Gebruiksaanwijzing /service van het product WHG-1000 van de fabrikant LevelOne
Ga naar pagina of 171
i LevelO ne WHG- 1000 300Mbps Wireless PoE Hotspot Gateway User Manual V2 .0 0.
ii T abl e of Conte nts 1 Before You St art .......................................................................................................... 1 1.1 Prefa ce .....................................................................................
iii 6.2 MAC Address Co ntrol .................................................................................................................... 59 6.3 Po l ic y ........................................................................................
iv 10.1 0.3 T race R oute .......................................................................................................................................... 99 10.10.4 Show ARP T abl e ..........................................................
User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 1 1 Before You Start 1.1 Preface Thi s man ual i s for WLAN servi ce pr ovid ers or n etw ork ad mini strators to s et up a netwo rk envi ronm ent using the WHG - 1000 syst em.
User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 2 1.3 Pa ckage C hecklist The sta ndard package of WHG - 1000 i ncl udes: WHG - 1000 x 1 CD - ROM (with User’ s Manual and Q.
User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 3 2 System Overview and Getting Start ed 2.1 Introduct ion of WHG -1000 The WHG -1000 i s th e most econ omi cal and fea ture ri ch W ireles s PoE Hotspot Gateway , targeting mi ni - siz e stores that w ant to provide s mall, single - poin t wi rel ess Intern et acces s servi ce .
User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 4 【 Exam ple : A typical Hotspot network 】.
5 2.3 Hardware Descriptions Front Pa nel 1 USB F or fut ure us age o nly . 2 WES Press t o start run ning W ES (WD S Easy Setup) process . 3 Console Attach t he RS - 232 console cabl e her e, for managem ent use o nly . 4 LAN1 /LAN 2 (Po E) Attach Et hernet cabl e s here fo r con necti ng to the wired l ocal n etwor k.
6 Rear Pan el Antenna Connector At tach ante nnas here . WHG - 1000 support s 1 RF interfa ce wi th 2 S MA con necto rs..
7 Top LED Pa nel 1 LED ON indica tes power o n; OFF ind icates power o ff . 2 LED ON i ndicate s WAN connecti on; OFF i ndica tes no connect ion; BLINK IN G indica tes t r an smitt ing data . 3 LED ON i ndicate s LAN1 /LAN2 co nnect ion; OFF i ndicat es no connect ion; BLINK IN G indica tes trans mitting da ta.
8 7 F or fut ure us age o nly ..
9 2.4 System Requirement Standard 10/100Base T i ncluding n etwor k cables with RJ - 4 5 conn ectors All PCs nee d to install the TCP /IP network protocol 2.5 Installation S teps Ple as e fo llo w th e s teps be low to in sta ll WHG - 1000 : Plea se fol low the step s m enti oned b elow to i nstall th e hardwar e of WHG - 1000 : 1.
10 Caut ion: Pleas e onl y use t he p ower adap ter supplie d with the WHG - 1000 packa ge. U sin g a di fferen t po wer adapter may damage this system. Caut ion: To doub le ve rify th e wir ed conn ect ion bet ween WHG - 1000 and your switch/router/hub, ple ase check the LED status indication of these ne twork devices.
11 2.6 Access W eb Management Int erface WHG - 1000 supports W eb Ma nagement Interface (WMI) configurat ion . U pon th e compl eti on of hardware installation, WHG - 1000 can be conf igured vi a web brow ser s wi th JavaScri pt enabl ed su ch a s Intern et Ex plor er ve rsio n 6.
12 For the fi rst ti me, i f WHG - 1000 is not using a tru sted SSL ce rtificate , there wil l b e a “Certific ate Error” , becaus e the browser treats WHG - 1000 as an ill egal w ebsit e. Pleas e pres s “Cont inue t o thi s websit e” to co nti nue.
13 2.7 Setup Wizard WHG - 1000 provides a Setup Wizard for quick c onfigurat ion. T o quickly conf igure WHG - 1000 by using the Setup W izard, click on the Setup Wizard butto n to start the configur ation proce ss.
14 Step 1. General • Enter a ne w administrato r’s password in the New P assword f ield, and re - ent er it agai n in t he V e r if y Password fiel d (a maxim um of 20 ch aracter s an d no spa ces a ll owed i n betw een).
