BiPAC 7820NZ 3G/4G LTE Embedded with Dual-SIM Slots ADSL2+ Wireless-N VPN Firewall Router User Manual Version Released: 2.
Table of Contents Chapter 1: Introduction ....................................................................................................................................... 1 Introduction to your Router............................................................................................................................. 1 Features............................................................................................................................................................
WAN Service............................................................................................................................................ 40 xTM.......................................................................................................................................................... 40 xDSL ......................................................................................................................................................... 41 Bandwidth Usage...................
USB............................................................................................................................................................ 138 Storage Device Info ............................................................................................................................... 138 User Account......................................................................................................................................... 139 Print Server..............................
Static ARP.................................................................................................................................................. 254 UPnP ......................................................................................................................................................... 255 Certificate ................................................................................................................................................. 262 Trusted CA................
Chapter 1: Introduction Introduction to your Router The BiPAC 7820NZ, triple-WAN 3G/LTE/ADSL2+ firewall router is integrated with the 802.11n Wireless Access Point and 4-port switch. It is a cutting-edge networking product for SOHO and office users. Uniquely, the router allows users to directly insert 3G/4G LTE SIM card into its built-in SIM slots instead of requiring external USB modems. This design will avoid compatibility issues of many different 3G/LTE USB modems.
Smooth, Responsive Net Connection Quality of Service (QoS) gives user full control over outgoing data traffic. Priority can be assigned by the router to ensure that important transmissions like gaming packets, or IPTV/streaming content passes through the router at lightning speed, even when there is heavy Internet traffic. The speed of different types of outgoing data passing through the router is also controlled to ensure that users do not saturate bandwidth with their browsing activities.
Features • IPv6 ready (IPv4/IPv6 dual stack) • Triple-WAN ports for 3G/4G LTE, ADSL2+, Ethernet WAN (EWAN) for broadband connectivity • 3G/4G LTE embedded with dual SIM card slots • High-speed Internet Access via ADSL2 / 2+; Backward Compatible with ADSL • Ethernet port #4 can be configured as a WAN interface for broadband connectivity • Auto fail-over to ensure an always-on WAN connection • IEEE 802.
Network Protocols and Features • IPv4 or IPv4 / IPv6 Dual Stack • NAT, static (v4/v6) routing and RIP-1 / 2 • IPv6 Stateless / Stateful Address Auto-configuration • IPv6 Router Advertisement • IPv6 over PPP • DHCPv6 • IP Tunnel IPv6 in IPv4(6RD) • IP Tunnel IPv4 in IPv6(DS-Lite) • Universal Plug and Play (UPnP) Compliant • Dynamic Domain Name System (DDNS) • Virtual Server, DMZ • SNTP, DNS relay, IGMP snooping and IGMP proxy for video service • MLD snooping and MLD proxy for video service • Management based
• URL Content Filtering (v4/v6) – string or domain name detection in URL string • MAC Filtering • Password protection for system management Quality of Service Control • Supports the DiffServ approach • Traffic prioritization and bandwidth management based-on IPv4/IPv6 protocol, port number and address ATM, PTM and PPP Protocols • ATM Adaptation Layer Type 5 (AAL5) • Multiple Protocol over ALL5 (RFC 268, formerly RFC 1483) • Bridged or routed Ethernet encapsulation • VC and LLC based multiplexing • PPP ove
• WDS repeater function support • 802.
Hardware Specifications Physical Interface • WLAN: internal antennas • 3G antenna: 3G antenna x 1 PCS*3(only for 3G mode) • 4G LTE antennas x 2 PCS*3 (only for 4G LTE mode) • DSL: ADSL port • USB 2.0 port for storage service (Samba, FTP server), printer server • Ethernet: 4-port 10 / 100Mbps auto-crossover (MDI / MDI-X) Switch • EWAN: Ethernet port #4 can be configured as a WAN interface for Broadband connectivity.
Chapter 2: Installing the Router Package Contents • BiPAC 7820NZ 3G/4G LTE Embedded with Dual-SIM Slots ADSL2+ Wireless-N VPN Firewall Router • Quick Start Guide • CD containing the on-line manual • RJ-45 Cat.
Important note for using this router 1. Do not use the router in high humidity or high temperatures. 2. Do not use the same power source for the router as other equipment. 3. Do not open or repair the case yourself. If the router is too hot, turn off the power immediately and have it repaired at a qualified service center. 4. Avoid using this product and all accessories outdoors. Warning 1. Place the router on a stable surface. 2. Only use the power adapter that comes with the package.
Device Description The Front LEDs LED 1 2 Ethernet Port 1-4 (EWAN) USB 4 Wireless 6 7 8 Meaning Red Boot failure or in emergency mode Green System ready Green Transmission speed hitting 10/100Mbps Blinking Data being transmitted/received Green Connected to the USB device (USB 2.0 Storage, Printer).
The Rear Ports Port Meaning 1 Power Connect the supplied power adapter to this jack. 2 Power Switch Power ON / OFF switch. 3 RESET After the device is powered on, press it 5 seconds or above: to restore to factory default settings (this is used when you cannot login to the router, e.g. forgot the password) 1 WPS button: Push WPS button to trigger Wi-Fi Protected Setup function. 4 WPS 2. Wireless on/off: When WPS is disabled, WPS button can act as wireless on/off button.
