Xacom BiPAC 7800GZ User Manual
BiPAC 7800GZ
3G (HSPA) 802.11g ADSL2+
VPN Firewall Router
User Manual
Version released: 1.02e
Table of Contents
Chapter 1: Introduction......................................................................... 1
Introduction to your Router .................................................................1
3G Mobility and Always-On Connection........................................................ 1
Secure VPN Connections ............................................................................. 1
Smooth, Responsive Net Connection ........................................................... 1
Wireless Mobility and Double-layer Protection.............................................. 2
Features..............................................................................................3
ADSL Compliance......................................................................................... 3
3G/HSPA ...................................................................................................... 3
Network Protocols and Features................................................................... 4
Virtual Private Network (VPN)....................................................................... 4
Firewall.......................................................................................................... 4
Quality of Service Control ............................................................................. 4
IPTV Applications.......................................................................................... 4
ATM and PPP Protocols ............................................................................... 5
Wireless LAN ................................................................................................ 5
Management ................................................................................................. 5
Hardware Specifications ..................................................................... 6
Physical Interface.......................................................................................... 6
Physical Specifications.................................................................................. 6
Operating Environment ....................................................................... 6
Models & Supported Standards .......................................................... 6
Chapter 2: Installing the Router........................................................... 7
Package Contents
...............................................................................
7
Important note for using this router ..................................................... 8
Device Description .............................................................................. 9
The Front LEDs............................................................................................. 9
The Rear Ports............................................................................................ 10
Cabling.............................................................................................. 11
Chapter 3: Basic Installation .............................................................. 12
Connecting Your Router ................................................................... 13
Network Configuration ......................................................................15
Configuring PC in Windows Vista
...............................................................
15
Configuring PC in Windows XP
...................................................................
17
Configuring PC in Windows 2000
...............................................................
18
Configuring PC in Windows 95/98/Me
........................................................
19
Configuring PC in Windows NT4.0
..............................................................
20
Factory Default Settings.................................................................... 21
Information from your ISP ................................................................. 22
Chapter 4: Configuration .................................................................... 23
Easy Sign-On (EZSO)....................................................................... 23
Configuration via Web Interface........................................................ 26
Quick Start ........................................................................................ 27
Basic Configuration Mode................................................................. 42
Status.......................................................................................................... 42
WAN – Main Port (ADSL)............................................................................ 43
PPPoE Connection (ADSL) ................................................................................................. 43
PPPoA Connection (ADSL) ................................................................................................. 44
MPoA Connection (ADSL) ................................................................................................... 45
IPoA Connections (ADSL) ................................................................................................... 46
Pure Bridge Connections (ADSL)....................................................................................... 47
WAN – Main Port (EWAN) .......................................................................... 48
PPPoE (EWAN)..................................................................................................................... 48
Obtain IP Address Automatically (EWAN) ........................................................................ 49
Fixed IP Address (EWAN) ................................................................................................... 49
WAN – Main Port (3G) ................................................................................ 50
WLAN.......................................................................................................... 51
Advanced Configuration Mode.......................................................... 53
Status.......................................................................................................... 53
ADSL Status........................................................................................................................... 55
3G Status................................................................................................................................ 56
ARP Table .............................................................................................................................. 57
