LevelOne WHG-1000 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171

Ir para a página of

Bom manual de uso

As regras impõem ao revendedor a obrigação de fornecer ao comprador o manual com o produto LevelOne WHG-1000. A falta de manual ou informações incorretas fornecidas ao consumidor são a base de uma queixa por não conformidade do produto com o contrato. De acordo com a lei, pode anexar o manual em uma outra forma de que em papel, o que é frequentemente utilizado, anexando uma forma gráfica ou manual electrónicoLevelOne WHG-1000 vídeos instrutivos para os usuários. A condição é uma forma legível e compreensível.

O que é a instrução?

A palavra vem do latim "Instructio" ou instruir. Portanto, no manual LevelOne WHG-1000 você pode encontrar uma descrição das fases do processo. O objetivo do manual é instruir, facilitar o arranque, a utilização do equipamento ou a execução de determinadas tarefas. O manual é uma coleção de informações sobre o objeto / serviço, um guia.

Infelizmente, pequenos usuários tomam o tempo para ler o manual LevelOne WHG-1000, e um bom manual não só permite conhecer uma série de funcionalidades adicionais do dispositivo, mas evita a formação da maioria das falhas.

Então, o que deve conter o manual perfeito?

Primeiro, o manual LevelOne WHG-1000 deve conte:
- dados técnicos do dispositivo LevelOne WHG-1000
- nome do fabricante e ano de fabricação do dispositivo LevelOne WHG-1000
- instruções de utilização, regulação e manutenção do dispositivo LevelOne WHG-1000
- sinais de segurança e certificados que comprovam a conformidade com as normas pertinentes

Por que você não ler manuais?

Normalmente, isso é devido à falta de tempo e à certeza quanto à funcionalidade específica do dispositivo adquirido. Infelizmente, a mesma ligação e o arranque LevelOne WHG-1000 não são suficientes. O manual contém uma série de orientações sobre funcionalidades específicas, a segurança, os métodos de manutenção (mesmo sobre produtos que devem ser usados), possíveis defeitos LevelOne WHG-1000 e formas de resolver problemas comuns durante o uso. No final, no manual podemos encontrar as coordenadas do serviço LevelOne na ausência da eficácia das soluções propostas. Atualmente, muito apreciados são manuais na forma de animações interessantes e vídeos de instrução que de uma forma melhor do que o o folheto falam ao usuário. Este tipo de manual é a chance que o usuário percorrer todo o vídeo instrutivo, sem ignorar especificações e descrições técnicas complicadas LevelOne WHG-1000, como para a versão papel.

Por que ler manuais?

Primeiro de tudo, contem a resposta sobre a construção, as possibilidades do dispositivo LevelOne WHG-1000, uso dos acessórios individuais e uma gama de informações para desfrutar plenamente todos os recursos e facilidades.

Após a compra bem sucedida de um equipamento / dispositivo, é bom ter um momento para se familiarizar com cada parte do manual LevelOne WHG-1000. Atualmente, são cuidadosamente preparados e traduzidos para sejam não só compreensíveis para os usuários, mas para cumprir a sua função básica de informação

Índice do manual

  • Página 1

    i LevelO ne WHG- 1000 300Mbps Wireless PoE Hotspot Gateway User Manual V2 .0 0[...]

  • Página 2

    ii T abl e of Conte nts 1 Before You St art .......................................................................................................... 1 1.1 Prefa ce .................................................................................................................................................. 1 1.2 Document Conv ention s ........[...]

  • Página 3

    iii 6.2 MAC Address Co ntrol .................................................................................................................... 59 6.3 Po l ic y ................................................................................................................................................... 60 6.3.1 Fi rewall ....................[...]

  • Página 4

    iv 10.1 0.3 T race R oute .......................................................................................................................................... 99 10.10.4 Show ARP T abl e .................................................................................................................................. 99 10.11 M onit or IP L in[...]

  • Página 5

    User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 1 1 Before You Start 1.1 Preface Thi s man ual i s for WLAN servi ce pr ovid ers or n etw ork ad mini strators to s et up a netwo rk envi ronm ent using the WHG - 1000 syst em. It conta ins step - by - ste p procedures and graphic exa mples to guide MIS staff or i nd ividuals with sl[...]

  • Página 6

    User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 2 1.3 Pa ckage C hecklist The sta ndard package of WHG - 1000 i ncl udes:  WHG - 1000 x 1  CD - ROM (with User’ s Manual and QIG ) x 1  Qu ick In sta llat ion Guid e (QI G) x 1  Cons ole Cab le x 1  Ethern et Ca bl e x 1  P ower Adapter (DC 12 V) x 1  Rubber An[...]

  • Página 7

    User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 3 2 System Overview and Getting Start ed 2.1 Introduct ion of WHG -1000 The WHG -1000 i s th e most econ omi cal and fea ture ri ch W ireles s PoE Hotspot Gateway , targeting mi ni - siz e stores that w ant to provide s mall, single - poin t wi rel ess Intern et acces s servi ce . WH[...]

  • Página 8

    User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 4 【 Exam ple : A typical Hotspot network 】[...]

  • Página 9

    5 2.3 Hardware Descriptions Front Pa nel 1 USB F or fut ure us age o nly . 2 WES Press t o start run ning W ES (WD S Easy Setup) process . 3 Console Attach t he RS - 232 console cabl e her e, for managem ent use o nly . 4 LAN1 /LAN 2 (Po E) Attach Et hernet cabl e s here fo r con necti ng to the wired l ocal n etwor k. LAN1 maps t o Pri vate Z one [...]

  • Página 10

    6 Rear Pan el Antenna Connector At tach ante nnas here . WHG - 1000 support s 1 RF interfa ce wi th 2 S MA con necto rs.[...]

  • Página 11

    7 Top LED Pa nel 1 LED ON indica tes power o n; OFF ind icates power o ff . 2 LED ON i ndicate s WAN connecti on; OFF i ndica tes no connect ion; BLINK IN G indica tes t r an smitt ing data . 3 LED ON i ndicate s LAN1 /LAN2 co nnect ion; OFF i ndicat es no connect ion; BLINK IN G indica tes trans mitting da ta. 4 LED ON indi cates wi reless r eady [...]

  • Página 12

    8 7 F or fut ure us age o nly .[...]

  • Página 13

    9 2.4 System Requirement  Standard 10/100Base T i ncluding n etwor k cables with RJ - 4 5 conn ectors  All PCs nee d to install the TCP /IP network protocol 2.5 Installation S teps Ple as e fo llo w th e s teps be low to in sta ll WHG - 1000 : Plea se fol low the step s m enti oned b elow to i nstall th e hardwar e of WHG - 1000 : 1. Place th[...]

  • Página 14

    10 Caut ion: Pleas e onl y use t he p ower adap ter supplie d with the WHG - 1000 packa ge. U sin g a di fferen t po wer adapter may damage this system. Caut ion: To doub le ve rify th e wir ed conn ect ion bet ween WHG - 1000 and your switch/router/hub, ple ase check the LED status indication of these ne twork devices.[...]

  • Página 15

    11 2.6 Access W eb Management Int erface WHG - 1000 supports W eb Ma nagement Interface (WMI) configurat ion . U pon th e compl eti on of hardware installation, WHG - 1000 can be conf igured vi a web brow ser s wi th JavaScri pt enabl ed su ch a s Intern et Ex plor er ve rsio n 6.0 and ab o ve or Firef ox . Defaul t LA N in terfac e IP addre ss: LA[...]

  • Página 16

    12 For the fi rst ti me, i f WHG - 1000 is not using a tru sted SSL ce rtificate , there wil l b e a “Certific ate Error” , becaus e the browser treats WHG - 1000 as an ill egal w ebsit e. Pleas e pres s “Cont inue t o thi s websit e” to co nti nue. Caut ion: If you can’t ge t the login screen, the reasons may be: (1) The PC is set incorr[...]