Cabling One of the most common causes of problems is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the LAN Link and ADSL line LEDs are all lit. If they are not, verify if you are using the proper cables. If the error persists, you may have a hardware problem. In this case, you should contact technical support. Make sure you have a line filter with all devices (e.g.
Chapter 3: Basic Installation The router can be configured through your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 7 / 98 / NT / 2000 / XP / Me / Vista, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC network components. The TCP/IP protocol stack and Ethernet network adapter must be installed. If not, please refer to your Windows-related or other operating system manuals.
Connecting Your Router Users can connect the Dual-SIM 3G/4G LTE ADSL2+ router as the following. Note: BiPAC 7820NZ offers different mobile antennas distribution for 3G and 4G/LTE mode for an optimal performance. Here, we take the 4G LTE mode for an example in the illustration.
3G/4G LTE Router mode 15
Network Configuration Configuring a PC in Windows 7/8 1. Go to Start. Click on Control Panel. Then click on Network and Internet. 2. When the Network and Sharing Center window pops up, select and click on Change adapter settings on the left window panel. 3. Select the Local Area Connection, and right click the icon to select Properties.
IPv4: 4. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties 5. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration.
IPv6: 4. Select Internet Protocol Version 6 (TCP/IPv6) then click Properties 5. In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration.
Configuring a PC in Windows Vista 1. Go to Start. Click on Network. 2. Then click on Network and Sharing Center at the top bar. 3. When the Network and Sharing Center window pops up, select and click on Manage network connections on the left window pane. 4. Select the Local Area Connection, and right click the icon to select Properties.
IPv4: 5. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 7. Click OK again in the Local Area Connection Properties window to apply the new configuration.
IPv6: 8. Select Internet Protocol Version 6 (TCP/IPv6) then click Properties. 9. In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 10. Click OK again in the Local Area Connection Properties window to apply the new configuration.
Configuring a PC in Windows XP IPv4: 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on Network Connections 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.
IPv6: IPv6 is supported by Windows XP, but you should install it first. Act as shown below: 1. On the desktop, Click Start > Run, type cmd, then press Enter key in the keyboard, the following screen appears. 2. Key in command ipv6 install Configuration is OK now, you can test whether it works ok.
Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password) Three user levels are provided by this router, namely Administrator, Remote and Local respectively. See Access Control .
LAN and WAN Port Addresses The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown in the table. IPv4 LAN Port IPv4 address Subnet Mask DHCP server function IP addresses for distribution to PCs WAN Port 192.168.1.254 255.255.255.0 Enabled 100 IP addresses continuing from 192.168.1.100 through 192.168.1.199 The PPPoE function is enabled to automatically get the WAN port configuration from the ISP.
Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided. Gather the information as illustrated in the following table and keep it for reference. PPPoE(RFC2516) VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service Name, and Domain Name System (DNS) IP address (it can be automatically assigned by your ISP when you connect or be set manually).
Easy Sign On (EZSO) This special feature makes it easier for you to configure your router so that you can connect to the internet in a matter of seconds without having to logon to the router GUI for any detail configuration. This configuration method is usually auto initiated if user is to connect to the internet via Billion's router for the first time.
2. Enter the username, password from your ISP, for IP and DNS settings; also refer to your ISP. Here IPv6 service is enabled by default. If the DLS line doesn’t synchronize, the page will pop up warning of the DSL connection failure. 3. Wait while the device is configured (DSL synchronized). 4. WAN port configuration is success and next to wireless, if you want skip wireless setting, click Done. Click Done, web configuration will be loaded, you will enter the web configuration page.
5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable the wireless and set the SSID and encryption Key. (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 6. Success in configuring the EZSO. Click link 192.168.1.254, it will lead you to the following page.
Ethernet mode 1. Select Ethernet, press Continue to go on to next step. 2. Enter the username, password from your ISP, for IP and DNS settings, also refer to your ISP. Here IPv6 service is enabled by default. 3. Wait while the device is configured. 4. WAN port configuration is success. Click Done, web configuration will be loaded, you will enter the web configuration page.
5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable wireless and set the SSID and encryption Key (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 6. Success in configuring the EZSO.
3G/LTE 1. Select 3G/LTE, press Continue to go on to next step. 2. Select the 3G/LTE mode, and enter the APN, username, password from your ISP; and check with your ISP with the authentication method setting for each SIM (SIM1 and SIM2). Note: Given that BiPAC 7820NZ supports dual -SIM mobile connectivity, please determine which SIM you are gonna use or both (3G/LTE failover), and set the exact required connecting information for each SIM (SIM1 and SIM2). 3. Wait while the device is configured. 4.
5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable wireless and set the SSID and encryption Key (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 7. Success in configuring the EZSO.
Chapter 4: Configuration Configuration via Web Interface Open your web browser; enter the IP address of your router, which by default is 192.168.1.254, and click or press ‘Enter’ key on the keyboard, a login prompt window will appear. The default root username and password are “admin” and “admin” respectively.
Once you have logged on to your BiPAC 7820NZ Router via your web browser, you can begin to set it up according to your requirements.
Status This Section gives users an easy access to the information about the working router and access to view the current status of the router. Here Summary, WAN, Statistics, Bandwidth Usage, 3G/LTE Status, Route, ARP, DHCP, VPN, Log and VRRP Status subsections are included.