15 Step 2. W AN and Wireless Interf aces For setti ng u p both wi red WAN and Wi reless LA N in terfac es: • Sel ect a p roper type of Inte rnet conn ecti on fo r WAN in terfac e from the fol lowi ng t hree avail able connect ions: Static , Dynam ic , o r PPPoE .
16 wi th ESS ID “ Level One 1” and “ Le velOn e 2” r espec ti vely by defaul t. Th e ES SID f or VAP u nder Pri vate will not be broa dcasted. Detailed c onfigurations f or these two V AP can be perfor med under Ma in Menu >> System >> Zone Conf igu ratio n.
17 Step 3. Authenticatio n Settings for Public Zone • Fo r public zone (by default, a uthentication is enabled), authe ntication can be enab led or disabled. Cl ient s sh all lo g in in t he syst em b efore u sin g ne twork servi ce i f Auth R equire d is en abl ed.
18.
19 Step 4. Conf irm and Restart • Cli ck Finish to sav e current settings and r estart the system. • A c onf irm at ion d ialo g b ox wil l th en a pp ear .
20 • A Con firm and Rest art mess age w ill app ear on th e screen du rin g the r esta rti ng proc ess. Plea se d o not interrupt the system until the Administra tor Login P age appears. Note: The sy stem is try in g to loca te a DN S s erver at th is st age.
21 < Use r Login > T o ver ify whet her the configur ation of the new loc al user acco unt(s) create d via the Setup Wizard has b een c ompl eted su cc essful l y: 1. Conn ect a cl i ent d evice (e.g. l apt op, PC) wit h wirel ess i nt erface t o sca n t he con fig ured ESS ID of WHG - 1000 (e.
22 Note : 1. WHG - 1000 s upports multiple authent ication op tions includi ng built - in l ocal user database and external authent ication database (e.g. RADIUS). The syste m wi ll automatica lly identify which aut henti cati on opti on i s used from the full usern ame enter ed.
23 3 Combine WHG - 1000 to t he Network 3.1 N etwork Requirement I n the general networ k envi ronmen t, t he mai n rol e of WHG - 1000 i s a gateway that manages all the netwo rk ac cess f rom intern al n etwo rk to Intern et.
24 3.2.1 Static IP Static: Manually spec ifying the IP address of the W AN Port. The f ields with red asterisks are mandatory . IP Addre ss: The IP address of the WAN port. Subn et M ask: Th e su bnet mask of th e WAN po rt. Defau lt G atew ay: The gateway of the W AN port.
25.
26 3.3 Inte rnet Co nn ection Dete ctio n Configure I nternet Connection De tection, go to: System >> WAN Tr affic . Internet Connection Detection: Wh en en abl ed, sy stem wi ll try t o acc.
27 3.4 WAN Bandwidth Control Configure W AN Bandwidth Contr ol, go to: Syste m >> WAN T raffic . The fea tur e gi ves administrator s control ov er the entire system’ s tr affic though the W AN interf ace. Thes e paramet ers s et h ere s hould not ex cee d the real bandwidth comi ng from you r ISP .
28 3.5 What is Zone Confi gure Zone, g o to: System >> Zone Conf iguration . A Zone i s a l ogi cal net work a rea th at covers wi red or wi rel ess net work s, o r b oth of them. By as soc iat ing to a uniq ue ES SI D of a Z on e, w ire les s ne two rk is div ide d in to dif fe re nt lo gic al z one s.
29 3.5.1 Port Role A ssignment WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acc ess t he n etwork vi a wi red and wirel ess .
30 3.5. 2 P lanning Y our I nternet N etw ork WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acce ss t he n etwork vi a wi red and wirel ess.
31 3.5. 3 Configure Zone N etw ork Confi gure Zone net wor k; go t o: Syst em >> Zone Configurat ion . Click the butto n Confi gure of Priv ate zone for fur ther configur atio n. The pa ram eter d escri pti ons of Basi c Sett in gs for P rivate Zone and P ubli c Zone are t he sa me.
32 o Altern ate DNS Serv er: Th e substitute DNS ser ver that is used by this Zone . o Domain Name: En ter the domain name fo r this zone . o WINS Se rve r: T he IP ad dress of t he W INS ( Win dows Inte rnet Nami ng S ervi ce) s erver if W IN S se rv er is ap plic ab le to th is zo ne .
33 4 Let Your Network to Be a Wirel ess Network 4.1 System Wireless Genera l Settings Confi gu re Syst em ’s Wirel ess G eneral S etti ngs, go to: System >> Zone Configur ation . Wirele ss Gen eral S ett ing s: Band: There are 4 mod es t o select , 802.