DHCP Table ........................................................................................................................... 58
System Log ............................................................................................................................ 59
Firewall Log............................................................................................................................ 60
UPnP Portmap....................................................................................................................... 60
IPSec Status ..........................................................................................................................61
VRRP Status.......................................................................................................................... 61
Configuration............................................................................................... 62
LAN - Local Area Network ................................................................................................... 63
WAN - Wide Area Network .................................................................................................. 82
System .................................................................................................................................. 100
Firewall.................................................................................................................................. 106
VPN ....................................................................................................................................... 114
QoS - Quality of Service..................................................................................................... 117
Virtual Server ....................................................................................................................... 120
Wake on LAN....................................................................................................................... 125
Time Schedule..................................................................................................................... 126
Advanced.............................................................................................................................. 127
Save Configuration to Flash........................................................ 143
Restart............................................................................................ 144
Chapter 5: Troubleshooting.............................................................. 145
Appendix: Product Support & Contact............................................ 147
1
Chapter 1: Introduction
Introduction to your Router
The BiPAC 7800GZ, a Dual-WAN 3G / ADSL2+ firewall router integrated with the 802.11g
Wireless Access Point and 4-port switch is a cutting-edge networking product for SOHO and office
users. Uniquely, the router offers users more flexibility to directly insert a 3G/HSPA SIM card into
its built-in SIM slot instead of requiring external USB modems. This design will avoid compatibility
issues of many different 3G USB modems. With the increasing popularity of the 3G standard,
communication via the BiPAC 7800GZ is becoming more convenient and widely available enabling users to use a 3G/UMTS HSDPA/HSUPA or GSM GPRS/EDGE Internet connection,
making downstream rates of up to 7.2Mbps possible. Users can watch movies; download music on
the road or access e-mail wherever a 3G connection is available. Additionally, the integrated IPSec
VPN function allows you to encrypt connections of up to 4 VPN tunnels to securely transmit data
over the Internet. The support for auto fail-over means that users will be assured of a constant
Internet connection - in the event that the ADSL line fails, the BiPAC 7800GZ will connect via the
embedded 3G card to deliver uninterrupted connectivity.
3G Mobility and Always-On Connection
The BiPAC 7800GZ router allows you to insert a 3G/HSPA USIM card to its built-in SIM slot,
enabling you to use a 3G/HSPA, UMTS, EDGE, GPRS, or GSM Internet connection, which makes
downstream rates of up to 7.2Mbps*4 possible. With the increasing popularity of the 3G standard,
communication via the BiPAC 7800GZ is becoming more convenient and widely available allowing
you to watch movies, download music on the road, or access e-mail no matter where you are. You
can even share your Internet connection with others, no matter if you're in a meeting, or speeding
across the country on a train. The auto fail-over feature ensures maximum connectivity and
minimum interruption by quickly and smoothly connecting to a 3G network in the event that your
ADSL line fails. The 7800GZ will then automatically reconnect to the ADSL connection when it's
restored, reducing connection costs. These features are perfect for office situations where
constant connection is paramount.
Secure VPN Connections
The BiPAC 7800GZ supports embedded IPSec VPN (Virtual Private Network) protocols, allowing
users to establish encrypted private connections of up to 4 simultaneous tunnels over the Internet.
You can access your corporate intranet and transmit sensitive data between branch offices and
remote sites anytime; even when you are on the road, thus enhancing productivity.
Smooth, Responsive Net Connection
Quality of Service (QoS) gives users full control over outgoing data traffic. Priority can be assigned
by the router to ensure that important transmissions like gaming packets, VoIP calls or IPTV /
streaming content passes through the router at lightning speed, even when there is heavy Internet
traffic. The speed of different types of outgoing data passing through the router is also controlled to
ensure that users do not saturate bandwidth with their browsing activities.
2
Wireless Mobility and Double-layer Protection
An integrated 802.11g Wireless Access Point offers quick yet easy access with data encryption
for added security. Wireless Protected Access (WPA-PSK/WPA2-PSK) and Wireless Encryption
Protocol (WEP) support ensures high-level data protection and WLAN access control. In addition,
rich firewall security features such as SPI, DoS attack prevention and URL content filtering are
integrated to provide unparalleled protection for Internet access. The router also supports the WiFi Protected Setup (WPS) standard, allowing users to establish a secure wireless network by
simply pushing a button. If your network requires wider coverage, the built-in Wireless Distribution
System (WDS) repeater function allows you to expand your wireless network without the need for
any external wires or cables.
