Billion Electric BIL-MX200-R Advanced Industrial 4G/LTE Router, WWAN Failover Manager User Manual Product Overview

Download:
Mirror Download [FCC.gov]
Document ID	3322992
Application ID	oZ5R4+ixiHBSQLlWuow1ew==
Document Description	Users Manual
Short Term Confidential	No
Permanent Confidential	No
Supercede	No
Document Type	User Manual
Display Format	Adobe Acrobat PDF - pdf
Filesize	432.25kB (5403064 bits)
Date Submitted	2017-03-20 00:00:00
Date Available	2017-03-22 00:00:00
Creation Date	2017-02-15 04:00:12
Producing Software	Microsoft® Office Word 2007
Document Lastmod	2017-02-15 04:00:12
Document Title	Product Overview
Document Creator	Microsoft® Office Word 2007
Document Author:	Jessiezhu

User Manual
BEC MX-200
Advanced Industrial
4G/LTE Router
Last revised: February, 2017
Version release: v2.01
Copyright Notice
Copyright@ 2017 BEC Technologies Inc. All rights reserved.
BEC Technologies reserves the right to change and make improvement to this manual at any time
without prior notice.
No part of this document may be reproduced, copied, transmitted in any form or by any means without
prior written permission from BEC Technologies, Inc.
Support Contact Information
Contact Support: http://bectechnologies.net/support/.
Telephone: +1 972 422 0877
TABLE OF CONTENTS
CHAPTER 1: INTRODUCTION ......................... 1
INTRODUCTION TO YOUR ROUTER .............................................................. 1
FEATURES & SPECIFICATIONS .................................................................... 3
HARDWARE SPECIFICATIONS ..................................................................... 5
APPROVES ............................................................................................ 5
APPLICATION DIAGRAMS ......................................................................... 6
CHAPTER 2: PRODUCT OVERVIEW .............. 7
IMPORTANT NOTE FOR USING THIS ROUTER ................................................ 7
PACKAGE CONTENTS ............................................................................... 7
DEVICE DESCRIPTION .............................................................................. 8
SYSTEM RECOVERY PROCEDURES ............................................................. 11
CABLING ............................................................................................ 11
CHAPTER 3: BASIC INSTALLATION ............ 12
NETWORK CONFIGURATION – IPV4 ......................................................... 13
Configuring PC in Windows 10 (IPv4) ............................................................... 13
Configuring PC in Windows 7/8 (IPv4).............................................................. 15
Configuring PC in Windows Vista (IPv4) ........................................................... 17
NETWORK CONFIGURATION – IPV6 ......................................................... 19
Configuring PC in Windows 10 (IPv6) ............................................................... 19
Configuring PC in Windows 7/8 (IPv6).............................................................. 21
Configuring PC in Windows Vista (IPv6) ........................................................... 23
DEFAULT SETTINGS ............................................................................... 25
CHAPTER 4: DEVICE CONFIGURATION...... 26
LOGIN TO YOUR DEVICE ......................................................................... 26
STATUS.............................................................................................. 28
Device Info ........................................................................................................ 28
System Log ........................................................................................................ 29
4G-LTE Status .................................................................................................... 30
Statistics............................................................................................................ 32
DHCP Table ....................................................................................................... 35
IPSec Status ...................................................................................................... 36
PPTP Status ....................................................................................................... 37
L2TP Status ....................................................................................................... 38
GRE Status ........................................................................................................ 38
OpenVPN Status ............................................................................................... 39
ARP Table .......................................................................................................... 40
QUICK START ...................................................................................... 41
DEVICE CONFIGURATION ....................................................................... 43
Interface Setup ................................................................................................. 43
Internet ........................................................................................................................... 43
LAN ................................................................................................................................. 51
Dual WAN ......................................................................................................... 55
General Setting ............................................................................................................... 55
Outbound Load Balance ................................................................................................. 59
Protocol Binding ............................................................................................................. 60
Advanced Setup ................................................................................................ 62
Firewall ........................................................................................................................... 62
Routing ........................................................................................................................... 63
Dynamic Routing ............................................................................................................ 64
NAT ................................................................................................................................. 66
Static DNS ....................................................................................................................... 71
Time Schedule ................................................................................................................. 72
Mail Alert ........................................................................................................................ 73
Remote System Log......................................................................................................... 74
Serial (RS-232 Console Port) ........................................................................................... 75
VPN ................................................................................................................... 78
IPSec ............................................................................................................................... 78
PPTP Server..................................................................................................................... 88
PPTP Client...................................................................................................................... 90
L2TP ................................................................................................................................ 98
GRE Tunnel.................................................................................................................... 105
OpenVPN ...................................................................................................................... 110
OpenVPN Server ........................................................................................................... 110
OpenVPN Client ............................................................................................................ 112
Access Management ...................................................................................... 117
Device Management..................................................................................................... 117
SNMP ............................................................................................................................ 118
Syslog............................................................................................................................ 119
Universal Plug & Play ................................................................................................... 120
Dynamic DNS (DDNS).................................................................................................... 121
Access Control............................................................................................................... 123
Packet Filter .................................................................................................................. 125
CWMP (TR-069) ............................................................................................................ 129
Parental Control............................................................................................................ 131
BECentral Management ............................................................................................... 132
Maintenance................................................................................................... 133
User Management ........................................................................................................ 133
Certificate Management .............................................................................................. 135
Time Zone ..................................................................................................................... 137
License .......................................................................................................................... 138
Firmware & Configuration ............................................................................................ 139
System Restart .............................................................................................................. 140
Auto Reboot .................................................................................................................. 141
Diagnostics Tool ............................................................................................................ 142
CHAPTER 5: TROUBLESHOOTING ............ 143
Problems with the Router .............................................................................. 143
Problem with LAN Interface ........................................................................... 143
Recovery Procedures ...................................................................................... 144
APPENDIX: PRODUCT SUPPORT & CONTACT
....................................................................... 145
Introduction
CHAPTER 1: INTRODUCTION
Introduction to your Router
The BEC MX-200 Advanced Industrial 4G/LTE Router is a high performance fixed wireless platform
enabling real-time 4G Cellular data connectivity for your existing serial devices and Ethernet network.
The MX-200 provides a reliable and cost-effective alternative solution for business continuity. The
platform can serve as the primary connection or backup connection when wired connections fail are
unavailable or non-existent.
The MX-200 features two Gigabit Ethernet interfaces and a RS-232 Serial interface enabling wireless
data connectivity for a broad range of applications and vertical machine-to-machine (M2M) market
segments. Intelligent software supports configurable LAN/WAN options, embedded LTE module and
enterprise level functionality such as: advanced security mechanisms, Quality of Service (QoS), SPI
firewall, integrated VPN, auto failover for unparalleled uptime and network redundancy, and
cloud-based management to extend visibility and control of devices remotely.
4G/LTE Mobility
To offer an advanced network solution that meets the growing demands of M2M services, MX-200
exclusively features dual WAN - load balance or auto-failover/failback to provide extraordinary,
always-on internet connectivity.
Ultra-Compact and Lightweight Design
Designed for continuous operation in harsh environments, the MX-200 supports an extended
operating temperature range from -4 to 140º F (–20 to 60º C) and a flexible input voltage range of
9-56V DC making it suitable for diverse environments and applications. To enable simple, reliable and
efficient integration the ultra-compact, lightweight and low profile design incorporates highly flexible
mounting options to ensure that the device and can be easily mounted discretely anywhere.
Secure VPN Connections
The MX-200 supports comprehensive and robust IPSec VPN (Virtual Private Network) protocols for
business users to establish private encrypted tunnels over the public Internet to secure data
transmission between headquarters and branch offices. It also supports VPN dial in from smart
phones for secure remote Internet connection via your home broadband. With a built-in DES/3DES
VPN accelerator, the router enhances IPSec VPN performance significantly.
IPv6 Supported
Internet Protocol version 6 (IPv6) is a version of the Internet Protocol that is designed to succeed IPv4.
IPv6 has a vastly larger address space than IPv4. The router is already supporting IPv6, you can use
it in IPv6 environment no need to change device. The dual-stack protocol implementation in an
operating system is a fundamental IPv4-to-IPv6 transition technology. It implements IPv4 and IPv6
BEC MX-200 User Manual
Introduction
protocol stacks either independently or in a hybrid form. The hybrid form is commonly implemented in
modern operating systems supporting IPv6.
Quick Start Wizard
Support a WEB GUI page to install this device quickly. With this wizard, simple steps will get you
connected to the Internet immediately.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.
BEC MX-200 User Manual
Introduction
Features & Specifications
Features & Specifications
• 4G/LTE and/or Ethernet IP broadband connectivity (3G Fallback optional)
• High performance SX antenna for increased coverage, signal reception and efficiency
• Gigabit Ethernet WAN (GbE WAN) for Cable/Fiber/xDSL high WAN throughput
• Gigabit Ethernet LAN
• IPv6 ready (IPv4/IPv6 dual stack)
• Secured IPSec VPN with powerful DES/ 3DES/ AES
• Secured PPTP VPN with Pap/ Chap/ MPPE authentication
• Secured L2TP VPN with Pap/Chap authentication
• Secured GRE VPN tunnel
• Firewall Security with DoS Preventing and Packet Filtering
• Quality of Service Control for traffic prioritization management
• Universal Plug and Play (UPnP) Compliance
• Ease of Use with Quick Installation Wizard
• Small form factor with multiple mounting options, easily installed by a single person
• Hardened enclosure with Industrial-graded components
• Designed to withstand hypothermia, heat and protect from shock, vibration, etc.
Availability and Resilience
• Dual-WAN Interfaces
• Auto fail-over and failback
• High performance external antennas
Network Protocols and Features
• IPv4, IPv6, IPv4 / IPv6 dual stack
• IP Tunnel IPv6 in IPv4 (6RD)
• IP Tunnel IPv4 in IPv6 (DS-Lite)
• NAT, static routing and RIP-1/2
• Universal Plug and Play (UPnP) compliant
• Dynamic Domain Name System (DDNS)
• Virtual server and DMZ
• SNTP, DNS relay
• IGMP proxy and IGMP snooping
BEC MX-200 User Manual
Introduction
Features & Specifications
• MLD proxy and MLD snooping
• Supports port-based Virtual LAN (VLAN)
Firewall
• Built-in NAT Firewall
• Stateful Packet Inspection (SPI)
• DoS attack prevention including Land Attack, Ping of Death, etc.
• Access control
• IP&MAC filter, URL Content Filter
• Password protection for system management
• VPN pass-through
Quality of Service Control
•Traffic prioritization management based-on Protocol, Port Number and IP Address (IPv4/ IPv6)
Virtual Private Network (VPN) (Optional)
• 8 IPSec VPN Tunnels
• 8 PPTP VPN Tunnels (Dial-in:4, Dial-out:4)
• 8 L2TP VPN Tunnels (Dial-in:4, Dial-out:4)
• GRE (up to 8 tunnels)
• OpenVPN (Server: 1 rule, Clients: 4)
• Embedded PPTP / L2TP / IPSec Client and Server
• IKE Key Management
• MPPE Encryption for PPTP
• IPSec DES, 3DES and AES encryption
Management
• Quick Installation wizard
• Web-based GUI for remote and local management (IPv4/IPv6)
• Firmware upgrades and configuration data upload and download via web-based GUI
• Supports DHCP server / client / relay
• Supports SNMP
• TR-069 supports remote management
• BECentral Cloud Management
BEC MX-200 User Manual
Introduction
Hardware Specifications & Approves
Hardware Specifications
Physical interface
• 4G/LTE: Two(2) detachable antennas
• GPS: 1 detachable GPS antenna (optional)
• WAN: Cellular 4G/LTE (and/or ETH WAN Optional)
• RS-232 (DCE, DB-9): one (1) port
• Ethernet LAN: 2-port 10/100/1000Mbps, auto-crossover (MDI/ MDI-X) switch
• SIM Card: One (1) slot
• Reset Button
• Power Connector: 4-pin connectors
• LED Indicators: Power / Internet / LTE / Ethernet
Physical Specifications
• Dimensions (W*H*D): 4.29" x 1.17" x 3.43" (109mm x 29.7mm x 87mm)
Approves
PTCRB, CE, FCC
UL Safety
• Class I Division 2 (C1D2) Groups ABCD T4
• Power Rating: 9-56V DC, 1.34-0.22A
• Operating Temperature Range: -20 to +60 C (-4 to +140 F)
 BEC MX-200, THE EQUIPMENT, IS AN OPEN-TYPE DEVICE AND IS MEANT TO BE INSTALLED
IN AN ENCLOSURE SUITABLE FOR THE ENVIRONMENT SUCH THAT THE EQUIPMENT IS
ONLY ACCESSIBLE WITH THE USE OF A TOOL.
Attention
 BEC MX-200 IS SUITABLE FOR USE IN CLASS I, DIVISION 2, GROUPS A, B, C AND D
HAZARDOUS LOCATIONS, OR NONHAZARDOUS LOCATIONS ONLY.
EXPLOSION HAZARD – DO NOT CONNECT OR DISCONNECT WHEN ENERGIZED.
AVERTISSEMENT – RISQUE D’EXPLOSION. NE PAS BRANCHER NI DÉ BRANCHER SOUS
Warning
TENSION.
BEC MX-200 User Manual
Introduction
Application Diagrams
Application Diagrams
The MX-200 Advanced Industrial 4G/LTE VPN Router is ideal the ideal solution for Digital signage,
Remote surveillance, Vending Machines, Retail Point-of-Sales (PoS), Remote patient
care/maintenance services, SCADA, Metering applications and much more.
Industrial Industry:
Power / Energy Industry:
BEC MX-200 User Manual
Product Overview
CHAPTER 2: PRODUCT OVERVIEW
Important Note for Using This Router

Do not use the router in high humidity or high temperature.

Do not use the same power source for the MX-200 on other
equipment.

Do not open or repair the case yourself. If the device becomes
too hot, turn off the power immediately and have it repaired at
a qualified service center.

Avoid using this product and all accessories outdoors.
Warning

Place the router on a stable surface.

Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage the router.
Attention
Package Contents
 BEC MX-200 M2M Router * 1
(Optional Accessories)
 CD containing the User Manual * 1
 3G/4G Antennas
 Quick Installation Guide * 1
 Active GPS Antenna
 DIN Rail Mounting Kit * 1
 Ethernet (RJ-45) Cable
 Power Terminal Block 2-pin 3.5mm * 1
 Power Converter with 2-pin Terminal Block * 1
 DC Power Adapter, 12V 1.2A* 1
BEC MX-200 User Manual
Product Overview
Device Description
Device Description
INTERFACE
MEANING
ETH1 is a LAN / WAN configurable port for broadband connectivity
Gigabit Ethernet
(LAN 1 ~ 2)
Connect PCs, Laptops or any other office/home LAN devices with the supplied RJ-45 Ethernet
cable (Cat-5 or Cat-5e) to any of those two LAN ports.
RS-232 serial port for machine connection and data collection
SERIAL
Connect the male end of RS-232 serial data cable to the MX-200 and the other end to a
machine or PC.
BEC MX-200 User Manual
Product Overview
Device Description
INTERFACE
WAN (MAIN/AUX)
4G/LTE Antenna
Connectors
GPS Antenna
Connector
RESET
MEANING
SMA female connectors.
Manually screw the 3G/4G antennas tight to the female connectors for the Cellular Module
SMA female connectors.
Manually screw the GPS antenna tight to the connector
After the device is powered on, press it 6 seconds or above: to restore to factory default
settings (this is used when you cannot login to the router, e.g. forgot your password)
Attach the power terminal block, 2-pin 3.5mm, or the power converter with 2-pin terminal
block here.
POWER
VCC (Left Connector): Power - Red Wire to connect to the Positive (+) terminal of the power
supply.
GND (Right Connector): Ground – Black Wire to connect to the ground of the power supply
BEC MX-200 User Manual
Product Overview
Device Description
10
LEDS / INTERFACE
MEANING
ETH #1 Can be configured to be WAN port for broadband connectivity
Green
Gb ETH (1 & 2)
Red
Transmission speed is at 10/100Mbps
Blinking
Data being transmitted/received
Off
No device is connected to the Ethernet port
Green
RSSI greater than -69 dBm. Excellent signal condition
Green / Fast Flashing
RSSI from -81 to -69 dBm. Good signal condition
Red / Fast Flashing
RSSI from -99 to -81 dBm. Fair signal condition
Red / Slow Flashing
RSSI less than -99 dBm. Poor signal condition
Red
No signal and the 4G LTE module is in service
Off
No LTE module or LTE module fails
Green
IP connected and traffic is passing through the device
Red
IP request failed
Off
Either in bridged mode or WAN connection is not present
Green
System ready
Red
Boot failure
(Received Signal
Strength Indicator)
Internet
Power
N/A
Ethernet WAN (ETH1 Only): Successfully connected with a
broadband connection device
(Gigabit Ethernet)
LTE
Ethernet LAN: Connected to an Gigabit (1000Mbps)
Ethernet device
SIM Card Slot
Insert mini SIM card (2FF) with the gold contact facing down.
Push mini SIM card (2FF) inwards to eject it
* Power off the MX-200 before inserting or removing the SIM card
BEC MX-200 User Manual
Product Overview
System Recovery Procedure & Cabling
11
System Recovery Procedures
The purpose is to allow users to restore the MX-200 to its initial stage when the device is outage,
upgraded to a wrong / broken firmware, cannot access to the GUI with wrong username and/or
password, etc.
Step 1 – Configure your PC Network IP Address
Before performing the system recovery, assign this IP address and Netmask to your PC,
192.168.1.100 and 255.255.255.0 respectively.
Step 2 – Reset your MX-200 Device
2.1 Power off your MX-200
2.2 Power on the MX-200 while pushing the RESET button with a small pointed object (such as
paper clip, needle, toothpick, and etc.).
2.3 When the POWER LED turns RED, keep holding and pushing the RESET button until the
INTERNET LED flashes in GREEN
Step 3 – Restore your MX-200 Device
With INTERNET light flashes green, MX-200 is in recovery mode and ready for a new Firmware.
3.1 Open a web browser and type the IP address, 192.168.1.1, to access to the recovery page.
NOTE: In the recovery mode, MX-200 will not respond to any PING or other requests.
3.2 Browse to the new Firmware image file then click Upload to start the upgrade process.
3.3 INTERNET LED turns red means the Firmware upgrade is in process.
DO NOT power off or reboot the device, it would permanently damage your MX-200.
3.4 INTERNET LED turns green after the Firmware upgrade completed
3.5 Power cycle on & off to regain access to the MX-200.
Cabling
One of the most common causes of problems is bad cabling. Make sure that all connected devices are
turned on. On the front panel of the product is a bank of LEDs. Verify that the LAN Link and LEDs are
lit. If they are not, verify that you are using the proper cables.
BEC MX-200 User Manual
Basic Installation
12
CHAPTER 3: BASIC INSTALLATION
The router can be configured with your web browser. A web browser is included as a standard
application in the following operating systems: Windows Vista / 7 / 8, Linux, Mac OS, etc. The product
provides an easy and user-friendly interface for configuration.
PCs must have an Ethernet interface installed properly and be connected to the router either directly
or through an external repeater hub, and have TCP/IP installed or configured to obtain an IP address
through a DHCP server or a fixed IP address that must be in the same subnet as the router. The
default IP address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any
attached PC must be in the same subnet, and have an IP address in the range of 192.168.1.1 to
192.168.1.253). The best and easiest way is to configure the PC to get an IP address automatically
from the router using DHCP. If you encounter any problems accessing the router’s web interface it
may also be advisable to uninstall any kind of software firewall on your PCs, as they can cause
problems accessing the 192.168.1.254 IP address of the router. Users should make their own
decisions on how to best protect their network.
Please follow the steps below for your PC’s network environment installation. First of all, please check
your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be
installed. If not, please refer to your Windows-related or other operating system manuals.
Any TCP/IP capable workstation can be used to communicate with
or through the MX-200. To configure other types of workstations,
please consult the manufacturer’s documentation.
Attention
BEC MX-200 User Manual
Basic Installation
Network Configuration – Windows 10 (IPv4)
Network Configuration – IPv4
Configuring PC in Windows 10 (IPv4)
1.
Click
2.
Click
3.
Then click on Network and Internet.
4.
Under Related settings,
Network and Sharing Center
5.
When the Network and Sharing
Center window pops up, select and
click on Change adapter settings on
the left window panel.
6.
Select the Local Area Connection,
and right click the icon to select
Properties.
BEC MX-200 User Manual
select
13
Basic Installation
Network Configuration – Windows 10 (IPv4)
7.
Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.
8.
In the TCP/IPv4 properties window,
select the Obtain an IP address
automatically and Obtain DNS
Server address automatically radio
buttons. Then click OK to exit the
setting.
9.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
14
Basic Installation
Windows 7/8 (IPv4)
Configuring PC in Windows 7/8 (IPv4)
1.
Go to Start. Click on Control Panel.
2.
Then click on Network and Internet.
3.
When the Network and Sharing
Center window pops up, select and
click on Change adapter settings on
the left window panel.
4.
Select the Local Area Connection,
and right click the icon to select
Properties.
BEC MX-200 User Manual
15
Basic Installation
Windows 7/8 (IPv4)
5.
Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.
6.
In the TCP/IPv4 properties window,
select the Obtain an IP address
automatically and Obtain DNS
Server address automatically radio
buttons. Then click OK to exit the
setting.
7.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
16
Basic Installation
Windows Vista (IPv4)
Configuring PC in Windows Vista (IPv4)
1.
Go to Start. Click on Network.
2.
Then click on Network and Sharing
Center at the top bar.
3.
When the Network and Sharing
Center window pops up, select and click
on Manage network connections on
the left window pane.
4.
Select the Local Area Connection, and
right click the icon to select Properties.
BEC MX-200 User Manual
17
Basic Installation
Windows Vista (IPv4)
5.
Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.
6.
In the TCP/IPv4 properties window,
select the Obtain an IP address
automatically and Obtain DNS Server
address automatically radio buttons.
Then click OK to exit the setting.
7.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
18
Basic Installation
Windows 10 (IPv6)
Network Configuration – IPv6
Configuring PC in Windows 10 (IPv6)
1.
Click
2.
Click
3.
Then click on Network and Internet.
4.
Under Related settings,
Network and Sharing Center
5.
When the Network and Sharing
Center window pops up, select and
click on Change adapter settings on
the left window panel.
6.
Select the Local Area Connection,
and right click the icon to select
Properties.
BEC MX-200 User Manual
select
19
Basic Installation
Windows 10 (IPv6)
7.
Select Internet Protocol Version 6
(TCP/IPv6) then click Properties.
8.
In the TCP/IPv6 properties window,
select the Obtain an IPv6 address
automatically and Obtain DNS
Server address automatically radio
buttons. Then click OK to exit the
setting.
9.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
20
Basic Installation
Windows 7/8 (IPv6)
Configuring PC in Windows 7/8 (IPv6)
1.
Go to Start. Click on Control Panel.
2.
Then click on Network and Internet.
3.
When the Network and Sharing
Center window pops up, select and
click on Change adapter settings on
the left window panel.
4.
Select the Local Area Connection,
and right click the icon to select
Properties.
BEC MX-200 User Manual
21
Basic Installation
Windows 7/8 (IPv6)
5.
Select Internet Protocol Version 6
(TCP/IPv6) then click Properties.
6.
In the TCP/IPv6 properties window,
select the Obtain an IPv6 address
automatically and Obtain DNS
Server address automatically radio
buttons. Then click OK to exit the
setting.
7.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
22
Basic Installation
Windows Vista (IPv6)
Configuring PC in Windows Vista (IPv6)
1.
Go to Start. Click on Network.
2.
Then click on Network and Sharing
Center at the top bar.
3.
When the Network and Sharing
Center window pops up, select and
click
on
Manage
network
connections on the left window
pane.
4.
Select the Local Area Connection,
and right click the icon to select
Properties.
BEC MX-200 User Manual
23
Basic Installation
Windows Vista (IPv6)
5.
Select Internet Protocol Version 6
(TCP/IPv6) then click Properties.
6.
In the TCP/IPv6 properties window,
select the Obtain an IP address
automatically and Obtain DNS Server
address automatically radio buttons.
Then click OK to exit the setting.
7.
Click OK again in the Local Area
Connection Properties window to
apply the new configuration.
BEC MX-200 User Manual
24
Basic Installation
Default Settings
25
Default Settings
Before configuring the router, you need to know the following default settings.
Web Interface: (Username and Password)
Administrator
Username: admin
Password: admin
User
Username: user
Password: user
If you ever forget the username/password to login to the router, you may
press the RESET button up to 6 seconds then release it to restore the
factory default settings.
Caution: After pressing the RESET button for more than 6 seconds then
release it, to be sure you power cycle the device again.
Device LAN IP Settings
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
DHCP Server:
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100
BEC MX-200 User Manual
Device Configuration
Login to Your Device
26
CHAPTER 4: DEVICE CONFIGURATION
Login to your Device
Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and
click “Go”, a user name and password window prompt appears.
The default username and password is “admin” and “admin” respectively for the Administrator.
For the User account, default username and password is “user” and “user”.
NOTE: This username / password may vary by different Internet Service Providers.
Congratulations! You have successfully logged on to your MX-200
BEC MX-200 User Manual
Device Configuration
Login to Your Device
27
Once you have logged on to your MX-200 via your web browser, you can begin to set it up according
to your requirements. On the configuration homepage, the left navigation pane links you directly to the
setup pages, which includes:
Section
Status
Device Info
System Log
4G/LTE Status
Statistics
DHCP Table
IPSEC Status
Sub-Items
PPTP Status
L2TP Status
GRE Status
OpenVPN Status
ARP Table
Quick Start
(Wizard Setup)
Configuration
Interface Setup
- Internet
- LAN
Dual WAN
- General Setting
- Outbound Load Balance
- Protocol Binding
Advanced Setup
- Firewall
- Routing
- Dynamic Routing
- NAT
- Static DNS
- Time Schedule
- Mail Alert
- Serial
VPN
- IPSec
- PPTP Server
- PPTP Client
- L2TP
- GRE
- OpenVPN Server
- OpenVPN Client
Access Management
- Device Management
- SNMP
- Syslog
- Universal Plug & Play
- Dynamic DNS
- Access Control
- Packet Filter
- CWMP (TR-069)
- Parental Control
- BECentral Management
Maintenance
- User Management
- Time Zone
- License
- Firmware & Configuration
- System Restart
- Auto Reboot
- Diagnostic Tool
Please see the relevant sections of this manual for detailed instructions on how to configure your
MX-200 device.
BEC MX-200 User Manual
Device Configuration
Status – Device Info
28
Status
Device Info
It provides brief status summary of the device.
Device Information
Model Name: Name of the router for identification purpose.
Firmware Version: Software version currently loaded in the router
MAC Address: A unique number that identifies the router
Data Time: Setup correct time on the MX-200 with your PC. Check on Time Zone section for more
configuration information.
System Uptime: Display how long the MX-200 has been powered on.
Physical Port Status
Physical Port Status：Display available connection interfaces, WAN (3G/4G-LTE, EWAN) and LAN
(Ethernet) are supported in the MX-200.
WAN
Interface: List current available WAN connections.
Protocol: Display selected WAN connection protocol
Connection: The current connection status.
IP Address: WAN port IP address.
Default Gateway: The IP address of the default gateway.
LAN
IP Address: LAN port IPv4 address.
Subnet Mask/Prefix Length: Display LAN port IP subnet mask of IPv4 and/or Prefix length of IPv6.
DHCP Server: Display LAN DHCP status of IPv4 and IPv6.
 Enable / 192.168.1.100~199: DHCPv4 server status on or off / DHCP IP range
 Enable / Stateless: DHCPv6 server status on or off / DHCPv6 server Type
BEC MX-200 User Manual
Device Configuration
Status – System Log
System Log
In system log, you can check the operations status and any glitches to the router.
Refresh: Press this button to refresh the statistics.
Backup: Press to save the System log, log.cfg, to your computer / notebook.
BEC MX-200 User Manual
29
Device Configuration
Status – 4G/LTE
30
4G-LTE Status
It contains 3G/4G-LTE connection information.
Status: The current status of the 3G/4G-LTE connection.
Signal Strength: The signal strength bar and dBm value indicates the current 3G/4G-LTE signal
strength. The front panel 3G/4G-LTE Signal Strength LED indicates the signal strength as well.
Signal Information: Shows important LTE signal parameters such as RSRP (Reference Signal
Receiving Power), RSRQ (Reference Signal Receiving Quality), SINR (Signal to Interference plus
Noise Ratio).
 RSRP (Reference Signal Receiving Power): is the average power of all resource elements
which carry cell-specified reference signals over the entire bandwidth.
 RSRQ (Reference Signal Receiving Quality): measures the signal strength and is calculated
based on both RSRP and RSSI.
 RSSI (Received Signal Strength Indicator): parameter which provides information about total
received wide-band power (measure in all symbols) including all interference and thermal noise.
Please refer to the Device Description for details.
 SINR (Signal to Interference plus Noise Ratio): is also a measure of signal quality as well. It is
widely used by the operators as it provides a clear relationship between RF conditions and
throughput.
NOTE: Some LTE modules do not provide this information.
Network Name: The name of the LTE network the router is connecting to.
Cell ID: The ID of base station that the device is connected to.
Card IMEI: The unique identification number that is used to identify the 3G/4G-LTE module.
Card IMSI: The international mobile subscriber identity used to uniquely identify the 3G/4G-LTE
module.
Network Mode / Band: Show the using network mode and LTE band.
BEC MX-200 User Manual
Device Configuration
Status – 4G/LTE
Usage Allowance
Amount Used: Display the amount of mobile data used and remaining in current billing cycle.
Billing Cycle: Display the start date and number of days remaining in current billing cycle
Clean: Reset current saved mobile usage
Save: Click to save current mobile status to ROM
Refresh: Click to refresh the page.
BEC MX-200 User Manual
31
Device Configuration
Status – Statistics (4G/LTE)
32
Statistics

4G/LTE
Take 4G/LTE as an example to describe the following connection transmission information.
Traffic Statistics
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of 3G or 4G/LTE interface.
Transmit Statistics
Transmit Frames of Current Connection: Display the total number of 3G/4G/LTE frames
transmitted until the latest second for the current connection.
Transmit Bytes of Current Connection: Display the total bytes transmitted till the latest second for
the current connection for the current connection.
Transmit Total Frames: Display the total number of frames transmitted till the latest second since
system is up.
Transmit Total Bytes: Display the total number of bytes transmitted until the latest second since
system is up.
Receive Statistics
Receive Frames of Current Connection: Display the number of frames received until the latest
second for the current connection.
Receive Bytes of Current Connection: Display the total bytes received till the latest second for the
current connection.
Receive Total Frames: Display the total number of frames received until the latest second since
system is up.
Receive Total Bytes: Display the total frames received till the latest second since system is up.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – Statistics (EWAN/LAN #1)
33
 EWAN (LAN1)
Traffic Statistics
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of the EWAN(Ethernet #1) port.
Transmit Statistics
Transmit Frames: Display the number of frames transmitted until the latest second.
Transmit Multicast Frames: Display the number of multicast frames transmitted until the latest
second.
Transmit Total Bytes: Display the number of bytes transmitted until the latest second.
Transmit Collision: Numbers of collisions have occurred on this port.
Transmit Error Frames: Display the number of error packets on this port.
Receive Statistics
Receive Frames: Display the number of frames received until the latest second.
Receive Multicast Frames: Display the number of multicast frames received until the latest second.
Receive Total Bytes: Display the number of bytes received until the latest second.
Receive CRC Errors: Display the number of error packets on this port.
Receive Under-size Frames: Display the number of under-size frames received until the latest
second.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – Statistics (Ethernet)
34
 Ethernet
Traffic Statistics
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of the Ethernet port.
Transmit Statistics
Transmit Frames: Display the number of frames transmitted until the latest second.
Transmit Multicast Frames: Display the number of multicast frames transmitted until the latest
second.
Transmit Total Bytes: Display the number of bytes transmitted until the latest second.
Transmit Collision: Numbers of collisions have occurred on this port.
Transmit Error Frames: Display the number of error packets on this port.
Receive Statistics
Receive Frames: Display the number of frames received until the latest second.
Receive Multicast Frames: Display the number of multicast frames received until the latest second.
Receive Total Bytes: Display the number of bytes received until the latest second.
Receive CRC Errors: Display the number of error packets on this port.
Receive Under-size Frames: Display the number of under-size frames received until the latest
second.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – DHCP Table
DHCP Table
DHCP table displays the devices connected to the router with clear information.
Index #: The numeric indicator for devices using dynamic IP addresses.
Host Name: Display the hostname of the PC.
IP Address: The IP allocated to the device.
MAC Address: The MAC of the connected device.
Expire Time: The total remaining interval since the IP assignment to the PC.
BEC MX-200 User Manual
35
Device Configuration
Status – IPSec Status
36
IPSec Status
Index #: The numeric IPSec VPN tunnel/ rule.
Action: Display Connect or Drop the connection.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Connection State: Display statuses of IPSec phase 1 and phase 2 connections.
Statistics: Display upstream/downstream traffic per session in KB. The value clears when session
disconnects.
Remote Gateway: Display remote gateway IP address.
Remote Network: Display remote local IP address and Netmask.
Local Network: Display local IP address and Netmask.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – PPTP Status
37
PPTP Status

PPTP Server
Index #: The numeric PPTP VPN tunnel/ rule.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Connection State: Display the VPN connection status.
Connection Type: Display if VPN connection is for single PC use (Remote Access) or multi-user use
(LAN to LAN).
Assigned IP Address: Display the IP address assigned to the client by the PPTP Server.
Remote Network: Display the remote network and subnet mask in LAN to LAN PPTP connection.
Refresh: Click to refresh the page.