34.
35 4.2 Zone Wireless Settings E ach zo ne has its o wn VAP a nd c orrespon d s t o on e SSID. In P rivate zon e, it ’ s VAP1 and the SS ID is hidden, so publi c user s cannot s can this SSID in the air , for pri vil ege users who al re ady kn ow th i s SS ID, they can manuall y associate to the SSID of Private zone .
36 Fragment Th reshold: Enter a value betwee n 256 and 2346. The defaul t is 2346. A packet siz e larg er than th is t hreshol d wi ll be fragment ed (s ent wi th several pi eces instead of one chunk) before tr an smi ssion . A sma ller value r esults i n small er frames but allows a large r number of fr ames in transmissio n.
37 will be sen t from th e VA P . RTS Thre shold : Enter a v alue between 1 and 2346. RTS (Req uest to Send) Thresh old determines the packet size at w hich the system issues a request to send (R TS) befo re sending the fr ame to preve nt the hidden node problem.
38 4.3 Zone Wireless Security Confi gu re Zone Wirel ess Secu rit y , g o to: Syste m >> Zo ne Co nfigura tion , cl ick Co nfigure of Private z one o r cli ck Co nfigure of Public zone. After th e ab ove confi gurati ons a re fini sh, set up th e wi reless s ecuri ty i s very im portan t to p rotect your wi reless n etwo rk.
39 802.1X : Dynamic WEP: For 80 2.1X s ecuri ty ty pe, Dyn am ic WEP is al ways ena bl ed to automatical ly gener ate WEP keys for encry ption. WEP Key Le ngth: Sel ect fr om 64- b it or 128- bit key len gt h. Re - keying Pe riod: The time interv al for the dynamic WEP key to be updated; the time unit is in second.
40 5 Who Can Access the Network 5.1 Type of Users Confi gure U sers, go t o: Us ers >> Authe ntic ation . Thi s section i s for admi nist rators to p re - c onfi gure au then tic ati on ser vers for th e en ti re syst em.
41 5.1.1 L ocal Click the button Configure of Local for f urther configur ation. Local User List: It let the administr ator to view, add or dele te local user accoun t. Th e Upload User button is for importing a list of user a ccount from a text file.
42 Search : Ent er a keywor d of a u se rname or rema rk to b e sea rch ed i n the t ext fil ed and cli ck thi s but ton to p erform th e sea rch. A ll usern ames mat chi ng the k eyword will be l isted .
43 Edit Use r: If ed iting the c ontent of individual use r acco unt is need ed, click t he userna me of the desi red u ser a ccoun t in Local User L ist to enter the User P rof i le Interfac e fo.
44 5.1.2 RADIUS There a re t wo RADIUS authentication database for configura tion. Click the butto n Confi gure of any one of RADI US s erver s for furth er confi gurati on. The RAD IUS s erver set s the extern al a uth enti cati on for us er acc oun ts.
45 NAS Port Type: In dic ates t he typ e of phy sic al port t he net wo rk acc ess se rver is u sin g to authent icate the user . Sys tem will send th is va lue to the exter nal RADIUS server , if the extern al RADIUS ser ver need s th is.
46 5.1.3 On - Dem and Users On - demand U ser Ser ver Config uration: The administr ator can configure th is authentication method to create on - demand use r acco unts. This funct ion is de signed fo r hotspo t owners to pro vi d e tempora ry us ers wi th free or p ai d wi reless Inter net a ccess in the hot spo t envi ronmen t.
47 Receipt He ader: There are 3 re ceip t head ers s upp orted by th e syst em . Th e ent ered c onten t will be printed on the receipt. Thes e heade rs ar e opt ion al. Receipt Foot er: Ther e are 3 rec eipt footer s supported by the system. Th e ente red c onten t will be printed o n the receipt.
48 Plan: The number of the spec ific plan. Type: This is the ty pe of the plan, based on which it defines how the acco unt can be use d including U sage - time, Volume, H otel Cut - off a nd Duration - tim e . Quot a: Th e li mit on how On - deman d us ers a re al lowed to a ccess the n etwo rk.
49 6) On - demand Account Creation After at l east one billing pl an i s enabl ed, th e ad mi nistrat or can gen erat e sin gle on - dem and u ser acco unts here. Click this to enter the O n - dema nd Acco unt Creation page. Click on the Creat e button of the desi red pl an t o create an on - demand account.