  • Página 17

    13 2.7 Setup Wizard WHG - 1000 provides a Setup Wizard for quick c onfigurat ion. T o quickly conf igure WHG - 1000 by using the Setup W izard, click on the Setup Wizard butto n to start the configur ation proce ss.[...]

  • Página 18

    14 Step 1. General • Enter a ne w administrato r’s password in the New P assword f ield, and re - ent er it agai n in t he V e r if y Password fiel d (a maxim um of 20 ch aracter s an d no spa ces a ll owed i n betw een). • Sel ect an appr opri ate ti me z one from the Tim e Zone drop - down li st bo x and enter the URL of a valid NTP se rver[...]

  • Página 19

    15 Step 2. W AN and Wireless Interf aces For setti ng u p both wi red WAN and Wi reless LA N in terfac es: • Sel ect a p roper type of Inte rnet conn ecti on fo r WAN in terfac e from the fol lowi ng t hree avail able connect ions: Static , Dynam ic , o r PPPoE . Y our ISP or network administr ator can adv ise on the connec tion type av ailable t[...]

  • Página 20

    16 wi th ESS ID “ Level One 1” and “ Le velOn e 2” r espec ti vely by defaul t. Th e ES SID f or VAP u nder Pri vate will not be broa dcasted. Detailed c onfigurations f or these two V AP can be perfor med under Ma in Menu >> System >> Zone Conf igu ratio n.[...]

  • Página 21

    17 Step 3. Authenticatio n Settings for Public Zone • Fo r public zone (by default, a uthentication is enabled), authe ntication can be enab led or disabled. Cl ient s sh all lo g in in t he syst em b efore u sin g ne twork servi ce i f Auth R equire d is en abl ed. Wh en authe ntication is e nabled, a d efault authe ntication s erver s hall be c[...]

  • Página 22

    18[...]

  • Página 23

    19 Step 4. Conf irm and Restart • Cli ck Finish to sav e current settings and r estart the system. • A c onf irm at ion d ialo g b ox wil l th en a pp ear . Clic k OK to continue.[...]

  • Página 24

    20 • A Con firm and Rest art mess age w ill app ear on th e screen du rin g the r esta rti ng proc ess. Plea se d o not interrupt the system until the Administra tor Login P age appears. Note: The sy stem is try in g to loca te a DN S s erver at th is st age. Th eref ore, a long er sta rtup t im e is requi red if the configure d DNS cannot be fou[...]

  • Página 25

    21 < Use r Login > T o ver ify whet her the configur ation of the new loc al user acco unt(s) create d via the Setup Wizard has b een c ompl eted su cc essful l y: 1. Conn ect a cl i ent d evice (e.g. l apt op, PC) wit h wirel ess i nt erface t o sca n t he con fig ured ESS ID of WHG - 1000 (e.g. “ Leve lOne 2 ”) and get associated with t[...]

  • Página 26

    22 Note : 1. WHG - 1000 s upports multiple authent ication op tions includi ng built - in l ocal user database and external authent ication database (e.g. RADIUS). The syste m wi ll automatica lly identify which aut henti cati on opti on i s used from the full usern ame enter ed. 2. The for mat of a full (valid) userna me i s user id@postfix , wh e[...]

  • Página 27

    23 3 Combine WHG - 1000 to t he Network 3.1 N etwork Requirement I n the general networ k envi ronmen t, t he mai n rol e of WHG - 1000 i s a gateway that manages all the netwo rk ac cess f rom intern al n etwo rk to Intern et. Thus, t he fi rst st ep i s to p repa re an Inte rnet conne cti on from your I SP ( Int ernet S ervi ce P r ovider) and c [...]

  • Página 28

    24 3.2.1 Static IP Static: Manually spec ifying the IP address of the W AN Port. The f ields with red asterisks are mandatory .  IP Addre ss: The IP address of the WAN port.  Subn et M ask: Th e su bnet mask of th e WAN po rt.  Defau lt G atew ay: The gateway of the W AN port.  Preferr ed DNS Serv er: Th e p rim ary DNS Server of th e s[...]

  • Página 29

    25[...]

  • Página 30

    26 3.3 Inte rnet Co nn ection Dete ctio n Configure I nternet Connection De tection, go to: System >> WAN Tr affic .  Internet Connection Detection: Wh en en abl ed, sy stem wi ll try t o acc ess th ese IP/Dom ai n address es, if sy s tem can reach these IP/Domain address, it mea ns that the o utbound I ntern et connection is in nor mal st[...]

  • Página 31

    27 3.4 WAN Bandwidth Control Configure W AN Bandwidth Contr ol, go to: Syste m >> WAN T raffic . The fea tur e gi ves administrator s control ov er the entire system’ s tr affic though the W AN interf ace. Thes e paramet ers s et h ere s hould not ex cee d the real bandwidth comi ng from you r ISP . For exam ple, if your xDSL is 8Mbs/640kbs[...]

  • Página 32

    28 3.5 What is Zone Confi gure Zone, g o to: System >> Zone Conf iguration . A Zone i s a l ogi cal net work a rea th at covers wi red or wi rel ess net work s, o r b oth of them. By as soc iat ing to a uniq ue ES SI D of a Z on e, w ire les s ne two rk is div ide d in to dif fe re nt lo gic al z one s. Clients attempting to access the resour[...]

  • Página 33

    29 3.5.1 Port Role A ssignment WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acc ess t he n etwork vi a wi red and wirel ess . In th e Pub li c Zo ne , by default, Authent ication r e qu ired is enabl ed by default, so c li ents ar e required to get a uthenticated succ essful ly b ef[...]

  • Página 34

    30 3.5. 2 P lanning Y our I nternet N etw ork WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acce ss t he n etwork vi a wi red and wirel ess. In Public Z one, by default Authe nticat ion r equi red i s enabl ed, so cli ent s are req ui red to get au thent ica ted su ccess full y befo [...]

  • Página 35

    31 3.5. 3 Configure Zone N etw ork Confi gure Zone net wor k; go t o: Syst em >> Zone Configurat ion . Click the butto n Confi gure of Priv ate zone for fur ther configur atio n. The pa ram eter d escri pti ons of Basi c Sett in gs for P rivate Zone and P ubli c Zone are t he sa me. Th e wi rel ess set tin gs un der each zon e wi ll be covere[...]

  • Página 36

    32 o Altern ate DNS Serv er: Th e substitute DNS ser ver that is used by this Zone . o Domain Name: En ter the domain name fo r this zone . o WINS Se rve r: T he IP ad dress of t he W INS ( Win dows Inte rnet Nami ng S ervi ce) s erver if W IN S se rv er is ap plic ab le to th is zo ne . o Lease Tim e: Thi s i s the t ime p eriod that the IP a dd r[...]

  • Página 37

    33 4 Let Your Network to Be a Wirel ess Network 4.1 System Wireless Genera l Settings Confi gu re Syst em ’s Wirel ess G eneral S etti ngs, go to: System >> Zone Configur ation . Wirele ss Gen eral S ett ing s:  Band: There are 4 mod es t o select , 802.11b (2. 4G, 1~11Mbps) , 802.11g (2.4G, 54Mbps) , 802.11b+g , and 80 2.11g+n .  Sho[...]

  • Página 38

    34[...]

  • Página 39

    35 4.2 Zone Wireless Settings E ach zo ne has its o wn VAP a nd c orrespon d s t o on e SSID. In P rivate zon e, it ’ s VAP1 and the SS ID is hidden, so publi c user s cannot s can this SSID in the air , for pri vil ege users who al re ady kn ow th i s SS ID, they can manuall y associate to the SSID of Private zone . On the o ther hand, the S SID[...]

  • Página 40

    36 Fragment Th reshold: Enter a value betwee n 256 and 2346. The defaul t is 2346. A packet siz e larg er than th is t hreshol d wi ll be fragment ed (s ent wi th several pi eces instead of one chunk) before tr an smi ssion . A sma ller value r esults i n small er frames but allows a large r number of fr ames in transmissio n. A lower Fr agment Thr[...]

