPSec VPN in the Office Page | 84
Billion 810VGTX Router Function Description Name IPSec Local Area Subnet IP Address 192.168.1.0 Netmask 255.255.255.0 Remote Secure Gateway IP (or Hostname) 69.121.1.30 Subnet IP Address 69.121.1.30 Pre-shared Key 12345678 Authentication MD5 Encryption 3DES Prefer Forward None Page | 85 Select Subnet from the Local Network drop-down menu. Branch office network. IP address of the head office router (in WAN side Remote Network Security A given name for the IPSec Connection.
Billion 810VGTX Router L2TP (Layer Two Tunneling Protocol) Two types of L2TP VPN are supported: Remote Access and LAN-to-LAN (please refer below for more information.). Fill in the blank with the information you need and click Add to create a new VPN connection account. L2TP Connection-Remote Access Connection Type: Remote Access or LAN to LAN Name: A given name for the connection (e.g. “connection to office”). Connection Type: Remote Access or LAN to LAN.
Billion 810VGTX Router Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check Dial In if you want your router to operate as a VPN server. When configuring your router as a Client, enter the remote Server IP Address (or Hostname) you wish to connect to. When configuring your router as a server, enter the Private IP Address Assigned to the Dial in User. IP Address: Enter the IP address.
Billion 810VGTX Router Perfect Forward Secrecy: Choose whether to enable PFS using Diffie-Hellman public-key cryptography to change encryption keys during the second phase of VPN negotiation. This function will provide better security, but extends the VPN negotiation time. Diffie-Hellman is a public-key cryptography protocol that allows two parties to establish a shared secret over an unsecured communication channel (i.e. over the Internet).
Billion 810VGTX Router Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not used in the Office LAN. Pre-Shared Key 12345678 Function Description Name VPN_L2TP Connection Type Remote Access Type Dial in IP Address 192.168.1.200 Username username Password 123456 Auth.
Billion 810VGTX Router Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’s office establishes a L2TP VPN connection with a file server located at a separate location. The router is installed in the office, connected to a couple of PCs and Servers. Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not used in the Office LAN.
Billion 810VGTX Router Function Description Name VPN_L2TP Connection Type Remote Access Type Dial Out IP Address (or Hostname) 69.121.1.33 A Dialed Server IP Username username An assigned username and password Password 123456 Auth.
Billion 810VGTX Router Username: If you are a Dial-Out user (client), enter the username provided to you by your Host. If you are a Dial-In user (server), enter your own username. Password: If you are a Dial-Out user (client), enter the password provided to you by your Host. If you are a Dial-In user (server), enter your own password.
Billion 810VGTX Router Click Edit/Delete to save your changes. Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office establishes a L2TP VPN tunnel with head office to connect two private networks over the Internet. The routers are installed in the head office and branch office accordingly. Both office Networks MUST be in different subnets with the LAN-LAN application. Functions of Pre –shared keys, VPN Connection Type and Security Algorithms must be identical on both sides.
Billion 810VGTX Router Function Description Name Head Office Give a name to the L2TP Connection Connection Type LAN to LAN Select LAN to LAN from the Connection Type drop-down menu Type Dial in IP Address 192.168.1.200 Peer Network IP 192.168.0.0 Username username Password 123456 Auth.
Billion 810VGTX Router Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.
Billion 810VGTX Router VoIP - Voice over Internet Protocol VoIP enables telephone calls through existing Internet connection instead of going through the PSTN (Public Switched Telephone Network). It is not only cost-effective, especially for a long distance telephone charges, but also toll-quality voice calls over the Internet. Remember to apply changes, SAVE CONFIG and restart the router after completing your VoIP configuration. This is to ensure that your VoIP is activated.
Billion 810VGTX Router Echo Cancellation: G.168 echo canceller is an ITU-T standard. It is used to isolate the echo while you are on the phone. This helps you not hear your own voice on the phone while you talk. Default is set to ‘Enable’. RTP Port: Provides the base value from the media (RTP) ports that are assigned for various endpoints and the different call sessions that may exist within an end-point.
Billion 810VGTX Router Advanced – PSTN Environment Adjustment PSTN Environment Adjustment options will help you to adjust the onhook and offhook voltage detection values for your environment. You should use these if the default values are incorrect and result in PSTN calls not being detected properly, e.g. calls being terminated within 5 seconds of being answered. The actual levels are determined by your environment including the number and type of telephones used. Note: ONHOOK means hung up.
Billion 810VGTX Router Outbound Proxy Address: Indicate the VoIP SIP outbound proxy server IP address. This parameter is very useful when VoIP devices are behind a NAT. Outbound Proxy Port: Specify the port of the VoIP SIP outbound proxy on which it will listen for messages. Phone Number: This parameter holds the registration ID of the user within the VoIP SIP registrar. Username: Same as Phone Number. Password: This parameter holds the password used for authentication within the VoIP SIP registrar.