3
Features
• Dual WAN approach - ADSL2+ 3G or Ethernet WAN for broadband connectivity
• 3G/HSPA embedded with a built-in SIM card slot
• Integrated 4-port Ethernet switch, one port can be configured as a WAN interface
• 4 IPSec VPN tunnels supported
• Secure VPN with powerful DES/3DES/AES
• High-speed Internet access via ADSL2 / 2+; backward compatible with ADSL
• Supports 802.11g wireless access point with WPA-PSK / WPA2-PSK
• WPS (Wi-Fi Protected Setup) for easy setup
• Quality of Service control for traffic prioritization and bandwidth management
• SOHO firewall security with DoS prevention and Packet Filtering
• Supports IPTV application*2
ADSL Compliance
• Compliant with ADSL Standard
- Full-rate ANSI T1.413 Issue 2
- G.dmt (ITU G.992.1)
- G.lite (ITU G.992.2)
- G.hs (ITU G.994.1)
- ADSL over ISDN / U-R2
• Compliant with ADSL2 Standard
*1
- G.dmt.bis (ITU G.992.3)
- ADSL2 Annex M (ITU G.992.3 Annex M) (BiPAC 7800GZA only)
• Compliant with ADSL2+ Standard
*1
- G.dmt.bis plus (ITU G.992.5)
- ADSL2+ Annex M (ITU G.992.5 Annex M) (BiPAC 7800GZA only)
3G/HSPA
*4
• Supports third generation (3G/ 3.5G/ 3.75G) digital cellular standards
• Peak downlink speeds up to 7.2Mbps and peak uplink speeds up to 2.0Mbps
• Supports tri-band UMTS (HSPA): 900, 1900, and 2100 MHz
4
• Receive equalizer with antenna diversity on the 900, 1900, and 2100 MHz bands
• Supports quadband EDGE/GPRS/GSM: 850/900/1800/1900 MHz
Network Protocols and Features
• NAT, static routing and RIP-1 / 2
• Universal Plug and Play (UPnP) Compliant
• Dynamic Domain Name System (DDNS)
• Virtual Server and DMZ
• SNTP, DNS relay and IGMP Proxy
• IGMP snooping for video service
• Management based-on IP protocol, port number and address
Virtual Private Network (VPN)
• 4 IPSec VPN Tunnels
• IKE key management
• DES, 3DES and AES encryption for IPSec.
• IPSec pass-through
Firewall
• Built-in NAT Firewall
• Stateful Packet Inspection (SPI)
• Prevents DoS attacks including Land Attack, Ping of Death, etc.
• Remote access control for web base access
• Packet Filtering - port, source IP address, destination IP address, MAC address
• URL Content Filtering - string or domain name detection in URL string
• Password protection for system management
• VPN pass-through
Quality of Service Control
• Supports the DiffServ approach
• Traffic prioritization and bandwidth
IPTV Applications
*2
• IGMP Snooping
• Virtual LAN (VLAN)
• Quality of Service (QoS)
5
ATM and PPP Protocols
• ATM Adaptation Layer Type 5 (AAL5)
• Multiple Protocol over AAL5 (RFC 2684, formerly RFC 1483)
• Bridged or routed Ethernet encapsulation
• VC and LLC based multiplexing
• PPP over Ethernet (PPPoE)
• PPP over ATM (RFC 2364)
• Classical IP over ATM (RFC 1577)
• MAC Encapsulated Routing (RFC 1483 MER)
• OAM F4 / F5
Wireless LAN
• Compliant with IEEE 802.11g and 802.11b standards
• 2.4 GHz - 2.484 GHz frequency range
• Up to 54Mbps wireless operation rate
• Wi-Fi Protected Setup (WPS) for easy setup
• 64 / 128 bits WEP supported for encryption
• Wireless Security with WPA-PSK / WPA2-PSK support
• WDS repeater function support
• 802.1x radius supported
Management
• Easy Sign-On (EZSO) and Auto-scan ADSL settings
• Web-based GUI for remote and local management
• Upload and download of firmware upgrades and configuration data via web-based
GUI
• Embedded Telnet server for remote and local management
• Available Syslog
• Supports DHCP server / client / relay
• TR-069*3 supports remote management
6
Hardware Specifications
Physical Interface
• SIM slot: (for the SIM card from Telco/ISP)