Summary The basic information about the device is provided here (the following is a configured screenshots to let users understand clearly). Device Information Model Name: Displays the model name. Host Name: Displays the name of the router. System Up-Time: Displays the elapsed time since the device is on. Date/Time: Displays the current exact date and time. Sync button is to synchronize the Date/Time with your PC time without regard to connecting to internet or not. Software Version: Firmware version.
WAN This table displays the information of the WAN connections, users can turn here for WAN connection information. Interface: The WAN connection interface. Description: The description of this connection. Type: The protocol used by this connection. Status: To disconnect or connect the link. Connection Time: The WAN connection time since WAN is up. IPv4 Address: The WAN IPv4 Address the device obtained. IPv6 Address: The WAN IPv6 Address the device obtained. DNS: The DNS address the device obtained.
Statistics LAN The table shows the statistics of LAN. Note: P4 can be configured as EWAN, and when the device is in EWAN profile, there is no P4/EWAN interface as P4 is working as a WAN port. (DSL) (EWAN) Interface: List each LAN interface. P1-P4 indicates the four LAN interfaces. Bytes: Display the Received and Transmitted traffic statistics in Bytes. Packets: Display the Received and Transmitted traffic statistics in Packets.
WAN Service The table shows the statistics of WAN. Interface: Display the connection interface. Description: the description for the connection. Bytes: Display the WAN Received and Transmitted traffic statistics in Bytes. Packets: Display the WAN Received and Transmitted traffic statistics in Packests. Errors: Display the statistics of errors arising in Receiving or Transmitting data. Drops: Display the statistics of drops arising in Receiving or Transmitting data.
xDSL Mode: Modulation protocol, including G.dmt, G.lite, T1.413, ADSL2, AnnexL, ADSL2+ and AnnexM. Traffic Type: Transfer mode, here supports ATM and PTM. Status: Show the status of DSL link. Link Power State: Show link output power state. Line Coding (Trellis): Trellis on/off.
SNR Margin (dB): Show the Signal to Noise Ratio (SNR) margin. Attenuation (dB): This is estimate of average loop attenuation of signal. Output Power (dBm): Show the output power. Attainable Rate (Kbps): The sync rate you would obtain. Rate (Kbps): Show the downstream and upstream rate in Kbps. MSGc (#of bytes in overhead channel message): The number of bytes in overhead channel message. B (# of bytes in Mux Data Frame): The number of bytes in Mux Data frame.
Select the Tested Time (sec), press Start to start test. When it is OK, the following test result window will appear. You can view the quality of ADSL connection. Here the connection is OK. Reset: Click this button to reset the statistics.
Bandwidth Usage Bandwidth Usage provides users direct view of bandwidth usage with simple diagram. Bandwidth usage shows the use of the bandwidth from two angles: Transmitted and Received, giving users a clear idea of the usage. LAN Note: P4 can be configured as EWAN, and when the device is in EWAN profile, there is no P4/EWAN interface as P4 is working as a WAN port.
When you press View WAN Traffic concurrently button, the WAN Bandwidth Usage pops up so that users can view the WAN traffic concurrently.
WAN Service Press View WAN Transmitted button to change the diagram to the statistics from a Received Bytes of view.
Press View LAN Traffic concurrently button to directly switch to the LAN Bandwidth Usage page to view the LAN traffic concurrently.
3G/LTE Status Current SIM: The current SIM in use. Status: The current status of the 3G/LTE card. Signal Strength: The signal strength bar indicates current 3G/LTE signal strength. Network Name: The network name that the device is connected to. Network Mode: The current operation mode for 3G/LTE card, it depends on service provider and card’s limitation, GSM or UMTS. Card Name: The name of the 3G/LTE card. Card Firmware: The current firmware for the 3G/LTE card.
Route Destination: The IP address of destination network. Gateway: The IP address of the gateway this route uses. Subnet Mask: The destination subnet mask. Flag: Show the status of the route. L U: Show the route is activated or enabled. L H (host): destination is host not the subnet. L G: Show that the outside gateway is needed to forward packets in this route. L R: Show that the route is reinstated from dynamic routing. L D: Show that the route is dynamically installed by daemon or redirecting.
ARP This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of determining the MAC address of the network interface of your PCs to use with the router’s Security – MAC Filtering function. Here IPv6 Neighbor Table, listed with IPv6 address-MAC mapping, is supported. ARP table IP Address: Shows the IP Address of the device that the MAC address maps to.
DHCP The DHCP Table lists the DHCP lease information for all IP addresses assigned by the DHCP server in the device. Host Name: The Host Name of DHCP client. MAC Address: The MAC Address of DHCP client host. IP Address: The IP address which is assigned to the host with this MAC address. Expires in: The remaining time of the IP being available for this host. Mark: Show clearly the SSID (WLAN) the device is in.
VPN VPN status viewing section provides users IPSec, PPTP, L2TP and GRE VPN status. IPSec Name: The IPSec connection name. Active: Display the connection status. Local Subnet: Display the local network. Remote Subnet: Display the remote network. Remote Gateway: The remote gateway address. SA: The Security Association for this IPSec entry. Refresh: Click this button to refresh the tunnel status.