Billion 810VGTX Router *67 Anonymous Call: Hide your phone number from being displayed at the remote terminal. It is only applied to the next call when you enter this control character. The detailed operation procedure is “Off Hook -> *67 -> On Hook -> Off Hook -> Dial”. This feature is disabled by default. Phone Number + #: This is the fast dial which you can dial out a phone number immediately without waiting. Note: Refer to the Special Dial Code section in this Manual for more details.
Billion 810VGTX Router Prefix: Specify the number(s) that will be used to switch from VoIP to PSTN when making a call. Number of Digits: Specify the total number of digits you wish to dial out. The maximum number of digits is 15. Action: Specify a dialing method that you wish to use when making PSTN call(s). Dial with Prefix: With this selected, the prefix which is dialed together with the phone number will be dialed out via FXO when making a regular call.
Billion 810VGTX Router PSTN Dial Plan Examples: 1. Dial with Prefix If you dial 01223 707070, the number 01223707070 will be dialed out via FXO for making a regular phone call. 2. Dial without Prefix If you dial 9102, only 102 will be dialed out via FXO port for making a regular phone call. 3.
Billion 810VGTX Router 4. Dial at Timeout no Prefix If you dial 97070, the number that is dialed out via the FXO port will not have a prefix. Even though 7070 (only 4 digits) does not match the number of digits defined in the field, 7070 is still a valid phone number since it has not exceeded the number of digits defined. VoIP Dial Plan This feature makes dialing a phone number more convenient and easy.
Billion 810VGTX Router Prefix Processing: Prepend xxx unconditionally: xxx number is added unconditionally to the front of the number dialed when making a call. Prefix can also be included with any number and/or character such as +, *, #. Note: For special service with +, *, #, you may need to check with your VoIP or Local Telephone Service Provider for information. If Prefix is xxx, delete it: Prefix xxx is removed from the dialed numbers before making a call.
Billion 810VGTX Router Special Dial Plan Examples *xx*x *xx Description Starting with ‘* sign’ + any two digit numbers + any number (0-9) in variable length. Maximum length is 16. Starting with ‘* sign’ + any 2 digit numbers between 0 and 9. Total length including the * is 3. Note: No period is needed (.) **xx*x. Starting with ‘** sign’ + any two digit numbers between 0 + any number (0-9) in variable length.
Billion 810VGTX Router Speed Dial Speed Dial comes in handy to store frequently used telephone numbers which you can press a number from 0 to 9 and the pound sign (#) on the phone keypad to activate the function. For example, to speed dial to the phone number listed on 9, just press keypad 9 then #. Your router will automatically call the number listed on entry 9.
Billion 810VGTX Router Country Specific Ring & Tone Region: Select a country ring tone from the drop-down list that pertains to your country of residence. This VoIP router will display the default parameters of each ring tone according to the country selected. If your country is not found in the list, you may manually enter the parameters of the ring tone that pertains to your country.
Billion 810VGTX Router Name: User defined description to identify the new policy/application created. Time Schedule: Schedule your prioritization policy. Priority: The priority given to each policy/application. Its default setting is set to High. You may adjust this setting to fit your policy / application. Protocol: The name of the supported protocol. Source IP Address Range: The source IP address or the range of the packets to be monitored. Source Port: The source port of the packets to be monitored.
Billion 810VGTX Router Outbound IP Throttling (LAN to WAN) IP Throttling allows you to limit the speed of the IP traffic. The value entered in the Rate Limit blank will set the speed limitation of the application. Name: User defined description to identify the new policy/name created. Time Schedule: Schedule your prioritization policy. Refer to Time Schedule for more information. Protocol: The name of the supported protocol. Rate Limit: To limit the speed of the outbound traffic.
Billion 810VGTX Router Name: User defined description to identify the new policy/application created. Time Schedule: Schedule your prioritization policy. Refer to Time Schedule for more information. Protocol: The name of the supported protocol. Rate Limit: To limit the speed of the inbound traffic. Source IP Address Range: The source IP address or the range of the packets to be monitored. Source Port(s): The source port of the packets to be monitored.
Billion 810VGTX Router Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.
Billion 810VGTX Router Mission-critical application A VPN connection is normally a mission-critical application for doing data exchange between a head office and a branch office. A mission-critical application must be sent out smoothly without any drop out. Set the level of priority as high to prevent other applications from saturating the bandwidth. Voice application Voice is a latency-sensitive application.
Billion 810VGTX Router Restricted Application Some companies will setup their FTP servers for data download while others may use FTP for file sharing. The setting above helps limit the utilization of the FTP upstream rate. Time schedules also help to limit its utilization during daytime. Advanced settings by using IP throttling IP throttling enables you to set parameters for bandwidth allocation, although the applications may be located on the same level.
Billion 810VGTX Router Sometimes your customers or friends may upload their files to your FTP server and that will saturate your downstream bandwidth. The settings below will help you to limit bandwidth for the restricted application. Virtual Server (known as Port Forwarding) In TCP/IP and UDP networks, a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to.