• WLAN: 1 detachable antenna
• 3G antenna×2pcs
• DSL: ADSL port
• EWAN: Ethernet port #4 can be configured to ADSL / Cable / FTTH / VDSL device
• Ethernet: 4-port 10/100Mbps auto-crossover (MDI / MDI-X) Switch
• Factory default reset button
• WPS push button
• Power jack
• Power switch
Physical Specifications
• Dimensions: 9.04” x 6.10” x 1.69” (229.5mm x 155mm x 43mm)
• Power Requirements: Input: 12V DC, 1.2A
Operating Environment
• Operating temperature: 0 – 40°C
• Storage temperature: -20 – 70°C
• Humidity: 20 – 95% non-condensing
Models & Supported Standards
• BiPAC 7800GZA: Annex A and Annex M (Annex A and Annex M: ADSL over POTS)
• BiPAC 7800GZU: U-R2 and Annex B (Annex B and U-R2: ADSL over ISDN)
7
Chapter 2: Installing the Router
Package Contents
• BiPAC 7800GZ 3G (HSPA) 802.11g ADSL2+ VPN Firewall Router
• CD containing the online manual
• RJ-11 ADSL/Telephone cable
• Ethernet (RJ-45) cable
• One 2dBi Wireless detachable antenna
• Two 3G antennas
• Power adapter
• Quick Start Guide
• Splitter / Micro-filter (Optional)
8
Important note for using this router
9
Device Description
The Front LEDs
LED
Meaning
1
Internet
Lit red when WAN port fails to get IP address.
Lit green when WAN port gets IP address successfully.
Lit off when the device is in bridge mode or when ADSL connection
is absent.
2 DSL
Lit green when the device is successfully connected to an ADSL
DSLAM. (“line sync”)
3
3G
Lit green when 3G service is ready.
Blinking orange slowly when 3G signal is weak; blinking orange fast
when 3G signal is middle; lit up orange steady when 3G signal is
strong.
Lit off when there is no 3G signal.
4
Wireless / WPS
Lit green when a wireless connection is established.
Flash orange when WPS configuration is in progress. However, if
WPS fails the LED will only lit for 1 min before goes off.
Blinking when data is transmitted/received.
5
Ethernet port
1X — 4X
(RJ-45 connector)
Lit up steady when connected to an Ethernet device.
Lit green when the speed of transmission hits 100Mbps; Lit orange
when the speed of transmission hits 10Mbps.
Blinking when data is transmitted/received.
6
Power
When the device is booting, the green light will lit while the red light
will flash.
When the system is ready, it will lit green.
Lit red when the device fails to boot or when the device is in
emergency mode.
10
The Rear Ports
Port
Meaning
1 Power
Connect it with the supplied power adapter.
2 Power Switch
Power ON/OFF switch.
3 Reset
Press for more than 1 second to restore the device to its default
mode.
4 WPS
Push WPS button to trigger Wi-Fi Protected Setup function.
For WPS configuration, please refer to the WPS section of User
Manual.
5 USIM
Insert a SIM card into this slot.
Warning: Before inserting or removing the SIM card, you must
disconnect the router from the power adapter.
6
Ethernet
Connect your computer to a LAN port using the included Ethernet
cable (with RJ-45 cable)
Ethernet port 4 can be used for EWAN
7 DSL
Connect the supplied RJ-11 cable to this port when connecting to the
ADSL/telephone network
8 Wireless Antenna
Connect the detachable antenna for wireless connection.
9 3G Antenna
Connect the detachable antennas to these two ports for 3G
connection.
11
Cabling
One of the most common causes of problem is bad cabling or ADSL line(s). Make sure that all
connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the
LAN Link and ADSL line LEDs are lit. If they are not, verify if you are using the proper cables. If the
error persists, you may have a hardware problem. In this case you should contact technical
support.