50 network. F or Time users, it is the total time. F or V olume user s, it i s the total amo unt of traffic. Price: For e ach pl an, thi s is the uni t price c harged fo r an account .
51 Plan: The nu mb er of a speci fi c pla n. Account Ty pe: Show a ccount type of t he plan in Usage - time, Dur ation - ti me or H otel Cut - o f f. Quota : Th e tota l t ime a mount , in ter v al o r t ra ffic vo lum e on h ow On - dem and users a re a ll owed to acce ss the n etwor k.
52 Status : The s tatus of the a ccount. o Norma l: the acco unt is not curre ntly in use and has not exceed the quota limit. o Online: the ac count is curre ntly in use . o Expired : the account is not v alid any more, eve n i f there is re maining quota left .
53 Note: The maximum quota is 365dys 23hrs 59mins 59se cs” even after redeem . If th e red eem am oun t exceed s th is n umber , th e syst em wi ll autom atic all y reject the redee m pro cess. Note: Du ra ti o n - ti m e and Hotel Cut - off type do not sup port red eem funct ion .
54 5.2 User Login 5.2.1 De fault Authenticati on T here are diffe rent types of authe ntication database (LOCAL, RADIUS and ONDEMAND) that are supported by the system. Only Publ ic Zo ne can se t authenticat ion. A pos tfix is used to inform the sy stem which authe ntication o ption to be us ed for a uthenticating an acco unt (e.
55 5.2.3 An E xample of User L ogin Norma ll y , u sers wi ll be au then ticat ed bef ore they get n etw ork a cces s th rou gh WHG - 1000 . This se ction presen ts th e basi c au then ti cation flow f or en d users . Pl ease m ake sure that the WHG - 1000 is confi gured prop erly and n etwork rel ated setti ngs a re d one.
56 3. Successfu l! The Login S uccess Page m ean s you a re conn ected to the n etw ork and Int ernet now!.
57 6 Restrain the Users 6.1 Black List Configure B lack List, go to: Users >> Black Li st . The administr ator can add, de lete, or edit the black li st fo r user access contro l. Users’ accounts that appear in the black li st will be denied of network a ccess.
58 After ente rin g the u sernames i n t he “Use rn ame” fie ld and the rela ted i nforma tion in the “Rema rk” blank (not required), cli ck Apply to add the users .
59 6.2 MAC Address Control Configure M AC Address Control, go to: Users >> Ad dition al C ontro l . MAC AC L: With this funct ion, only the users with t heir MAC ad dresses in th is list can log in to WHG - 1000 . Th ere a re 40 users max imum all owed in this MAC address list.
60 6.3 Poli cy Confi gure Poli cy , g o to: Users >> P olicy . WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy . Globa l Poli cy is the system’ s univers al policy and applied to all clients unless the y are bound ed by anot her pol i cy .
61 Select Po licy: S elect th e desi red pol i cy profi le t o confi gu re . Firew all P rofile : Eac h P o licy has a f ire wa ll se rv ice lis t and a s et of f irew al l pr of ile c on sis ting of firewal l rules. Specific Rout e Profile: Th e default gatew ay of a des ired IP address can be def ined in a policy .
62 6.3.1 Fire wall Firew all P rofil e: Click Se tting f or Fi rewall Profi le . The Fir ew all C on figu r at ion w ill a ppe ar . Cl ick Predefined and Custo m Serv ice Prot ocols t o edit the pro tocol list. C lick Fir ewall Ru les to edit the rul es.
63 If t he Protoco l Type is ICM P , i t wil l n eed to d efin e Type and Cod e . If t he Protoco l Type is IP , i t will n eed to defi ne Protoco l Number . 2) Firew all Rul es After the cus tom protocol i s def ined or just use the Predefin ed Serv ice Protoc ols , you wil l n eed to enabl e th e Fire wall R ule to apply these protocols.
64 Sel ecti ng th e Filt er Rul e Numbe r 1 a s an exa mp le: o Rule Num ber: Thi s is th e rul e select ed “1” . Rul e No. 1 h as t he h ig hest pri ori ty; ru le No. 2 has the second prior ity , and so on. o Rule Nam e: T he rul e name c an b e cha nged h ere .