  • Página 41

    37 will be sen t from th e VA P . RTS Thre shold : Enter a v alue between 1 and 2346. RTS (Req uest to Send) Thresh old determines the packet size at w hich the system issues a request to send (R TS) befo re sending the fr ame to preve nt the hidden node problem. The RTS mec hani sm will be acti vated i f the da ta si ze exceeds t he valu e provi d[...]

  • Página 42

    38 4.3 Zone Wireless Security Confi gu re Zone Wirel ess Secu rit y , g o to: Syste m >> Zo ne Co nfigura tion , cl ick Co nfigure of Private z one o r cli ck Co nfigure of Public zone. After th e ab ove confi gurati ons a re fini sh, set up th e wi reless s ecuri ty i s very im portan t to p rotect your wi reless n etwo rk. Security: For eac[...]

  • Página 43

    39  802.1X :  Dynamic WEP: For 80 2.1X s ecuri ty ty pe, Dyn am ic WEP is al ways ena bl ed to automatical ly gener ate WEP keys for encry ption.  WEP Key Le ngth: Sel ect fr om 64- b it or 128- bit key len gt h.  Re - keying Pe riod: The time interv al for the dynamic WEP key to be updated; the time unit is in second.  WPA -PSK: [...]

  • Página 44

    40 5 Who Can Access the Network 5.1 Type of Users Confi gure U sers, go t o: Us ers >> Authe ntic ation . Thi s section i s for admi nist rators to p re - c onfi gure au then tic ati on ser vers for th e en ti re syst em. Concurr ently up to three server s can b e select ed and p re - conf igured for static user authentication, one se rver us[...]

  • Página 45

    41 5.1.1 L ocal Click the button Configure of Local for f urther configur ation.  Local User List: It let the administr ator to view, add or dele te local user accoun t. Th e Upload User button is for importing a list of user a ccount from a text file. The Download User button is f or ex port ing a ll loc al us er acc ou nts into a te xt f ile .[...]

  • Página 46

    42  Search : Ent er a keywor d of a u se rname or rema rk to b e sea rch ed i n the t ext fil ed and cli ck thi s but ton to p erform th e sea rch. A ll usern ames mat chi ng the k eyword will be l isted .  Del A ll : Click on this button to delete a ll th e users a t on ce or cli ck on Delete hyperli nk to del ete a speci fic the user ind iv[...]

  • Página 47

    43  Edit Use r: If ed iting the c ontent of individual use r acco unt is need ed, click t he userna me of the desi red u ser a ccoun t in Local User L ist to enter the User P rof i le Interfac e for that particular user , and then modify or add any desire d informa tion such as Us ername , P assw ord , MAC Address (optional), Appl ied Policy (op[...]

  • Página 48

    44 5.1.2 RADIUS There a re t wo RADIUS authentication database for configura tion. Click the butto n Confi gure of any one of RADI US s erver s for furth er confi gurati on. The RAD IUS s erver set s the extern al a uth enti cati on for us er acc oun ts. En ter the i nform ati on for t he pri mary s erver and /or t h e secon dary serv er (th e seco[...]

  • Página 49

    45  NAS Port Type: In dic ates t he typ e of phy sic al port t he net wo rk acc ess se rver is u sin g to authent icate the user . Sys tem will send th is va lue to the exter nal RADIUS server , if the extern al RADIUS ser ver need s th is.  Class - P olicy Mapping: This funct ion is t o assign a Pol i c y to a RAD IUS class attrib ute sent f[...]

  • Página 50

    46 5.1.3 On - Dem and Users On - demand U ser Ser ver Config uration: The administr ator can configure th is authentication method to create on - demand use r acco unts. This funct ion is de signed fo r hotspo t owners to pro vi d e tempora ry us ers wi th free or p ai d wi reless Inter net a ccess in the hot spo t envi ronmen t. Ma jor functions i[...]

  • Página 51

    47  Receipt He ader: There are 3 re ceip t head ers s upp orted by th e syst em . Th e ent ered c onten t will be printed on the receipt. Thes e heade rs ar e opt ion al.  Receipt Foot er: Ther e are 3 rec eipt footer s supported by the system. Th e ente red c onten t will be printed o n the receipt. Th ese foot er s are opt iona l.  Remar[...]

  • Página 52

    48  Plan: The number of the spec ific plan.  Type: This is the ty pe of the plan, based on which it defines how the acco unt can be use d including U sage - time, Volume, H otel Cut - off a nd Duration - tim e .  Quot a: Th e li mit on how On - deman d us ers a re al lowed to a ccess the n etwo rk.  Price: The un it pri ce cha rge d for[...]

  • Página 53

    49 6) On - demand Account Creation After at l east one billing pl an i s enabl ed, th e ad mi nistrat or can gen erat e sin gle on - dem and u ser acco unts here. Click this to enter the O n - dema nd Acco unt Creation page. Click on the Creat e button of the desi red pl an t o create an on - demand account. The username and pass word of to be crea[...]

  • Página 54

    50 network. F or Time users, it is the total time. F or V olume user s, it i s the total amo unt of traffic.  Price: For e ach pl an, thi s is the uni t price c harged fo r an account .  Status: Show the status in enabled o r disabled.  Functio n: Press Cre ate button f or the desire d pl an; an Creati ng an On - demand Acco unt will appea[...]

  • Página 55

    51  Plan: The nu mb er of a speci fi c pla n.  Account Ty pe: Show a ccount type of t he plan in Usage - time, Dur ation - ti me or H otel Cut - o f f.  Quota : Th e tota l t ime a mount , in ter v al o r t ra ffic vo lum e on h ow On - dem and users a re a ll owed to acce ss the n etwor k.  Price: For each pl an, thi s is th e unit pri[...]

  • Página 56

    52  Status : The s tatus of the a ccount. o Norma l: the acco unt is not curre ntly in use and has not exceed the quota limit. o Online: the ac count is curre ntly in use . o Expired : the account is not v alid any more, eve n i f there is re maining quota left . o Out of Quota: th e account has exceeded the quota limit. o Redeemed : the account[...]

  • Página 57

    53 Note: The maximum quota is 365dys 23hrs 59mins 59se cs” even after redeem . If th e red eem am oun t exceed s th is n umber , th e syst em wi ll autom atic all y reject the redee m pro cess. Note: Du ra ti o n - ti m e and Hotel Cut - off type do not sup port red eem funct ion .[...]

  • Página 58

    54 5.2 User Login 5.2.1 De fault Authenticati on T here are diffe rent types of authe ntication database (LOCAL, RADIUS and ONDEMAND) that are supported by the system. Only Publ ic Zo ne can se t authenticat ion. A pos tfix is used to inform the sy stem which authe ntication o ption to be us ed for a uthenticating an acco unt (e.g. B ob @ l ocal or[...]

  • Página 59

    55 5.2.3 An E xample of User L ogin Norma ll y , u sers wi ll be au then ticat ed bef ore they get n etw ork a cces s th rou gh WHG - 1000 . This se ction presen ts th e basi c au then ti cation flow f or en d users . Pl ease m ake sure that the WHG - 1000 is confi gured prop erly and n etwork rel ated setti ngs a re d one. 1. Open an Inter net bro[...]

  • Página 60

    56 3. Successfu l! The Login S uccess Page m ean s you a re conn ected to the n etw ork and Int ernet now![...]

  • Página 61

    57 6 Restrain the Users 6.1 Black List Configure B lack List, go to: Users >> Black Li st . The administr ator can add, de lete, or edit the black li st fo r user access contro l. Users’ accounts that appear in the black li st will be denied of network a ccess. Th e admi nist rator can us e the pul l - d own menu to selec t the desired blac[...]

  • Página 62

    58 After ente rin g the u sernames i n t he “Use rn ame” fie ld and the rela ted i nforma tion in the “Rema rk” blank (not required), cli ck Apply to add the users . If rem ovin g a us er from th e bl ack l ist is d esired , sel ect t he u ser ’ s “ Delete” check box and then click t he Dele te button to remove that user from the blac[...]