PPTP Client
Index #: The numeric PPTP VPN tunnel/ rule.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Connection State: Display Yes/No to indicate the VPN connection status.
Connection Type: Display if VPN connection is for single PC use (Remote Access) or multi-user use
(LAN to LAN).
Server IP Address: Display the WAN IP address of remote PPTP Server.
Remote Network: Display the remote network address and subnet mask in LAN to LAN PPTP
connection.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – L2TP & GRE Status
38
L2TP Status
Index #: The numeric L2TP VPN tunnel/rule indicator.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Connection State: Display Yes/No to indicate the VPN connection status.
Connection Mode: Display if L2TP mode is a dial-in or dial-out.
Connection Type: Display if VPN connection is for single PC use (Remote Access) or multi-user use
(LAN to LAN).
Tunnel Remote IP Address: Display the remote tunnel IP address.
Refresh: Click to refresh the page.
GRE Status
Index #: The numerical GRE tunnel/rule indication.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Connection State: Display Yes/No to indicate the VPN connection status.
Remote Gateway IP: Display the remote gateway IP address.
Remote Network: Display the remote local network IP address / Netmask.
BEC MX-200 User Manual
Device Configuration
Status – OpenVPN Status
39
OpenVPN Status

OpenVPN Server
Index #: The numeric OpenVPN tunnel/ rule.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Service Port: Display the port/protocol (1194/udp) used for OpenVPN connection.
Tunnel Network: Display the virtual tunnel IP address and Netmask of the OpenVPN server.
Status: Display the status of the profile/rule
Refresh: Click to refresh the page.

OpenVPN Client
Index #: The numeric OpenVPN tunnel/ rule.
Connection Name: The profile name of the VPN connection/tunnel.
Active: Display Yes or No to indicate the profile is enabled or disabled.
Remote Server: Display the remote server public IP address and used port/protocol for this
connection.
Status: Display the status of the profile/rule
Detailed Info: Display detailed IP assignment and routing information of this VPN connection.
Refresh: Click to refresh the page.
BEC MX-200 User Manual
Device Configuration
Status – ARP Table
40
ARP Table
ARP (Address Resolution Protocol) table displays a mapping IP address with a PC’s MAC address.
#: The numeric table list indicator.
IP Address: It is the internal/local IP address to access to the network.
MAC Address: The MAC address of a device, e.g. PC, notebook, printer, etc., that is corresponded
with the IP address.
BEC MX-200 User Manual
Device Configuration
Quick Start
41
Quick Start
This is a useful and easy utility to help you to setup the router quickly and to connect to your ISP
(Internet Service Provider) with only a few steps. It will guide you step by step to setup password, time
zone, and WAN settings of your device. The Quick Start Wizard is a helpful guide for the first-time
users to the device.
For detailed instructions on configuring WAN settings, see refer to the Interface Setup section.
Click NEXT to move on to Step 1.
Step 1 – Password
Set new password of the “admin” account to access for router management. The default is “admin”.
Once changed, please use this new password next time when accessing to the router. Click NEXT to
continue.
Step 2 – Time Zone
Choose your time zone. Click NEXT to continue.
Step 3 – ISP Connection Type
Set up your Internet connection.
BEC MX-200 User Manual
Device Configuration
Quick Start
42
3.1 Select an appropriate WAN connection protocol then click NEXT to continue.
3.2(1) If selected 4G/LTE
Input all relevant 3G/4G/LTE parameters from your cellular provider.
Click Next to continue.
3.2(2) If selected EWAN(LAN1) / Static IP or PPPoE, static IP address or PPPoE account
information provided by your ISP.
Click NEXT to continue.
Step 4 – Quick Start Completed
The Setup Wizard has completed. Click on BACK to make changes or correct mistakes. Click NEXT to
save the current settings and complete the Quick Start setups.
Go back to the Status > Device Info to view the status.
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (4G/LTE)
43
Device Configuration
Interface Setup
Here are the features under Interface Setup: Internet and LAN
Internet
 4G/LTE
WAN Interface: List all available WAN interfaces. (In this section, you have selected to use 4G/LTE)
Status: Choose Activated to enable the 4G/LTE connection.
Usage Allowance: Enable and click “Usage Allowance” for further setting configuration of your
4G/LTE data usage.
Usage Allowance
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (4G/LTE)
44
Usage Allowance (Cont.)
Mode: Include Volume-based and Time-based control.
 Volume-based include “only Download”, ”only Upload”, and “Download and Upload” to
limit the flow.
 Time-based control the flow by providing specific hours per month.
The billing period begins on: the beginning day of billing each month.
Over usage allowance action: Here are actions to perform when mobile data usage, defined in
Mode, reached to its maximum.
 None: No action taken
 Disconnect: Disconnect mobile connection
 Email Alert: Send an e-mail alert and keep the mobile connection alive.
 Email Alert and Disconnect: Disconnect mobile connection after an alert e-mail is being
sent.
Save the statistics to ROM:

Every one hour: Activate the 3G/4G-LTE statistics on data usage and this info will get
updated and saved to the internal memory (ROM) in every hour.
Once the feature is turned on, you can see the amount of data used and how many days left
before next billing cycle starts. Go to Status >> 3G/4G-LTE Status page for details.
NOTE: This statistic information will get deleted after a factory reset.
 Disable: No action taken
LTE Mode*: Display current selected LTE frequency band. To change the band, please click “LTE
Mode” link to access to the band selection page.
LTE Band
LTE Band: A list of available LTE bands to choose from.
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (4G/LTE)
45
LTE Antenna Diversity *: When enabled, the auxiliary antenna will be activated. With disabled, only
the primary antenna is receiving and transmitting data. To change it, please click “LTE Antenna
Diversity” link to access to the selection page.
LTE Antenna Diversity
To enable or disable the LTE antenna diversity feature.
* Feature is available with specific cellular module
IP Pass-through Mode: When enabled, MX-200 is in bridge mode that it does not obtain a WAN IP
address; features such as routing capabilities, NAT, firewall, etc., are being disabled. The client router
that is behind the MX-200now obtains a WAN IP address. When disabled, MX-200 is in router mode
that it handles a WAN IP address and all features become available.
Network Mode: There are 8 options of service standards: “Automatic”, “UMTS 3G only”, “GSM 2G
Only”, “UMTS 3G Preferred”, “GSM 2G Preferred”, “GSM and UMTS Only”, “LTE Only”, and “GSM,
UMTS, LTE”. If you are not sure which mode to use, you may select Automatic to auto detect the best
mode for you.
TEL No.: The dial string to make a GPRS / 3G/4G-LTE user internetworking call. It may provide by
your mobile service provider.
Dual APN: Default is with Single APN. To support Dual/multiple APNs, a license key is required.
Please consult with Billion/BEC for more information.
APN: An APN is similar to a URL on the WWW, it is what the unit makes a GPRS / UMTS call. The
service provider is able to attach anything to an APN to create a data connection, requirements for
APNs varies between different service providers. Most service providers have an internet portal which
they use to connect to a DHCP Server, thus giving you access to the internet i.e. some 3G operators
use the APN ‘internet’ for their portal. The default value is “internet”.
Authentication Protocol: Manually specify CHAP (Challenge Handshake Authentication Protocol) or
PAP (Password Authentication Protocol) if you know which authentication type the server is using
(when acting as a client), or the authentication type you want the clients to use when they are
connecting to you (when acting as a server). When using PAP, the password is sent unencrypted,
while CHAP encrypts the password before sending, and also allows for challenges at different periods
to ensure that an intruder has not replaced the client.
Username/Password: Enter the username and password provided by your service provider. The
username and password are case sensitive.
PIN: PIN stands for Personal Identification Number. A PIN code is a numeric value used in certain
systems as a password to gain access, and authenticate. In mobile phones a PIN code locks the SIM
card until you enter the correct code. If you enter the PIN code incorrectly into the phone 3 times in a
row, then the SIM card will be blocked and you will require a PUK code from your network/service
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (4G/LTE)
46
provider.
Connection: Default set to Always on to keep an always-on 3G/4G-LTE connection.
Keep Alive / IP: Select Yes to keep the 3G/4G-LTE connection always on. Manually enter the Keep
Alive IP Address to be used for ping operation to check if the connection is still on.
Default Route: Select Yes to use this interface as default route interface.
NAT: Select this option to Disabled/Enable the NAT (Network Address Translation) function. Enable
NAT to grant multiples devices in LAN to access to the Internet through a single WAN IP.
When router’s Internet configuration is finished successfully, you can go to the Status to check
connection information.
MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media-specific
headers) an IP attempts to send through the interface. 0 means to use default MTU size, 1500byte.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (EWAN)
47
 EWAN (LAN 1)
Status: Select to enable/activate or disable/deactivated the service.
IPv4/IPv6
IP Version: Choose IPv4, IPv4/IPv6, IPv6 based on your environment. If you don’t know which one to
choose from, please choose IPv4/IPv6 instead.
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (EWAN)
48
ISP Connection Type:
ISP: Select the encapsulation type your ISP uses.
 Dynamic IP: Select this option if your ISP provides you an IP address automatically.
 Static IP: Select this option to set static IP information. You will need to enter in the Connection
type, IP address, subnet mask, and gateway address, provided to you by your ISP. Each IP
address entered in the fields must be in the appropriate IP form. IP address from by four IP
octets separated by a dot (xx.xx.xx.xx). The Router will not accept the IP address if it is not in
this format.
 PPPoE: Select this option if your ISP requires you to use a PPPoE connection.
 Bridge: Select this mode if you want to use this device as an OSI Layer 2 device like a switch.
802.1q Options
802.1q: When activated, please enter a VLAN ID.
VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID
identification, tagged: 0-4095.
PPPoE (If selected PPPoE as WAN Connection Type; otherwise, skip this part)
Username: Enter the user name provided by your ISP.
Password: Enter the password provided by your ISP.
Bridge Interface for PPPoE: When “Activated”, the device will gain WAN IP from your ISP with the
PPPoE account. But if your PC is connected to the router working as a DHCP client, in this mode, the
device acts as a NAT router; while if you dial up with the account within your PC, the device will then
work as a bridge forwarding the PPPoE information to the PPPoE server and send the response to
your PC, thus your PC gets a WAN IP working in the internet.
Connection Setting
Connection:
 Always On: Click on Always On to establish a PPPoE session during start up and to
automatically re-establish the PPPoE session when disconnected by the ISP.
 Connect Manually: Select Connect Manually when you don't want the connection up all the
time.
TCP MSS Option: Enter the maximum size of the data that TCP can send in a segment. Maximum
Segment Size (MSS).
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (EWAN)
49
IP Options
IP Common Options
Default Route: Select Yes to use this interface as default route interface.
TCP MTU Option: Enter the maximum packet that can be transmitted. Default MTU 0 means it is set
to 1492 bytes.
IPv4 Options
Get IP Address: Choose Static or Dynamic
Static IP Address: If Static is selected in the above field, please enter the specific IP address you get
from ISP and the following IP subnet mask and gateway address.
IP Subnet Mask: The default is 0.0.0.0. User can change it to other such as 255.255.255.0.Type the
subnet mask assigned to you by your ISP (if given).
Gateway: Enter the specific gateway IP address you get from ISP.
NAT: Enable to allow MX-200 to assign private network IPs to all devices in the network for get
Internet access.
Dynamic Route:
 RIP Version: (Routing Information protocol) Select this option to specify the RIP version,
including RIP-1, RIP-2.
 RIP Direction: Select this option to specify the RIP direction.
None is for disabling the RIP function.
Both means the router will periodically send routing information and accept routing
information then incorporate into routing table.
IN only means the router will only accept but will not send RIP packet.
BEC MX-200 User Manual
Device Configuration
Interface Setup – Internet (EWAN)
50
OUT only means the router will only send but will not accept RIP packet.
IGMP Proxy: IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a Multicast group. Choose whether enable IGMP proxy.
IPv6 options (only when choose IPv4/IPv6 or just IPv6 in IP version field above):
IPv6 Address: Type the WAN IPv6 address from your ISP.
Obtain IPv6 DNS: Choose if you want to obtain DNS automatically.
Primary/Secondary: if you choose Disable in the Obtain IPv6 DNS field, please type the exactly
primary and secondary DNS.
MLD Proxy: MLD (Multicast Listener Discovery Protocol) is to IPv6 just as IGMP to IPv4. It is a
Multicast Management protocol for IPv6 multicast packets.
When router’s Internet configuration is finished successfully, you can go to status to get the connection
information.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Interface Setup – LAN
51
LAN
A Local Area Network (LAN) is a shared communication system to which many computers are
attached and is limited to the immediate area, usually the same building or floor of a building.
IPv4 Parameters
IP Address: Enter the IP address of Router in dotted decimal notation, for example, 192.168.1.254
(factory default).
IP Subnet Mask: The default is 255.255.255.0. User can change it to other such as 255.255.255.128.
Alias IP Address: This is for local networks virtual IP interface. Specify an IP address on this virtual
interface.
Alias IP Subnet Mask: Specify a subnet mask on this virtual interface.
IGMP Snooping: Select Activated to enable IGMP Snooping function. Without the IGMP snooping,
BEC MX-200 User Manual
Device Configuration
Interface Setup – LAN
52
multicast traffic is treated in the same manner as broadcast traffic to be forwarded to all ports. With
IGMP snooping, multicast traffic of a group is only forwarded to ports that have members of that group.
Dynamic Route: Select the RIP version from RIP1 or RIP2.
DHCPv4 Server
DHCP (Dynamic Host Configuration Protocol) allows individual clients to obtain TCP/IP configuration
at start-up from a server.
DHCPv4 Server: If set to Enabled, your MX-200 can assign IP addresses, default gateway and DNS
servers to the DHCP client.
 If set to Disabled, the DHCP server will be disabled.
 If set to Relay, the MX-200 acts as a surrogate DHCP server and relays DHCP requests and
responses between the remote server and the clients. Enter the IP address of the actual,
remote DHCP server in the Remote DHCP Server field in this case.
 When DHCP is used, the following items need to be set.
Start IP: This field specifies the first of the contiguous addresses in the IP address pool.
IP Pool Count: This field specifies the count of the IP address pool.
Lease Time: The current lease time of client.
Physical Ports: Select to determine if the DHCPv4 server is applicable to the specific port or ports. By
default, all ports can obtain local IP from the DHCPv4 server.
DNS Relay:
 Select Automatic detection or
 Manually specific Primary and Secondary DNS IP addresses
Primary / Secondary DNS Server: Enter the IP addresses of the DNS servers. The DNS
servers are passed to the DHCP clients along with the IP address and the subnet mask.
Fixed Host
In this field, users can map the specific IP (must in the DHCP IP pool) for some specific MAC, and this
information can be listed in the following table.
BEC MX-200 User Manual
Device Configuration
Interface Setup – LAN
53
IP Address: Enter the specific IP. For example: 192.168.1.110.
MAC Address: Enter the responding MAC. For example: 00:0A:F7:45:6D:ED
When added, you can see the ones listed as showed below:
IPv6 Parameters
The IPv6 address composes of two parts, thus, the prefix and the interface ID.
Interface Address / Prefix Length: Enter a static LAN IPv6 address. If you are not sure what to do
with this field, please leave it empty as if contains false information it could result in LAN devices not
being able to access other IPv6 device. Router will take the same WAN’s prefix to LAN side if the field
is empty.
DHCPv6 Server
There are two methods to dynamically configure IPv6 address on hosts, Stateless and Stateful.
Stateless auto-configuration requires no manual configuration of hosts, minimal (if any)
configuration of routers, and no additional servers. The stateless mechanism allows a host to generate
its own addresses using a combination of locally available information (MAC address) and information
(prefix) advertised by routers. Routers advertise prefixes that identify the subnet(s) associated with a
link, while hosts generate an "interface identifier" that uniquely identifies an interface on a subnet. An
address is formed by combining the two. When using stateless configuration, you needn’t configure
anything on the client.
Stateful configuration, for example using DHCPv6 (which resembles its counterpart DHCP in IPv4.)
In the stateful auto configuration model, hosts obtain interface addresses and/or configuration
information and parameters from a DHCPv6 server. The Server maintains a database that keeps track
of which addresses have been assigned to which hosts.
DHCPv6 Server: Check whether to enable DHCPv6 server.
DHCPv6 Server Type: Select Stateless or Stateful. When DHCPv6 is enabled, this parameter is
BEC MX-200 User Manual
Device Configuration
Interface Setup – LAN
54
available.
 Stateless: If selected, the PCs in LAN are configured through RA mode, thus, the PCs in LAN
are configured through RA mode, to obtain the prefix message and generate an address using
a combination of locally available information (MAC address) and information (prefix)
advertised by routers, but they can obtain such information like DNS from DHCPv6 Server.
 Stateful: If selected, the PCs in LAN will be configured like in IPv4 mode, thus obtain addresses
and DNS information from DHCPv6 server.
Start interface ID: enter the start interface ID. The IPv6 address composed of two parts, thus, the
prefix and the interface ID. Interface is like the Host ID compared to IPv4.
End interface ID: enter the end interface ID.
Leased Time (seconds): the leased time, similar to leased time in DHCPv4, is a time limit assigned to
clients, when expires, the assigned ID will be recycled and reassigned.
Router Advertisement: Check to Enable or Disable the Issue Router Advertisement feature. This
feature is to send Router Advertisement messages periodically which would multicast the IPv6 Prefix
information (similar to v4 network number 192.168.1.0) to all LAN devices if the field is enabled. We
suggest enabling this field.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Dual WAN – General Setting
55
Dual WAN
Dual WAN, is a feature to have two independent Internet connection connected concurrently, offers a
reliable Internet connectivity and maximize bandwidth utilization for critical applications delivery.
General Setting
Mode: Select a mode then click Save to proceed.
BEC MX-200 User Manual
Device Configuration
Dual WAN – General Setting (Failover & Failback)