PPTP PPTP Server Name: The PPTP connection name. Enable: Display the connection status with icon. Status: The connection status. Connection Type: Remote Access or LAN to LAN. Peer Network IP: Display the remote (client side) network and subnet mask in LAN to LAN PPTP connection. Connected By: Display the IP of remotely connected client. Action: Act to the connection. Click Drop button to disconnect the tunnel connection. PPTP Client Name: The PPTP connection name.
L2TP L2TP Server Name: The L2TP connection name. Enable: Display the connection status with icon. Status: The connection status. Connection Type: Remote Access or LAN to LAN. Peer Network IP: Display the remote (client side) network and subnet mask in LAN to LAN L2TP connection. Connected By: Display the IP of remotely connected client. Action: Act to the connection. Click Drop button to disconnect the tunnel connection. L2TP Client Name: The L2TP connection name.
OpenVPN OpenVPN Server Name: The OpenVPN connection name. Enable: Display the connection status with icon. Status: The connection status. Connection Type: Remote Access or LAN to LAN. Peer Network IP: Display the subnet address of client side in LAN to LAN mode. Server IP: The tunnel virtual IP of server side assigned by server itself. Connected By: The assigned tunnel virtual IP to remotely connected OpenVPN client. Action: Act to the connection. Click Drop button to disconnect the tunnel connection.
GRE Name: The GRE connection name. Enable: Display the connection status with icons. Status: The connection status, connected or disable. Remote Gateway: The IP of remote gateway. Refresh: Click this button to refresh the connection status.
Log System Log Display system logs accumulated up to the present time. You can trace historical information with this function. And the log policy can be configured in Configure Log section. Refresh: Click to update the system log. Clear: Click to clear the current log from the screen.
Security Log Security log displays the message logged about security, like filter messages and some firewall message. You can turn to IP Filtering Outgoing, IP Filtering Incoming, URL Filter to determine if you want to log this information. Also you can turn to Configure Log section below to determine the level to log the message. You can use this to track potential threats to your system and network. Refresh: Click to update the system log. Clear: Click to clear the current log from the screen.
VRRP Status Current Status: Show VRRP current status, Master or Backup. Current Master: Show the IP address of current master.
Quick Start Quick Start This part allows you to quickly configure and connect your router to internet. DSL mode 1. Select DSL, press Continue to go on to next step. 2. Enter the username, password from your ISP, for IP and DNS settings; also refer to your ISP. Here IPv6 service is enabled by default. If the DLS line is not synchronized, the page will pop up warning of the DSL connection failure.
3. Wait while the device is configured. 4. WAN port configuration is successful. 5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable wireless and set the SSID and encryption Key (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 6. Success.
If Quick Start is finished, user can turn to Status > Summary to see the basic information.
Ethernet mode 1. Select Ethernet, press Continue to go on to next step. 2. Enter the username, password from your ISP, for IP and DNS settings; also refer to your ISP. Here IPv6 service is enabled by default. 3. Wait while the device is configured. 4. WAN port configuration is successful.
5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable wireless and set the SSID and encryption Key (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 6. Success.
3G/LTE 1. Select 3G/LTE, press Continue to go on to next step. 2. Select the 3G/LTE mode, and enter the APN, username, password from your ISP; and check with your ISP with the authentication method setting for each SIM (SIM1 and SIM2). Note: Given that BiPAC 7820NZ supports dual -SIM mobile connectivity, please determine which SIM you are gonna use or both (3G/LTE failover), and set the exact required connecting information for each SIM (SIM1 and SIM2). 3. Wait while the device is configured.
4. WAN port configuration is successful. 5. After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. Enable wireless and set the SSID and encryption Key (1. Leave it empty to disable the wireless security; 2. Fill in the Key, and the encryption mode will be WPA2PSK/AES). 6. Success.
Configuration When you click this item, the column will expand to display the sub-items that will allow you to further configure your router. LAN, Wireless, WAN, System, USB, IP Tunnel, Security, Quality of Service, NAT and Wake On LAN. The function of each configuration sub-item is described in the following sections.
LAN - Local Area Network A Local Area Network (LAN) is a shared communication system network where many computers are connected. This type of network is area defined and is usually limited to a confined region within a building. Ethernet Parameters Group Name: This refers to the group you set in Interface Grouping section; you can set the parameters for the specific group. Select the group via the drop-down box. For more information please refer to Interface Grouping of this manual.
all incoming packets by default will be dropped, and the user on the specified LAN group interface can't access CPE anymore. But, you can still access the internet service. If user wants to manage the CPE, please turn to IP Filtering Incoming to add the allowing rules. Note that all incoming packets by default will be dropped if the LAN side firewall is enabled and user cannot manage this CPE from the specified LAN group.
Static IP List The specified IP will be assigned to the corresponding MAC Address listed in the following table when DHCP Server assigns IP Addresses to Clients. Press Add to the Static IP List. Enter the MAC Address, IP Address, and then click Apply to confirm your settings. But the IP assigned should be outside the range of 192.168.1.100-192.168.1.199. IP Alias This function allows the creation of multiple virtual IP interfaces on this router.