Ensure that all other devices connected to the same telephone line as your router (e.g. telephones,
fax machines, analogue modems) have a line filter connected between them and the wall socket
(unless you are using a Central Splitter or Central Filter installed by a qualified and licensed
electrician), and ensure that all line filters are correctly installed and the right way around. Missing
line filters or line filters installed the wrong way around can cause problems with your ADSL
connection, including causing frequent disconnections. If you have a back-to-base alarm system
you should contact your security provider for a technician to make any necessary changes.
12
Chapter 3: Basic Installation
The router can be configured through your web browser. A web browser is included as a standard
application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me/Vista,
etc. The product provides an easy and user-friendly interface for configuration.
Please check your PC network components. The TCP/IP protocol stack and Ethernet network
adapter must be installed. If not, please refer to your Windows-related or other operating system
manuals.
There are ways to connect the router, either through an external repeater hub or connect directly
to your PCs. However, make sure that your PCs have an Ethernet interface installed properly prior
to connecting the router device. You ought to configure your PCs to obtain an IP address through
a DHCP server or a fixed IP address that must be in the same subnet as the router. The default IP
address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC
must be in the same subnet, and have an IP address in the range of 192.168.1.1 to 192.168.1.253).
The best and easiest way is to configure the PC to get an IP address automatically from the router
using DHCP. If you encounter any problem accessing the router web interface it is advisable to
uninstall your firewall program on your PCs, as they can cause problems accessing the IP address
of the router. Users should make their own decisions on what is best to protect their network.
Please follow the following steps to configure your PC network environment.
13
Connecting Your Router
BiPAC 7800GZ offers three modes to connect to the internet. Besides using ADSL, users can set
EWAN (Ethernet port # 4) or 3G for internet connection. BiPAC 7800GZ also allows Dual WAN
connection: ADSL fail-over to 3G, EWAN fail-over to 3G, ADSL fail-over to EWAN, and counter
likewise.
ADSL fail-over to 3G
Broadband (EWAN) fail-over to 3G
14
ADSL fail-over to EWAN
15
Network Configuration
Configuring PC in Windows Vista
1. Go to Start. Click on Network.
2. Then click on Network and Sharing
Center at the top bar.
3. When the Network and Sharing
Center window pops up, select and
click on Manage network connections on the left window column.
4. Select the Local Area Connection,
and right click the icon to select
Properties.
16
5. Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.
6. In the TCP/IPv4 properties window,
select the Obtain an IP address automatically and Obtain DNS Server
address automatically radio buttons. Then click OK to exit the setting.
7. Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
17
Configuring PC in Windows XP
1. Go to Start > Control Panel (in Classic
View). In the Control Panel, double-click
on Network Connections
2. Double-click Local Area Connection.
3. In the Local Area Connection Status
window, click Properties.
4. Select Internet Protocol (TCP/IP) and
click Properties.
5. Select the Obtain an IP address automatically and the Obtain DNS server
address automatically radio buttons.
6. Click OK to finish the configuration.
18
Configuring PC in Windows 2000
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on
Network and Dial-up Connections.
2. Double-click Local Area Connection.
3. In the Local Area Connection Status
window click Properties.
4. Select Internet Protocol (TCP/IP) and
click Properties.
5. Select the Obtain an IP address automatically and the Obtain DNS server
address automatically radio buttons.
6. Click OK to finish the configuration.
19
Configuring PC in Windows 95/98/Me
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on
Network and choose the Configuration
tab.
2. Select TCP/IP > NE2000 Compatible,
or the name of your Network Interface
Card (NIC) in your PC.
3. Select the Obtain an IP address automatically radio button.
4. Then select the DNS Configuration tab.
5. Select the Disable DNS radio button
and click OK to finish the configuration.
20
Configuring PC in Windows NT4.0
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on
Network and choose the Protocols tab.
2. Select TCP/IP Protocol and click Properties.
3. Select the Obtain an IP address from
a DHCP server radio button and click
OK.
