Billion Electric Company 6404VGP Network Address Translation NAT, Domain Name System DNS relay

Page 5
Network Address Translation (NAT)

VoIP/(802.11g) Broadband Firewall Router

Network Address Translation (NAT)

Allows multi-users to access outside resources such as the Internet simultaneously with one IP address/one Internet access account. Many application layer gateway (ALG) are supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.

SOHO Firewall Security with DoS and SPI

Along with the built-in NAT natural firewall feature, the router also provides advanced hacker pattern-filtering protection. It can automatically detect and block Denial of Service (DoS) attacks. The router is built with Stateful Packet Inspection (SPI) to determine if a data packet is allowed through the firewall to the private LAN.

Domain Name System (DNS) relay

It provides an easy way to map the domain name (a friendly name for users such as www.yahoo.com) and IP address. When a local machine sets its DNS server with this router’s IP address, every DNS conversion request packet from the PC to this router will be forwarded to the real DNS in the outside network.

Dynamic Domain Name System (DDNS)

The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This dynamic IP address is the WAN IP address. For example, to use the service, you must first apply for an account from a DDNS service like http://www.dyndns.org/. More than 5 DDNS servers are supported.

Quality of Service (QoS)

QoS gives you full control over which types of outgoing data traffic should be given priority by the router, ensuring important data like gaming packets, customer information, or management information move through the router ay lightning speed, even under heavy load. The QoS features are configurable by source IP address, destination IP address, protocol, and port. You can throttle the speed at which different types of outgoing data pass through the router, to ensure P2P users don’t saturate upload bandwidth, or office browsing doesn’t bring client web serving to a halt. In addition, or alternatively, you can simply change the priority of different types of upload data and let the router sort out the actual speeds.

Virtual Server (“port forwarding”)

Users can specify some services to be visible from outside users. The router can detect incoming service requests and forward either a single port or a range of ports to the specific local computer to handle it. For example, a user can assign a PC in the LAN acting as a WEB server inside and expose it to the outside network. Outside users can browse inside web servers directly while it is protected by NAT. A DMZ host setting is also provided to a local computer exposed to the outside network, Internet.

Rich Packet Filtering

Not only filters the packet based on IP address, but also based on Port numbers. It will filter packets from and to the Internet, and also provides a higher level of security control.

Dynamic Host Configuration Protocol (DHCP) client and server

In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically. In the LAN site, the DHCP server can allocate a range of client IP addresses and distribute them including IP address, subnet mask as well as DNS IP address to local computers. It provides an easy way to manage the local IP network.

Static and RIP1/2 Routing

It has routing capability and supports easy static routing table or RIP1/2 routing protocol.

Simple Network Management Protocol (SNMP)

It is an easy way to remotely manage the router via SNMP.