IPv6 Autoconfig The IPv6 address composes of two parts, the prefix and the interface ID. There are two ways to dynamically configure IPv6 address on hosts. One is “stateful” configuration, for example using DHCPv6 (which resembles its counterpart DHCP in IPv4.) In the stateful autoconfiguration model, hosts obtain interface addresses and/or configuration information and parameters from a DHCPv6 server. The Server maintains a database that keeps track of which addresses have been assigned to which hosts.
available. Stateless: If selected, the PCs in LAN are configured through RA mode, thus, the PCs in LAN are configured through RA mode, to obtain the prefix message and generate an address using a combination of locally available information (MAC address) and information (prefix) advertised by routers, but they can obtain such information like DNS from DHCPv6 Server. Stateful: if selected, the PCs in LAN will be configured like in IPv4 mode, thus obtain addresses and DNS information from DHCPv6 server.
Stateless and Stateful IPv6 address Configuration Stateless: Two methods can be carried. L With DHCPv6 disabled, but Issue Router Advertisement Enabled With this method, the PCs in LAN are configured through RA mode, thus, the PCs in LAN are configured through RA mode, to obtain the prefix message and generate an address using a combination of locally available information (MAC address) and information (prefix) advertised by routers.
Stateful: two methods can be adopted. L With only DHCPv6 enabled With this method, the PCs’ addresses are configured the same as in IPv4, that is addresses are assigned by DHCPv6 server. L With both DHCPv6 and Issue Router Advertisement Enabled With this method, the PCs’ addresses are configured the same like above, and the address information in RA packets will be neglected.
Interface Grouping Interface grouping is a function to group interfaces, known as VLAN. A Virtual LAN, commonly known as a VLAN, is a group of hosts with the common set of requirements that communicate as if they were attached to the same broadcast domain, regardless of the physical location. A VLAN has the same attributes as a physical LAN, but it allows for end stations to be grouped together even if they are not located on the same network switch. Each group will perform as an independent network.
Click Add to add groups. Group Name: Type a group name. Grouped WAN Interfaces: Select from the box the WAN interface you want to applied in the group. Grouped LAN Interfaces: Select the LAN interfaces you want to group as a single group from Available LAN Interfaces. Automatically Add Clients with following DHCP Vendor IDs: Enter the DHCP Vendor IDs for which you want the Clients automatically added into the group. DHCP vendor ID (DHCP 60) is an Authentication for DHCP Messages.
In group "test", P2 and PPP0.1 are grouped in one group, they have their only network , see LAN. If you want to remove the group, check the box as the following and press Remove. Note: If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string. By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID (DHCP option 60) will be denied an IP address from the local DHCP server.
LAN VLAN Setting When LAN VLAN is opened on a LAN port, outgoing packets from the port will be tagged with the specific VLAN ID user set. LAN Port: Select the LAN port users want to set LAN VLAN. VLAN Mode: Check if to enable LAN VLAN for the select port. Click Add to set the VLAN ID, Pbits for the port. VLAN ID: a parameter to specify the VLAN which the frame belongs.
Eth Port Control Eth port control features the control of Ethernet port working patterns like Max Bit Rate and Duplex Mode. Select to change the port working patterns in the Edit vertical column. Eth Port: Select the port, P1-P4/EWAN. Max Bit Rate: Manually specify the max bit rate for the Ethernet port, 10 or 100Mbps. Duplex Mode: Manually specify the duplex mode for the Ethernet port, half or full duplex.
VRRP VRRP is designed to eliminate the single point of failure inherent in the static default routed environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers in a LAN. The VRRP router controlling the IP address associated with a virtual router is called the Master, and forwards packets sent to these IP addresses.
Wireless This section provides you ways to configure wireless access. The BiPAC 7820NZ supports wireless on the 2.4GHz for users. This part has sub-items as Basic, Security, MAC Filter, Wireless Bridge, Advanced and Station Info here.
Basic It let you determine whether to enable Wireless function and set the basic parameters of an AP and the Virtual APs. Wireless: Default setting is set to Enable. If you do not have any wireless devices, check the checkbox again to unselect. Hide SSID: It is function in which transmits its SSID to the air so that when wireless client searches for a network, router can then be discovered and recognized. Check the checkbox to determine whether you want to hide SSID.
simultaneously. Where APs are shared by multiple providers, Virtual APs provide each provider with separate authentication and accounting data for their users, as well as diagnostic information, without sharing sensitive management traffic or data between providers. You can enable the virtual AP. Here you can enable some Virtual APs according to the request. And the other parameters of virtual APs are the same to the above. Click Apply to apply your settings.
Security Wireless security prevents unauthorized access or damage to computers using wireless network. Note： The WPS feature will also be unavailable when the security setting is not WPA2 or OPEN. So, if you manually set the wireless security setting, you should give notice to it, but you can find prompt indicating configuration. Manual Setup AP Select SSID: select the SSID you want these settings apply to. Network Authentication L Open WEP Encryption: Select to enable or disable WEP Encryption.
L Shared This is similar to network authentication ‘Open’. But here the WEP Encryption must be enabled. L 802.1x RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here. RADIUS Key: Enter the password of RADIUS authentication server. WEP Encryption: Select to enable or disable WEP Encryption. Here select Enable.
L WPA WPA Group ReKey Internal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). This is in seconds. RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here. RADIUS Key: Enter the password of RADIUS authentication server.