56
Failover & Failback
Auto failover/failback ensures always-online network connectivity. When primary WAN link (WAN1)
fails, all traffic will switch over to the backup WAN (WAN2) seamlessly.
Again, when the primary link is restored, traffic will be handled over from WAN2 to WAN1.
WAN Port Service Detection Policy
WAN1 (Primary): Choose a desired WAN as the primary WAN Link from the list.
WAN2 (Backup): Choose a desired WAN as the backup WAN Link from the list.
Keep Backup Interface Connected: Select the following option whether to keep the backup WAN
(WAN2) interface connected to the Internet.
 Disable: Inactivate this feature.
 Always: Keep the backup WAN (WAN2) interface always connected to the Internet
 By Signal Strength: Enable and initiate automatic backup WAN to connect to the Internet at
all time until the RSRP / RSSI of primary WAN is greater than the Minimum RSRP / RSSI.

Minimum RSRP / RSSI: Set a minimum requirement for RSRP and RSSI for the primary
WAN. Value range from -111 ~ -5. 0 means don’t care/no need to check this value.
NOTE: Both the RSRP and RSSI cannot be 0 at the same time.
Connectivity Decision & Probe Cycle: Set a number of times and time in seconds to determine
when to switch to the backup link (WAN2) when primary link (WAN1) fails and vice versa.
Example, Auto failover takes place after straight 3 consecutive failures in every 30 seconds meaning
all traffic will hand over to backup link (WAN2) after primary link fails to response in total of 90 seconds,
30 seconds for 3 consecutive failures.
Note: Failover and Failback follow the same Connectivity Decision & Probe Cycle rule to failover from WAN1 to WAN2
or fallback from WAN2 to WAN1.
BEC MX-200 User Manual
Device Configuration
Dual WAN – General Setting (Failover & Failback)
57
Failover/Fallback Rule Decisions:
1. Probe by Ping: Enable Ping to the gateway or an IP address
 Gateway: Internal system will wait for responses to the pings from the gateway of the WAN.
 Host: Internal system will wait for responses to the pings from a fixed IP address.
2. Probe by Signal Strength: Enable to measure the LTE signal strength
 Minimum RSRP / RSSI: Set a minimum requirement for RSRP and RSSI for initiating
automatic WAN failback or failover procedures.
The valid range is from -111 ~ -5. 0 means don’t care/no need to check this value.
NOTE: Both the RSRP and RSSI cannot be 0 at the same time.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Dual WAN – General Setting (Load Balance)

58
Load Balance
Load balance aggregates the bandwidth of the two WAN links to optimize traffic distribution.
When primary link, WAN1, goes down, all traffic will be redirected to the backup, WAN2, to ensure
service continuity.
WAN Port Service Detection Policy
WAN1 (Primary): Choose a desired WAN as the primary WAN Link from the list.
WAN2 (Backup): Choose a desired WAN as the backup WAN Link from the list.
Service Detection: Enable to detect WAN connectivity automatically.
Connectivity Decision & Probe Cycle: Set a number of times and time in seconds to determine
when to turn-off the Load Balancing service.
Example, Disable Load Balance after straight 3 consecutive failures in every 30 seconds meaning all
traffic will hand over to backup link (WAN2) after primary link fails to response in total of 90 seconds,
30 seconds for 3 consecutive failures.
Deactivate Load Balance Decision:
Probe Ping on WAN 1 / WAN2: Enable Ping to the gateway or an IP address
 Gateway: Internal system will wait for responses to the pings from the gateway of the WAN.
 Host: Internal system will wait for responses to the pings from a fixed IP address.
Click Save to apply settings
BEC MX-200 User Manual
Device Configuration
Dual WAN – Outbound Load Balance
59
Outbound Load Balance
The connections are distributed over WAN1 and WAN2 so that it can utilize bandwidth of both WAN
ports. With Outbound load balance, traffic may be routed to a faster link when one of the WAN links is
slower or congested so that user gains better throughput and less delay.
User can distribute outbound traffic based on Session Mechanism or IP Hash Mechanism.
Base on Session Mechanism:
Balance by Session (Round Robin): Automatically assign requests/traffics to each WAN interface
based on real-time WAN traffic-handling capacity.
OR
Balance by Session weight: Manually Balance session traffic based on a weight ratio.
Example: Session weight by 3:1 meaning forward 3 requests to WAN1 and 1 request to WAN2.
Base on IP Hash Mechanism:
Balance by weight: Use an IP hash to balance traffic based on a ratio. It is to guarantee requests
from the same IP address get forward to the same WAN interface.
Click Save to apply settings
BEC MX-200 User Manual
Device Configuration
Dual WAN – Protocol Binding
60
Protocol Binding
Protocol Binding lets you direct specific traffic to go out from a specific WAN port. Policies determine
how specific types of internet traffic are routed, for example, traffic from a specific IP address is
granted access to only one WAN port rather than using both of the WAN ports as with load balancing.
Rule Index: The numeric rule indicator. The maximum entry is up to 16.
Active: Click YES to activate the rule
Bind Interface: The dedicated WAN interface that guarantees to handle this traffic request.
Source IP Address: Enter the local network, known as source, IP address of the origin of a
traffic/packet. 0.0.0.0 means any IP address in the network.
Subnet Mask: Enter the subnet of the source network.
Port Number: Enter the port number which defines the application.
Destination IP Address: Enter the destination / remote WAN IP address where the traffic/packet is
going to. Enter 0.0.0.0 if no need to route to a specific IP address
Subnet Mask: Enter the subnet of the designation network.
Port Number: Enter the port number which defines the application.
DSCP: The DSCP value. Value Range from 0~64; 64 means any value/unspecified
Protocol: Select a protocol, TCP, UDP, ICMP, to use for this traffic.
Click Save to apply settings
Example:
All traffics from IP 192.168.1.100/255.255.255.0 with port 8080 will go through WAN1 interface.
BEC MX-200 User Manual
Device Configuration
Dual WAN – Protocol Binding
The only time it would go through WAN2 interface is when WAN1 has no Internet connection.
BEC MX-200 User Manual
61
Device Configuration
Advanced Setup – Firewall
62
Advanced Setup
Advanced configuration features provides advanced features, including Firewall, Routing, Dynamic
Routing, NAT, Static DNS, Time Schedule, Mail Alert, and Serial, for advanced users.
Firewall
Your router includes a firewall for helping to prevent attacks from hackers. In addition to this, when
using NAT (Network Address Translation) the router acts as a “natural” Internet firewall, since all PCs
on your LAN use private IP addresses that cannot be directly accessed from the Internet.
Firewall: To automatically detect and block Denial of Service (DoS) attacks, such as Ping of Death,
SYN Flood, Port Scan and Land Attack.
 Enabled: Activate your firewall function.
 Disabled: Deactivate the firewall function.
SPI: If you enabled SPI, all traffics initiated from WAN would be blocked, including DMZ, Virtual Server,
and ACL WAN side.
 Enabled: Activate your SPI function.
 Disabled: Deactivate the SPI function.
Click Save to apply settings
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Routing
63
Routing
This is static route feature. You are equipped with the capability to control the routing of all the traffic
across your network. With each routing rule created, user can specifically assign the destination
where the traffic will be routed to.
Index #: The numeric route indicator.
Destination IP Address: IP address of the destination network
Subnet Mask: The subnet mask of destination network.
Gateway IP Address: IP address of the gateway or existing interface that this route uses.
Metric: It represents the cost of transmission for routing purposes. The number need not be precise,
but it must be between 1 and 15.
Interface: Media/channel selected to append the route.
Edit: Edit the route; this icon is not shown for system default route.
Drop: Drop the route; this icon is not shown for system default route.
Add Route
Destination IP Address: This is the destination subnet IP address.
Destination Subnet Mask: The subnet mask of destination network.
Gateway IP Address or Interface: This is the gateway IP address or existing interface to which
packets are to be forwarded.
Metric: It represents the cost of transmission for routing purposes. The number need not be precise,
but it must be between 1 and 15.
Click Save to add this route
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Dynamic Routing (OSPF)
64
Dynamic Routing
The NAT (Network Address Translation) feature transforms a private IP into a public IP, allowing
multiple users to access the internet through a single IP account, sharing the single IP address. NAT
break the originally envisioned model of IP end-to-end connectivity across the internet so NAT can
cause problems where IPSec/ PPTP encryption is applied or some application layer protocols such as
SIP phones are located behind a NAT. And NAT makes it difficult for systems behind a NAT to accept
incoming communications.
Open Shortest Path First (OSPF)
OSPF: Enable to activate OSPF routing.
Rule Index: The numeric route indicator. The maximum entry is up to 10, ranging from 0 to 9.
Interface: Set the interface which runs the OSPF process (involved in OSPF routing). It can be WAN
interfaces or established GRE tunnels.
Area ID: The OSPF area identifier. It is a decimal number in the range of 0-4294967295. Enter the
area ID in which the interface belongs to. The area with area-id=”0” is the backbone area.
If the router has networks in more than one area, then an area with area-id=”0” (the backbone) must
always be present. All other areas are connected to it. The backbone is responsible for distributing
routing information between non-backbone areas. The backbone must be contiguous, i.e. there must
be no disconnected segments. However, area border routers do not need to be physically connected
to the backbone - connection to it may be simulated using a virtual link.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Dynamic Routing (BGP)
65
Border Gateway Protocol (BGP)
A standardized exterior gateway protocol (an uniquely TCP based inter-Autonomous System routing
protocol) designed to allow setting up an inter-domain dynamic routing system that automatically
updates routing tables of devices running BGP in case of network topology changes.
BGP: Enable to activate BGP routing.
AS Number: Designate the AS number of local router. The AS number is used to identify the IBGP or
EBGP your neighbor is running. The same AS number means the IBGP, and the different means
EBGP.
Rule Index: The numeric route indicator. The maximum entry is up to 10, ranging from 0 to 9.
Neighbor IP: Enter the neighbor IP address.
Neighbor AS Number: Enter the neighbor AS number.
Allowas-in: Enable to allow inter-communication between devices in the same AS. If the local and
neighbor AS number are the same, thus, an inter-AS communication, please enable the allowas-in.
Otherwise, the router only support EBGP routing between different domains.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – NAT
66
NAT
The NAT (Network Address Translation) feature transforms a private IP into a public IP, allowing
multiple users to access the internet through a single IP account, sharing the single IP address. NAT
break the originally envisioned model of IP end-to-end connectivity across the internet so NAT can
cause problems where IPSec/ PPTP encryption is applied or some application layer protocols such as
SIP phones are located behind a NAT. And NAT makes it difficult for systems behind a NAT to accept
incoming communications.
NAT Status: Enabled. (Disabled if WAN connection is in BRIDGE mode)
ALG
VPN Passthrough: VPN pass-through is a feature of routers which allows VPN client on a private
network to establish outbound VPNs unhindered.
SIP ALG: Enable the SIP ALG when SIP phone needs ALG to pass through the NAT. Disable the SIP
ALG when SIP phone includes NAT-Traversal algorithm.
DMZ / Virtual Server
Interface: Select a WAN interface connection to allow external access to your internal network.
Service Index: Associated to EWAN interface marking each EWAN service (0-7), to select which
EWAN service the DMZ and Virtual server are applied to.
Click DMZ
or Virtual Server
to move on to set the DMZ or Virtual Server
parameters, which are represented in the following scenario.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – NAT (DMZ)
67
DMZ
NOTE: This feature disables automatically if WAN connection is in BRIDGE mode or NAT is
being turned OFF.
The DMZ Host is a local computer which has all UDP and TCP ports exposed to the Internet. When
setting an internal IP address as the DMZ Host, all incoming packets will be forwarded to this local
host device. Packet filter or virtual server entries will take priority over forwarding internet packets to
the DMZ host.
DMZ for (via a WAN Interface): Allows outside network to connect in and communicate with internal
LAN devices via a specific WAN interface.
DMZ:

Enabled: Activate the DMZ function.

