Billion BiPAC 8200N User Manual

Download

BiPAC 8200N

802.11n VDSL2 Firewall Router

User Manual

Last revised on Mar 2010Firmware Version 1.02f

Table of Contents

Chapter 1: Product ............................................................................1

Introduction to your Router .......................................................... 1

Features .....................................................................................4

Hardware Specications ............................................................ 5

Chapter 2: Product Overview............................................................6

Package Contents ....................................................................... 6

Important note for using this router ............................................. 6

Device Description ...................................................................... 7

The Front LEDs ................................................................................... 7

The Rear Ports ................................................................................... 8

Cabling ......................................................................................10

Chapter 3: Basic Installation ......................................................... 11

Applications of the device ......................................................... 12

Network Conguration ............................................................... 13

Conguring PC in Windows 7 ...........................................................13

Conguring PC in Windows Vista......................................................15

Conguring PC in Windows XP .........................................................17

Conguring PC in Windows 2000 .....................................................18

Conguring PC in Windows 95/98/Me...............................................19

Conguring PC in Windows NT4.0 ....................................................20

Factory Default Settings ............................................................ 21

Information from your ISP ....................................................... 22

Chapter 4: Conguration ................................................................ 23

Easy Sign-On (EZSO) ............................................................... 23

Conguration via Web Interface ................................................ 26

Quick Start ................................................................................ 27

Basic Conguration Mode ......................................................... 34

Status ................................................................................................ 34

WAN – Main Port: VDSL ................................................................... 35

Obtain IP Address Automatically (VDSL) ........................................................ 35

Fixed IP Address (VDSL) ................................................................................ 36

PPPoE Connection (VDSL) ............................................................................ 37

Pure Bridge (VDSL) ........................................................................................ 38

WAN – Main Port: EWAN ..................................................................39

Obtain IP Address Automatically (EWAN) ....................................................... 39

Fixed IP Address (EWAN) .............................................................................. 40

PPPoE Connection (EWAN) ........................................................................... 41

WLAN ................................................................................................ 42

Advanced Conguration Mode .................................................. 44

Status ................................................................................................ 44

VDSL Status ................................................................................................... 46

ARP Table ....................................................................................................... 47

DHCP Table .................................................................................................... 48

System Log..................................................................................................... 49

Firewall Log .................................................................................................... 50

UPnP Portmap ................................................................................................ 51

Conguration ..................................................................................... 52

LAN - Local Area Network .............................................................................. 53

WAN - Wide Area Network ............................................................................. 73

System ........................................................................................................... 82

Firewall ........................................................................................................... 89

QoS - Quality of Service ................................................................................. 99

Virtual Server ................................................................................................ 104

Time Schedule .............................................................................................. 110

Advanced.......................................................................................................111

Save Conguration to Flash .................................................... 126

Restart .................................................................................... 127

Logout ..................................................................................... 128

Chapter 5: Troubleshooting .......................................................... 129

Appendix: Product Support & Contact ........................................ 130

Chapter 1: Product

Introduction to your Router

Thank you for purchasing BiPAC 8200N Router. Your new router is an all-in-one unit that combines a VDSL modem, VDSL2 router and Ethernet network switch to provide everything you need to get the machines on your network connected to the Internet over a VDSL broadband connection.

The BiPAC 8200N is an all-in-one VDSL2 Router with the latest 802.11n technology. It is designed for home and SOHO users who seek extreme mobility, high-speed wireless connection and better wireless coverage while maintaining high-speed broadband access with VDSL2.

The BiPAC 8200N is capable of offering optimal speeds and coverage over the integrated wireless

802.11n access point. The device supports the highest rate of up to 100Mbps/100Mbps in VDSL2 Prole (30a). Since VDSL2 has the characteristic of faster rates over shorter distances, the ideal architecture for Telcoms is to use ber optic lines as the backbone and a VDSL2 line as the last mile into the home or ofce. VDSL2 operates over copper wires so that telecom operators can

provide bundled services to end-users similar to those that cable operators offer.

With outstanding throughput, the BiPAC 8200N can complement a ber network to offer the best

solution for delivering IPTV or home entertainment services. The SOHO Firewall is integrated to

provide protection against hacker attacks while the Quality of Service prioritizes queues and trafc for applications such as music downloads, online gaming, video streaming and le sharing.

Express Internet Access – VDSL2 capable

The router complies with VDSL worldwide standards. Supporting downstream rates of 100Mbps with VDSL and upstream rates of 100 Mbps. Users enjoy not only high-speed VDSL services but also broadband multimedia applications such as interactive gaming, video streaming and real-time audio which are easier and faster than ever. The router is compliant with ITU-T VDSL2 Standard

G.993.2 ,G.994.1 and G.997.1. Support VDSL2 Proles: 8a, 8b, 8c, 8d, 12a, 12b, 17a and 30a.

802.11n Wireless AP with WPA Support

With an integrated 802.11n Wireless Access Point in the router, the device delivers up to 6 times faster speeds and 3 times farther range than an 802.11b/g wireless network. It supports a fast data transfer rate up to 300Mbps and is fully compatible with 802.11b/11g equipments. The supported features of Wi-Fi Protected Access (WPA-PSK/ WPA2-PSK) and Wired Equivalent Privacy (WEP) enhance the security level of data protection and access control via Wireless LAN. The router also supports Wi-Fi Protected Setup (WPS) that features the establishment of a secured wireless network. The built-in Wireless Distribution System (WDS) also facilitates the exibility for wireless

network expansion without the need for any external wires or cables.

Fast Ethernet Switch

A 4-port 10/100Mbps fast Ethernet switch is built-in with automatic switching between MDI and MDI-X for 10Base-T and 100Base-TX ports, with auto detection allowing you to use either straight

or cross-over Ethernet cables.

EWAN

Besides using VDSL to get connected to the Internet, this router offers its Ethernet port 4 as a

WAN port to be used to connect to Cable Modems and ber optic lines. This alternative, yet faster method to connect to the internet will provide users more exibility to get online.

Multi-Protocol to Establish a Connection

The router supports PPP over Ethernet, DHCP Client and Fixed IP address to establish a connection with an ISP.

Universal Plug and Play (UPnP) and UPnP NAT Traversal

This protocol is used to enable simple and robust connectivity among stand-alone devices and PCs from many different vendors. It makes network simple and affordable for users. UPnP

architecture leverages TCP/IP and the Web to enable seamless proximity networking in addition to control and data transfer among networked devices. With this feature enabled, you can seamlessly

connect to Net Meeting or MSN Messenger.

Network Address Translation (NAT)

It allows multi-users to access outside resources such as the Internet simultaneously with one IP

address/one Internet access account. Many application layer gateway (ALG) are supported such

as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.

Firewall

NAT technology supports simple rewalls and provides options for blocking access from the Internet, like Telnet, FTP, TFTP, WEB, SNMP and IGMP.

Domain Name System (DNS) Relay

It provides an easy way to map the domain name (a friendly name for users such as www.yahoo.

com) and IP address. When a local machine sets its DNS server with this router’s IP address,

every DNS conversion request packet from the PC to this router will be forwarded to the real DNS in the outside network.

Dynamic Domain Name System (DDNS)

The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This

dynamic IP address is the WAN IP address. For example, to use the service, you must rst apply for an account from a DDNS service like http://www.dyndns.org/. More than 5 DDNS servers are

supported.

PPP over Ethernet (PPPoE)

This device provides an embedded PPPoE client function to establish a connection. You get greater access speed without changing the operation concept, while sharing the same ISP account and paying for one access account. No PPPoE client software is required for the local computer. Automatic Reconnect and Disconnect Timeout (Idle Timer) functions are also provided.