L WPA2 WPA2 Preauthentication: When a wireless client wants to handoff to another AP, with preauthentication, it can perform 802.1X authentication to the new AP, and when handoff happens, this mode will help reduce the association time. Network Re-auth Interval: the interval for network Re-authentication. This is in seconds. WPA Group ReKey Internal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). This is in seconds.
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication. L Mixed WPA2/WPA-PSk WPA/WAPI passphrase: enter the WPA.WAPI passphrase, you can click here to display to view it. WPA Group ReKey Internal: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). The unit is second.
WPS Setup WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. WPS is used to exchange the AP setting with Station and configure Ap settings. This feature greatly simplifies the steps needed to create a Wi-Fi network for a residential or an office setting. The commonly known PIN method is supported to configure WPS. WPS: Select enable to enable WPS function. Please note that WPS can only be available when WPA2-PSK or OPEN mode is configured.
Configure AP as Registrar Add Enrollee with PIN method 1. Select radio button “Enter STA PIN”. 2. Input PIN from Enrollee Station (16837546 in this example), Or else users can alternatively enter the authorized station MAC Help: it is to help users to understand the concept and correct operation. 3. Click . (Station PIN) (Station MAC) Note: Users can alternatively input PIN from Enrollee Station or enter the authorized station MAC.
4. Operate Station to start WPS Adding Enrollee. Launch the wireless client’s WPS utility (eg.Ralink Utility). Set the Config Mode as Enrollee, press the WPS button on the top bar, select the AP (eg. Wlan-ap-2.4g) from the WPS AP List column. Then press the PIN button located on the middle left of the page to run the scan.
4. The client’s SSID and security settings will now be configured to match the SSID and security settings of the registrar. You can check the message in the red ellipse with the security parameters you set, here we all use the default.
Configure AP as Enrollee Add Registrar with PIN Method 1. Set AP to “Unconfigured Mode”.
2. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Registrar. Enter the PIN number (10864111 (device) for example) in the PIN Code column then choose the correct AP (eg. wlan-ap-2.4g) from the WPS AP List section before pressing the PIN button to run the scan.
3. The router’s (AP’s) SSID and security setting will now be configured to match the SSID and security setting of the registrar. 4. Do Web Page refresh after ER complete AP Configuration to check the new parameters setting.
MAC Filter Select SSID: Select the SSID you want this filter applies to. MAC Restrict Mode: L Disable: disable the MAC Filter function. L Allow: allow the hosts with the following listed MACs to access the wireless network. L Deny: deny the hosts with the following listed MACs to access the wireless network. Click Add to add the MACs. MAC Address: Enter the MAC address(es) or select the MAC address(es). The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.
Wireless Bridge WDS (wireless distributed system) is a wireless access point mode that enables wireless link and communication with other access points. It’s easy to install, simply define the peer’s MAC address of the connected AP. WDS takes advantage of cost saving and flexibility with no extra wireless client device required to bridge between two access points and extending an existing wired or wireless infrastructure network to create a larger network.
Remote Bridge MAC Address: select the remote bridge MAC addresses. L Disable: Does not restrict the gateway communicating with bridges that have their MAC address listed, but it is still open to communicate with all bridges that are in the same network. Click Apply to apply your settings.
Advanced Here users can set some advanced parameters about wireless. Band: select frequency band. Here 2.4GHz. Channel: Allows channel selection of a specific channel (1-7) or Auto mode. Scan Used Channel: Press the button to scan and list all channels being used. Auto Channel Timer (min): The auto channel times length it takes to scan in minutes. Only available for auto channel mode. 802.11n/EWC: select to auto enable or disable 802.11n. Bandwidth: Select bandwidth.
RIFS Advertisement: Reduced Inter-frame Spacing (RIFS) is a 802.11n feature that also improves performance by reducing the amount of dead time required between OFDM transmissions. Select Off to disable this function or auto to enable this function. OBSS Co-Existence: coexistence (or not) between 20 MHZ and 40 MHZ overlapping basic service sets (OBSS) in wireless local area networks. RX Chain Power Save: Enabling this feature turns off one of the Receive chains, going from 2x2 to 2x1 to save power.
Station Info Here you can view information about the wireless clients. MAC Address: The MAC address of the wireless clients. Associated: List all the stations that are associated with the Access Point. If a station is idle for too long, it is removed from this list Authorized: List those devices with authorized access. SSID: Show the current SSID of the client. Interface: To show which interface the wireless client is connected to. Refresh: To get the latest information.
Schedule Control Schedule control is aimed to offer methods to flexibly control when the wireless network (SSID) is allowed for access. The Wireless schedule only functions whilst Wireless is enabled. The Guest/Virtual AP schedule control only operates whilst the associated AP is enabled. For detail setting the timeslot, user can turn to Time Schedule . Time Schedule: Set when the SSID works.
WAN-Wide Area Network A WAN (Wide Area Network) is a computer network that covers a broad geographical area (eg. Internet) that is used to connect LAN and other types of network systems. WAN Service Two WAN interfaces are provided for WAN connection: DSL and Ethernet. Click Add to add new WAN connections.
PPPoE PPPoE (PPP over Ethernet) provides access control in a manner which is similar to dial-up services using PPP. VCP/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description: User-defined description for the connection, commonly for friendly use. 802.