Disabled: Deactivate the DMZ function.
DMZ Host IP Address: Give a static IP address to the DMZ Host when Enabled radio button is
checked. Be aware that this IP will be exposed to the WAN/Internet.
Click Save to apply settings
Except Ports
Except Ports: Bypass UDP or/and TCP ports, in the list, being forwarded to the DMZ host.
Port: Enter port to be monitored.
Protocol: Enter the protocol to be monitored.
Description: Enter a description to this rule .
Example: Skip port 80 (UDP/TCP) in the list. All Incoming request to access to port 80 (Web GUI) will
be forwarded to the embedded HTTP server of MX-200 instead of the DMZ host.
Click Add to add an entry to the Except Listing.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – NAT (Virtual Server)
68
Virtual Server
NOTE: This feature disables automatically if WAN connection is in BRIDGE mode or NAT is
being turned OFF.
Virtual Server is also known as Port Forwarding that allows MX-200 to direct incoming traffic to a
specific device in the network.
Configure a virtual rule in MX-200 for remote users accessing services such as Web or FTP services
via the public (WAN) IP address that can be automatically redirected to local servers in the LAN
network. Depending on the requested service (TCP/UDP port number), the device redirects the
external service request to the appropriate server within the LAN network.
Virtual Server for: Indicate the related WAN interface to allow outside network to communicate with
the internal LAN device.
Protocol: Choose the application protocol.
Start / End Port Number: Enter a port or port range you want to forward.
(Example: Start / End: 1000 or Start: 1000, End: 2000).
The starting port must be greater than zero (0). The end port must be greater than or equal to the start
port.
Local IP Address: Enter the server IP address in the network to receive the traffic/packets.
Start / End Port Number (Local): Enter the start / end port number of the local application (service).
BEC MX-200 User Manual
Device Configuration
Advanced Setup – NAT (Virtual Server)
69
Examples of well-known and registered port numbers are shown below. For further information,
please see IANA’s website at http://www.iana.org/assignments/port-numbers
Well-known and Registered Ports
Port Number
Protocol
Description
21
TCP
FTP Control
22
TCP & UDP
SSH Remote Login Protocol
23
TCP
Telnet
25
TCP
SMTP (Simple Mail Transfer Protocol)
53
TCP & UDP
DNS (Domain Name Server)
69
UDP
TFTP (Trivial File Transfer Protocol)
80
TCP
World Wide Web HTTP
110
TCP
POP3 (Post Office Protocol Version 3)
443
TCP & UDP
HTTPS
1503
TCP
T.120
1720
TCP
H.323
7070
UDP
RealAudio
Using port forwarding does have security implications, as outside users will
be able to connect to PCs on your network. For this reason you are advised
to use specific Virtual Server entries just for the ports your application
requires, instead of using DMZ. As doing so will result in all connections from
the WAN attempt to access to your public IP of the DMZ PC specified.
If you have disabled the NAT option in the WAN-ISP section, the Virtual
Server function will hence be invalid.
Attention
If the DHCP server option is enabled, you have to be very careful in
assigning the IP addresses of the virtual servers in order to avoid conflicts.
The easiest way of configuring Virtual Servers is to manually assign static IP
address to each virtual server PC, with an address that does not fall into the
range of IP addresses that are to be issued by the DHCP server. You can
configure the virtual server IP address manually, but it must still be in the
same subnet as the router.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – NAT (Example)
70
Example: How to setup Port Forwarding for port 21 (FTP server)
If you have a FTP server in your LAN network and want others to access it through WAN.
Step 1: Assign a static IP to your local computer that is hosting the FTP server.
Step 2: Login to the Gateway and go to Configuration / Advanced Setup / NAT / Virtual Server.
FTP server uses TCP protocol with port 21.
Enter ”21” to Start and End Port Number. The MX-200 will accept port 21 requests from WAN side.
Enter the static IP assigned to the local PC that is hosting the FTP server. Ex: 192.168.1.102
Enter ”21” to Local Start and End Port number. The MX-200 will forward port 21 request from WAN to
the specific LAN PC (Example: 192.168.1.102) in the network.
Step 3: Click Save to save settings.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Static DNS
71
Static DNS
The Domain Name System (DNS) is a hierarchical naming system built on a distributed database for
computers, services, or any resource connected to the Internet or a private network associates
various information with domain names assigned to each of the participating entities. Most importantly,
it translates domain names meaningful to humans into the numerical identifiers associated with
networking equipment for the purpose of locating and addressing these devices worldwide.
An often-used analogy to explain the Domain Name System is that it serves as the phone book for the
Internet by translating human-friendly computer hostnames into IP addresses. For example, the
domain name www.example.com can be translated into the addresses 192.0.32.10 (IPv4).
IP Address: The IP address you are going to give a specific domain name.
Domain Name: The friendly domain name for the IP address.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Time Schedule
72
Time Schedule
The Time Schedule supports up to 16 timeslots which helps you to manage your Internet connection.
In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or
allowing the usage of the Internet by users or applications.
This Time Schedule correlates closely with router’s time, since router does not have a real time clock
on board; it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP
server from the Internet.
Time Index: The rule indicator (0-15) for identifying each timeslot.
Name: User-defined identification for each time period.
Day of Week: Mon. to Sun. Specify the time interval for each timeslot from “Day of Week”.
Start Time: The starting point of the interval for the timeslot, anytime in 00:00 – 24:00.
End Time: The ending point of the interval for the timeslot, anytime in 00:00 – 24:00.
Click Save to apply your settings.
Example, you can add a timeslot named “TimeSlot1” which features a period from 9:00 of Monday to
18:00 of Tuesday.
Another TimeSlot2 spanning from 09:00 to 18:00 of Wednesday
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Mail Alert
73
Mail Alert
Mail alert is designed to keep system administrator or other relevant personnel alerted of any
unexpected events that might have occurred to the network computers or server for monitoring
efficiency. With this alert system, appropriate solutions may be tackled to fix problems that may have
arisen so that the server can be properly maintained.
Server Information
SMTP Server: Enter the SMTP server that you would like to use for sending emails.
Username: Enter the username of your email account to be used by the SMTP server.
Password: Enter the password of your email account.
Sender’s Email: Enter your email address.
SSL/TLS: Check to whether to enable SSL encryption feature.
Port: the port, default is 25.
Account Test: Click the button to test the connectivity and feasibility to your sender’s e-mail.
WAN IP Change Alert
Recipient’s Email (WAN IP Change Alert): Enter a valid e-mail address to receive an alert message
when WAN IP change has been detected.
Recipient’s Email (3G/4G-LTE Usage Allowance): Enter a valid e-mail address to receive an alert
message when the 3G or 4G/LTE over Usage Allowance occurs.
Click Apply button to save settings
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Remote System Log
Remote System Log
Remote System Log: Select Activated to enable this feature
Server IP Address: Assign the remote log server IP address.
Server UDP Port: Assign the remote log server port, 514 is commonly used.
Click Save to apply settings
BEC MX-200 User Manual
74
Device Configuration
Advanced Setup – Serial (RS232 Console Port)
75
Serial (RS-232 Console Port)
Here is the Serial RS-232 console configuration to connect with any existing industrial machine.
General Settings
Baud Rate: Specify the desire baud rate (speed) run on this serial port
Data Bits: Specify the number of data bits contained in a frame
Parity: A simple form of error detection in a frame
Stop Bits: Specify the stop bits of a frame
Application
Mode: Select one of the mode from the list, Disable / Modbus/TCP / TCP Server / TCP Client /
Telnet Server / SSH Server.
 Disable: Disable the serial port, RS-232.
 Modbus/TCP: Modbus is a master/slave communication uses IP over Ethernet to carry data
between devices/machines

Port: Generally uses port 502, master and slave must use the same port. Specify port
other than port 502.

Response Timeout (ms): Specify a response time-out in milliseconds. After the
response timeout expires, default is in 3000ms (3 seconds), data transactions will get
aborted.
Here are the possible causes for a timeout to occur:

Serial connection errors between the MX-200 and the serial device

Hardware issue with the Serial device

Serial device response time is longer than the specified Response Timeout value.
Increase the time-out value to see if it helps
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Serial (RS232 Console Port)
76
 TCP Server:

Port: Use 782(tcp/udp), an unassigned port, for the TCP Server. Specify a tcp/udp port
other than port 782.

Empty Serial Buffer When TCP Connection is Established: When TCP link connection
is established, serial buffer will get deleted. Enable to empty the buffer after TCP
connection is up.

Data packet Delimiter: A way to keep packets in tract.


Inter-character Time Gap: Default time is in 1000ms. After time has reached, serial
data will be transmitted. Time range from 1 – 30000ms.

Character Delimiter: Default characters are 0x0d0a. Serial data will get transmitted
when seeing the specified character(s), in this case, 0x0d0a. Valid characters “0x” +
Hex code
TCP Idle Timeout (Seconds): Default time is in 60 seconds. Specify an idle time-out in
seconds. After the timeout expires, meaning no data transmission within the defined time,
serial connection will get aborted. Time range from 10 – 180 seconds
 TCP Client:

Remote Host Name / IP: Enter either TCP server’s name or IP address.

Port: Generally uses port 782(tcp/udp). Specify tcp/udp port other than port 782.

Empty Serial Buffer When TCP Connection is Established: When TCP link connection
is established, serial buffer will get deleted. Enable to empty the buffer after TCP
connection is up.

Data packet Delimiter: A way to keep packets in tract.

Inter-character Time Gap: Default time is in 1000ms. After time has reached, serial
BEC MX-200 User Manual
Device Configuration
Advanced Setup – Serial (RS232 Console Port)
77
data will be transmitted. Time range from 1 – 30000ms.


Character Delimiter: Default characters are 0x0d0a. Serial data will get transmitted
when seeing the specified character(s), in this case, 0x0d0a. Valid characters “0x” +
Hex code.
TCP Idle Timeout (Seconds): Default time is in 60 seconds. Specify an idle time-out in
seconds. After the timeout expires, meaning no data transmission within the defined time,
serial connection will get aborted. Time range from 10 – 180 seconds.
 Telnet Server:

Port: Use 782(tcp/udp), an unassigned port. Specify a tcp/udp port other than port 782 for
the Telnet server. Port 23 is being reserved, don’t use this port.
Note: MX-200 uses port 23 as default port the embedded Telnet server.
 SSH Server:

Port: Use 782(tcp/udp), an unassigned port. Specify a tcp/udp port other than port 782 for
the SSH server. Port 22 is being reserved, don’t use this port.
Note: MX-200 uses port 22 as default port the embedded SSH server.
Click Save to apply settings
BEC MX-200 User Manual
Device Configuration
VPN – IPSec
78
VPN
A Virtual Private Network (VPN) is a private network that interconnects remote (and often
geographically separate) networks through primarily public communication infrastructures such as the
Internet. VPNs provide security through tunneling protocols and security procedures such as
encryption. For example, a VPN could be used to securely connect the branch offices of an
organization to a Headquarter office network through the public Internet.
MX-200 supports IPSec, PPTP, L2TP, GRE, and OpenVPN.
IPSec
Internet Protocol Security (IPSec) is a protocol suite for securing Internet Protocol (IP)
communications by authenticating and encrypting each IP packet of a communication session. IPSec
also includes protocols for establishing mutual authentication between agents at the beginning of the
session and negotiation of cryptographic keys to be used during the session.
IPSec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.
It can be used in protecting data flows between a pair of security gateways (network-to-network), or
between a security gateway and a host (network-to-host).
A total of 8 IPSec tunnels can be added.
Click Add New Connection to create a new IPSec profile.
BEC MX-200 User Manual
Device Configuration
VPN – IPSec
79
IPSec Connection Setting
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate the connection.
Interface: Select a WAN interface to establish a tunnel with the remote VPN device. Auto allows
system to automatically initiate a connection via current connected WAN interface.
Remote Gateway IP: The WAN IP address of the remote VPN device. Enter 0.0.0.0 for unknown
remote WAN IP address – only the peer can initiate the tunnel connection.
Local Access Range: Set the IP address or subnet of the local network.
 Single IP: The IP address of the local host, for establishing an IPSec connection between a
security gateway and a host (network-to-host).
 Subnet: The subnet of the local network, for establishing an IPSec tunnel between a pair of
security gateways (network-to-network)
Remote Access Range: Set the IP address or subnet of the remote network.
 Single IP: The IP address of the local host, for establishing an IPSec connection between a
security gateway and a host (network-to-host). If the remote peer is a host, select Single
Address.
 Subnet: The subnet of the local network, for establishing an IPSec tunnel between a pair of
security gateways (network-to-network), If the remote peer is a network, select Subnet.
BEC MX-200 User Manual
Device Configuration
VPN – IPSec
80
IPSec Phase 1(IKE)
IKE Mode: IKE, Internet Key Exchange, is the mechanism to negotiate and exchange parameters
and keys between IPSec peers to establish security associations(SA). Select Main or Aggressive
mode.
Pre-Shared Key: This is for the Internet Key Exchange (IKE) protocol, a string from 4 to 128
characters. Both sides should use the same key. IKE is used to establish a shared security policy and
authenticated keys for services (such as IPSec) that require a key. Before any IPSec traffic can be
passed, each router must be able to verify the identity of its peer. This can be done by manually
entering the pre-shared key into both sides (router or hosts).
Local ID Type / Remote ID Type: When the mode of IKE is aggressive, Local and Remote peers
can be identified by other IDs.
IDContent: Enter IDContent the name you want to identify when the Local and Remote Type are
Domain Name; Enter IDContent IP address you want to identify when the Local and Remote Type are
IP addresses (IPv4 and IPv6 supported).
IKE Proposal & Encryption Algorithm: Select the encryption algorithm from the drop-down menu.
There are several options: DES and AES (128, 192 and 256). 3DES and AES are more powerful but
increase latency.
 DES: Stands for Data Encryption Standard, it uses 56 bits as an encryption method.
 3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption
method.
 AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as
encryption method.
Authentication Algorithm: Authentication establishes the integrity of the datagram and ensures it is
not tampered with in transmission. There are 3 options: Message Digest 5 (MD5) and Secure Hash
Algorithm (SHA1, SHA256). SHA1 is more resistant to brute-force attacks than MD5. However, it is
slower.
 MD5: A one-way hashing algorithm that produces a 128−bit hash.
 SHA1: A one-way hashing algorithm that produces a 160−bit hash.
Diffie-Hellman Group: It is a public-key cryptography protocol that allows two parties to establish a
shared secret over an unsecured communication channel (i.e. over the Internet). MODP stands for
Modular Exponentiation Groups.
IPSec Phase 2(IPSec)
IPSec Proposal: Select the IPSec security method. There are two methods of verifying the
authentication information, AH(Authentication Header) and ESP(Encapsulating Security Payload).
BEC MX-200 User Manual
Device Configuration
VPN – IPSec
81
Use ESP for greater security so that data will be encrypted and the data origin be authenticated but
using AH data origin will only be authenticated but not encrypted.
Encryption Algorithm: Select the encryption algorithm from the drop-down menu. There are several
options: DES and AES (128, 192 and 256). 3DES and AES are more powerful but increase latency.
 DES: Stands for Data Encryption Standard, it uses 56 bits as an encryption method.
 3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption
method.
 AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as
encryption method.
Authentication Algorithm: Authentication establishes the integrity of the datagram and ensures it is
not tampered with in transmission. There are 3 options: Message Digest 5 (MD5) and Secure Hash
Algorithm (SHA1, SHA256). SHA1 is more resistant to brute-force attacks than MD5. However, it is
slower.
 MD5: A one-way hashing algorithm that produces a 128−bit hash.
 SHA1: A one-way hashing algorithm that produces a 160−bit hash.
Perfect Forward Secrecy: It is a public-key cryptography protocol that allows two parties to
establish a shared secret over an unsecured communication channel (i.e. over the Internet). MODP
stands for Modular Exponentiation Groups.
IPSec SA Lifetime
SA Lifetime: Specify the number of minutes that a Security Association (SA) will stay active before
new encryption and authentication key will be exchanged. There are two kinds of SAs, IKE and IPSec.
IKE negotiates and establishes SA on behalf of IPSec, an IKE SA is used by IKE.
 Phase 1 (IKE): To issue an initial connection request for a new VPN tunnel. The range can be
from 5 to 15,000 minutes, and the default is 480 minutes.
 Phase 2 (IPSec): To negotiate and establish secure authentication. The range can be from 5 to
15,000 minutes, and the default is 60 minutes. A short SA time increases security by forcing the
two parties to update the keys. However, every time the VPN tunnel re-negotiates, access
through the tunnel will be temporarily disconnected.
IPSec Connection Keep Alive
Keep Alive:
 None: Disable. The system will not detect remote IPSec peer is still alive or lost. The remote
peer will get disconnected after the interval, in seconds, is up.
 PING: This mode will detect the remote IPSec peer has lost or not by pinging specify IP
address.
 DPD: Dead peer detection (DPD) is a keeping alive mechanism that enables the router to be
BEC MX-200 User Manual
Device Configuration
VPN – IPSec
82
detected lively when the connection between the router and a remote IPSec peer has lost.
Please be noted, it must be enabled on the both sites.
PING to the IP: It is able to IP Ping the remote PC with the specified IP address and alert when the
connection fails. Once alter message is received, Router will drop this tunnel connection. Reestablish
of this connection is required. Default setting is 0.0.0.0 which disables the function
Interval: This sets the time interval between Pings to the IP function to monitor the connection status.
Default interval setting is 10 seconds. Time interval can be set from 0 to 3600 second, 0 second
disables the function.
Ping to the IP
0.0.0.0
0.0.0.0
xxx.xxx.xxx.xxx (A valid IP Address)
Interval (sec)
2000
xxx.xxx.xxx.xxx(A valid IP Address)
2000
Ping to the IP Action
No
No
No
Yes, activate it in every 2000
second.
Disconnection Time after No Traffic: It is the NO Response time clock. When no traffic stage time is
beyond the Disconnection time set, Router will automatically halt the tunnel connection and
re-establish it base on the Reconnection Time set. 180 seconds is minimum time interval for this
function.
Reconnection Time: It is the reconnecting time interval after NO TRAFFIC is initiated. 3 minutes is
minimum time interval for this function.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
VPN – IPSec (Example on LAN-to-LAN)
Examples: IPSec – Network (LAN) to Network (LAN)
Two of the MX-1000 devices want to setup a secure IPSec VPN tunnel
NOTE: The IPSec Settings shall be consistent between the two routers.
BEC MX-200 User Manual
83
Device Configuration
VPN – IPSec (Example on LAN-to-LAN)
84
Headquarter office Side:
Configuration Settings
Connection Name
Remote Secure Gateway
Access Network
Local Access Range
Local Network IP Address
Local Network Netmask
Remote Access Range
Remote Network IP Address
Remote Network Netmask
IPSec Proposal
IKE Mode
Pre-Shared Key
Phase 1 Encryption
Phase 1 Authentication
Phase 1 Diffie-Hellman Group
Phase 2 Proposal
Phase 2 Authentication
Phase 2 Encryption
Prefer Forward Security
BEC MX-200 User Manual
H-to-B
69.121.1.30
Description
Assigned name to this tunnel/profile
IP address of the Branch office gateway
Subnet
192.168.1.0
255.255.255.0
Subnet
192.168.0.0
255.255.255.0
Headquarter office network
Main
1234567890
AES-128
SHA1
MODP 1024(group2)
ESP
SHA1
3DES
MODP 1024(group2)
Security Plan
Branch office network
Device Configuration
VPN – IPSec (Example on LAN-to-LAN)
85
Branch Office Side:
Configuration Settings
Connection Name
Remote Secure Gateway
Access Network
Local Access Range
Local Network IP Address
Local Network Netmask
Remote Access Range
Remote Network IP Address
Remote Network Netmask
IPSec Proposal
IKE Mode
Pre-Shared Key
Phase 1 Encryption
Phase 1 Authentication
Phase 1 Diffie-Hellman Group
Phase 2 Proposal
Phase 2 Authentication
Phase 2 Encryption
Prefer Forward Security
BEC MX-200 User Manual
B-to-H
69.121.1.3
Description
Assigned name to this tunnel/profile
IP address of the Branch office gateway
Subnet
192.168.0.0
255.255.255.0
Subnet
192.168.1.0
255.255.255.0
Headquarter office network
Main
1234567890
AES-128
SHA1
MODP 1024(group2)
ESP
SHA1
3DES
MODP 1024(group2)
Security Plan
Branch office network
Device Configuration
VPN – IPSec (Example on Remote Access)
86
Examples: IPSec – Remote Employee to MX-200 Connection
Router servers as VPN server, and host should install the IPSec client to connect to Headquarter
office through IPSec VPN.
BEC MX-200 User Manual
Device Configuration
VPN – IPSec (Example on Remote Access)
87
Headquarter office Side:
Configuration Settings
Connection Name
Remote Secure Gateway
Access Network
Local Access Range
Local Network IP Address
Local Network Netmask
Remote Access Range
Remote Network IP Address
Remote Network Netmask
IPSec Proposal
IKE Mode
Pre-Shared Key
Phase 1 Encryption
Phase 1 Authentication
Phase 1 Diffie-Hellman Group
Phase 2 Proposal
Phase 2 Authentication
Phase 2 Encryption
Prefer Forward Security
BEC MX-200 User Manual
H-to-H
69.121.1.30
Description
Assigned name to this tunnel/profile
IP address of the Branch office gateway
Subnet
192.168.1.0
255.255.255.0
Signal IP
69.121.1.30
255.255.255.255
Headquarter
information
Main
1234567890
AES-128
SHA1
MODP 1024(group2)
ESP
SHA1
3DES
MODP 1024(group2)
Security Plan
office
LAN
Remote worker IP address
network
Device Configuration
VPN – PPTP Server
88
PPTP Server
The Point-to-Point Tunneling Protocol (PPTP) is a Layer2 tunneling protocol for implementing
virtual private networks through IP network.
In the Microsoft implementation, the tunneled PPP traffic can be authenticated with PAP, CHAP, and
Microsoft CHAP V1/V2 . The PPP payload is encrypted using Microsoft Point-to-Point Encryption
(MPPE) when using MSCHAPv1/v2.
NOTE: 4 sessions for Client and 4 sessions for Server respectively.
PPTP Server: Select Activate / Deactivate to enable or disable the PPTP Server.
Authentication Type: Pick an authentication type from the drop-down list. When using PAP, the
password is sent unencrypted, whilst CHAP encrypts the password before sending, and also allows
for challenges at different periods to ensure that an intruder has not replaced the client. When passed
the authentication with MS-CHAPv2, the MPPE encryption is supported.
Encryption Key Length: Auto, data encryption and key length, with 40-bit or 128-bit, is automatically
negotiated when establish a connection. 128-bit keys provide strong stronger encryption than 40-bit
keys.
Encryption Mode: The encryption key will be changed every 256 packets with Stateful mode. With
Stateless mode, the key will be changed in each packet.
CCP (Compression Control Protocol): Enable to compress data to save bandwidth and increase
data transfer speed.
MS-DNS: Assign a DNS server or use router default IP address to be the MS-DNS server IP address.
Rule Index: The numeric rule indicator for PPTP server. The maximum entry is up to 4.
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate the account. PPTP server is waiting for the client to connect to this account.
Username / Password: Enter the username / password for this profile.
BEC MX-200 User Manual
Device Configuration
VPN – PPTP Server
89
Connection Type: Select Remote Access for single user, Select LAN to LAN for remote gateway.
Private IP Address Assigned to Dial-in User: Specify the private IP address to be assigned to
dial-in clients, and the IP should be in the same subnet as local LAN, but not occupied.
Remote Network IP Address: Enter the subnet IP of the remote LAN network.
Remote Network Netmask: Enter the Netmask of the remote LAN network.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
VPN – PPTP Client
90
PPTP Client
Establish a PPTP tunnel over Internet to connect with a PPTP server.
A total of 4 sessions can be created for PPTP client.
Rule Index: The numeric rule indicator for PPTP client. The maximum entry is up to 4.
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate the account. PPTP server is waiting for the client to connect to this account.
Authentication Type: Pick an authentication type from the drop-down list. When using PAP, the
password is sent unencrypted, whilst CHAP encrypts the password before sending, and also allows
for challenges at different periods to ensure that an intruder has not replaced the client. When passed
the authentication with MS-CHAPv2, the MPPE encryption is supported.
Encryption Key Length: Auto, data encryption and key length, with 40-bit or 128-bit, is automatically
negotiated when establish a connection. 128-bit keys provide strong stronger encryption than 40-bit
keys.
Encryption Mode: The encryption key will be changed every 256 packets with Stateful mode. With
Stateless mode, the key will be changed in each packet.
CCP (Compression Control Protocol): Enable to compress data to save bandwidth and increase
data transfer speed.
Username / Password: Enter the username / password provided by the PPTP server/host.
Connection Type: Select Remote Access for single user, Select LAN to LAN for remote gateway.
Server Address: Enter the WAN IP address of the PPTP server.
Remote Network IP Address: Enter the subnet IP of the server/host LAN network.
Remote Network Netmask: Enter the Netmask of the server/host LAN network.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
VPN – PPTP (Example on Remote Dial-In)
91
Example: PPTP – Remote Employee Dial-in to MX-200
The input IP address 192.168.1.2 will be assigned to the remote worker. Please make sure this IP is
not used in the Office LAN.
Configuration Settings
Connection Name
Authentication Type
Username
Password
Connection Type
Assigned IP
BEC MX-200 User Manual
HS-RA
MS-CHAPv2
test
test
Remote Access
192.168.1.2
Description
Assigned name to this tunnel/profile
Authentication type
Credential created from the device to a
PPTP client to dial-in to the network.
Remote access for a dial-in
Local IP assigned to the dial-in client
Device Configuration
VPN – PPTP (Example on Remote Dial-In)
BEC MX-200 User Manual
92
Device Configuration
VPN – PPTP (Example on Remote Dial-Out)
93
Example: PPTP – Remote Employee Dial-out to MX-200
A company’s office establishes a PPTP VPN connection with a file server located at a separate
location. The router is installed in the office, connected to a couple of PCs and Servers.
PPTP Server WAN IP address is 61.121.1.33 of the Headquarter office.
Configuration Settings
Connection Name
Authentication Type
Username
Password
Connection Type
Server IP
BEC MX-200 User Manual
HS-RA
MS-CHAPv2
test
test
Remote Access
61.121.1.33
Description
Assigned name to this tunnel/profile
Authentication type
Credential assigned from the PPTP server
for PPP client to dial-in to its network.
Remote access for a dial-in
VPN server WAN IP address
Device Configuration
VPN – PPTP (Example on Remote Dial-Out)
BEC MX-200 User Manual
94
Device Configuration
VPN – PPTP (Example on LAN-to-LAN)
95
Example: PPTP – Network (LAN) to Network (LAN) Connection
The branch office establishes a PPTP VPN tunnel with Headquarter office to connect two private
networks over the Internet. The routers are installed in the Headquarter office and branch offices
accordingly.
NOTE: Both office LAN networks must be in different subnets with the LAN-LAN application.
BEC MX-200 User Manual
Device Configuration
VPN – PPTP (Example on LAN-to-LAN)
96
Configuring PPTP Server in the Headquarter office
The IP address 192.168.1.2 will be assigned to the router located in the branch office. Please make
sure this IP is not used in the Headquarter office LAN.
Configuration Settings
Connection Name
Authentication Type
Username
Password
Connection Type
Assigned IP
Remote Network IP
Remote Network Netmask
BEC MX-200 User Manual
HS-LL
MS-CHAPv2
test
test
LAN to LAN
192.168.1.2
129.168.0.0
255.255.255.0
Description
Assigned name to this tunnel/profile
Authentication type
Credential created for a PPTP client to
dial-in to its local network.
LAN to LAN connection
Local IP assigned to the dial-in client
Remote, Branch office, LAN network IP
address and Netmask
Device Configuration
VPN – PPTP (Example on LAN-to-LAN)
97
Configuring PPTP Client in the Branch office
The IP address 69.1.121.33 is the Public IP address of the router located in Headquarter office.
Configuration Settings
Connection Name
Authentication Type
Username
Password
Connection Type
Server IP
Remote Network IP
Remote Network Netmask
BEC MX-200 User Manual
BC-LL
MS-CHAPv2
test
test
LAN to LAN
69.121.1.33
129.168.1.0
255.255.255.0
Description
Assigned name to this tunnel/profile
Authentication type
Credential assigned from the Headquarter
Server to dial-in.
LAN to LAN connection
Headquarter Serve WAN IP address
Remote, Headquarter office, LAN network
IP address and Netmask
Device Configuration
VPN – L2TP
98
L2TP
L2TP, Layer 2 Tunneling Protocol is a tunneling protocol used to support virtual private networks
(VPNs). It does not provide any encryption or confidentiality by itself; it relies on an encryption protocol
that it passes within the tunnel to provide.
NOTE: 4 sessions for dial-in connections and 4 sessions for dial-out connections
Rule Index: The numeric rule indicator for L2TP. The maximum entry is up to 8 (4 dial-in and 4
dial-out profiles).
Connection Name: Enter a description for this connection/profile.
Active: To enable or disable this profile.
Connection Mode (Dial in)
Connection Mode: Select Dial In to operate as a L2TP server.
Authentication Type: Default in Chap/Pap (CHAP, Challenge Handshake Authentication Protocol.
PAP, Password Authentication Protocol). If you want the router to determine the authentication type to
use, or else manually specify PAP if you know which type the server is using (when acting as a client),
or else the authentication type you want clients connecting to you to use (when acting as a server).
Username / Password (Server/Host): Enter the username / password for this profile.
Private IP Address Assigned to Dial-in User: The private IP to be assigned to dial-in user by L2TP
BEC MX-200 User Manual
Device Configuration
VPN – L2TP
99
server. The IP should be in the same subnet as local LAN, and should not be occupied.
Connection Mode (Dial out)
Connection Mode: Choose Dial Out if you want your router to operate as a client (connecting to a
remote L2TP Server, e.g., your office server).
Server IP Address: Enter the IP address of your VPN Server.
Authentication Type: Default is Chap/Pap (CHAP, Challenge Handshake Authentication Protocol.
PAP, Password Authentication Protocol). If you want the router to determine the authentication type to
use, or else manually specify PAP if you know which type the server is using (when acting as a client),
or else the authentication type you want clients connecting to you to use (when acting as a server).
Username / Password (Client): Enter the username / password provide by the Server/Host.
Connection Type
 Remote Access: From a single user.
 LAN to LAN: Enter the peer network information, such as network address and Netmask.
Tunnel Authentication and Active
Tunnel Authentication: This enables router to authenticate both the L2TP remote and L2TP host.
This is only valid when L2TP remote supports this feature.
Secret Password: The secure password length should be 16 characters which may include numbers
and characters.
Local Host Name: Enter hostname of Local VPN device that is connected / established a VPN tunnel.
Remote Host Name: Enter hostname of remote VPN device. It is a tunnel identifier from the Remote
VPN device matches with the Remote hostname provided. If remote hostname matches, tunnel will be
connected; otherwise, it will be dropped.
Active as Default Route: Enabled to let the tunnel to be the default route for traffic, under this
circumstance, all packets will be forwarded to this tunnel and routed to the next hop.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
100
VPN – L2TP (Example on Remote Dial-in)
Example: L2TP VPN – Remote Employee Dial-in to MX-200
A remote worker establishes a L2TP VPN connection with the Headquarter office using
Microsoft's VPN Adapter The router is installed in the Headquarter office, connected to a couple
of PCs and Servers.
The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is
not used in the Office LAN.
Configuration Settings
Connection Name
Connection Mode
Authentication Type
Username
Password
Assigned IP
Connection Type
BEC MX-200 User Manual
HS-RA
Dial in
Chap/Pap
test
test
192.168.1.200
Remote Access
Description
Assigned name to this tunnel/profile
Operate as L2TP server
Authentication type
Credential from the device for remote
client to dial-in to the network.
An IP assigned to the dial in client
Remote access for dial in
Device Configuration
101
VPN – L2TP (Example on Remote Dial-out)
Example: L2TP VPN – MX-200 Dial-out to a Server
A company’s office establishes a L2TP VPN connection with a file server located at a separate
location. The router is installed in the office, connected to a couple of PCs and Servers.
Item
Connection Name
Connection Mode
Server IP
Authentication Type
Username
Password
Connection Type
BEC MX-200 User Manual
HC-RA
Dial out
69.121.1.33
Chap/Pap
test
test
Remote Access
Description
Assigned name to this tunnel/profile
Operate as L2TP client
VPN server WAN IP address
Authentication type
Credential from the VPN Server for remote
clients to dial-in to the network.
Remote access for dial out
Device Configuration
102
VPN – L2TP (Example on LAN-to-LAN)
Example: L2TP VPN – Network (LAN) to Network (LAN) Connection
The branch office establishes a L2TP VPN tunnel with Headquarter office to connect two private
networks over the Internet. The routers are installed in the Headquarter office and branch office
accordingly.
NOTE: Both office LAN networks must be in different subnets with the LAN-LAN application.
BEC MX-200 User Manual
Device Configuration
103
VPN – L2TP (Example on LAN-to-LAN)
Configuring L2TP VPN Dial-in in the Headquarter office
The IP address 192.168.1.200 will be assigned to the router located in the branch office.
Item
Connection Name
Connection Mode
Authentication Type
Username
Password
Assigned IP
Connection Type
Remote Network IP
Remote Network Netmask
BEC MX-200 User Manual
HS-LL
Dial in
Chap/Pap
Test
Test
192.168.1.200
LAN to LAN
129.168.0.0
255.255.255.0
Description
Assigned name to this tunnel/profile
Operate as L2TP server
Authentication type
Credential for a PPTP client to dial-in to
the network.
An IP assigned to the dial in client
LAN to LAN for dial in
Remote, Branch office, LAN network IP
address and Netmask
Device Configuration
104
VPN – L2TP (Example on LAN-to-LAN)
Configuring L2TP VPN Dial-out in the Branch office
The IP address 69.1.121.33 is the Public IP address of the router located in Headquarter office.
Item
Connection Name
Connection Mode
Server IP
Authentication Type
Username
Password
Connection Type
Remote Network IP
Remote Network Netmask
BEC MX-200 User Manual
BC-LL
Dial out
69.121.1.33
Chap/Pap
test
test
LAN to LAN
129.168.1.0
255.255.255.0
Description
Assigned name to this tunnel/profile
Operate as L2TP client
Dialed server IP
Authentication type
Credential from the PPTP server to dial-in
to the network
LAN to LAN for dial out
Remote, Headquarter office, LAN network
IP address and Netmask
Device Configuration
105
VPN – GRE
GRE Tunnel
Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of
network layer protocol packets inside virtual point-to-point links over an IP network.
NOTE: Up to 8 GRE tunnels supported.
Rule Index: The numeric rule indicator for GRE. The maximum entry is up to 8.
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate this GRE profile.
Interface: Select a WAN interface to establish a tunnel with the remote VPN device.
Remote Gateway: Enter the remote GRE WAN IP address.
Tunnel Local IP Address & Remote IP address (Virtual Interface): Enter a virtual IP address for
the local and peer network.
Tunnel Network Netmask (Virtual Interface): Enter the Netmask for this virtual interface.
NOTE: The virtual Local and Remote IP addresses must in same subnet and cannot be existed or used in both
networks.
Remote Network IP Address Netmask: Enter remote LAN network IP address.
Remote Network Netmask: Enter remote LAN network Netmask.
Enable Keep-alive: Check the box to enable the keep-alive. The system will detect remote peer is still
alive or lost. If no responses from the remote peer after certain times, #-of-retry-time x interval, the
connection will get dropped.
Keep-alive Retry Times: Set the keep-alive retry times, default is 3.
Keep-alive Interval: Set the keep-alive Interval, unit in seconds. Default is 5 seconds.
Example: Keepalive retry time (3) x keepalive interval (5) = 15 seconds. If no responses for 15
BEC MX-200 User Manual
Device Configuration
106
VPN – GRE
seconds, GRE connection will get aborted.
MTU: Maximum Transmission Unit in byte. The size of the largest datagram (excluding media-specific
headers) an IP attempts to send through the interface.
Active as Default Route: Select if to set the GRE tunnel as the default route.
IPSec: Click the checkbox to enable GRE tunnel over IPSec.
IKE Mode: IKE, Internet Key Exchange, is the mechanism to negotiate and exchange parameters
and keys between IPSec peers to establish security associations(SA). Select Main or Aggressive
mode.
IKE(IPSec) Local ID Type and Remote ID Type: When the mode of IKE is aggressive, Local and
Remote peers can be identified by other IDs.
IKE (IPSec) Pre-Shared Key: This is for the Internet Key Exchange (IKE) protocol, a string from 4 to
128 characters. Both sides should use the same key. IKE is used to establish a shared security policy
and authenticated keys for services (such as IPSec) that require a key. Before any IPSec traffic can
be passed, each router must be able to verify the identity of its peer. This can be done by manually
entering the pre-shared key into both sides (router or hosts).
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
107
VPN – GRE (Example)
Example: GRE VPN – Network (LAN) to Network (LAN) Connection
The branch office establishes a GRE VPN tunnel with Headquarter office to connect two private
networks over the Internet. The routers are installed in the Headquarter office and branch office
accordingly.
NOTE: Both office LAN networks must be in different subnets with the GRE VPN connection.
BEC MX-200 User Manual
Device Configuration
108
VPN – GRE (Example)
Configuring GRE connection in the Headquarter office
The IP address 69.1.121.30 is the Public IP address of the router located in branch office.
Item
Connection Name
Remote Gateway IP
Tunnel Local IP Address
(Virtual Interface)
Tunnel Remote IP Address
(Virtual Interface)
Tunnel Network Netmask
(Virtual Interface)
Remote Network IP/ Netmask
BEC MX-200 User Manual
HS-LL
69.121.1.30
192.168.100.11
192.168.100.10
Description
Assigned name to this tunnel/profile
WAN IP address of Branch office
Local and remote virtual interface IP
address must be in same Netmask.
255.255.255.0
Network Netmask of this virtual interface.
192.168.0.0/
255.255.255.0
The remote, branch office, LAN network IP
and Netmask.
Device Configuration
109
VPN – GRE (Example)
Configuring GRE connection in the Branch office
The IP address 69.1.121.3 is the Public IP address of the router located in Headquarter office.
Item
Connection Name
Remote Gateway IP
Tunnel Local IP Address
(Virtual Interface)
Tunnel Remote IP Address
(Virtual Interface)
Tunnel Network Netmask
(Virtual Interface)
Remote Network IP/ Netmask
BEC MX-200 User Manual
BC-LL
69.121.1.3
192.168.100.10
192.168.100.11
Description
Assigned name to this tunnel/profile
WAN IP address of Headquarter office
Local and remote virtual interface IP
address must be in same Netmask.
255.255.255.0
Network Netmask of this virtual interface.
192.168.1.0/
255.255.255.0
The remote, Headquarter office, LAN
network IP and Netmask.
Device Configuration
VPN – OpenVPN (OpenVPN Server)
110
OpenVPN
OpenVPN is an open source software application that implements virtual private network (VPN)
techniques for creating secure point-to-point or site-to-site connections in routed or bridged
configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for
key exchange. OpenVPN can run over User Datagram Protocol (UDP) or Transmission Control
Protocol (TCP) transports, multiplexing created SSL tunnels on a single TCP/UDP port. It is capable
of traversing network address translation (NAT) and firewalls.
OpenVPN allows peers to authenticate each other using a pre-shared secret key, certificates, or
username/password. Preshared secret key is the easiest, with certificate based being the most robust
and feature-rich. It uses the OpenSSL encryption library extensively, allowing OpenVPN to use all the
ciphers available in the OpenSSL package, as well as the SSLv3/TLSv1 protocol, and contains many
security and control features.
It has integrated with OpenVPN package, allowing users to run OpenVPN in server or client mode
from their network routers.
OpenVPN Server
NOTE: Up to 1 profile.
Rule Index: The numeric rule indicator for OpenVPN.
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate this profile.
Local Service Port: Port 1194 is the default assigned port for OpenVPN
Tunnel Network (virtual Interface)
IP Address / Netmask: Enter a virtual IP address and Netmask for this tunnel.
NOTE: The virtual IP addresses cannot be existed or used in both networks.
BEC MX-200 User Manual
Device Configuration
VPN – OpenVPN (OpenVPN Server)
111
Local Access Range
IP Address / Netmask: Enter local LAN network IP address and Netmask.
Protocol: OpenVPN can run over either UDP or TCP transports. Select the protocol.
Local Certificate / Trusted CA Index: OpenVPN mutually authenticate the server and client based
on certificates and CA. Select a certificate and CA.
To import certificates and CAs, go to Maintenance >> Certificate Management to upload files.
Otherwise, select Default certificate and CA.
Cryptographic Suite
Cipher: OpenVPN uses all the ciphers available in the OpenSSL package to encrypt both the data
and channels. Select an encryption method.
Hash: To establish the integrity of the datagram and ensures it is not tampered with in transmission.
There are options: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA1, SHA256). SHA1 is
more resistant to brute-force attacks than MD5. However, it is slower.
Compression: Choose adaptive to use the LZO compression library to compress the data stream.
Keepalive: Check the box to enable the keep-alive. The system will automatic send ping packet to
remote peer to keep the tunnel active.
Interval: Set the keep-alive Interval, unit in seconds. Default is 10 seconds. Valid interval range is
from 0 to 3600 seconds.
Timeout: Re-establish tunnel if no responses from peer network after timeout period expires. Default
is 120 seconds.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
112
VPN – OpenVPN (OpenVPN Client)
OpenVPN Client
OpenVPN client must match the VPN information / settings with the OpenVPN Server.
NOTE: Up to 4 tunnels supported.
Rule Index: The numeric rule indicator for OpenVPN. Maximum up to 4 profile/tunnels
Connection Name: Enter a description for this connection/profile.
Active: Yes to activate this profile.
Server IP Address or Domain Name: Enter OpenVPN Server’s WAN IP address or Domain name.
Service Port: Port 1194 is the official assigned port number for OpenVPN
Active as Default Route: Choose Yes to let the OpenVPN tunnel/connection be the default route for
traffic, under this circumstance, all outgoing packets will be forwarded to this tunnel and routed to the
next hop.
Remote Subnet
IP Address / Netmask: Enter the LAN network IP address and Netmask of the OpenVPN Server.
Protocol: OpenVPN can run over either UDP or TCP transports. Select the protocol.
Local Certificate / Trusted CA Index: OpenVPN mutually authenticate the server and client based
on certificates and CA. Select a certificate and CA.
To import certificates and CAs, go to Maintenance >> Certificate Management to upload files.
Otherwise, select Default certificate and CA.
Cryptographic Suite
Cipher: OpenVPN uses all the ciphers available in the OpenSSL package to encrypt both the data
and channels. Select an encryption method.
BEC MX-200 User Manual
Device Configuration
113
VPN – OpenVPN (OpenVPN Client)
Hash: To establish the integrity of the datagram and ensures it is not tampered with in transmission.
There are options: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA1, SHA256). SHA1 is
more resistant to brute-force attacks than MD5. However, it is slower.
Compression: Choose adaptive to use the LZO compression library to compress the data stream.
Keepalive: Check the box to enable the keep-alive. The system will automatic send ping packet to
remote peer to keep the tunnel active.
Interval: Set the keep-alive Interval, unit in seconds. Default is 10 seconds. Valid interval range is
from 0 to 3600 seconds.
Timeout: Re-establish tunnel if no responses from peer network after timeout period expires. Default
is 120 seconds.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
VPN – OpenVPN (Example)
114
Example: OpenVPN – Network (LAN) to Network (LAN) Connection
The Branch office establishes a tunnel with Headquarter office to connect two private networks over
the OpenVPN.
NOTE: Both office LAN networks must be in different subnets with the GRE VPN connection.
BEC MX-200 User Manual
Device Configuration
VPN – OpenVPN (Example)
115
Configuring OpenVPN server in Headquarter office
The IP address 69.1.121.30 is the WAN IP address of the router located in the Branch office.
The OpenVPN tunnel network virtual interface is set to 192.168.100.0/24.
Item
Connection Name
Tunnel Network
(Virtual Interface)
Local Access Range
BEC MX-200 User Manual
HS-LL
192.168.100.0/
255.255.255.0
192.168.0.0/
255.255.255.0
Description
Assigned name to this tunnel/profile
IP address & Netmask of the virtual tunnel.
OpenVPN Server’s local LAN network.
Device Configuration
VPN – OpenVPN (Example)
116
Configuring OpenVPN client in Branch office
The IP address 69.1.121.3 is the WAN IP address of the router located in Headquarter office.
Item
Connection Name
Server IP Address
Remote Subnet
BEC MX-200 User Manual
BC-LL
69.121.1.3
192.168.0.0/
255.255.255.0
Description
Assigned name to this tunnel/profile
The WAN IP address of OpenVPN server.
Local LAN IP & Netmask of the Branch
office
Device Configuration
117
Access Management – Device Management
Access Management
Device Management
Device Host Name
Host Name: Enter the host name of the router. Default is home.gateway
Embedded Web Server
HTTP Port: It is the embedded web server (Web GUI) accessing port, default is 80. It can be changed
other port other than port 80, e.g. port 8080.
HTTPS Server Certificate Index: HTTPS known as HTTP-over-SSL tunnel protocol. Select a
certificate to identify the system web server. When accessing to the web server (Web GUI), the
browser will issue a warning page.
To import certificates, go to Maintenance >> Certificate Management to upload files. Otherwise,
select Default certificate and CA.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
118
Access Management – SNMP
SNMP
Simple Network Management Protocol (SNMP) is a protocol used for exchanging management
information between network devices. The MX-200 serves as a SNMP agent that allows a manager
station to manage and monitor the router through the network.
SNMP: Activate to enable SNMP.
Get Community: Type the Get Community, which is the password for the incoming Get-and-GetNext
requests from the management station.
Set Community: Type the Set Community, which is the password for incoming Set requests from the
management station.
Trap Manager IP: Enter the IP of the server receiving the trap message (when some exception occurs)
sent by this SNMP agent.
System Name / Location / Contact: String descriptions of the SNMP agent.
SNMPv3
SNMPv3: Enable to activate the SNMPv3.
User Name: Enter the name allowed to access the SNMP agent.
Access Permissions: Set the access permissions for the user; RO--read only and RW--read and
writer.
Authentication Protocol: Select the authentication protocol, MD5 and SHA. SNMP agent can
communicate with the manager station through authentication and encryption to secure the message
exchange. Set the authentication and encryption information here and below.
Authentication Key: Set the authentication key, 8-31 characters.
Privacy Protocol: Select the privacy mode, DES and AES.
Privacy Key: Set the privacy key, 8-31 characters.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
Access Management – Syslog
Syslog
Use the Syslog to collect system event information to a remote log server.
Remote System Log: Select Activated to enable this feature
Server IP Address: Assign the remote log server IP address.
Server UDP Port: Assign the remote log server port, 514 is commonly used.
Click Save to apply settings.
BEC MX-200 User Manual
119
Device Configuration
120
Access Management – UPnP
Universal Plug & Play
UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control
and data transfer between devices. UPnP offers many advantages for users running NAT routers
through UPnP NAT Traversal, and on supported systems makes tasks such as port forwarding much
easier by letting the application control the required settings, removing the need for the user to control
advanced configuration of their device.
Both the user’s Operating System and the relevant application must support UPnP in addition to the
router.
UPnP: Select this checkbox to activate UPnP. Be aware that anyone could use an UPnP application
to open the web configuration’s login screen without entering the MX-200's IP address
Auto-configured: Select this check box to allow UPnP-enabled applications to automatically
configure the MX-200 so that they can communicate through the MX-200, for example by using NAT
traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate
with another UPnP enabled device; this eliminates the need to manually configure port forwarding for
the UPnP enabled application.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
121
Access Management – DDNS
Dynamic DNS (DDNS)
The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing
users whose ISP does not assign them a static IP address to use a domain name. This is especially
useful for hosting servers via your internet connection, so that anyone wishing to connect to you may
use your domain name, rather than having to use your dynamic IP address, which changes from time
to time. This dynamic IP address is the WAN IP address of the router, which is assigned to you by your
ISP.
Here users can register different WAN interfaces with different DNS Providers.
If you do not have a DDNS account, please choose a DDNS Service Provider from the list then go to
their website to create an account first.
Dynamic DNS: Select this check box to activate Dynamic DNS.
Service Provider: Select from drop-down menu for the appropriate service provider, for example:
www.dyndns.org.
My Host Name: Type the domain name assigned to your MX-200 by your Dynamic DNS provider.
Username / Password: Enter the user name and password of the account you created with this
service provider.
Wildcard support: Select this check box to enable DYNDNS Wildcard.
Period: Set the time period on how often the MX-200 will update the DDNS server with your current
external IP address.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
122
Access Management – DDNS (Example)
Example: How to register a DDNS account
If you do not have an account with Dynamic DNS, please go to www.dyndns.org to register an account
first.
User test1 register a Dynamic Domain Names in DDNS provider http://www.dyndns.org/ .
DDNS: www.hometest.com using username/password test/test
BEC MX-200 User Manual
Device Configuration
123
Access Management – Access Control
Access Control
Access Control Listing allows you to determine which services/protocols can access the MX-200
interface from which computers. It is a management tool aimed to allow IPs (set in secure IP address)
to access specified embedded applications (Web, etc., user can set) through some specified interface
(LAN, WAN or both). User can have an elaborate understanding in the examples below.
The maximum number of entry is 16.
Access Control: Select whether to make Access Control function available.
Rule Index: The numeric rule indicator.
Active: Yes to activate the rule.
Secure IP Address: The default 0.0.0.0 allows any client to use this service to manage the MX-200.
Type an IP address range to restrict access to the client(s) without a matching IP address.
Application: Choose a service that you want to all access to all the secure IP clients. The drop-down
menu lists all the common used applications.
Interface: Select the access interface. Choices are LAN, WAN and Both.
Click Save to apply settings.
By default, the “Access Control” has two default rules.
Default Rule 1: (Index 1), a rule to allow only clients from LAN to have access to all embedded
applications (Web, FTP, etc.). Under this situation, clients from WAN cannot access the router even
from Ping.
BEC MX-200 User Manual
Device Configuration
124
Access Management – Access Control
Default Rule 2: (Index 2), an ACL rule to open Ping to WAN side.
BEC MX-200 User Manual
Device Configuration
125
Access Management – Packet Filter (IP & MAC Filter)
Packet Filter
You can filter the packages by MAC address, IP address, Protocol, Port number and Application or
URL.