Quality of Service (QoS)

QoS gives you full control over which types of outgoing data trafc should be given priority by

the router, ensuring important data like gaming packets, customer information, or management information move through the router ay lightning speed, even under heavy load. The QoS features

are congurable by Internal IP address, External IP address, protocol, and port. You can throttle

the speed at which different types of outgoing data pass through the router, to ensure P2P users

don’t saturate upload bandwidth, or ofce browsing doesn’t bring client web serving to a halt. In

addition, or alternatively, you can simply change the priority of different types of upload data and let the router sort out the actual speeds.

Virtual Server

Users can specify some services to be visible from outside users. The router can detect incoming

service requests and forward either a single port or a range of ports to the specic local computer to handle it. For example, a user can assign a PC in the LAN acting as a WEB server inside and

expose it to the outside network. Outside users can browse inside web servers directly while it is protected by NAT. A DMZ host setting is also provided to a local computer exposed to the outside network, Internet.

Dynamic Host Conguration Protocol (DHCP) Client and Server

In a WAN site, the DHCP client obtains an IP address from the Internet Service Provider (ISP)

automatically. In a LAN site, the DHCP server allocates a range of client IP addresses, including subnet masks and DNS IP addresses and distributes them to local computers. This provides an easy way to manage the local IP network.

Rich Packet Filtering

Not only lters the packet based on IP address, but also based on Port numbers. It will lter

packets from and to the Internet, and also provides a higher level of security control.

Web-based GUI

It supports web based GUI for conguration and management. It is user-friendly and comes with on-line help. It also supports remote management capability for remote users to congure and

manage this product.

Firmware Upgradeable

Device can be upgraded to the latest rmware through the WEB based GUI.

Features

• Compliant with ITU-T G.993.2 , G.994.1 and G.997.1 VDSL2 Standard

• VDSL2 Proles: 8a/b/c/d, 12a/b, 17a, 30a

• Band Plan 997 and 998 supported

• Annex A, Annex B, Annex C supported

• US0 Supported

• OLR Supported

• Compliant with VDSL2 MIB

• Integrated 4-port Ethernet Switch

• Ideal for LRE applications

• SOHO Firewall Security with DoS Prevention and Packet Filtering

• Universal Plug and Play (UPnP) Compliant

• Easy Sign-On (EZSO) and Web-based Conguration

• Quality of Service Control

• Easy Network Management

• High-speed wireless connection up to a 300Mbps data rate

• Expanded wireless coverage of up to 3 times the range of 802.11g products

• 802.11n Wireless AP with Wi-Fi Protected Setup (WPS), WPA-PSK/ WPA2-PSK support

• Multiple SSIDs

• Supports TR-069

Hardware Specications

Physical Interface

• WLAN: 2 x antennae

• DSL: VDSL port

• Ethernet: 4-port 10/100Mbps auto-crossover (MDI / MDI-X) Switch

• Reset button

• WPS push button

• Power jack

• Power switch

Chapter 2: Product Overview

Package Contents

• 8200N 802.11n VDSL2 Firewall Router

• Antenna x 2

• CD containing the on-line manual

• RJ-11 xDSL / telephone cable

• Ethernet (RJ-45) cable

• Power adapter

• Quick Start Guide

• Splitter / Micro-lter (Optional)

Important note for using this router

Device Description

The Front LEDs

LED Meaning

1 Power

Ethernet port

1X — 4X

(RJ-45 connector)

3 Wireless

4 WPS

5 DSL

Lit red when the device is booting.

Lit green when the system is ready.

Flashes when the system is rebooting or rmware upgrading.

Lit when one of LAN ports is connected to an Ethernet device.

Lit green when the speed of transmission hits 100Mbps; Lit orange when the speed of transmission hits 10Mbps.

Blinking when data is transmitted/received.

Lit green when a wireless connection is established.

Blinking when data is transmitted/received.

Lit green when a wireless connection is established.

Blinking when WPS conguration is in progress.

Lit green when the device is successfully connected to an VDSL DSLAM. (“line sync”)

Internet

Lit red when WAN port fails to get IP address.

Lit green when WAN port gets IP address successfully.

Lit off when the device is in bridge mode or when WAN connection absent.

The Rear Ports

Port Meaning

1 DSL

2 Ethernet

3 WPS Push this button to trigger Wi-Fi Protected Setup function.

4 Reset

5 Power Connect it with the supplied power adapter.

6 Power Switch Power ON/OFF switch.

7 Antenna Connect the detachable antenna to this port.

Connect this port to the VDSL/telephone network with the RJ-11 cable

(telephone) provided.

Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four LAN

ports when connecting to a PC or an ofce/home network of 10Mbps or

100Mbps.

Note: Only Ethernet port 4 can be used for EWAN.

Press this button for more than 1 second to restore the device to its default mode.

Recovery Operation

1. Recovery procedures for non-working routers (e.g. after a failed rmware upgrade ash):

The system will check the rmware of this device automatically while turning on the modem. Once the rmware is not integrated, the system enters the recovery state. The modem emergencyreash web interface will then be accessible via http://192.168.1.254 where you can upload a rmware image to restore the modem to a functional state. Please note that the modem will only

respond via its web interface at this address, and will not respond to ping requests from your PC or to telnet connections.

2. Recovery procedures for a lost web interface password:

After turning the router on, please press the Reset Button on the back of the modem, and hold

the button until all the lights on the modem begin to ash and then it will reboot itself to restore the

factory default settings. The login username and password will then be reset to admin. You can

then access its GUI via its default IP address at http://192.168.1.254/.

Cabling

One of the most common causes of problems is because of bad cabling or VDSL line(s). Make sure that all connected devices are turned on. On the front of the product is a bank of LEDs. Verify that the LAN Link and VDSL line LEDs are lit. If they are not, verify that you are using the proper cables.

Ensure that all other devices connected to the same telephone line as your router (e.g.

telephones, fax machines, analog modems) have a line lter connected between them and the wall socket (unless you are using a Central Splitter or Central Filter installed by a qualied and licensed electrician), and that all line lters are correctly installed in a right way. If line lter is not

installed and connected properly, it may cause problem to your VDSL connection or may result in frequent disconnections.

Chapter 3: Basic Installation

The router can be congured through your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me/ Vista/7, etc. The product provides an easy and user-friendly interface for conguration.

Please check your PC network components. The TCP/IP protocol stack and Ethernet network adapter must be installed. If not, please refer to your Windows-related or other operating system

manuals.

There are ways to connect the router, either through an external repeater hub or connect directly to your PCs. However, make sure that your PCs have an Ethernet interface installed properly prior to connecting the router device. You ought to congure your PCs to obtain an IP address

through a DHCP server or a xed IP address that must be in the same subnet as the router. The default IP address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC must be in the same subnet, and have an IP address in the range of 192.168.1.1 to 192.168.1.253). The best and easiest way is to congure the PC to get an IP address

automatically from the router using DHCP. If you encounter any problem accessing the router web

interface it is advisable to uninstall your rewall program on your PCs, as they can cause problems

accessing the IP address of the router. Users should make their own decisions on what is best to protect their network.

Please follow the following steps to congure your PC network environment.

Applications of the device

Deployment scenario for VDSL using FTTx

Network Conguration

Conguring PC in Windows 7

1. Go to Start. Click on Control Panel.

2. Then click on Network and Internet.

3. When the Network and Sharing Center window pops up, select and click on Change adapter settings on the left window panel.

4. Select the Local Area Connection, and right click the icon to select Properties.

5. Select Internet Protocol Version 4

(TCP/IPv4) then click Properties.

6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting.

7. Click OK again in the Local Area Connection Properties window to

apply the new conguration.

Conguring PC in Windows Vista

1. Go to Start. Click on Network.

2. Then click on Network and Sharing Center at the top bar.

3. When the Network and Sharing Center window pops up, select and click on Manage network connections on the left window column.

4. Select the Local Area Connection, and right click the icon to select Properties.

5. Select Internet Protocol Version 4

(TCP/IPv4) then click Properties.

6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting.