Note: In PPPoE connection, NAT is enabled by default, you can determine whether to enable Fullcone NAT or disable Fullcone NAT and only use NAT, the default NAT type is Port Restricted cone NAT. Of Port-Restricted cone NAT, the restriction includes port numbers. Specifically, an external host can send a packet, with source IP address X and source port P, to the internal host only if the internal host had previously sent a packet to IP address X and port P.
Default Gateway Select default gateway for you connection (IPv4 and IPv6). DNS ¾ IPv4 Three ways to set an IPv4 DNS server L Available WAN interfaces: Select a desirable WAN interface as the IPv4 DNS server. L Static DNS Address: To specify DNS server manually by entering your primary and secondary DNS server addresses.
If you don’t need a service, select the item you want to remove, check the checkbox, then press Remove. Press Edit button to re-edit this service settings.
Here you can configure WAN Service, if it is OK, you can access the internet. You can go to Status >WAN or Summary to view the WAN connection information (if your ISP provides IPv6 service, then you will obtain an IPv6 address).
PPPoA VCP/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description: User-defined description for the connection. Username: Enter the account obtained from the ISP. Password: Enter the password obtained from the ISP. Authentication Method: Default is Auto. Or else your ISP will advise you the appropriate mode. Firewall: Enable to drop all traffic from WAN side.
IPv6 for this service: Enable to use IPv6 service. IPv6 Address: Select whether to set static IPv6 address or obtain automatically. IP Address: If Static is enabled in the above field, enter the static IPv4 address. MTU: Maximum Transmission Unit, the size of the largest datagram (excluding media-specific headers) that IP will attempt to send through the interface. IGMP Multicast Proxy: Check whether to enable this feature.
IP over Ethernet VCP/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description: User-defined description for the connection, commonly for friendly use. Authentication Method: Default is Auto. Or else your ISP will advise you the appropriate mode. 802.
Default setting is Disable. WAN IP Address: Enter your IPv4 address to the device provided by your ISP. WAN Subnet Mask: Enter your submask to the device provided by your ISP. WAN gateway IP Address: Enter your gateway IP address to the device provided by your ISP. IPv6 for this service: Enable to use IPv6 service. Obtain an IPv6 address automatically: check whether to enable or disable this feature. WAN IPv6 Address/Prefix Length: Enter the WAN IPv6 Address/Prefix Length from your ISP.
IPoA VCP/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description: User-defined description for the connection, commonly for friendly use. WAN IP: Enter the WAN IP from the ISP. WAN Subnet Mask: Enter the WAN Subnet Mask from the ISP. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing the single IP address.
Bridging VCP/VPI: Enter the VCI/VPI combination from you ISP. Encapsulation Mode: Select the encapsulation mode, LLC/SNAP-BRIDGING, or VC/MUX. Description: User-defined description for the connection, commonly for friendly use. 802.1P Priority: The parameter indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used to prioritize different classes of traffic (voice, video, data, etc). Enter the priority identification, tagged: 0-1, untagged: -1. 802.
L Ethernet Ethernet WAN connection is well known as directly broadband WAN connection. PPPoE Description: User-defined description for the connection, commonly for friendly use. 802.1P Priority: The parameter indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used to prioritize different classes of traffic (voice, video, data, etc). Enter the priority identification, tagged: 0-1, untagged: -1. 802.1Q VLAN ID: It is a parameter to specify the VLAN which the frame belongs.
identification, tagged: 0-4094, untagged : -1. Username: Enter the account obtained from the ISP. Password: Enter the password obtained from the ISP. Service Name: The item is for identification purpose, user can define it yourselfe. Authentication Method: Default is Auto. Or else your ISP will advise you the appropriate mode. Firewall: Enable to drop all traffic from WAN side. If enabled, all incoming packets by default would be dropped, and please turn to IP Filtering Incoming to add allowing rules.
Click Next to continue to set the default gateway and DNS for IPv4 and IPv6. Default Gateway Select default gateway for you connection (IPv4 and IPv6). DNS ¾ IPv4 Three ways to set an IPv4 DNS server L Available WAN interfaces: Select a desirable WAN interface as the IPv4 DNS server. L Static DNS Address: To specify DNS server manually by entering your primary and secondary DNS server addresses.
If you don’t need the service, select the item you want to remove, check the checkbox, then press Remove, it will be OK. Press Edit button to re-edit this service settings. Here the corresponding WAN Service have been configured, if it is OK, you can access the internet. You can go to Status>WAN or Summary to view the WAN connection information (if your ISP provides IPv6 service, then you will obtain an IPv6 address).
IP over Ethernet Description: User-defined description for the connection, commonly for friendly use. 802.1P Priority: The parameter indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used to prioritize different classes of traffic (voice, video, data, etc). Enter the priority identification, tagged: 0-1, untagged: -1. 802.1Q VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID identification, tagged: 0-4094, untagged : -1.
Obtain an IPv6 address automatically: check whether to enable or disable this feature. WAN IPv6 Address/Prefix Length: Enter the WAN IPv6 Address/Prefix Length from your ISP. WAN Next-Hop IPv6 Address: Enter the WAN Next-Hop IPv6 Address from your ISP. Note: If you don’t know well about the DHCP Option, you can leave it empty or leave it as default. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing the single IP address.
