Billion Electric Company BiGuard S100N User Manual

CONFIGURING IPSEC

Click Add to add the account.

E. F.

Once the account is added, the newly added account will be displayed in the Account Table below (Note: Account Table displays all the accounts under the chosen Group)

CONFIGURING WIRELESS

Click Apply to confirm the settings and you will be directed to the Account Table page displaying all the created accounts.

Configuring Wireless

This section describes how to configure the BiGuard S100N with basic settings so that users can use wireless connection to connect to the router. Before a user can access through wireless, the WLAN service must be enabled.

Click Quick Start →Wireless in

the Menu bar. The IPSec Wizard screen appears.

Select Enable to enable the

WLAN service.

Type an unique ESSID to identify

the router to wireless clients.

Select whether or not to Enable

(hide ESSID) or Disable (show ESSID).

Depending on where you are in the world, please select the Regulation Domain which shows your location. Difference in Regulation Domain which give a different option for Channel ID.

Select the Channel ID. Different Channel ID communicates on different frequency and certain frequency might have less interference which can let user gain better quality connection.

Select the Security Mode: Disable, WPA Pre-Shared Key, WEP and WPA2 Pre-Shared Key to enhance

security to the wireless connection.

Click Apply to confirm the settings and your wireless service will be open for users to connect.

7 8 9 10 11

Configuring IPSec

This section describes how to set up an BiGuard S100N IPSec connection using the IPSec Wizard. Refer to the following to configure an IPSec connection:

Click Quick Start→IPSec in the

Menu bar. The IPSec Wizard screen appears.

Type a connection name in the Connection Name field.

Enter a preshared key in the

Preshared Key field. The preshared

key is used by the Internet Key Exchange protocol (IKE) to establish a shared security policy and authenticated

keys. Each router must be able to identify its counterpart using the preshared key before any IPSec traffic can be passed.

Select a connection type from the

D. E.

Connection Type buttons and click Next.

The following steps depend on the choice of connection made.

LAN to LAN

LAN to LAN uses an IPSec VPN tunnel to securely establish a connection to a remote router.

Selecting LAN to LAN and clicking Next displays the Remote

Information screen.

Type the IP address or Hostname of the remote VPN gateway in the

Remote Secure Gateway Address (or Hostname) field.

Type the IP Address and Netmask of the Remote Network in the supplied fields.

Click Back to return to the Connection Information screen or click Next to proceed to the Configuration Summary screen.

LAN to LAN (Mobile LAN)

LAN to LAN (Mobile LAN) uses an IPSec VPN tunnel to securely establish a connection to a remote router that is using Dynamic Internet IP.

Selecting LAN to LAN (Mobile

LAN) and clicking Next displays

the Remote Information screen:

Type the remote identifier of the remote gateway in the Remote Identifier field. Depending on the input value, the ID type is auto-defined as IP Address, FQDN(DNS) or FQUN(E-mail).

Click Back to return to the Connection Information screen or click Next to proceed to the Configuration Summary screen.

LAN to Host

LAN to Host uses an IPSec VPN tunnel to securely establish a connection to a computer.

Selecting LAN to Host and clicking

Next displays the Remote

Informa-tion screen:

Type the IP address or hostname of the remote VPN device in the

Remote Secure Gateway Address (or Hostname) field to allow a VPN

tunnel to be established.

Click Back to return to the Connection Information screen or click Next to proceed to the Configuration Summary screen.

LAN to Host (Mobile Client)

LAN to Host (Mobile Client) uses an IPSec VPN tunnel to securely establish a connection to a computer that uses Dynamic Internet IP.

Selecting LAN to Host (Mobile Client) and clicking Next displays

the Remote Information screen:

Type the remote identifier of the

remote gateway in the Remote Identifier field. Depending on

the input value, the ID type is autodefined as IP Address, FQDN(DNS) or FQUN(E-mail).

Click Back to return to the

Connection Information screen or click Next to proceed to the Configuration Summary screen.

LAN to Host (for BiGuard VPN Client)

LAN to Host (for BiGuard VPN Client) uses an IPSec VPN tunnel to securely establish a connection to a computer that has BiGuard VPN Client installed.

Selecting LAN to Host (for

BiGuard VPN Client) and clicking Next displays the Remote

Information screen:

Type the VPN Client IP Address for

the BiGuard VPN Client. This value is applied on both remote ID and Remote Network as a single address. (Note: Ensure that each client uses a different VPN Client Address).

Click Back to return to the

Connection Information screen or click Next to proceed to the Configuration Summary screen.

The IPSec Configuration Summary screen

The Configuration Summary screen displays the data input on the selected Connection Type screens.

Review the connection information on the screen. To make any necessary amendments, click Back to return to the Connection Type screen. To complete the IPSec Configuration, click Done.

Support

For additional information, please refer to the User's Guide in the software CD. For technical support, please email to support@billion.com.