7. Click OK again in the Local Area Connection Properties window to

apply the new conguration.

Conguring PC in Windows XP

1. Go to Start > Control Panel (in Classic View). In the Control Panel, double-click on Network Connections

2. Double-click Local Area Connection.

3. In the Local Area Connection Status window, click Properties.

4. Select Internet Protocol (TCP/IP) and click Properties.

5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons.

6. Click OK to nish the conguration.

Conguring PC in Windows 2000

1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and Dial-up Connections.

2. Double-click Local Area Connection.

3. In the Local Area Connection Status window click Properties.

4. Select Internet Protocol (TCP/IP) and click Properties.

5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons.

6. Click OK to nish the conguration.

Conguring PC in Windows 95/98/Me

1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on

Network and choose the Conguration

tab.

2. Select TCP/IP > NE2000 Compatible, or the name of your Network Interface Card (NIC) in your PC.

3. Select the Obtain an IP address automatically radio button.

4. Then select the DNS Congurationtab.

5. Select the Disable DNS radio button

and click OK to nish the conguration.

Conguring PC in Windows NT4.0

1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the Protocols tab.

2. Select TCP/IP Protocol and click Properties.

3. Select the Obtain an IP address from a DHCP server radio button and click

OK.

Factory Default Settings

Before conguring your router, you need to know the following default settings.

Web Interface (Username and Password)

Username: admin Password: admin

The default username and password are “admin” and “admin” respectively.

Device LAN IP settings

IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0

ISP setting in WAN site

PPPoE

DHCP server

DHCP server is enabled. Start IP Address: 192.168.1.100

IP pool counts: 100

LAN and WAN Port Addresses

The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown in

the tale.

LAN Port WAN Port IP address 192.168.1.254 Subnet Mask 255.255.255.0 DHCP server function Enabled

IP addresses for distribution to PCs

100 IP addresses continuing

from 192.168.1.100 through

192.168.1.199

The PPPoE function is enabled to automatically get

the WAN port conguration

from the ISP.

Information from your ISP

Before conguring this device, you have to check with your ISP (Internet Service Provider) to nd

out what kind of service is provided such as PPPoE, Obtain an IP Address Automatically (DHCP), Fixed IP Address (Static IP).

Gather the information as illustrated in the following table and keep it for reference.

Username, Password, Service Name, and Domain Name System (DNS)

PPPoE

IP address (it can be automatically assigned by your ISP when you connect or be set manually).

Obtain an IP Address Automatically

Fixed IP Address

DHCP Client (it can be automatically assigned by your ISP when you connect or be set manually).

IP address, Subnet mask, Gateway address, and Domain Name System

(DNS) IP address (it is xed IP address).

Chapter 4: Conguration

To easily congure this device for internet access, you must have IE 5.0 / Netscape 4.5 or above installed on your computer. There are basically 2 ways to congure your router before you are able to connect to the internet: Easy Sign-On & Web Interface. Conguration of each method will be

discussed in detail in the following sections.

Easy Sign-On (EZSO)

This special feature makes it easier for you to congure your router so that you can connect

to the internet in a matter of seconds without having to logon to the router GUI for any detail

conguration. This conguration method is usually auto initiated if user is to connect to the internet via Billion's router for the rst time.

After setting up the router with all the appropriate cables plugged-in, open up your IE browser,

the EZSO WEB GUI will automatically pop up and request that you enter some basic information

that you have obtained from your ISP. By following the instructions given carefully and through the

information you provide, the router will be congured in no time and you will nd yourself surng

the internet sooner than you realize.

Follow the Easy Sign-On conguration wizard to complete the basic network conguration.

1. Connect your router with all the appropriate cables. Then, load your IE / netscape browser.

2. When the EZSO conguration wizard pops up, select the connect mode which you want to

set up and then click continue. (There are two mode that you may select: one is “VDSL” and another is “EWAN”.).

3. Show Auto scan result - Protocol information.

4. Please enter all the information in the blanks provided and then click Continue.

5. The device will reboot and then load the new conguration.

Note: If any error occurs during device conguration that results in WAN connection

failure, the system will prompt that the setup has failed.

6. If all information provided is valid and the device successfully connects to WAN, a dialog box

will appear to signify the completion of the WAN port setup. At this point you can either click Done to nish the EZSO conguration or you can click Next to wireless to proceed to the wireless conguration if you have.

7. Select Enable and enter the necessary information in the blanks provided for the Wireless LAN

setting (wireless setting is only available for BiPAC 8200N) if you would like to use this feature and then click Continue.

8. The system will save your new conguration and complete the setup. You can test the con-

nection by clicking on the URL link provided. If the setup is successful you will be redirected to website.

Conguration via Web Interface

Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and

click “Go”, a login window prompt will appear. The default username and password are “admin” and “admin” respectively.

Congratulations! You are now successfully logon to the Router!

If the authentication succeeds, the homepage Status will appear on the screen.

Quick Start

Whether on the Basic or Advanced Conguration Mode, click Quick Start link to WAN Port setup

pages.

Step 1: This screen displays some information for WAN port. Select Connect Mode from the dropdown menu. There are 2 modes: VDSL and EWAN. Press Continue to go to the next conguration

page.

VDSL Mode

Connect mode: VDSL Protocol: Shows the current protocol in the device.

EWAN Mode

Connect mode: EWAN Protocol: Shows the current protocol in the device. Username: Shows the current username. IP address: Shows the current value of IP address in the device.

Step 2: Click on Continue to choose the Protocol to connect with EWAN or click Jump to Wireless Setting to use Protocol. There are 3 types of connection protocols available for WAN connect

mode. Each type of connection mode is described in the following sections of WAN Connect mode.

Step 3: After nishing conguring the WAN port connection, click Continue to proceed. The system will upload and apply the new WAN port conguration to the device.

Note: If the WAN line is not ready, a page will display as below and your new conguration

can not be saved.

Step 4: After the conguration is successful, click Next to Weireless button and you may proceed to congure the Wireless setting. There are 4 types of security mode: WPA, WPA2, WPA/ WPA2 Pre-Shared Key and WEP. Please refer to the Wireless Setting Mode section for detail

description of each security mode.

Step 5: After nishing conguring the WLAN setting, press Continue to nish the QuickStart.

WAN Connect Mode

There are 4 types of wireless connect modes: Obtain an IP Address Automatically, Fixed IP

Address, PPPoE connection and Pure Bridge.

Obtain an IP Address Automatically

When connecting to the ISP, your router also functions as a DHCP client. The device can

automatically obtain an IP address, subnet mask, gateway address, and DNS server addresses if the ISP assigns this information via DHCP.

Select this protocol enables the device to automatically retrieve IP address.

Fixed IP Address

Select this option to set static IP information. You will need to enter the information provided to you by your ISP.

IP Address: Enter your xed IP address. Each IP address entered must be in the appropriate IP

form, which is four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format. Leave the IP address as 0.0.0.0 to enable the device to automatically obtain an IP address from your ISP.

Netmask: User can change it to others such as 255.255.255.128. Type the netmask assigned to you by your ISP (if given).

Gateway: Enter the IP address of the default gateway.

PPPoE

PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP.

Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric characters (case sensitive). This is the format of username “username@ispname” instead of “username”.

Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).

Service Name: This item is for identication purposes. If it is required, your ISP will provide you

the necessary information. Maximum input is 32 alphanumeric characters.

IP Address: Enter your xed IP address. Leave the IP address as 0.0.0.0 to enable the device to

automatically obtain an IP address from your ISP.

Authentication Protocol: Default is Auto. Please consult your ISP on whether to use Pap or Chap.

Pure Bridge

Wireless Setting Mode

There are 4 types of wireless security modes: WPA Pre-Shared Key, WPA2 Pre-Shared Key,

WPA/WPA2 Pre-Shared Key and WEP.