  • Página 63

    59 6.2 MAC Address Control Configure M AC Address Control, go to: Users >> Ad dition al C ontro l . MAC AC L: With this funct ion, only the users with t heir MAC ad dresses in th is list can log in to WHG - 1000 . Th ere a re 40 users max imum all owed in this MAC address list. User authentication is still requi red f or th ese u sers. Cli ck[...]

  • Página 64

    60 6.3 Poli cy Confi gure Poli cy , g o to: Users >> P olicy . WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy . Globa l Poli cy is the system’ s univers al policy and applied to all clients unless the y are bound ed by anot her pol i cy . I n divid ua l P ol icy can be def ine d and [...]

  • Página 65

    61  Select Po licy: S elect th e desi red pol i cy profi le t o confi gu re .  Firew all P rofile : Eac h P o licy has a f ire wa ll se rv ice lis t and a s et of f irew al l pr of ile c on sis ting of firewal l rules.  Specific Rout e Profile: Th e default gatew ay of a des ired IP address can be def ined in a policy . When Sp e cifi c Ro[...]

  • Página 66

    62 6.3.1 Fire wall Firew all P rofil e: Click Se tting f or Fi rewall Profi le . The Fir ew all C on figu r at ion w ill a ppe ar . Cl ick Predefined and Custo m Serv ice Prot ocols t o edit the pro tocol list. C lick Fir ewall Ru les to edit the rul es. 1) Predefined Prot ocols Predefined and Cu stom Se rvice P rotocols: There a re pr edefi ned se[...]

  • Página 67

    63 If t he Protoco l Type is ICM P , i t wil l n eed to d efin e Type and Cod e . If t he Protoco l Type is IP , i t will n eed to defi ne Protoco l Number . 2) Firew all Rul es After the cus tom protocol i s def ined or just use the Predefin ed Serv ice Protoc ols , you wil l n eed to enabl e th e Fire wall R ule to apply these protocols. o Firew [...]

  • Página 68

    64 Sel ecti ng th e Filt er Rul e Numbe r 1 a s an exa mp le: o Rule Num ber: Thi s is th e rul e select ed “1” . Rul e No. 1 h as t he h ig hest pri ori ty; ru le No. 2 has the second prior ity , and so on. o Rule Nam e: T he rul e name c an b e cha nged h ere . o Source /D estin ation – Inter face/ Zon e: There are choice s of AL L, W AN , [...]

  • Página 69

    65 6.3.2 R outing  Specific Route Prof ile: Click the butto n of Settin g for Sp ecific Route Prof ile , t he Sp ecifi c Route Pro fil e lis t will appea r . 1) Specific Rout e  Speci fic Rout e Prof ile: Th e Speci fi c Defaul t R oute i s use t o cont rol cl ients to acce ss some speci fic I P segm ent by t he sp ecifi ed ga teway . o Des t[...]

  • Página 70

    66 2) Defau lt G atew ay  Defa ult G atew ay: The defaul t g ateway of a d esi red IP addr ess can b e defi ned in each Poli cy except Glob al Policy . When Specific Default R oute is enabled, all clients applied with this P olicy will access the Internet through this defa ul t gatew ay . o Enab le: Ch eck E nabl e box to activ ate this function[...]

  • Página 71

    67 6.3.3 Sc hedule  Sched ule Pr ofile : Clic k Setting of Schedule Profile to enter the configuration pag e. Select Enab le to sh ow the Permitted Login Hours lis t. T his fun ctio n is us e d to lim it the t ime wh en clien ts can l og in . Check the d esi red ti me sl ots checkbox a nd cl ick App ly to sav e the settings. Thes e setti ng s wi[...]

  • Página 72

    68 6.3.4 QoS P rofile Fo r certain applications or users that need stable bandwidth o r t r aff ic p rio rity , P olic y 1 to 5 a llow s defi nin g the QoS pro fil e for th e use rs govern ed by th is Poli cy .  Traff ic Cl ass: A T raffi c Class can be cho sen for a Group of us ers . The re are four traffi c cl asses: Voice , Video , Best - Eff[...]

  • Página 73

    69 6.3.5 Se ssion Limit T o p revent ill - behaved cli ents or mal ici ous soft ware fr om t akin g up the s ystem’ s conne ction resou rces, the ad mi ni strator can rest rict the n umb er of concurre nt sessions tha t a user c an establ ish .  The maximum num ber of concurrent se ssions includi ng T CP and UDP for ea ch use r can be specifie[...]

  • Página 74

    70 7 Access Network without Authenti cation 7.1 DMZ Confi gure DMZ , g o to: Network > > Netwo rk Address T ransl atio n >> DMZ (Dem ilit arize d Zone ) . There a re 2 0 sets of st ati c Interna l IP Addr ess an d Ext ernal IP Add ress avail able. En ter Inter nal and Externa l IP Ad dress as a set. A fter th e setup, acce ssin g the Ex[...]

  • Página 75

    71 7.2 Virtu al Se rve r Confi gu re Virt ual Server , go to: Netw ork >> Network Add ress T ran slation >> Public Accessi ble S erver . This function a llows the administr ator to set 20 virtua l servers at most, so that cl ient devices o utsi de the m anaged net work can access thes e se rvers wi thin t he man aged n etw ork. Di ffere[...]

  • Página 76

    72 7.3 Priv ilege List Configure Pr ivilege List, go to : Network >> Pri vilege Setup the Privile ge IP Add ress L ist and Privile ge MAC Add ress Li st . The cl ient s accessi ng the int ernet vi a IP addresses and/o r net wor kin g devi ces in the list can a ccess the ne twork without a ny authent ication .[...]

  • Página 77

    73 7.3.1 Privilege IP Privile ge IP Add ress List Confi gu re Pri vil ege IP A ddres s Li st, go t o: Net work Con figur atio n >> Priv ileg e >> IP Add ress List . If t here a re w orkst ati ons i nsi de th e mana ged net work t hat n eed t o ac cess t he n etwo rk wi thou t authentication, e nter the IP addresses of these workstations[...]

  • Página 78

    74 7.3.2 Privilege MAC Privile ge M AC Ad dre ss L ist In addition to the Privil ege IP List , MAC addre ss List allows the MAC address of the workstations that need to access the network without aut henticati on to be s et in t he “G ranted Acc ess by M AC Addres s” . WHG - 1000 all ows 100 privilege MA C addresses at most. W hen manually crea[...]

  • Página 79

    75 7.4 Disable Authenticati on in Public Zone Con figure Disab le Authent ication in Pub lic Zo ne, go to: System >> Zo nes Config uration, click Configure in Public Zo ne .  Authentication Required For the Zon e: When it is disabled, us ers will not need to authenticate before they get access to the network with in Public Z o ne.[...]

  • Página 80

    76 8 User Login and Logo ut 8.1 Before User Login 8.1.1 Login with SSL Confi gure H T TPS, g o to: System >> Gener al . HT TPS (HTTP over SSL or HTTP Secu re) i s the use of Secu re So cket L ayer (SSL) or T ransp ort Layer Secur ity (TLS) as a sub - l ayer under regular HT T P applicat ion layer ing. HT TPS encrypts and decrypts user p age r[...]

  • Página 81

    77 8.1.2 Interna l Domain Name with Certifi cate Configur e Interna l Domain Name, go to: Syste m >> G enera l . Inter nal Domain Name is the doma in name of the WHG - 1000 as seen on cli ent m achi nes conne cted under zo ne. It must conform to FQDN (Fully - Qualified Domain Name ) standard . A user on client machine c an use t his domain na[...]

  • Página 82

    78 Click “Cont inue to th is web site” to access the user login p age. Us e Defau lt Cer tifi cate: Click Us e Defa ult Cer ti ficat e t o use the d efau lt certi fica te and key . Cl ick restart to v ali date the changes.[...]