Billion Product Registration

Billion is committed to before and after sales customer services. You will get the most out of your Billion's products after registration. Please register online at http://www.biguard.com/register/ to receive valuable services and support from us.

Billion Electric Co., Ltd.

BiGuard S100N v 1.00

S100

802.11n SSL/IPSec VPN Security Gateway

1 2

Out of Box

Carefully unpack the BiGuard S100N and check that the following items are included.

1. BiGuard S100N

2. Power Adapter (15V / 1.6A)

3. Warranty card x 1

4. Quick Start Guide x 1

5. User Manual CD x 1

6. Ethernet cable x 1

7. Antenna x 3

Front and Rear View

LED

1. Status

2. Power

3. Wireless

4. USB

5. WAN

6. LAN

7. DMZ

Physical Interface

8. Power connector

9. Power switch

10. USB connector

11. WAN RJ-45 connectors

12. LAN 1~4 100/1000M RJ-45

13. Reset button

14. WPS button

15. Wireless antenna

NOTE:

Ensure that the BiGuard S100N is turned off before beginning to setup.

CONNECTING THE BiGuard S100NThe BiGuard S100N

connectors.

Ensure that your hardware is

powered off, including the BiGuard S100N.

Connect an RJ-45 Ethernet cable to the WAN port on the BiGuard S100N, and connect the other end to an ADSL or cable modem or another router.

Connect switches, hubs, and servers to the four LAN ports on the BiGuard S100N.

Connect the power cable to the connector on the BiGuard S100N and connect the power adapter to an electrical outlet. Turn the power button to the On position.

NOTE:

Register Your BiGuard Gateway Once you have established an Internet connection, please register your BiGuard gateway at www.biguard.com for firmware updates, the latest information and technical support. It is crucial that you register as soon as possible to enjoy the benefits of possessing a BiGuard gateway.

CONFIGURING THE WAN

Logging In

You configure and manage the BiGuard S100N with the Web Manager. The Web Manager is a web-based interface that you can access from any web browser.

In the Address field of your Web browser, type the default IP address:

192.168.1.254.

A Security Alert screen appears. Click Yes to continue. The login screen appears.

Type the default user name and password:

User Name: admin Password: admin

Then click Login. The Web Manager opens on the Status menu.

Configuring the WAN for PPPoE

To configure the WAN for PPPoE, you need the following information from your ISP provider:

User name Password DNS (if necessary)

(contact your ISP for more information)

Click Quick Start in the Menu bar.

NOTE:

Ensure that the BiGuard S6000

Click WAN. The Quick Start WAN

is turned off before beginning

screen opens.

setup.

Select PPPoE from the Protocol drop-down menu.

Type the user name in the

Username field.

Type and confirm the password in

the Password and Retype Password fields.

Select Always On or Connect on

Demand from the Connection

drop-down menu. If you select

Connect on Demand, the following Idle Timeout field is available.

Type the number (of minutes) in the Idle Timeout field. If your connection is Connect on Demand, you are disconnected after the idle timeout period.

Check Obtain DNS Automatically

if your ISP provides this with the assigned IP. Otherwise, enter the Primary and Secondary DNS provided by your ISP provider.

Click Apply to confirm the settings.

Configuring the WAN for Static IP

To configure the WAN for static IP, you will need the following information from your ISP provider:

IP address Subnet mask Gateway DNS

Click Quick Start in the Menu bar.

Click WAN. The Quick Start WAN screen opens.

Select Static IP from the Protocol

drop-down menu.

Type the IP address in the IP Address field.

Type the subnet mask in the Subnet

Mask field.

Type the gateway in the Gateway field.

Type the primary/secondary DNS

in the DNS fields.

Click Apply to confirm the settings.

Configuring the WAN for DHCP

Click Quick Start in the Menu bar.

Click WAN. The Quick Start WAN

screen appears.

Select Obtain an IP Address

Automatically from the Protocol

drop-down menu.

Check Obtain DNS Automatically

if your ISP provides this with the assigned IP. Otherwise, enter the Primary and Secondary DNS provided by your ISP.

CONFIGURING SSL VPN

Click Apply to confirm the settings.

Congratulations. You successfully

finished the BiGuard S100N router configuration.

Configuring SSL VPN

This section describes how to configure the BiGuard S100N with basic settings so that the SSL VPN default group is accessible from outside your network. Before a user can access the SSL VPN, a Group user account must be set up for them.

Click Quick Start →SSL VPN in

the Menu bar. The Quick Start SSL VPN screen appears.

If you have created new Groups, you can select one from the drop-down menu. Otherwise, leave the default Group selected and click Next. The following screen appears (Note: You can choose to Add Applications to the Group now or add it later).

Type a user name for a user in the

User Name field.

Type and confirm a password in

the Password and Retype Password fields.

21 3

5 6