WPA / WPA2 / WPA/WPA2 Pre-Shared Key

WPA and WPA2 pre-shared keys are an authentication mechanism in which users provide some

form of credentials to verify that they should be allowed access to a network. This requires a

single password entered into each WLAN node (Access Points, Wireless Routers, client adapters, bridges). As long as the passwords match, a client will be granted access to a WLAN.

WLAN Service: Default setting is Enable. If you want to use wireless, you can select Enable.

ESSID: The ESSID is the unique name of a wireless access point (AP) used to distinguish one

from another. For security propose, change to a unique ID name which is already built into the router wireless interface. It is case sensitive and must not exceed 32 characters. Make sure your wireless clients have exactly the ESSID as the device in order to connect to your network.

Channel ID: Select the channel ID that you would like to use.

Security Mode: You can disable or enable with WPA or WEP to protect wireless network. The

default mode of wireless security is Disable.

WPA Shared Key: The key for network authentication. The input format is in character style and key size should be in the range between 8 and 63 characters.

WEP

WLAN Service: Default setting is set to Enable. If you want to use wireless, you can select

Enable.

ESSID: The ESSID is the unique name of a wireless access point (AP) used to distinguish one from another. For security propose, change to a unique ID name which is already built into the router wireless interface. It is case sensitive and must not exceed 32 characters. Make sure your wireless clients have exactly the ESSID as the device in order to connect to your network.

Channel ID: Select the channel ID that you would like to use.

Security Mode: You can disable or enable with WPA or WEP to protect wireless network. The

default mode of wireless security is Disable.

Default Used WEP Key: Select the encryption key ID; please refer to Key (1~4) below.

Key (1-4): Enter the key to encrypt wireless data. To allow encrypted data transmission, the WEP

Encryption Key values on all wireless stations must be the same as the router. There are four keys for your selection. The input format can either be HEX style or ASCII format, 10 and 26 HEX codes or 5 and 13 ASCII codes are required for WEP64 and WEP128 respectively.

Basic Conguration Mode

Status

Device Information

Model Name: Provide a name for the router for identication purposes.

System Up-Time: Record system up-time.

Hardware Version: Device version.

Software Version: Firmware version.

Port Status

Port Status: User can look up to see if they are connected to Ethernet, EWAN, VDSL and

Wireless. You are allowed to click Wireless link to go to Wireless Parameters conguration screen.

WAN

Port: Name of the WAN connection. You are allowed to click this link to go to WAN Connection

conguration screen.

Protocol: The current protocol in the device.

Operation: Current status in WAN interface.

Connection: Current connection status.

IP Address: WAN port IP address.

Netmask: WAN port IP subnet mask.

Gateway: IP address of the default gateway.

Primary DNS: IP address of the primary DNS server.

WAN – Main Port: VDSL

A WAN (Wide Area Network) is an outside connection to another network or the Internet.

Obtain IP Address Automatically (VDSL)

By conguring these settings, the device is able to obtain IP settings automatically from the ISP.

Protocol: Select the protocol you will use in the device.

Click Apply to conrm the settings.

Fixed IP Address (VDSL)

A Static WAN connection will be congured according to the IP properties dened by your ISP.

Protocol: Select the protocol you will use in the device.

IP Address: Enter your xed IP address.

Netmask: User can change it to others such as 255.255.255.128. Type the netmask assigned to

you by your ISP (if given).

Gateway: Enter the IP address of the default gateway (if given).

Click Apply to conrm the settings.

PPPoE Connection (VDSL)

PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP.

Protocol: Select the protocol you will use in the device.

Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric

characters (case sensitive).

Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).

Service Name: This item is for identication purposes. If it is required, your ISP will provide you

the necessary information. Maximum input is 32 alphanumeric characters.

IP Address: Enter your WAN IP address. Leave the IP address empty or enter 0.0.0.0 to enable

the device to automatically obtain an IP address from your ISP.

Authentication Protocol: Default is Auto. Please consult your ISP on whether to use Pap and Chap.

Click Apply to conrm the settings.

Pure Bridge (VDSL)

Protocol: Select the protocol you will use in the device.

Click Apply to conrm the change.

WAN – Main Port: EWAN

A WAN (Wide Area Network) is an outside connection to another network or the Internet.

Obtain IP Address Automatically (EWAN)

By conguring these settings, the device is able to obtain IP settings automatically from the ISP.

Protocol: Select the protocol you will use in the device.

Click Apply to conrm the settings.

Fixed IP Address (EWAN)

A Static WAN connection will be congured according to the IP properties dened by your ISP.

Protocol: Select the protocol you will use in the device.

IP Address: Enter your xed IP address. Leave the IP address as 0.0.0.0 to enable the device to

automatically obtain an IP address from your ISP.

Netmask: User can change it to others such as 255.255.255.128. Type the netmask assigned to you by your ISP (if given).

Gateway: Enter the IP address of the default gateway (if given).

Click Apply to conrm the settings.

PPPoE Connection (EWAN)

PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP.

Protocol: Select the protocol you will use in the device.

Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric

characters (case sensitive).

Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).

Service Name: This item is for identication purposes. If it is required, your ISP will provide you

the necessary information. Maximum input is 32 alphanumeric characters.

IP Address: Enter your WAN IP address. Leave the IP address as 0.0.0.0 to enable the device to

automatically obtain an IP address from your ISP.

Auth. Protocol: Default is Auto. Please consult your ISP on whether to use Pap and Chap.

Click Apply to conrm the settings.

WLAN

Wireless Parameters

WLAN Service: Default setting is set to Enable. If you do not have any wireless, select Disable.

ESSID: The ESSID is a unique name of a wireless access point (AP) used to distinguish one from

another. For security purpose, change the default wlan-ap to a unique ID name that is already built into the router wireless interface. Make sure your wireless clients have exactly the ESSID as the device in order to connect to your network.

Note: It is case sensitive and must not exceed 32 characters.

Hide ESSID: It is used to broadcast its ESSID on the network so that when a wireless client searches for a network, the router can be discovered and recognized. Default setting is Disable.

Enable: When enabled, you do not broadcast your ESSID. Therefore, no one will be able to

locate the Access Point (AP) of your router.

Disable: When disabled, you allow anybody with a wireless client to be able to locate the

Access Point (AP) of your router.

Regulation Domain: There are seven Regulation Domains for you to choose from, including North America (N.America), Europe, France, etc. The Channel ID will be different based on this setting.

Channel ID: Select the wireless connection channel ID that you would like to use.

Note: Wireless performance may degrade if the selected channel ID is already being occupied by other AP(s).

Security Parameters

Security Mode: You can disable or enable the function with WPA or WEP to protect the wireless

network. The default mode of wireless security is Disable.

Click Apply to conrm the settings.

Security Mode

WPA / WPA2 / WPA/WPA2 Pre-Shared Key

Security Mode: You can disable or enable with WPA or WEP for protecting wireless network.

WPA Shared Key: The key for network authentication. The input format is in character style and

key size should be in the range between 8 and 63 characters.

Group Key Renewal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). Default value is 3600 seconds.

WEP

Security Mode: You can disable or enable with WPA or WEP for protecting wireless network.

WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted

over the network, the router offers secure data encryption, known as WEP. If you require high security for transmissions, there are 3 options to select from: Open System, Share Key and Both.

Default Used WEP Key: Select the encryption key ID; please refer to Key (1~4) below.

Passphrase: This is used to generate WEP keys automatically based upon the input string and a

pre-dened algorithm in WEP64 or WEP128.

Key (1-4): Enter the key to encrypt wireless data. To allow encrypted data transmission, the WEP Encryption Key values on all wireless stations must be the same as the router. There are four keys for your selection. The input format is in HEX or ASCII style, 5 and 13 ASCII codes are required for WEP64 and WEP128 or 10 and 26 HEX codes are required for WEP64 and WEP128 respectively.

Advanced Conguration Mode

Status

Device Information

Model Name: Displays the model name.