21
Factory Default Settings
Before configuring your router, you need to know the following default settings.
Web Interface (Username and Password)
Username: admin
Password: admin
The default username and password are “admin” and “admin” respectively.
Device LAN IP settings
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
ISP setting in WAN site
PPPoE
DHCP server
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100
LAN and WAN Port Addresses
The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown in
the tale.
LAN Port
WAN Port
IP address 192.168.1.254
Subnet Mask 255.255.255.0
DHCP server function Enabled
IP addresses for
distribution to PCs
100 IP addresses continuing
from 192.168.1.100 through
192.168.1.199
The PPPoE function is
enabled to automatically get
the WAN port configuration
from the ISP.
22
Information from your ISP
Before configuring this device, you have to check with your ISP (Internet Service Provider) to find
out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP
(Fixed IP Address) or PPPoE.
Gather the information as illustrated in the following table and keep it for reference.
PPPoE(RFC2516)
VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service
Name, and Domain Name System (DNS) IP address (it can be
automatically assigned by your ISP when you connect or be set manually).
PPPoA(RFC2364)
VPI/VCI, VC / LLC-based multiplexing, Username, Password and Domain
Name System (DNS) IP address (it can be automatically assigned by your
ISP when you connect or be set manually).
MPoA(RFC1483/
RFC2684)
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System (DNS) IP address (it is a fixed IP
address).
IPoA(RFC1577)
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System (DNS) IP address (it is a fixed IP
address).
Pure Bridge
VPI/VCI, VC / LLC-based multiplexing to use Bridged Mode.
23
Chapter 4: Configuration
To easily configure this device for internet access, you must have IE 5.0 / Netscape 4.5 or above
installed on your computer. There are basically 2 ways to configure your router before you are able
to connect to the internet: Easy Sign-On & Web Interface. Configuration of each method will be
discussed in detail in the following sections.
Easy Sign-On (EZSO)
This special feature makes it easier for you to configure your router so that you can connect to the
internet in a matter of seconds without having to logon to the router GUI for any detail
configuration. This configuration method is usually auto initiated if user is to connect to the internet
via Billion's router for the first time.
After setting up the router with all the appropriate cables plugged-in, open up your IE browser, the
EZSO WEB GUI will automatically pop up and request that you enter some basic information that
you have obtained from your ISP. By following the instructions given carefully and through the
information you provide, the router will be configured in no time and you will find yourself surfing
the internet sooner than you realize.
Follow the Easy Sign-On configuration wizard to complete the basic network configuration.
1. Connect your router with all the appropriate cables. Then, load your IE / Netscape browser.
2. When the EZSO configuration wizard pops up, select the connect mode which you want to
set up and then click continue. (There are three modes that you may select: “EWAN” “ADSL”
and another is “3G”.)
3. Choose “Auto” or “Manually” to scan ADSL information.
24
4. The window will then display the Protocol information obtained from the scan result before
redirect you to the next configuration page.
5. Please enter all the information in the blanks provided and then click continue.
6. The device will reboot and then load the new configuration.
25
7. If all information provided is valid and the device successfully connects to WAN, a dialog box will
appear to signify the completion of the WAN port setup. At this point you can either click Done
to finish the EZSO configuration or you can click Next to wireless to proceed to the wireless
configuration if you have.
8. Select Enable and enter the necessary information in the blanks provided for the Wireless LAN
setting if you would like to use this feature and then click Continue.
9. The system will save your new configuration and complete the setup.
10. Congratulations! You’ve completed the setup and are now ready to surf the Internet.
11. You can test the connection by clicking on the URL link provided. If the setup is successful you
will be redirected to website.
26
Configuration via Web Interface
Open your web browser; enter the IP address of your router, which by default is 192.168.1.254, and
click “Go”, a login window prompt will appear. The default username and password are “admin” and
“admin” respectively.
Congratulations! You are now successfully logon to the Firewall Router!
If the authentication succeeds, the homepage Status will appear on the screen.
Loading...