Bridging Description: User-defined description for the connection, commonly for friendly use. 802.1P Priority: The parameter indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used to prioritize different classes of traffic (voice, video, data, etc). Enter the priority identification, tagged: 0-1, untagged: -1. 802.1Q VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID identification, tagged: 0-4094, untagged : -1.
L 3G/LTE Select 3G/LTE to configure the route to enjoy the mobility. Given that BiPAC 7820NZ supports dual SIM mobile connectivity, please determine which SIM you are gonna use or both (3G/LTE failover), and set the exact required connecting information for each SIM (SIM1 and SIM2). By default the 3G/LTE interface is on, user can edit the parameters to meet your own requirements. Click Edit button to enter the 3G/LTE configuration page.
Dial on demand: If enabled, the 3G/LTE will work in dial on demand and be brought up only when there is no active default route. In this mode, 3G/LTE work as a backup for the WAN connectivity.
been configured to achieve a mobile connectivity. SIM 1 & SIM 2 Mode: There are 6 options of phone service standards: GSM 2G only, UTMS 3G only, GSM 2G preferred, UMTS 3G preferred, Automatic, and LTE only. If you are uncertain what services are available to you, and then please select Automatic. Use PPP: Check to use PPP. TEL No.: The dial string to make a 3G/LTE user internetworking call. It may provide by your mobile service provider.
send through the interface. Selected default gateway interfaces: Select from the interfaces the default gateway, here commonly we select USB3G0. Selected DNS Server Interfaces: Three ways to set a DNS server. L Available WAN interfaces: Select a desirable WAN interface as the DNS server. L Static DNS Address: To specify DNS server manually by entering your primary and secondary DNS server addresses.
Failover Auto failover/failback is to ensure an always-on internet connection. Users can set a Master WAN interface (main WAN) and a slave interface (backup WAN), and when Master WAN fails, it will switch to slave WAN, and when master WAN restores, it will switch to master WAN interface again. L3 WAN Failover: Check Enable to activate L3 WAN failover. Master Interface: Select a master WAN interface. Ping: To ping to check the master WAN inteface’s connectivity.
Dual SIM BiPAC 7820NZ offers dual-SIM slots for two mobile SIM cards. The SIM 1 will be in use when two SIM cards are both up. The current SIM connection will fail over to the other SIM connection when the situation below happens. But note when the failover is done, the connection cannot fail back to the previous SIM connection. Failover: Check Enable to activate failover feature. Connectivity Decision: Set how many times of probing failure to switch to the other SIM.
DSL This screen allows you to set DSL parameters. DSL knowledge is required to configure these settings. Contact your ISP to make sure that these parameters are correct. Modulation: There are 7 modes “G.Dmt”, “G.lite”, “T1.413”, “ADSL2”, “AnnexL”, ”ADSL2+”, “AnnexM” that user can select for this connection. Phone line pair: This is for reserved only. You can choose "Inner Pair" or "Outer Pair". Capability: There are 2 options “Bitswap Enable” and “SRA Enable” that user can select for this connection.
With each tone carrying separate data, the technique operates as if 256 separate modems were running in parallel.
SNR Signal-to-noise ratio (often abbreviated SNR or S/N) is a measure used in science and engineering that compares the level of a desired signal to the level of background noise. It is defined as the ratio of signal power to the noise power. SNR: Change the value to adjust the DSL link rate, more suitable for an advanced user.
System Internet Time The router does not have a real time clock on board; instead, it uses the Network Time Protocol (NTP) to get the most current time from an NTP server. NTP is a protocol for synchronization of computers. It can enable computers synchronize to the NTP server or clock source with a high accuracy.
Firmware Upgrade Software upgrading lets you experience new and integral functions of your router. Restart device with: L Factory Default Settings: Restart the device with factory default settings automatically when finishing upgrading. L Current Settings: Restart the device with the current settings automatically when finishing upgrading. Your router’s “firmware” is the software that allows it to operate and provides all its functionality.
Backup / Update These functions allow you to save and backup your router’s current settings to a file on your PC, or to restore from a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a backup handy in the case of any mistakes. It is advisable to backup your router’s settings before making any significant changes to your router’s configuration.
Access Control Access Control is used to prevent unauthorized access to the router configuration page. Here you can change the login user password. Three user levels are provided here. Each user level there’s a default provided user. You must access the router with the appropriate username and password. Here the corresponding passwords are allowed to change. Level: select which level you want to change password to. There are three default levels.
Mail Alert Mail alert is designed to keep system administrator or other relevant personnel alerted of any unexpected events that might have occurred to the network computers or server for monitoring efficiency. With this alert system, appropriate solutions may be tackled to fix problems that may have arisen so that the server can be properly maintained. WAN Port: Mail Alert feature can be applicable to every WAN mode: Ethernet，DSL and 3G/LTE. Select the port you want to use Mail Alert.
SMS Alert SMS, Short Message Service, is to inform clients the information clients subscribe. The BiPAC 7820NZ offers SMS alert sending clients alert messages when a WAN IP change is detected. Recipient’s Number (WAN IP Change Alert): Enter the Recipient’s number that will receive the alert message once a WAN IP change has been detected.
Configure Log Log: Enable or disable this function. Log level: Select your log level. The log level allows you to configure which types of events are logged.