Host Name: Provide a name for the router for identication purposes. Host Name lets you change

the router name.

System Up-Time: Records system up-time.

Current Time: Set the current time. See the Time Zone section for more information.

Hardware Version: Device version.

Software Version: Firmware version.

MAC Address: The LAN MAC address.

Port Status

Port Status: User can look up to see if they are connected to Ethernet, EWAN, VDSL and

Wireless. You are allowed to click VDSL and Wireless link to go to VDSL Status screen or Wireless Parameters conguration screen.

WAN

Port: Name of the WAN connection.

Protocol: The current protocol in the device.

Operation: The current status in WAN interface.

Connection: The current connection status.

IP Address: WAN port IP address.

Netmask: WAN port IP subnet mask.

Gateway: The IP address of the default gateway.

Primary DNS: The IP address of the primary DNS server.

VDSL Status

VDSL (Very High Bitrate DSL) is a DSL technology providing faster data transmission. It can

achieve incredible speeds and provides a complete home-communications/entertainment

package.

This table displays all the informaiton for VDSL connection.

ARP Table

This table stores mapping information that the device uses to nd the Layer 2 Media Access

Control (MAC) address that corresponds to the Layer 3 IP address of the device via the Address Resolution Protocol (ARP) feature.

IP Address: Shows the IP Address of the device that the MAC address maps to.

MAC Address: Shows the MAC address that is corresponded to the IP address of the device it is

mapped to.

Interface: Shows the interface name (on the router) that this IP address connects to.

Static ARP: Shows the status of static ARP.

DHCP Table

The DHCP Table lists the DHCP lease information for all IP addresses assigned by the DHCP server in the device.

IP Address: The IP address which is assigned to the host with this MAC address.

MAC Address: The MAC Address of internal dhcp client host.

Client Host Name: The Host Name of internal dhcp client.

System Log

Display system logs accumulated up to the present time. You can trace its historical information with this function.

Refresh: Click to update the system log.

Clear: Click to clear the current log from the screen.

Firewall Log

Firewall Log displays the log information of any unexpected events that occurs to your rewall

settings. This page displays the router Firewall Log entries which have been recorded when you

have enabled Intrusion Detection or Block WAN PING in the Conguration – Firewall section of the

interface. Please see the Firewall section of this manual for more details on how to enable Firewall event logging.

UPnP Portmap

This section lists all the established port-mapping using UPnP (Universal Plug and Play).

Name: The Host Name of the internal UPNP client.

Protocol: The connection protocol of the UPNP client.

External Port: The external port for this connection.

Internal Port: The internal port for this connection.

IP Address: IP of the internal UPNP client.

Conguration

When you click this item, the column will expand to display the sub-items that will allow you to further congure your router.

LAN, WAN, System, Firewall, QoS, Virtual Server, Wake on LAN, Time Schedule and Advanced.

The function of each conguration sub-item is described in the following sections.

LAN - Local Area Network

A Local Area Network (LAN) is a shared communication system network where many computers

are connected. This type of network is area dened and is usually limited to a conned region

within a building or just within the same storey of a building.

There are 6 items within the LAN section: Ethernet, IP Alias, Wireless, Wireless Security, WPS and DHCP Server.

Ethernet

The router supports more than one Ethernet IP addresses in the LAN that supports multiple internet access at the same time. Users usually only have one subnet in their LAN. The default IP address

for the router is 192.168.1.254.

IP Address: The default IP on this router.

Netmask: The default subnet mask on this router.

RIP: RIP v1, RIP v2 Broadcast, RIP v2 Multicast and RIP v1+v2 Broadcast. Check to enable RIP

function.

Click Apply to conrm the settings.

IP Alias

This function allows the addition an IP alias to the network interface. It further allows user the

exibility to assign a specic function to use this IP.

IP Address: Enter the IP address to be added to the network.

Netmask: Specify a subnet mask for the IP to be added.

Click Apply to conrm the settings.

Wireless

Parameters

WLAN Service: Default setting is set to Enable. If you do not have any wireless, select Disable.

Mode: The default setting is 802.11g+n. If you do not know or have both 11g and 11b devices in

your network, then keep the default in mixed mode. From the drop-down manual, you can select

802.11g if you have only 11g card. If you have only 11b card, then select 802.11b. And if you have 11n card, you can select 802.11n.

Number of Active SSID: You can select 1, 2, or 4 SSIDs to be available at the same time.

SSID No.: The selection of SSIDs will depend on the Number of Active SSID. Select each SSID,

ranging from SSID1, SSID2, SSID3 and SSID4 and set their individual congurations.

Hide ESSID: This function enables the router to become invisible on the network. Thus, any

clients using the wireless setting to search for available or specic router on the network will not

be able to discover the router whose Hide ESSID function is set to enabled. The default setting is disabled.

Enable: When enabled, you do not broadcast your ESSID. Therefore, no one will be able to

locate the Access Point (AP) of your router.

Disable: When disabled, you allow anybody with a wireless client to be able to locate the

Access Point (AP) of your router.

Regulation Domain: There are seven Regulation Domains for you to choose from, including North America (N.America), Europe, France, etc. The Channel ID will be different based on this setting.

Channel ID: Select the wireless connection channel ID that you would like to use.

Note: Wireless performance may degrade if the selected channel ID is already being occupied by other AP(s).

Channel Width: Select either 20 MHz or 20/40 MHz for the channel bandwidth. The higher the

bandwidth the better the performance will be.

TX PowerLevel: It is a function that enhances the wireless transmitting signal strength. User may adjust this power level from minimum 0 up to maximum 100.

Note: The Power Level maybe different in each access network user premise environment, choose the most suitable level for your network.

AP MAC Address: It is a unique hardware address of the Access Point.

AP Firmware Version: The Access Point rmware version.

WPS Service: Select Enable if you would like to activate WPS service.

WPS State: This column allows you to set the status of the device wireless setting whether it

has been congured or uncongured. For WPS conguration please refer to the section on Wi-Fi

Network Setup for detail.

WMM: This feature is used to control the prioritization of trafc according to 4 Access categories:

Voice, Video, Best Effort and Background. Default is set to disable.

Wireless Distribution System (WDS)

It is a wireless access point mode that enables wireless link and communication with other access

points. It is easy to install simply by dening the peer’s MAC address of the connected AP. WDS takes advantages of the cost saving and exibility which no extra wireless client device is required

to bridge between two access points and extending an existing wired or wireless infrastructure network to create a larger network. It can connect up to 4 wireless APs for extending cover range at the same time.

In addition, WDS also enhances its link connection security mode. Key encryption and channel

must be the same for both access points.

WDS Service: The default setting is disabled. Check Enable radio button to activate this function.

1. Peer WDS MAC Address: It is the associated AP’s MAC Address. It is important that your

peer’s AP must include your MAC address in order to acknowledge and communicate with

each other.

2. Peer WDS MAC Address: It is the second associated AP’s MAC Address.

3. Peer WDS MAC Address: It is the third associated AP’s MAC Address.

4. Peer WDS MAC Address: It is the fourth associated AP’s MAC Address.

Note: For MAC Address, the format can be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.

Click Apply to conrm the settings.

You can click Security settings link next to Cancel button to go to Wireless Security screen (see

Wireless Security section).

Wireless Security

You can disable or enable wireless security function using WPA or WEP for protecting wireless

network. The default mode of wireless security is disabled.

SSID No.: The selection of SSIDs will depend on the Number of Active SSID set on Wireless

screen.

Security Mode: Select the security mode from the drop-down menu, there are Disable, WPA PreShared Key, WPA2 Pre-Shared Key, WPA/WPA2 Pre-Shared Key and WEP.

WPA / WPA2 / WPA/WPA2 Pre-Shared Key

Security Mode: You can choose the type of security mode you want to apply from the drop-down

menu.