Filter Type - IP & MAC Filter
IP & MAC Filter Editing
Rule Index: The numeric rule indicator.
Individual Active: Yes to enable the rule.
Action: This is how to deal with the packets matching the rule. Allow please select White List or block
selecting Black List.
Interface: Select to determine which interface the rule will be applied to.
Direction: Select to determine whether the rule applies to outgoing packets, incoming packets or
packets of both directions.
Type: Choose type of field you want to specify to monitor. Select “IPv4” for IPv4 address, port number
and protocol. Select “IPv6” for IPv6 address, port number and protocol. Select “MAC” for MAC
address.
 IPv4
BEC MX-200 User Manual
Device Configuration
126
Access Management – Packet Filter (IP & MAC Filter)
 IPv4 (Cont.)
Source IP Address: The source IP address of packets to be monitored. 0.0.0.0 means “Don’t
care”.
Source Subnet Mask: Enter the subnet mask of the source network.
Source Port Number: The source port number of packets to be monitored. 0 means “Don’t
care”.
Destination IP Address: The destination IP address of packets to be monitored. 0.0.0.0
means “Don’t care”.
Destination Subnet Mask: Enter the subnet mask of the destination network.
Destination Port Number: This is the Port that defines the application. (E.g. HTTP is port 80.)
DSCP: DSCP: Differentiated Services Code Point, it is recommended that this option be
configured by an advanced user or keep 0. (0 means Don’t care.)
Protocol: Specify the packet type (TCP, UDP, ICMP, and ICMPv6) that the rule applies to.
 IPv6
Source IP (IPv6) Address/ Prefix: The source IP address or range of packets to be monitored.
Source Port Number: The source port number of packets to be monitored.
Destination IP (IPv6) Address/ Prefix: The destination subnet IP address.
Destination Port Number: This is the Port or Port Ranges that defines the application.
DSCP: show the set DSCP.
Protocol: It is the packet protocol type used by the application. Select either TCP or UDP or
BEC MX-200 User Manual
Device Configuration
127
Access Management – Packet Filter (IP & MAC Filter)
ICMP or ICMPv6
 MAC
Source MAC Address: show the MAC address of the rule applied.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
128
Access Management – Packet Filter (URL Filter)