  • Página 83

    79 8.1.3 Walled Garden Confi gu re W all ed Gard en , go to: Net work >> Wal led G arde n . Thi s fun ction provid es cert ai n free servi ces f or users t o ac cess th e w ebsi tes l ist ed here b efor e log in and authentication. Up to 20 addresses or do ma in names of the websites can be defined in this list. Users wi thou t the n etwo rk [...]

  • Página 84

    80 8.1.4 Walled Garden AD List Configure W alled Garden AD List, go to: Netwo rk >> W alled Gar den AD L ist . This func tion pro vi des ad verti sement lin ks to w eb pages f or us ers to acc ess fre e of cha rge before login and a uth entic ation . Adverti semen t hyperl in ks are di spl ayed on the us er ’s login pag e. Clien ts who cl i[...]

  • Página 85

    81 8.2 After User Login 8.2.1 Portal URL after suc cessful login Confi gu re Portal U RL aft er a su cc essful user l ogi n , go t o: Sy stem >> General . When this f unction is ena bl e d, enter the UR L of a W eb s erver a s the Portal page. Once logged in succ essful ly , use rs wi ll be di rected to th is URL , such a s http://www.google.[...]

  • Página 86

    82 8.2.2 Idle Timer Configure I dle Timer , go to: Users >> Additi onal Cont rol . If a use r has idled with no network a ctivities, the system will automatica lly kick out the user . The logout timer ca n be set between 1~1440 minutes, and the default idle time is 10 minutes.[...]

  • Página 87

    83 8.2.3 Multiple Login Co nfig ur e M ult iple Lo gin , go to: Users >> Addi tion al Con trol . When e nabled, a user can log in fro m different co mputers with the same acco unt. (This func tion doesn’t support On - demand use rs and RADI US authentication. )[...]

  • Página 88

    84 9 Networking Features of a Gateway 9.1 IP Plug and Play Conf i gure I P Plug and Play , go to: Net work >> Client Mob ility . WHG - 1000 supp orts IP PNP func tion. User can login and acc ess ne twork with any IP address setting. Th is f unc tion is disa ble d in de fa ult s et tin gs. When IP P NP is en abl ed, a t the user end, a static [...]

  • Página 89

    85 9.2 Dynamic Domain Na me Service (DDNS) Confi gu re Dynam ic D oma in Name Se rvice, g o t o: Netwo rk >> DDNS . Before activ ating this f unction, you mus t have your Dynamic DNS hostname registere d with a Dynami c DNS provider . WHG - 1000 supports DNS function to alias the dynamic IP address for the W AN port to a static do main name, [...]

  • Página 90

    86 9.3 Port and IP R edire ct Configure P ort a nd IP Redirec t, go to: Network > > NAT >> Port and IP Red ire ct . This function a llows the administrato r to set 4 0 sets o f the IP ad dres ses a t mos t for redi recti on purpose. When the user attempts to conne ct to a destination IP addre ss li sted he re, the connection packet wil [...]

  • Página 91

    87 10 System Management and Utiliti es 10.1 System T ime Confi gu re System Tim e, go t o: Sy stem >> G eneral . NTP (Network Time Protoco l) communication pr otocol c an be used to synchronize the syste m time wi th remot e ti me ser ver . Pleas e sp ecify t he l ocal tim e zone an d the IP a ddres s of at l east on e NTP server for a djust [...]

  • Página 92

    88 10.2 Ma nagement IP Confi gu re Manag eme nt IP , go to: System > > Gener al . Only PCs within the M anag ement IP range on th e l ist are al lowed to acc ess t he syst em' s web mana gement in terfac e . For example, 10.2.3. 0/24 means that as long as an administr ator is using a computer w ith the IP address r an ge o f 10.2 .3.0 /2[...]

  • Página 93

    89 10.3 User Log Access IP Address Confi gu re User Log Ac cess IP History , go to: Sy stem >> Ge nera l . Specify an IP address of the a dministrator’ s computer or a billing system to get billing histo ry in formati on of W HG - 1000 wi th t he prede fin ed UR Ls. Th e fil e nam e for mat i s “yyy y - mm - dd” . An ex am ple is pr ov [...]

  • Página 94

    90 10.4 SNM P Confi gu re SNMP , g o to: Syst em >> General . WHG - 1000 supports SNMP v1/v2c. If this f unction is e nabled, the SNMP Mana gement IP and the Community st ring can be ass igned for SNMP a ccess to the sy stem .[...]

  • Página 95

    91 10.5 Thr ee - Level Administration WHG - 1000 supports three kinds of account interface. Y ou can log i n as admin , m anag er or oper ator . The defau lt usernam es and p assword s show a s fol lows: Admin : The admin istrat or can access all configuration pages of WHG - 1000 . User n am e: ad min Password: ad min After a succ essful l ogin to [...]

  • Página 96

    92 Manag er: The manager can only access the configurat ion pages under User Aut hentic ation t o manage the user acc ounts . User Na me: manager Password: m anage r Oper ator : The oper ator ca n only access the co nfigur at ion page of Crea te On - dema nd User to creat e new on - demand user acc ounts and print out the on - de mand user account [...]

  • Página 97

    93 10.6 Cha nge Password Configure C hange Passwor d, go to: Uti litie s >> P asswo rd Chang e . There a re t hree levels of aut hori ti es: adm in , m anag er or operator . The default user names and passw ords are a s fol lows: Admin : The admin istrat o r can access all config uration pa ges of WHG - 1000 . User Na me: adm in Password: adm[...]

  • Página 98

    94 Caut ion: If the admi nistrator’s passwor d is lost, the administr ator’s passwor d still can be change d through the text m ode mana gemen t in terfac e via the serial console port.[...]

  • Página 99

    95 10.7 Bac kup / Re store and Reset to Factory Configure B ackup / Res tore and Reset to F actory Default, go to: Uti liti es >> Bac kup & Rest ore . This function is use d to backup/restore the WHG - 1000 settings. Also , WHG - 1000 can be resto red t o the fac tory default settings here .  Backup System Settin gs: Clic k Backu p t o[...]

  • Página 100

    96 10.8 Fir mware Upgrade Confi gu re Firm ware Upg rade, g o to: Util ities >> System Upgrade . The administrator can dow nloa d the l atest firm ware from w ebsi te and up grade the syst em h ere. Sel ect the l at est firm ware a nd Br owse button, then click A p ply , the sy stem wi ll u pload the fi le and resta rt t o perf orm the upgrad[...]

  • Página 101

    97 10.9 Resta rt To p erform syst em r estart, go to: Utilit ies >> Rest art . This function a llows the administrato r to safe ly restart WHG - 1000 , and the process tak e s approxi ma tely three mi nu tes. Cl ick YES to rest art W HG - 1000 ; cli ck NO to go back to the previous screen. D o NOT pow er o ff th e p ow er du ring system resta[...]

  • Página 102

    98 10.10 Network Utility Confi gu re Netwo rk U tili ty , go to: Ut ilitie s >> Network Uti lities . Sys tem provide some network utilities to allow administr ators to use . Wake - on - LAN is for waking up re mote devices that supports W a ke - on - LAN featu re by ente rin g th e MAC address of the target device and the n press W ake Up but[...]

  • Página 103

    99 10.10.3 Trace Route It allows administr ator to find out the re al path of packets from the gatewa y to a destina tion us ing IP addre ss or H ost d omain name. 10.10.4 Sho w ARP Table It allows administr ator to v iew the IP - to - Physical addres s tra nsl ation tables used by address resolution pro tocol (ARP).[...]

  • Página 104

    100 10.11 Moni tor IP Link Configure Mo nitor IP Link, go to: Network >> M onit o r IP . WHG - 1000 will send out a packe t periodically to monitor the connec tion status of the IP addresses on the list. On e ach monitore d item with a WEB server running , administr ato rs may a dd a link for the easy ac cess by ent ering the IP , s elect the[...]