Billion 810VGTX Router Add Virtual Server Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users when using NAT, as all incoming connection attempts will point to your router unless you specifically create Virtual Server entries to forward those ports to a PC on your network. When your router needs to allow an outside user to access the internal server, e.g.
Billion 810VGTX Router Application: HTTP_Sever Time Schedule: Always On Protocol: tcp External Port: 80-80 Redirect Port: 80-80 IP Address: 10.0.0.2 Add: Click it to apply your settings. Edit/Delete: Click it to edit or delete this virtual server application. Using port forwarding does have some implications, as outside users will be able to connect to PC’s on your network.
Billion 810VGTX Router Edit DMZ Host A DMZ Host is a local computer that is exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets that do not use the port number that is being used by any other Virtual Server entries will be checked by the Firewall and NAT algorithms before being passed to the DMZ host. Caution: The computer that is exposed to the Internet may face various security risks.
Billion 810VGTX Router Select the Apply button to apply your changes. to create a new One-to-One NAT rule: Check Application: User defined description to identify this entry, or click the predefined rule. drop-down menu to select a : 20 predefined rules are available. Application, Protocol and External/Redirect Ports will be filled after the selection. Protocol: It is the supported protocol for the virtual server.
Billion 810VGTX Router Table 5: Well-known and registered Ports Port Number Protocol Description 20 TCP FTP Data 21 TCP FTP Control 22 TCP & UDP SSH Remote Login Protocol 23 TCP Telnet 25 TCP SMTP (Simple Mail Transfer Protocol) 53 TCP & UDP DNS (Domain Name Server) 69 UDP TFTP (Trivial File Transfer Protocol) 80 TCP World Wide Web HTTP 110 TCP POP3 (Post Office Protocol Version 3) 119 TCP NEWS (Network News Transfer Protocol) 123 UDP NTP (Network Time Protocol) / SNTP (
Billion 810VGTX Router Time Schedule The Time Schedule supports up to 16 time slots which helps you manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allow the use of the Internet by users or applications. Time Schedules correlate closely with router time. Since the router does not have a real time clock on board, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server.
Billion 810VGTX Router Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit radio button. Note: Watch it carefully, the days you have selected will present in capital letter. Lower case letter shows the days that are not selected, and no rule will apply on these days. 2. A detailed setting of this Time Slot will be shown. ID: This is the index of the time slot. Name: A user defined description to identify this time portfolio.
Billion 810VGTX Router Delete a Time Slot Click on the Delete radio button of the Time Slot you wish to delete under the Time Slot section, and then click the Edit/Delete button to confirm the deletion of the selected Time profile, i.e. erase the Day and revert back to the default settings for Start Time / End Time. Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router.
Billion 810VGTX Router Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.
Billion 810VGTX Router Device Management The Device Management advanced configuration setting allows you to control your routers security options and device monitoring features. Device Host Name Host Name: Assign it a name. Note: The Host Name must have more than one word. These two words should be separated bya ‘.’ period in between. Example: Host Name: homegateway ==> Incorrect Host Name: home.gateway or my.home.
Billion 810VGTX Router Embedded Web Server (2 Management IP Accounts) HTTP Port: This is the port number that the routers embedded web server (for web-based configuration) will use. The default value is the standard HTTP port 80. Users may specify an alternative if, for example, they are running a web server on a PC within their LAN. Management IP Address: You may specify an IP address to logon and access the routers web server. Setting the IP address to 0.0.0.
Billion 810VGTX Router Trap Community: Specify a name to be identified as the Trap Community and an IP address. This community string will be checked against the string entered in the configuration file. Once the string name is matched, users with this IP address will be sent SNMP Traps. SNMP V3: Specify a name and password for authentication and define the access rights from an identified IP address.
Billion 810VGTX Router IGMP IGMP, known as Internet Group Management Protocol, is used to manage hosts from multicast groups. IGMP Forwarding: Accepting multicast packets. Default is set to ‘Enable’. IGMP Snooping: Allowing switched Ethernet to check and make correct forwarding decisions. Default is set to ‘Disable’. VLAN Bridge This section allows you to create VLAN groups and specify the members of each group. Edit: Edit your member ports in the selected VLAN group.
Billion 810VGTX Router Chapter 5: Troubleshooting If the router is not functioning properly, first check this chapter for simple troubleshooting before contacting the Help desk . Problems with the router Problem Suggested Action None of the LEDs are lit when the router is turned on. Check the connection between the router and the adapter. If the problem persists, most likely it is due to the malfunction of your hardware.
Billion 810VGTX Router Most problems can be solved by referring to the Troubleshooting section in the User’s Manual. If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. Contact Telkom ADSL Support Telephone: Operating Hours: 0800 375 375 24hrs – 7 days a week Contact Modem Support Telephone: Website: Operating Hours: 0860 110 041 www.sizwebroadband.co.