Filter Type- URL Filter
URL Filter: Select Activated to enable URL Filter.
URL Filter Rule Index: The numeric rule indicator.
Individual Active: To give control to the specific URL access individually, for example, you want to
prohibit access to www.yahoo.com, please first press Activated in “URL Filter” field, and also Yes in
“Individual Active” field; if some time you want to allow access to this URL, you simply select No in
individual active field. In a word, the command serves as a switch to the access of some specific URL
with the filter on.
URL (Host): Specified URL which is prohibited from accessing.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
129
Access Management – CWMP (TR-069)
CWMP (TR-069)
CWMP, short for CPE WAN Management Protocol, also called TR069 is a Broadband Forum technical
specification entitled CPE WAN Management Protocol (CWMP). It defines an application layer
protocol for remote management of end-user devices. It defines an application layer protocol for
remote management of end-user devices.
As a bidirectional SOAP/HTTP based protocol it can provides the communication between customer
premises equipment (CPE) and Auto Configuration Server (ACS). It includes both a safe configuration
and the control of other CPE management functions within an integrated framework. In the course of
the booming broadband market, the number of different internet access possibilities grew as well (e.g.
modems, routers, gateways, set-top box, VoIP-phones).At the same time the configuration of this
equipment became more complicated –too complicated for end-users. For this reason, TR-069 was
developed. It provides the possibility of auto configuration of the access types. Using TR-069 the
terminals can get in contact with the Auto Configuration Servers (ACS) and establish the configuration
automatically and let ACS configure CPE automatically.
CWMP: Select activated to enable CWMP.
ACS Login Information
URL: Enter the ACS server login URL.
User Name: Specify the ACS User Name for ACS authentication to the connection from CPE.
Password: Enter the ACS server login password.
Connection Request Information
Path: Local path in HTTP URL for an ACS to make a Connection Request notification to the CPE.
Username: Username used to authenticate an ACS making a Connection Request to the CPE.
BEC MX-200 User Manual
Device Configuration
130
Access Management – CWMP (TR-069)
Password: Password used to authenticate an ACS making a Connection Request to the CPE.
Periodic Inform Config
Periodic Inform: Select Activated to authorize the router to send an Inform message to the ACS
automatically.
Interval(s): Specify the inform interval time (sec) which CPE used to periodically send inform
message to automatically connect to ACS. When the inform interval time arrives, the CPE will send
inform message to automatically connect to ACS.
NATT Config - This is a proprietary feature provided by BEC. May leave them in blank, no
configuration is required.
NATT Server: By BEC administrator only.
NATT Period: By BEC administrator only.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
131
Access Management – Parental Control
Parental Control
This feature provides Web content filtering offering safer and more reliable web surfing for users
especially for parents to protect network security and control the contents for children at home.
To activate this feature, please log on to www.opendns.com to get an OpenDNS account first.
Parent Control Provider: Hosted by www.opendns.com
Parent Control: Enable the feature by clicking the Activated
Host Name: It is the domain name of your OpenDNS. If you don’t have one, please leave it blink.
Username / Password: Put down your OpenDNS account username and password
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
132
Access Management – BECentral Management
BECentral Management
BECentral is a cloud based device management platform that provides operators with a
comprehensive suite of services to manage devices in real-time.
BECentral Management: Activate to enable the feature.
BECentral Management URL: Access path to the BECentral.
BECentral Management Port: Port listened by the BECentral.
Organization ID: Customer ID
Device Report Interval: Enter the interval time in seconds to send inform message periodically to the
BECentral.
BEC MX-200 User Manual
Device Configuration
133
Maintenance – User Management (Administrator Account)
Maintenance
User Management
User Management provides the Administrator with the ability to grant access control and manage GUI
login credentials for each user.
There are two access management levels, Administrator and User.
The default root account, Administrator (admin), has full access to all the features listed and ability to
create other accounts with features to allow other users to access to. The User account is with limited
access (specified by advanced users with admin account) to the GUI.
Total of 8 accounts can be created to grant access to manage the MX-200 via the web page.
 Administrator Account
admin/admin is the root/default account username and password.
NOTE: This username / password may vary by different Internet Service Providers.
Login using the Administrator account, you will have the full accessibility to manage & control your
gateway device and can also create user accounts for others to control some of the open configuration
settings.
User Setup
Index: The numeric account indicator. The maximum entry is up to 8 accounts.
User Name: Create account(s) user name for GUI management.
New Password: Enter a new password for this user account.
Confirmed Password: Re-enter the new password again; you must enter the password exactly the
same as in the previous field
BEC MX-200 User Manual
Device Configuration
134
Maintenance – User Management (User Account)
 User Account
user/user is the default user account username and password
NOTE: This username / password may vary by different Internet Service Providers.
User Account Setup
Index #: The numeric account indicator. The maximum entry is up to 8.
Username: Create account(s) user name for GUI management.
New Password: Password for the user account.
Confirm Password: Re-enter the password.
Web GUI Permission
Guest Account: Enable to create this new guest account.
Interface Setup / Advanced Setup / VPN Setup / Access Management / Maintenance: Enable to
grant this user access to these features.
When someone accesses to the MX-200 using this “user” account, he/she can only manage and
configure the features that is pre-selected in Web GUI Permission for this account..
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
135
Maintenance – Certificate Management
Certificate Management
This feature is used for OpenVPN and HTTS Server authentication of the device using certificate. If
the imported certificate doesn't match the authorized certificate with the Server then no access is
allowed.
Edit: Click
Delete: Click
(Edit) to import a certificate.
(Delete) to remove the certificate from the list.
Local Certificate Listing
Index #: The numeric account indicator. The maximum entry is up to 2.
Certificate Name: The name of the certificate.
PKCS12: Every certificate is accompanied by a private key. Upload both files if PKCS is disabled.
Enable PKCS12 to put Certificate & Private Key in the same file, like *.p12, *.pfx.
Certificate File: Browse to locate the target certificate file on PC before uploading it.
Private Key File: Browse to locate the target file on PC before uploading it. If PKCS enabled, please
ignore this setting.
Password: Enter the password if any, which is used to protect the private key. Otherwise, leave it
empty.
Click Apply to save settings.
BEC MX-200 User Manual
Device Configuration
136
Maintenance – Certificate Management
Trusted CA Listing
Index #: The numeric account indicator. The maximum entry is up to 2.
CA Name: Description of the CA.
CA Certificate File: Browse to locate the target certificate file on PC before uploading it.
Click Apply to save settings.
BEC MX-200 User Manual
Device Configuration
137
Maintenance – Time Zone
Time Zone
With default, MX-200 does not contain the correct local time and date.
There are several options to setup, maintain, and configure current local time/date on the MX-200. If
you plan to use Time Schedule feature, it is extremely important you set up the Time Zone correctly.
Synchronize time with: Select the methods to synchronize the time.
 NTP Server automatically: To synchronize time with the SNTP servers to get the current time
from an SNTP server outside your network then choose your local time zone. After a successful
connection to the Internet, MX-200 will retrieve the correct local time from the SNTP server this
is specified.
 PC’s Clock: To synchronize time with the PC’s clock.
 Manually: Select this to enter the SNMP server IP address manually.
 Date: Month / Date / Year. Month – 1 ~ 12 (January ~ December).
 Time: Hour: Minute: Second
Time Zone: Choose the time zone of your location. This will set the time difference between your time
zone and Greenwich Mean Time (GMT).
Daylight Saving: Select this option if you use daylight savings time.
NTP Server Address: Enter the IP address of your time server. Check with your ISP/network
administrator if you are unsure of this information.
Click Save to apply settings.
BEC MX-200 User Manual
Device Configuration
138
Maintenance – License
License
Some of the advanced features are required for a license. For more information, please contact with
Billion/BEC for more information.
Input your license key here and click “Upgrade” to enable the features.
NOTE: Device will reboot after the upgrade.
BEC MX-200 User Manual
Device Configuration
139
Maintenance – Firmware & Configuration
Firmware & Configuration
Firmware is the software that controls the hardware and provides all functionalities which are available
in the GUI. This software may be improved and/or modified; your MX-200 provides an easy way to
update the code to take advantage of the changes. .
To upgrade the firmware of the MX-200, you should download or copy the firmware to your local
environment first. Click “Choose File” to specify the path of the firmware file. Then, click “Upgrade”
to start upgrading process. After completing the firmware upgrade, the MX-200 will automatically
restart and run the new firmware.
Upgrade: Choose Firmware or Configuration you want to update.
System Restart with:
 Current Settings: Restart the device with the current settings automatically when finishing
upgrading.
 Factory Default Settings: Restart the device with factory default settings automatically when
finishing upgrading.
File: Type in the location of the file you want to upload in this field or click Browse to find it.
Choose File: Click “Choose File” to find the configuration file or firmware file you want to upload.
Remember that you must extract / decompress / unzip the .zip files before you can upload them.
Backup Configuration: Click Backup button to back up the current running configuration file and
save it to your computer in the event that you need this configuration file to be restored back to your
MX-200 device when making false configurations and want to restore to the original settings.
Upgrade: Click “Upgrade” to begin the upload process. This process may take up to two minutes.
DO NOT turn off or power cycle the device while firmware upgrading is still
in process.
Improper operation could damage your MX-200.
BEC MX-200 User Manual
Device Configuration
140
Maintenance – System Restart
System Restart
Click System Restart with option Current Settings to reboot your router.
If you wish to restart the router using the factory default settings (for example, after a firmware
upgrade or if you have saved an incorrect configuration), select Factory Default Settings to restore
to factory default settings.
You may also restore your router to factory settings by holding the small Reset pinhole button on the
back of your router in about more than 6s seconds whilst the router is turned on.
BEC MX-200 User Manual
Device Configuration
141
Maintenance – Auto Reboot
Auto Reboot
Schedule an automatic reboot for your MX-200 to ensure proper operation and best performance.
This reboot will only reboot with current configuration settings and not overwrite any existing settings.
Click Save to apply settings
Example: Schedule MX-200 to reboot at 10:00pm (22:00) every weekday (Monday thru Friday) and
reboot at 9:00am on Saturday and Sunday.
BEC MX-200 User Manual
Device Configuration
142
Maintenance – Diagnostic Test
Diagnostics Tool
The Diagnostic Test page shows the test results for the connectivity of the physical layer and protocol
layer for both LAN and WAN sides.
3G/4G-LTE / EWAN (LAN1)
Ping other IP Address: Click Yes if you wish to ping other IP address rather than google.com
Click START to begin to diagnose the connection.
BEC MX-200 User Manual
Troubleshooting 143
Chapter 5: Troubleshooting
If your MX-200 is not functioning properly, you can refer to this chapter for simple troubleshooting
before contacting your service provider support. This can save you time and effort but if symptoms
persist, consult your service provider.
Problems with the Router
Problem
Suggested Action
None of the LEDs is on when you turn
on the router
Check the connection between the router and the
adapter. If the problem persists, most likely it is due
to the malfunction of your hardware. Please contact
your service provider or BEC for technical support.
Try the default username "admin" and password
"admin". If this fails, you can restore your router to its
factory settings by pressing the reset button on the
device rear side.
You have forgotten your login
username or password
Problem with LAN Interface
Problem
Suggested Action
Cannot PING any PC on LAN
Check the Ethernet LEDs on the front panel.
The LED should be on for the port that has a PC
connected. If it does not lit, check to see if the cable
between your router and the PC is properly
connected. Make sure you have first uninstalled your
firewall program before troubleshooting.
Verify that the IP address and the subnet mask are
consistent for both the router and the workstations.
BEC MX-200 User Manual
Troubleshooting 144
Recovery Procedures
Problem
Suggested Action
1. The front LEDs display incorrectly
upgrade
2. Still cannot access to the router
management interface after pressing the
RESET button.
3. Software / Firmware upgrade failure
Before starting recovery process, please configure
the IP address of the PC as 192.168.1.100 and
proceed with the following step-by-step guide.
1. Power the router off.
2. Press reset button and power on the router, once
the Power lights Red, keeping press reset button
over 6 seconds.
3. Internet LED flashes Green, router entering
recovery procedure and router's IP will reset to
Emergency IP address (Say 192.168.1.1).
4. Open browser and access http://192.168.1.1 to
upload the firmware.
5. Internet LED lit Red, and router starts to write
firmware into flash. Please DO NOT power off the
router at this step.
6. Internet LED lit Green when successfully upgrade
firmware.
7. Power cycle off/on the MX-200
BEC MX-200 User Manual
Appendix 145
APPENDIX: PRODUCT SUPPORT & CONTACT
If you come across any problems please contact the dealer from where you have purchased the
product.
Contact BEC @ http://www.bectechnologies.net
MAC OS is a registered Trademark of Apple Computer, Inc.
Windows 10/8/7, Windows XP, and Windows Vista are registered Trademarks of Microsoft Corporation
BEC MX-200 User Manual
Appendix 146
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no guarantee that interference
will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following measures:
 Reorient or relocate the receiving antenna.
 Increase the separation between the equipment and receiver.
 Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
 Consult the dealer or an experienced radio/TV technician for help.
FCC Caution:
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions:
(1) This device may not cause harmful interference
(2) This device must accept any interference received, including interference that may cause
undesired operation.
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user's authority to operate this equipment. . This device and its antenna(s) must not be
co-located or operating in conjunction with any other antenna or transmitter.
Co-location statement
This device and its antenna(s) must not be co-located or operating in conjunction with any other
antenna or transmitter.
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator &
your body.
V104193
BEC MX-200 User Manual

---

Source Exif Data:

File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.5
Linearized                      : No
Page Count                      : 151
Language                        : zh-TW
Tagged PDF                      : Yes
Title                           : Product Overview
Author                          : Jessiezhu
Creator                         : Microsoft® Office Word 2007
Create Date                     : 2017:02:15 04:00:12-05:00
Modify Date                     : 2017:02:15 04:00:12-05:00
Producer                        : Microsoft® Office Word 2007

EXIF Metadata provided by EXIF.tools