  • Página 105

    101 10.12 Cons ole Inte rfa ce Via th e consol e port , ad mini strators can enter t he c onsol e in terfa ce for han dl ing prob lem s and situations oc curred during oper ation. 1. In ord er to conn ect t o the c onsol e port of W HG - 1000 , a console, modem cabl e and a terminal sim ula tio n prog ram, suc h as the Hy per T ermi na l are n eede[...]

  • Página 106

    102  Dis p lay interf ace settings: I t displays the infor mati on of each network interface setting including the MAC address, IP address, and Ne tmask.  Displa y the routing table : The internal routing table of the system is display ed, which may he lp to confirm the Static R oute settings.  Displa y ARP table: The inter nal ARP table o[...]

  • Página 107

    103 Caut ion: Alt hough it d oes not req ui re a us ernam e an d pas swo rd fo r the conn ecti on vi a th e se rial p ort, the same mana gemen t int erfac e ca n be ac cess ed via SSH . The refor e, we recom men d you t o imm edi ately change the WHG - 100 0 A dmin userna me and passw ord af ter l oggi ng in t he syste m fo r the fir st t ime.  [...]

  • Página 108

    104 11 System Status and Reports 11.1 View the Status Thi s section i nclu des Sy stem , Int erfac e , Routi ng Ta ble , Onl ine User s , User Log and E- m ail & SYSLOG to provide system s tatus in for mation and online user status. 11 .1.1 System Status View Syste m Status , go to: Stat us >> S y stem . Thi s secti on pr ovides a n overv[...]

  • Página 109

    105 The d escri pti on of t he ab ove - men tion ed tab le is as fo llow s: Item Descr iption Firmware Ve rsion The presen t firmw are vers ion of WHG - 1000 System N ame The sy stem name. Th e def ault is WHG - 1000 Portal URL The page th e users are direc ted to after init ial login succ ess. Primary S YSLOG server The I P address and port number[...]

  • Página 110

    106 11 .1.2 Interface Status Vi ew Interf ace Status, go to : Stat us >> Int erf ace . Thi s secti on pr ovides a n overvi ew of th e in terfac e for the ad min ist rator inc lu ding WAN , Zo ne Wirele ss Ge nera l Sett ing s , Zon e - Private and Zone - Public .[...]

  • Página 111

    107 The d escri pti on of t he ab ove - men ti oned t able is a s fo llow s: Item Description WAN MAC Address The MAC address of the W AN port. IP Addres s The IP addr ess of the W AN port. Subne t Mask T he Subnet M ask of th e WAN port. Packets Out/In The tota l accum ulated pac kets in/out th rough th is W AN port s ince the gatew ay boots u p. [...]

  • Página 112

    108 11 .1.3 Routing T able View Sys tem Status, go to: Status >> Ro uting Ta ble . All the Policy Rou te ru les an d Global Pol icy Route rul es wi ll be list ed her e. Als o it w ill show t he System Route ru les spec ified by ea ch i nterfac e.  Pol icy 1 ~5: Shows the info rmation o f the individua l Po licy fro m 1 to 5.  Global Po [...]

  • Página 113

    109 11 .1.4 Current Use rs Vi ew Curr ent Us ers , g o t o: Status >> Onlin e Users . In this pa ge, each online user’s info rmation inc luding Usern ame , IP A ddress , MAC Addr ess , Pkts In , Bytes In , Pkts O ut , Bytes Out , Idle and Kick Out will be shown . Administr ators can force out a s pec ific on lin e us er by clic kin g th e h[...]

  • Página 114

    110 11 .1.5 Us er Log Vi ew User L og , g o to: Status >> Use r Log . Thi s page is u sed to ch eck th e traffi c hist ory of WHG - 1000 . Th e hi story of ea ch d ay wil l be sa ved separ ately in the DRAM fo r at least 3 days (72 full ho urs) . Th e system a lso keep s a cu mul ated rec ord of the tr affic data gene rated by eac h user in t[...]

  • Página 115

    111 Expir ation Time , an d Rema rk , of on - demand user act ivi ties.  Roaming Out U ser Lo g E ac h line is a roa ming out t r af fic hist or y rec or d con sis ting of 1 4 fie lds , Date , Ty pe, Na me , NSID , NASIP , NASPo rt , U serMAC , Sess ionID , Ses sionT ime , Bytes in , Bytes O u t , Pkt s In , Pkt s Out and Me ssage , of u ser act[...]

  • Página 116

    112 11 .1.6 Local U ser Monthly Network Vie w L oc al Us er M on thly Ne two rk Us age , go to: Status > > User Log .  Monthly Net work Usage o f Local User The system kee ps a cum ulated re cord of the traffic data gener ated by ea ch Local user in the late st 2 calend ar months. E ac h li ne i n a mon thl y netw ork u sage o f loc al u s[...]

  • Página 117

    113 11.2 Notific atio n Confi gu re No tific at io n , go to : S tatu s > > E- mai l & S YSLOG . WHG - 1000 can automatically se nd the notification of Monitor IP R eport , Use rs Log and Ses sion Log to up to 3 particular e - ma il a ddr es ses . A tria l ema il is pr o vid ed by th e s yst em fo r v a lidat io n. Secon dl y , the system[...]

  • Página 118

    114 11 .2.1 E- Mail Confi gu re Noti fica tion, g o to: St atus >> E - mai l & SYSLO G .  Notific atio n E - m ail Se ttings :  Receiv er Email Addre ss (es): Up to 3 e - ma il addres s can be s et up t o r ecei ve the n oti fica tion. Thes e are t he re ceiver ’s e - mai l a ddress es. Th ere a re fou r ki nds of noti ficat ion t[...]

  • Página 119

    115 11 .2.2 SYSLOG  SYSLOG Server S ettin gs: There are 4 types of SYSL OG supported: System Log , On -dem and User L og , Session Log , and HTTP We b Log . E nter one or tw o of the Syslog s erver IP address and P ort num ber to speci fy wh ich and from whe re th e rep ort sh oul d be sen t t o. Note: When th e numb er of a u ser ’s session ([...]

  • Página 120

    116 11.2.3 FTP  FTP Server S ettings:  FTP Server S ettings FTP Destination: Ses sion Log wi ll be sent to th e F TP s erver a utoma ti call y duri ng every d efi ned int er v al in Se ssio n Lo g ema il no tif ica t ion. Th e max imum log file siz e is 12 8K. In a ddit ion, th e lo g f ile also will be se nt to the F TP se rver onc e th e fi[...]

  • Página 121

    117 11.2.4 Event Log Event Log: T he Event Lo g pro vides the system activities records. The administrato r can monitor the system st atus by checki ng t his l og. In the log , normally , e ach line repres ents an eve nt recor d which includ es th ese fields:  Date/Time: The time & date when the ev ent happened  Hostna me: Indicate whi ch[...]

  • Página 122

    118 12 Advanced Applicatio ns 12.1 Upload/ Download Local Users Accounts To Upload / Download Local Users Acco unts, go to: Use rs >> A uthent ication, cli ck C onfi gure button of Local . Or cl ick Q uick Link s >> Loc al Use r M anage ment from system Home page.  Upload User: Clic k Upload Use r to enter the Upload User from File i[...]

  • Página 123

    119 then sav e it on disk.[...]

  • Página 124

    120 12.2 RADI US Advanced Settings Confi gu re RADIUS Adv anced Settings, go to : U sers >> Authent icati on . Clic k C onfi gure of RADIUS .  Complete vs. On ly ID F or RADIUS a uthenticat ion, ther e is an option to se nd the complete username with postfix o r userna me onl y . Usern ame Form at : When Complet e option is check ed, both [...]

  • Página 125

    121 12.3 R oam i ng O ut Confi gu re local user Roam ing Out , go to: User s >> Aut hent icat ion, click confi gure of Local . Under certain conf igurat ions , WHG - 1000 can act as a RAD IUS server for R oaming Ou t l ocal u ser logged from othe r system. The Loca l User database will act as the RAD IUS user dat abase.  Account Roami ng O[...]