WPA Algorithms: There are 3 types of the WPA-PSK, WPA2-PSK and WPA/WPA2-PSK. The WPA-PSK adapts the TKIP (Temporal Key Integrity Protocol) encrypted algorithms, which incorporates Message Integrity Code (MIC) to provide protection against hackers. The WPA2PSK adapts CCMP (Cipher Block Chaining Message Authentication Code Protocol) of the AES

(Advanced Encryption Security) algorithms.

WPA Shared Key: The key for network authentication. The input format is in character style and key size should be in the range between 8 and 63 characters.

Group Key Renewal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). Default value is 3600 seconds.

Click Apply to conrm the settings.

WEP

Security Mode: Choose the type of security mode WEP from the drop-down menu.

WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted

over the network, the router offers secure data encryption, known as WEP. There are 3 options to select from: Open System, Shared Key or Both.

Default Used WEP Key: Select the encryption key ID; please refer to Key (1~4) below.

Passphrase: This is used to generate WEP keys automatically based upon the input string and a

pre-dened algorithm in WEP64 or WEP128.

Key (1~4): Enter the key to encrypt wireless data. To allow encrypted data transmission, the WEP Encryption Key values on all wireless stations must be the same as the router. There are four keys for your selection. The input format is in HEX or ASCII style, 5 and 13 ASCII codes are required for WEP64 and WEP128 or 10 and 26 HEX codes are required for WEP64 and WEP128 respectively.

Click Apply to conrm the settings.

WPS

WPS (WiFi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This feature greatly simplies the steps needed to create a Wi-Fi networks for a residential or an ofce setting. WPS supports 2 types of conguration methods which are commonly known among consumers:

PIN Method & PBC Method.

Wi-Fi Network Setup

PIN Method: Congure AP as Registrar

1. Jot down the client’s Pin (eg. 16837546).

2. Enter the Enrollee’s PIN number and then press Start.

3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Cong Mode as Enrollee,

press the WPS button on the top bar, select the AP (eg. wlan-ap) from the WPS AP List column.

Then press the PIN button located on the middle left of the page to run the scan.

4. The client’s SSID and security setting will now be congured to match the SSID and security

setting of the registrar.

PIN Method: Congure AP as Enrollee

1. In the WPS conguration page, change the Role to Enrollee. Then press Start.

2. Jot down the WPS PIN (eg. 25879810).

3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Cong Mode as Registrar.

Enter the PIN number in the PIN Code column then choose the correct AP (eg. wlan-ap) from

the WPS AP List section before pressing the PIN button to run the scan.

4. The router’s (AP’s) SSID and security setting will now be congured to match the SSID and

security setting of the registrar.

5. Now to make sure that the setup is correctly done, cross check to see if the SSID and the secu-

rity setting of the registrar setting match with the parameters found on both Wireless Conguration and Wireless Security Conguration page.

656667

PBC Method:

1. Press the PBC button of the AP.

2. Launch the wireless client’s WPS Utility (eg. Ralink Utility). Set the Cong Mode as Enrollee.

Then press the WPS button and choose the correct AP (eg. wlan-ap) from the WPS AP List

section before pressing the PBC button to run the scan.

3. When the PBC button is pushed, a wireless communication will be established between your

router and the PC. The client’s SSID and security setting will now be congured to match the

SSID and security setting of the router.

Wi-Fi Network Setup with Windows Vista WCN:

1. Jot down the AP PIN from the Web (eg. 25879810).

2. Access the Wireless conguration of the web GUI. Enable WPS service, set the WPS State to

Uncongured and then click Apply.

3. In your Vista operating system, access the Control Panel page, then select Network and Inter-

net > View Network Computers and Devices. Double click on the BiPAC 8200N icon and enter the AP PIN in the column provided then press Next.

4. Enter the AP SSID then click Next.

5. Enter the passphrase then click Next.

6. When you have come to this step, you will have comleted the Wi-Fi network setup using the

built-in WCN feature in Windows Vista.

DHCP Server

DHCP allows networked devices to obtain information on the parameter of IP, Netmask, Gateway as well as DNS through the Ethernet Address of the device.

To congure the router’s DHCP Server, select DHCP Server from the DHCP Server Mode drop- down menu. You can then congure parameters of the DHCP Server including the domain, IP pool

(starting IP address and ending IP address to be allocated to PCs on your network), lease time for each assigned IP address (the period of time the IP address assigned will be valid), DNS IP address and the gateway IP address. These details are sent to the DHCP client (i.e. your PC) when it requests an IP address from the DHCP server. If you check “Use Router as a DNS Server”,

the Router will perform the domain name lookup, nd the IP address from the outside network

automatically and forward it back to the requesting PC in the LAN (your Local Area Network). Click Apply to enable this function.

If you select DHCP Relay from the DHCP Server Mode drop-down menu, you must enter the IP address of the DHCP server that assigns an IP address to the DHCP client in the LAN. Use this function only if advised to do so by your network administrator or ISP. Click Apply to enable this function.

WAN - Wide Area Network

A WAN (Wide Area Network) is a computer network that covers a broad geographical area (eg.

Internet) that is used to connect LAN and other types of network systems.

WAN Prole - Main Port: VDSL

Obtain an IP Address Automatically (VDSL)

When connecting to the ISP, your router also functions as a DHCP client. By conguring DHCP

settings, the device is able to obtain IP settings automatically from the ISP.

Protocol: Select the protocol you will use in the device.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet

through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled.

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

MAC Spoong: This option is required by some service providers. You must ll the MAC address specied by your service provider when this information is required. It will temporarily change your router’s MAC address to the one you have specied in this eld. The default setting is set to

disable.

Click Apply to conrm the settings.

Fixed IP Address (VDSL)

A Static WAN connection will be congured according to the IP properties dened by your ISP.

Protocol: Select the protocol you will use in the device.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet

through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled.

IP Address: Enter your xed IP address. Each IP address entered in the eld must be in the

appropriate IP form, which is four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format.

Netmask: User can change it to others such as 255.255.255.128. Type the netmask assigned to you by your ISP (if given)

Gateway: Enter the IP address of the default gateway (if given).

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

disable.

Click Apply to conrm the settings.

PPPoE (VDSL)

PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP.

Protocol: Select the protocol you will use in the device.

Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric

characters (case sensitive). This is in the format of “username@ispname” instead of simply “username”.

Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).

Service Name: This item is for identication purposes. If it is required, your ISP will provide you

the necessary information. Maximum input is 32 alphanumeric characters.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled.

IP (0.0.0.0.Auto): Enter your xed IP address. Leave this at 0.0.0.0 to automatically obtain an IP address from your ISP.

Auth. Protocol: Default is Auto. Please consult your ISP on whether to use Pap or Chap.

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

Connection: Click on Always On to establish a PPPoE session during start up and to automatically re-establish the PPPoE session when disconnected by the ISP. You may uncheck

the item to disable this function.

Idle Timeout: Auto-disconnect the broadband rewall gateway when there is no activity on the line for a predetermined period of time.

MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media-specic headers) that IP will attempt to send through the interface.

MAC Spoong: This option is required by some service Providers. You must ll the MAC address specied by your service provider when this information is required. It will temporarily change your router’s MAC address to the one you have specied in this eld. The default setting is set to

disable.

Click Apply to conrm the settings.

Pure Bridge (VDSL)

Protocol: Select the protocol you will use in the device.

Click Apply to conrm the change.

WAN Prole - Main Port: EWAN

Besides using VDSL to get connected to the Internet, the VDSL router offers its Ethernet port 4

as a WAN port to be used to connect to Cable Modems and bre optic lines. This alternative, yet faster method to connect to the internet will provide users with more exibility to get online.

Obtain an IP Address Automatically (EWAN)

When connecting to the ISP, your router also functions as a DHCP client. By conguring DHCP

settings, the device is able to obtain IP settings automatically from the ISP.

Protocol: Select the protocol you will use in the device.