Web based GUI

4

Chapter 1: Introduction

Image 5
Contents VoIP/802.11g Broadband Firewall Router BiPAC 6404VP / 6404VGPUser’s Manual Version Release 5.08aTable of Contents QoS Quality of Service Firewall and Access ControlCHAPTER 5 TROUBLESHOOTING VoIP Voice over Internet ProtocolChapter 1 Introduction FeaturesIntroduction to your Router 802.11g Wireless AP with WPA SupportDynamic Host Configuration Protocol DHCP client and server Quality of Service QoSNetwork Address Translation NAT SOHO Firewall Security with DoS and SPIRich Management Interfaces Firmware UpgradeableImportant note for using this router Chapter 2 Installing the RouterPackage Contents Do not use the same power source for this router as other equipmentRJ-45 connector The Front LEDsWireless Router Only RJ-11 connectorPort Power Switch PWR RESET The Rear PortsWAN LAN Phone 1XCabling Chapter 3 Basic Installation Chapter 3 Basic InstallationATA Mode Broadband Router Mode Connecting Your Router4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in Windows in Window XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties See Figure Configuring PCs in Windows2. Double-click Local Area “LAN” Connection. See Figure 3. Click Properties Configuring PC in Windows 95/98/ME5. Then select the DNS Configuration tab. See Figure 2. Select TCP/IP Protocol and click Properties. See Figure Configuring PC in Windows NT4.0Web Interface Username and Password Factory Default SettingsDevice LAN IP settings ISP setting in WAN sitePPPoE Information from your ISPDHCP Obtain an IP Address Automatically Static IP Fixed IP Address Configuring with your Web Browser ATA / Router Mode Configuration Chapter 4 ConfigurationSave Config to FLASH StatusStatus Wireless Association Table Wireless Router OnlyARP Table Routing TableRIP Routing Table DHCP TableLeased Table Expired TableVoIP Status Email StatusEvent Log Error LogNAT Sessions DiagnosticUPnP Portmap ATA / Router Mode LAN NAT DHCP Server Device IP WAN System Firewall QoS Virtual Server FunctionsTime Schedule Advanced VoIP RouterLAN Local Area Network ConfigurationEthernet Primary IP AddressIP Alias Ethernet Client Filter → Active PC in LANEthernet Client Filter Default setting is set to Disable Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Parameters Wireless Wireless Router OnlyWireless Distribution System WDS WPA-PSK TKIP / WPA-PSK AES Pre-Shared Key Wireless Security Wireless Router OnlyPage →Associated Wireless Clients Wireless Client / MAC Address Filter Wireless Router OnlyWireless Client Filter Default setting is set to Disable DHCP Server Time Zone SystemRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Table 1 Predefined Port Filter Example Predefined Port Filters RulesApplication ProtocolUDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Add TCP/UDP Filter Click DeleteExample Configuring Packet Filter5. The new port filter rule for HTTP is shown below Block Duration Intrusion DetectionIntrusion Name Table 2 Hacker attack types recognized by the IDSDetect Parameter Ascend KillAlways On URL Filterdropped IM / P2P Blocking Instant Message Blocking The default is set to DisabledPeer to Peer Blocking The default is set to Disabled Log information can be seen in the Status - Event Log after enabling Firewall LogVoIP Broadband Firewall Router VoIP Voice over Internet ProtocolVoice QoS Setting for Phone PortWizard NOTE User defined profiles are limited to 8 only Authentication Username Same as Phone NumberUser-defined Profiles SIP Device Parameters Advanced - Parameters How to register to SIP ServerNote ONHOOK means hung up Advanced - PSTN Environment AdjustmentPhone Port Login Account ConfigurationVolume Control For examplesCodec Preference Speed DialPSTN Dial Plan 3 Dial at Timeout PSTN Dial Plan Examples4 Dial at Timeout no Prefix 1 Dial with PrefixVoIP/802.11g Broadband Firewall Router VoIP Dial Plan Prefix Processing Dial Plan Rules ListDescription Dial-Plan ExamplesSpecial Dial Plan Examples ## xxLocalcheap.com is the default VoIP provider I set on phone port 1. When I call out any number start with 1 or 2 or 3 and plus rest of the phone number for local call, 03 is always prepended in front of these number. If 23295 are dialed, 03-2-32935 is the actual phone number called out via localcheap.com provider Mobilecheap.com is the default VoIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09. Therefore, 09-39-45678 is the actual phone number called out via Mobilecheap.com provider Country Specific Ring & Tone Ring & ToneRing Parameters Tone ParametersFlash-hook Special Dial CodesOption Click Clear QoS Quality of ServicePrioritization HighDSCP Mapping Table Table 4 DSCP Mapping TableWireless Router Device Standard DSCPOutbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Connection Diagram VoIP Normal PCs Restricted PCInformation and Settings Example QoS for your NetworkMission-critical application Advanced setting by using IP throttlingVoice application Restricted ApplicationVoIP/802.11g Broadband Firewall Router Virtual Server “Port Forwarding” Internal IP Add Virtual ServerIP Address ExampleEdit DMZ Host Global IP Address Edit One-to-One NAT Network Address TranslationSelect the Apply button to apply your changes Example List of some well-known and registered port numbers Table 5 Well-known and registered PortsPort Number ProtocolTime Schedule Configuration of Time Schedule Click EditEdit a Time Slot Delete a Time SlotManagement and IGMP Static Route AdvancedDynamic DNS Check Email Embedded Web Server 2 Management IP accounts Device ManagementSNMP V1 and Universal Plug and Play UPnPSNMP SNMP Version SNMPv2c and SNMPv3From RFC 1493 Bridge MIB From RFC1650 EtherLike-MIBFrom RFC 1471 PPP/LCP MIB From RFC 1472 PPP/Security MIBIGMP Save Configuration to FlashLogout Problems starting up the router Chapter 5 TroubleshootingProblems with the LAN Interface ProblemContact Billion WORLDWIDE APPENDIX A Product Support and Contact Information