  • Página 126

    122 12.4 Cust omizable Pages Configur e Cu s t om Pa g e s , go to: Syst em >> Zo ne Conf igur ation , click C onfigure in Pub lic z one . There a re several use r login and logout page s that can be custom iz ed by the administr ator . Y ou can sel ect Te mpl ate P age o r External Page .  Template Page: T o utilize the te mplate user pag[...]

  • Página 127

    123 Page for cl i ent to l ogi n wi th u sername a n d pa ss word.  External Pag e: Choose the Ext ernal Page option if y ou wish to us e user pages loca ted o n a designated websi te. Click the button o f Confi gure fo r each cu stom pages and enter the URL of its ’ cor respon din g external login page and then click Apply . After applying th[...]

  • Página 128

    124 Appendix A. Network Configuration on PC & User Login  Network Configurati on on PC After WHG - 1000 is in stalled, the following conf igurations must be set up on the PC: Int ernet Connect ion Set up and TCP/I P Net work Setup .  Internet Connect ion Setup  Windows 9x/ 2000 1) Choose Sta rt >> Co ntrol Pan el >> Interne[...]

  • Página 129

    125 3) Choose “ I w ant to set up my Int ernet connection m anually, or I want to connect through a local Area netw ork (LAN)” , and then click Next . 4) Choose “ I conn ec t th rough a local area network (LAN) ” and then click Next . 5) D O NOT choo se any op ti on in the following LAN window for Internet conf igurat ion, and just click Ne[...]

  • Página 130

    126 6) Choose “No” and then cli ck Next . 7) F ina lly , clic k Finish to exit the Internet Conne ction Wiza rd . Now , the set up is complete d.  Windo ws XP 1) Choose Sta rt >> Co ntrol Pan el >> Internet Option .[...]

  • Página 131

    127 2) Choose th e Conne cti ons tab, and then click S etup . 3) W hen the Welcome to the New Conne ction Wiz a rd window appears , click Next . 4) Choose “Con nect to t he I nternet” and then cl ick Next .[...]

  • Página 132

    128 5) Choose “Set up m y co nnection manua lly” and then click Next . 6) Choose “ Con nect using a broadb and connec tion th at i s al ways on ” and then c lick Nex t . 7) F ina lly , clic k Finish to exit the Conne ction Wiza rd . Now , the setup is complete d.[...]

  • Página 133

    129  TCP/IP N etwork S etup If the oper ating system of the PC in use is Windows 95/98/ME/2 000/XP , keep the default se ttings without any c hanges to directly sta rt/restart the s ystem. With the facto ry default settings, d uring the process of starting the syste m, WHG - 1000 with DHCP func tion will auto matically a ssign an appropriate I P[...]

  • Página 134

    130 3) Using DH CP: If you want to use DHCP, click on the IP Addre ss tab and choo se “Obt ain an IP addr ess au tom atic ally” , and then c lick OK . T his is a ls o t he d ef ault setting of W indows. The n, reb oot th e PC t o make sure an IP address is o btained from WHG - 1000 . 4) Using Specif ic IP Ad dres s: If y ou want to us e a spe c[...]

  • Página 135

    131 4.2) Cli ck on the Gat eway tab. En ter t he gateway address of WHG - 1000 in the “ New g ate way” field and clic k Add . Then, cli ck OK . 4.3) Cli ck on DNS Co nfigu ratio n t ab. If th e DNS Ser ver fiel d i s empt y , s elect “Enab le D NS” a nd ent er D NS S erve r address . Click Add , and then click OK to complete the configurati[...]

  • Página 136

    132 2) Rig ht click o n the Loc al Area Con nect ion icon a nd select “Proper ties” . 3) Select “ Inter net Prot ocol (TCP/IP)” and then click Propert ies . Now, you can choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “ Obta in an IP add ress autom atica lly” , an d th en cli ck OK . T hi [...]

  • Página 137

    133 5) Using Specif ic IP Ad dres s: If y ou want to us e a spe cifi c IP addre ss, acq ui re the f oll owin g in formati on from th e network ad ministrator: the IP Address , Subne t Mask and DNS Serv er address provided by your ISP and the Gateway address of WHG - 1000 . Caut ion: If your PC ha s been s et u p comp let ely, ple ase i nform the n [...]

  • Página 138

    134 5.4) Enter the ga teway a ddr ess o f WHG - 1000 in the “ Gate way ” fie ld , and then cl ick Ad d . After back to the IP Settings tab, cl ick OK to com plete the conf igurat ion.  Check the TCP/IP Setup o f Windo w XP 1) Select St art >> Control P anel >> Network Connection . 2) Rig ht click on the Local Are a Con nect ion i[...]

  • Página 139

    135 3) C lick on the Gen eral tab and choose “ Internet Protocol (TCP/IP )” , and then cl ick Prop ert ies . Now, you ca n choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “O b tain an IP addres s autom atica lly” and click OK . T h is i s also the def ault setting of Windows. Then, reboot th e[...]

  • Página 140

    136 5.1) Ch oose “ Use t he fol lowin g IP addres s” and en ter the IP address , Subnet mask . If the DNS Server fiel d i s empty , sel ect “Using the f ollowing DNS serve r addres ses” and ent er th e DNS S erver a dd ress . Th en, cl ick OK . 5.2) C li ck Adv anced to ent er t he Advanced TCP/IP Sett ings w i n d o w. 5.3) Click on the IP[...]

  • Página 141

    137 Appendix B. Policy Priority  Global P olicy, Authentic ation Polic y and User Policy WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy can be assign to diffe rent Auth enticati on Server . Global Polic y i s the syst em’s universal poli cy and applied to all clients, while other indivi[...]

  • Página 142

    138 Appendix C. WDS Management The P ublic Zo ne of WHG - 1000 supports up to 2 WDS links. WDS (Wireles s Distribution Sy stem) is a functi on used to conn ect A Ps (Acce ss Points) wireles sly to e xtend wi rele ss covera ge. Th e WDS manage ment func tion of the sy stem can help ad ministr ators to setup two WDS links. Confi gu re WDS , g o to: S[...]

  • Página 143

    139 Appendix D. RADIUS Accounting This sec tion will briefly introduc e the basic configur ati on of RADIUS server to work with VSA for the purpose to control the maximum client v olume usage (upload; download or upload + download tr affic). Thi s VSA will be sent from RADIUS server to gatew ay along with an Access - Accept pac ket . I n other word[...]

  • Página 144

    140 If the amount o f traff ics i s larger than 4 GB, the attributes o f “XXXX - 4G B” wi ll be used . Fo r example, if the amount is 5 GB, the following settings should be set: “ WHG - 1000 - Byte - Amount = 1048576” and “ WHG - 1000 - Byt e - Amount - 4GB = 1” . On the other hand, when the administr ator fills in all attr ibutes, the [...]

  • Página 145

    141 Step 3 Cli ck Edit P rofile and sel ect th e Adv ance d Ta g . Cli ck Add to add a new Ven dor- spec ific attribute.[...]

  • Página 146

    142 Step 4 Add a new attribute und er Vend or - sp ecific Set “ Vendor Code = 21920 ”. Check Yes to conform to the RADIUS RFC. Cli ck Configure At t ribut e to pr oceed. Set “V endor - as sign ed a ttri bute numbe r = 10” Sel ect “Attribute form at = Hexadecimal” Set “Att ribute Value = 100000 0” Step 5 Confi rm wh ethe r th e Vendo[...]

  • Página 147

    143 Step 6 Follow t he sam e step s t o cr eate oth er Vendor- speci fi c At trib ut e i f needed.[...]

  • Página 148

    144 3. VSA configuration in R ADIUS server (Free RADIUS) This se ction will gu ide you thr ough VS A conf iguration wi th Free RADIUS v1.0. 5 running on “F edor a” . Befor e get tin g sta rted, op en th e sh ell of RAD IUS se rver; for e xamp le, use Putty to access the Linux host: Step 1 Confi rm th e fol lowi ng key elemen ts i n RA DIUS serv[...]