Line Speed: Set the downstream and upstream of your connection in kilobytes per second. The

connection speed is used by QoS settings.

Protocol: Select the protocol you will use in the device.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet

through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled.

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

disable.

Click Apply to conrm the settings.

Fixed IP Address (EWAN)

A Static WAN connection will be congured according to the IP properties dened by your ISP.

Line Speed: Set the downstream and upstream of your connection in kilobytes per second. The connection speed is used by QoS settings.

Protocol: Select the protocol you will use in the device.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet

through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled.

IP Address: Enter your xed IP address. Each IP address entered in the eld must be in the

appropriate IP form, which is four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format.

Netmask: User can change it to others such as 255.255.255.128. Type the netmask assigned to you by your ISP (if given)

Gateway: Enter the IP address of the default gateway (if given).

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

disable.

Click Apply to conrm the settings.

PPPoE (EWAN)

PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP.

Line Speed: Set the downstream and upstream of your connection in kilobytes per second. The connection speed is used by QoS settings.

Protocol: Select the protocol you will use in the device.

Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric

characters (case sensitive). This is in the format of “username@ispname” instead of simply “username”.

Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).

Service Name: This item is for identication purposes. If it is required, your ISP will provide you

the necessary information. Maximum input is 32 alphanumeric characters.

IP (0.0.0.0.Auto): Enter your xed IP address. Leave this at 0.0.0.0 to automatically obtain an IP address from your ISP.

Auth. Protocol: Default is Auto. Please consult your ISP on whether to use Pap or Chap.

Obtain DNS: Select this check box to activate DNS.

Primary DNS/ Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are

passed to the DHCP clients along with the IP address and the netmask.

Connection: Click on Always On to establish a PPPoE session during start up and to automatically re-establish the PPPoE session when disconnected by the ISP. You may uncheck

the item to disable this function.

Idle Timeout: Auto-disconnect the broadband rewall gateway when there is no activity on the line for a predetermined period of time.

MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media-specic headers) that IP will attempt to send through the interface.

disable.

Click Apply to conrm the settings.

System

There are the items within the System section: Time Zone, Firmware Upgrade, Backup/Restore,

Restart, User Management and Mail alert.

Time Zone

The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the most current time from an SNTP server outside your network. Choose your local time zone from the drop down menu. To apply the selected local time zone, click Enable and click the Apply button. After a successful connection to the Internet, the router will retrieve

the correct local time from the SNTP server you have specied. If you prefer to specify an SNTP

server other than those in the drop-down list, simply enter its IP address in their appropriate blanks provided as shown above. Your ISP may also provide an SNTP server for you to use.

Resync Period (in minutes) is the periodic interval the router will wait before it re-synchronizes the

router’s time with that of the specied SNTP server. In order to avoid unnecessarily increasing the load on your specied SNTP server you should keep the poll interval as high as possible – at the

absolute minimum every few hours or even days.

Click Apply to conrm the settings.

Firmware Upgrade

Your router’s rmware is the software that enables it to operate and provides all its functionality. Think of your router as a dedicated computer, and the rmware as the software that runs in your

router. Thus, by upgrading the newly improved version of the rmware allows you the advantage to use newly integrated features.

Factory Default Settings: If select this setting, the device will reboot to restore the parameters of all its applications to its default values.

Current Settings: If select this setting, the device will reboot and retain the customized settings of all applications.

Click on Browse to select the new rmware image le you have downloaded to your PC. Once the correct le is selected, click Upgrade to update the rmware to your router.

Backup / Restore

These functions allow you to save a backup of the current conguration of your router to a dened location on your PC, or to restore a previously saved conguration. This is useful if you wish to

experiment with different settings, knowing that you have a backup in hand in case any mistakes

occur. It is advisable that you backup your router conguration before making any changes to your router conguration.

Backup Conguration

Press Backup to select where on your local PC you want to store your setting le. You may also want to change the name of the le when saving if you wish to keep multiple backups.

Restore Conguration

Press Browse to select a le from your PC to restore. You should only restore your router setting

that has been generated by the Backup function which is created with the current version of the

router rmware. Settings les saved to your PC should not be manually edited in any way.

Select the settings les you wish to use, and press Restore to load the setting into the router. Click Restore to begin restoring the conguration and wait for the router to restart before performing any

actions.

Restart

There are 2 options for you to choose from before restarting the your 8200N device. You can either choose to restart your device to restore it to the Factory Default Settings or to restart the device with your current settings applied. Restarting your device to Factory Default Setting will be useful especially after you have accidentally changed your settings that may result in undesirable outcome.

If you wish to restart the router using the factory default settings (for example, after a rmware upgrade or if you have saved an incorrect conguration), select Factory Default Settings to reset to

factory default settings.

Click Restart with option Current Settings to reboot your router (and restore your last saved

conguration).

After selecting the type of setting you want the device to restart with, click the Restart button to initiate the process. After restarting, please wait several minutes to let the selected setting applied to the system.

You may also reset your router to factory settings by holding the small Reset pinhole button more than 1 second on the back of your router.

User Management

In order to prevent unauthorized access to your router conguration interface, it requires all users

to login with a username and password. Therefore only system administrator can access the system.

This feature allows you to set up multiple user accounts which contains a unique password of its own. In addition, you can also edit any existing user accounts or add new users to allow access to

the device conguration interface.

Edit Account Information

You can change the informations of any account whether the account is active or valid.

1. To edit an account, click on the Edit radio button of the account you want to edit. Once selected,

all information of that account will be displayed.

2. Delete the information to be edited and replace it with the new one.

3. When it is done, simply click on the Edit/Delete button to save your changes.

Note: It is highly recommended that you change the password immediately to prevent security breach to your GUI.

Add an account

1. Check the Valid checkbox, ll in all the information: User name, Comment (optional), Password,

Conrm Password.

2. When it is done, click the Add button.

Delete a User Account

1. Check the Delete checkbox of the account you want to delete.

2. Then click the Edit/Delete to conrm the deletion.

Note: You can delete any user account except for the default admin account. Thus there is no delete radio button available for this account.

Mail Alert

Mail Alert allows administrator to receive notications from the router through email about

important events that is occurring in real time. This allows administrator to be able to take immediate actions to counteract any possible hacking or to restore the router to its original status

should any failover / failback ever occurs.

Server Information

SMTP Server: Enter the SMTP (mail) server address.

Username: Enter the username of your SMTP server.

Password: Enter the password associated with the username.

Sender’s E-mail: Enter the email address you wish to send the mail alert email to.

Failover / Failback

Recipient’s E-mail: Enter the email address you wish to send the Failover / Failback email to.

WAN IP Change Alert

Recipient’s E-mail: Enter the email address you wish to send the WAN IP Change email to.

Intrusion Detection

Alert Mail Time: Set the time for sending the Alert mail.

Recipient’s E-mail: Enter the email address you wish to send the Intrusion Detection email to.

Click Apply to conrm the settings.

Firewall

Firewall and Access Control

Your router includes a full SPI (Stateful Packet Inspection) rewall for controlling Internet access

from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using

NAT (Network Address Translation) the router acts as a “natural” Internet rewall, since all PCs

on your LAN use private IP addresses that cannot be directly accessed from the Internet. See the

WAN conguration section for more details on NAT.

Firewall: Prevents access from outside your network.

NAT natural rewall: This masks LAN users’ IP addresses, which are invisible to outside users on the Internet, making it much more difcult for a hacker to target a machine on your network. This natural rewall is on when the NAT function is enabled.

Firewall Security and Policy (General Settings): Inbound direction of Packet Filter rules prevent unauthorized computers or applications accessing your local network from the Internet.

Intrusion Detection: Enable Intrusion Detection to detect, prevent, and log malicious attacks.

MAC Filter rules: Prevents unauthorized computers accessing the Internet.

URL Filter: Blocks PCs on your local network from unwanted websites.