  • Página 149

    145 Step 4 Edit and sa ve the contents of the fil e “dict ionary . WHG - 1000 ” as f oll ows: Administ rator can also add other a ttributes as the table sta ted in Section 2 with the same format. Step 5 Edi t the fi le “d icti onary” un der the fol der “f reeradi us” .[...]

  • Página 150

    146 Step 6 T o inclu de “dic t iona ry . WHG - 1000 ” in the dic tio na ry of RADI US se rv er , ins ert it in an i n crem ental posi tion as foll ows. Step 7 Open the “r adius” databas e. Step 8 Insert VSA i nto RADIUS respo nse. In this example, the max imum download and upload tr affics in bytes fo r group03 us ers is 1MBytes.[...]

  • Página 151

    147 Step 9 Re start RADIUS daemon to get your settings activ ated.[...]

  • Página 152

    148 Appendix E. On - demand Account types & Billi ng Plan This sec tion explains the para meters as well as the differ ent account types pro vided when editing billing plans in On - demand a uthenticat ion. o Usage - t ime with Expi ration Time : Can access inter ne t as long as account v alid with remaining quota (us able time). Ne ed to ac ti[...]

  • Página 153

    149 o Usage - t ime with No E xpir ation T ime: Can acc ess internet as long as acc ount has remaining quota (us able time). Ne ed to ac tivate the purchased acco unt within a given ti me peri od by l oggi ng in for t he fi rst ti me. Ideal for sh ort t erm us age. For examp le i n coffe e shops , airpor t terminals e tc. Only de ducts quota while [...]

  • Página 154

    150[...]

  • Página 155

    151  Hotel C u t- off - t ime : Hot el Cut - off - time i s the cl ock ti me (n ormall y check - out time) at which the o n - demand account is cut off (made expired) by the system on the foll ow ing day or many days late r . On the acco unt creation UI of this plan, oper ator can enter a Unit va lue which is the numbe r of days to Cut - off - t[...]

  • Página 156

    152 o Volum e: Can access internet as long as account v alid with remaining quota (tr affic vo lume). Accoun t exp ires when V al id Peri od has been used up or quota depleted. I deal for small quantity a pplicat ions suc h as sending/r eceiving ma il, trans ferr ing a file etc . Count down of V alid P eriod is co ntinuous regar dless of logging in[...]

  • Página 157

    153 o Durat ion - t ime with E laps ed T ime: A ccount activ ated upo n the account creation time. Count down begins imme diately after account c reated and is continuous re gardless of logging in or out. Account exp ires once t he Elapsed Time has b een reac hed. Ideal for[...]

  • Página 158

    154 provi din g intern et ser vice i mmed iat ely aft er acco unt creati on th rough out a sp ecifi c peri od of ti me.  Begin T ime is the time that the ac count will be activ ated for use. I t i s set t o accoun t creat ion tim e.  Elapse d Tim e is the time interva l for which the account is v ali d for internet access (xx hrs yy mins ). ?[...]

  • Página 159

    155 plan to cr eate ticke t set to be Cut - off on 23:00. If an account of this kind is crea ted after the Cut - of f Time, the account will automatica lly expire.  Begin T ime is the time that the ac count will be activ ated for use. It is se t to account creat ion tim e.  Cut - off T ime i s the clock t im e when t he ac cou nt w ill expi r[...]

  • Página 160

    156 peri od of ti me. For exam pl e durin g exhi biti on event s or la rge conven tion s such as Compu tex wher e each regi stered p arti cip ant wi ll g et an i ntern et accou nt valid fro m 8: 00 AM J un 1 to 5:00 PM Jun 5 created in batc h like coupons .  Begin T ime is the time that the ac count will be activ ated for use, defined explicitly[...]

  • Página 161

    157 Appendix F. External P ayment Gateways This sec tion is to show independent Hotspo t owners how to configu re relat ed set ti ngs i n order to a ccept payments vi a Aut horiz e.net, Pa y Pa l , Secu rePay or W orlPay , making the Ho tspot an e - commerce environ ment for end u sers t o pay for and obt ain Inte rnet a cces s with credit card s. [...]

  • Página 162

    158  Service D isclaimer Content/ Choose Billing Pl an for Authorize.N et Payme nt Page/C lient’ s Purc hasing Recor d Service D isclaimer Content V iew servi ce ag reem ents an d fee s for the s tand ard paym ent g ate way servi ces he r e as wel l a s addi ng n ew or edi ting services di scl aimer . Choose Bi lling Pla n for Auth orize.Net P[...]

  • Página 163

    159  Author ize.Net P ayme nt Page Fields Config uration/ Autho rize.N et Payme nt Pag e Remark Cont ent Authorize.Net P ayme nt Page Field s Configurat ion o Item: Ch ec k the box to sho w this item o n the customer’ s pa yment inter face. o Displayed Tex t : Ent er w hat n eeds t o be shown for t his fiel d. o Required: Ch eck th e b ox to i[...]

  • Página 164

    160 o E- mail: An email address may be provided along with the billing information of a transacti on. Thi s is t he custom er’ s email addre ss and should contain an @ symbo l. o Customer ID : This is a n int er na l ide nt ifie r for a cus to mer that ma y be ass ocia te d wit h th e billing informa tion of a tr ansac tion. This field m ay co nt[...]

  • Página 165

    161 2. Payments via PayPal Configure P ay ments via Pa yP al, go to: User >> Authe nticati on >> On - dem and User >> Ex te rnal P aym ent Gatew ay > > P ayPal . Before se tting up “Pa yPal” , it is re quired that the ho tspot owners have a valid P ayP al “Business Account ” . Afte r opening a P a yP al Business Acco[...]

  • Página 166

    162  Service Disclai m er Co ntent / Ch oose Billin g Pl an fo r PayP al P aymen t Pag e o Service Di sclaimer Co ntent: Vi ew t he s ervice agre ement and f ees f or th e stand ard payment gat eway se rvices a s w ell as add or edi t th e ser vice d iscl aim er cont ent h ere. o Choose B illing Plan for P ayPal Payment Page: These 10 pl ans are[...]

  • Página 167

    163 3. Payments via SecurePay Confi gu re P aym ent s via S ecurePay , go to: User s >> Auth ent icatio n >> On - demand Use r>> External Pay ment Gatew ay >> SecureP ay . Before se tting up “SecureP ay” , it is required that the hotspot owners hav e a valid S ecurePay “Merchan t Ac count ” from i ts offi cial websit[...]

  • Página 168

    164  SecurePay Pag e Configur ation Merch ant ID: The ID that is a ssoc iated with the Me rchant Acco unt. Merch ant Pa ssword : This is the key use d by Secure Pa y to va li date all the tr ansactions. Paym ent G ateway URL : The defa ult website address to post all trans action data. Verify SSL Certific ate: This i s to hel p p rotect th e sys[...]

  • Página 169

    165 4. Payments via World Pay Confi gu re P aym ent s via WorldPay , g o to: Users >> Auth entic atio n >> On - de mand User >> Ex ternal Payment Gateway >> WorldP ay .  WorldPay Payme nt Configur ation World Pay Insta llatio n ID: The ID of the associated Merchant Acco unt. Paym ent G ateway URL : The defa ult website of[...]

  • Página 170

    166 Vi ew the se rvice a gre emen t and fees fo r the st an dard paym ent gatew ay ser vices a s wel l as add or edi t th e servi ce d iscl aimer c onten t he re.  Wo rl dPay Billing Con fig urat ion These 10 plans are the plans in Bi lli ng Con figu rati on , a nd the desired plan(s) can be enabl ed.  WorldPay Note Cont ent The m essag e con[...]

  • Página 171

    167 STEP ④ . Check the Enabl e Payment Resp onse chec kbox. STEP ⑤ . Enter the P ay ment Response URL .  URL : <wp display item=MC_callback> STEP ⑥ . Check the Enabl e th e Sh opper Resp onse.[...]