A detailed explanation of each of the following items appears in the Firewall section below: Packet

Filter, MAC Filter, Intrusion Detection, Block WAN PING and URL Filter.

Packet Filter

Packet ltering enables you to congure your router to block specic internal / external users (IP address) from Internet access, or disable specic service requests (Port number) to / from the Internet. This conguration program allows you to set up different lter rules for different users based on their IP addresses or their network Port number. The relationship among all lters is “or” operation, which means that the router checks these different lter rules one by one, starting from the rst rule. As long as one of the rules is satised, the specied action will be taken.

Rule Name: User dened description for entry identication. The maximum name length is 32

characters, and then can choose an application that they want from the listbox.

Internal IP Address / External IP Address: This is the Address-Filter used to allow or block trafc to/rom particular IP address(es). Input the range you want to lter out. If you leave these four elds

empty or enter 0.0.0.0, it means any IP address.

Protocol: Specify the packet type (TCP, UDP, TCP/UDP) that the rule applies to. Select TCP if

you wish to search for the connection-based application service on the remote server using the port number. Or select UDP if you want to search for the connectionless application service on the remote server using the port number.

Action: If a packet matches this lter rule, forward (allows the packets to pass) or drop (disallow

the packets to pass) this packet.

Internal Port: This Port or Port Range denes the ports allowed to be used by the Remote/WAN

to connect to the application. Default is set the range from 1 to 65535. It is recommended that this

option be congured by an advanced user.

External Port: This is the Port or Port Range that denes the application.

Direction: Determine whether the rule is for outgoing packets or for incoming packets.

Time Schedule: It is self-dened time period. You may specify a time schedule for your

prioritization policy. For setup and detail, refer to Time Schedule section.

Log: Check the checking box if you wish to generate logs when the ler rule is applied to a packet.

Add: Click this button to add a new packet lter rule and the added rule will appear at the bottom

table.

Edit: Check Edit next to the item you wish to edit, and then change parameters as desired.

Complete it by press “Edit/Delete”.

Delete: Check Edit next to the item you wish to delete, and press “Edit/Delete” to remove this rule.

Order: Be aware that packet ltering parameters appear in priority order i.e. the rst one takes

precedence over all other rules. There is a sort function next to the Rule Name column, you can move the rule to higher or lower priority by clicking the Order arrow, and press “Reorder” to save the new priority.

MAC Filter

A MAC (Media Access Control) address is the unique network hardware identier for each PC on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC Address Filter function, you can congure the network to block specic machines from accessing

your LAN.

There are no pre-dened MAC address lter rules, you can add the lter rules to meet your

requirements.

The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.

Filter Action

Action: Select an action for MAC Filter. This feature is disabled by default. Check Allow or Block

to activate the lter.

Server Information

MAC Address: Enter the MAC addresses you wish to have the lter rule applies.

Intrusion Detection

The router Intrusion Detection System (IDS) is used to detect hacker’s attack and intrusion attempts from the Internet. If the IDS function of the rewall is enabled, inbound packets are ltered and blocked depending on whether they are detected as possible hacker attacks, intrusion

attempts or other connections that the router determines to be suspicious.

Intrusion Detection: Check Enable if you wish to detect intruders accessing your computer without permission.

Maximum TCP Open Handshaking Count: This is a threshold value to decide whether a SYN Flood attempt is occurring or not. Default value is 100 TCP SYN per seconds.

Maximum Ping Count: This is a threshold value to decide whether an ICMP Echo Storm is occurring or not. Default value is 15 ICMP Echo Requests (PING) per second.

Maximum ICMP Count: This is a threshold to decide whether an ICMP ood is occurring or not.

Default value is 100 ICMP packets per seconds except ICMP Echo Requests (PING).

Log: Check Log if you wish to generate logs when the ler rule is applied to the Intrusion

Detection.

Click Apply to conrm the settings.

Table: Hacker attack types recognized by the IDS

Intrusion Name Detect Parameter Blacklist

Ascend Kill Ascend Kill data Src IP DoS Yes Yes

TCP

WinNuke

Smurf

Land attack SrcIP = DstIP Yes Yes

Echo/CharGen

Scan

Echo Scan

CharGen Scan

Port 135, 137~139,

Flag: URG

ICMP type 8

Des IP is broadcast

UDP Echo Port and

CharGen Port

UDP Dst Port =

Echo(7)

UDP Dst Port =

CharGen(19)

Src IP DoS Yes Yes

Dst IP

Src IP Scan Yes Yes

Type of Block

Duration

Victim

Protection

Drop Packet Show Log

Yes Yes

X’mas Tree Scan TCP Flag: X’mas Src IP Scan Yes Yes

IMAP

SYN/FIN Scan

SYN/FIN/RST/ACK

Scan

Net Bus Scan

Back Orice Scan

TCP Flag: SYN/FIN DstPort: IMAP(143) SrcPort: 0 or 65535

TCP

No Existing session

And Scan Hosts more

than ve.

TCP

No Existing session

DstPort = Net Bus

12345,12346, 3456

UDP, DstPort = Orice

Port (31337)

Src IP Scan Yes Yes

SrcIP Scan Yes Yes

SYN Flood

ICMP Flood

ICMP Echo

Max TCP Open

Handshaking Count

(Default 100 c/sec)

Max ICMP Count

(Default 100 c/sec)

Max PING Count

(Default 15 c/sec)

Yes

Src IP: Source IP Src Port: Source Port Dst Port: Destination Port Dst IP: Destination IP

Block WAN Ping

This feature is to be enabled when you want the public WAN IP address on your router not to

respond to any ping command.

This feature is disabled by default. To activate the Block WAN PING feature, check the Enable box

then click the Apply button.

URL Filter

URL (Uniform Resource Locator) (e.g. an address in the form of http://www.abcde.com or http:// www.example.com) lter rule allows you to prevent users on your network from accessing specic websites dened by their URL. There are no predened URL lter rules, therefore you can add lter rules to meet your requirements.

Keywords Filtering: Allow blocking against specic keywords within a particular URL rather than having to specify a complete URL (e.g. to block any image called “advertisement.gif”). When enabled, your specied keywords list will be checked to see if any keywords are present in URLs accessed to determine if the connection attempt should be blocked. Please note that the URL lter

blocks web browser (HTTP) connection attempts using port 80 only.

For example, if the URL is http://www.abc.com/abcde.html, it will be dropped as the keyword “abcde” occurs in the URL.

Domains Filtering: This function checks the whole URL not the IP address, in URLs accessed against your list of domains to block or allow. If it is matched, the URL request will be sent (Trusted) or dropped (Forbidden). For this function to be activated, both check-boxes must be checked. Here

is the checking procedure:

1. Check the domain in the URL to determine if it is in the trusted list. If yes, the connection attempt

is sent to the remote web server.

2. If not, check if it is listed in the forbidden list. If yes, then the connection attempt will be

dropped.

3. If the packet does not match either of the above two items, it is sent to the remote web server.

Billion BiPAC 8200N User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Chapter 1: Product

Introduction to your Router

Features

Chapter 2: Product Overview

Package Contents

Important note for using this router

Device Description

The Front LEDs

The Rear Ports

Cabling

Chapter 3: Basic Installation

Applications of the device

Factory Default Settings

Information from your ISP

Easy Sign-On (EZSO)

Quick Start

Status

WAN – Main Port: VDSL

Obtain IP Address Automatically (VDSL)

Fixed IP Address (VDSL)

PPPoE Connection (VDSL)

Pure Bridge (VDSL)

WAN – Main Port: EWAN

Obtain IP Address Automatically (EWAN)

Fixed IP Address (EWAN)

PPPoE Connection (EWAN)

WLAN

Status

VDSL Status

ARP Table

DHCP Table

System Log

Firewall Log

UPnP Portmap

LAN - Local Area Network

WAN - Wide Area Network

System

Firewall