65 6.3.2 R outing Specific Route Prof ile: Click the butto n of Settin g for Sp ecific Route Prof ile , t he Sp ecifi c Route Pro fil e lis t will appea r . 1) Specific Rout e Speci fic Rout e Prof ile: Th e Speci fi c Defaul t R oute i s use t o cont rol cl ients to acce ss some speci fic I P segm ent by t he sp ecifi ed ga teway .
66 2) Defau lt G atew ay Defa ult G atew ay: The defaul t g ateway of a d esi red IP addr ess can b e defi ned in each Poli cy except Glob al Policy . When Specific Default R oute is enabled, all clients applied with this P olicy will access the Internet through this defa ul t gatew ay .
67 6.3.3 Sc hedule Sched ule Pr ofile : Clic k Setting of Schedule Profile to enter the configuration pag e. Select Enab le to sh ow the Permitted Login Hours lis t. T his fun ctio n is us e d to lim it the t ime wh en clien ts can l og in . Check the d esi red ti me sl ots checkbox a nd cl ick App ly to sav e the settings.
68 6.3.4 QoS P rofile Fo r certain applications or users that need stable bandwidth o r t r aff ic p rio rity , P olic y 1 to 5 a llow s defi nin g the QoS pro fil e for th e use rs govern ed by th is Poli cy . Traff ic Cl ass: A T raffi c Class can be cho sen for a Group of us ers .
69 6.3.5 Se ssion Limit T o p revent ill - behaved cli ents or mal ici ous soft ware fr om t akin g up the s ystem’ s conne ction resou rces, the ad mi ni strator can rest rict the n umb er of concurre nt sessions tha t a user c an establ ish .
70 7 Access Network without Authenti cation 7.1 DMZ Confi gure DMZ , g o to: Network > > Netwo rk Address T ransl atio n >> DMZ (Dem ilit arize d Zone ) . There a re 2 0 sets of st ati c Interna l IP Addr ess an d Ext ernal IP Add ress avail able.
71 7.2 Virtu al Se rve r Confi gu re Virt ual Server , go to: Netw ork >> Network Add ress T ran slation >> Public Accessi ble S erver . This function a llows the administr ator to set 20 virtua l servers at most, so that cl ient devices o utsi de the m anaged net work can access thes e se rvers wi thin t he man aged n etw ork.
72 7.3 Priv ilege List Configure Pr ivilege List, go to : Network >> Pri vilege Setup the Privile ge IP Add ress L ist and Privile ge MAC Add ress Li st . The cl ient s accessi ng the int ernet vi a IP addresses and/o r net wor kin g devi ces in the list can a ccess the ne twork without a ny authent ication .
73 7.3.1 Privilege IP Privile ge IP Add ress List Confi gu re Pri vil ege IP A ddres s Li st, go t o: Net work Con figur atio n >> Priv ileg e >> IP Add ress List .
74 7.3.2 Privilege MAC Privile ge M AC Ad dre ss L ist In addition to the Privil ege IP List , MAC addre ss List allows the MAC address of the workstations that need to access the network without aut henticati on to be s et in t he “G ranted Acc ess by M AC Addres s” .
75 7.4 Disable Authenticati on in Public Zone Con figure Disab le Authent ication in Pub lic Zo ne, go to: System >> Zo nes Config uration, click Configure in Public Zo ne . Authentication Required For the Zon e: When it is disabled, us ers will not need to authenticate before they get access to the network with in Public Z o ne.
76 8 User Login and Logo ut 8.1 Before User Login 8.1.1 Login with SSL Confi gure H T TPS, g o to: System >> Gener al . HT TPS (HTTP over SSL or HTTP Secu re) i s the use of Secu re So cket L ayer (SSL) or T ransp ort Layer Secur ity (TLS) as a sub - l ayer under regular HT T P applicat ion layer ing.
77 8.1.2 Interna l Domain Name with Certifi cate Configur e Interna l Domain Name, go to: Syste m >> G enera l . Inter nal Domain Name is the doma in name of the WHG - 1000 as seen on cli ent m achi nes conne cted under zo ne. It must conform to FQDN (Fully - Qualified Domain Name ) standard .
78 Click “Cont inue to th is web site” to access the user login p age. Us e Defau lt Cer tifi cate: Click Us e Defa ult Cer ti ficat e t o use the d efau lt certi fica te and key .
79 8.1.3 Walled Garden Confi gu re W all ed Gard en , go to: Net work >> Wal led G arde n . Thi s fun ction provid es cert ai n free servi ces f or users t o ac cess th e w ebsi tes l ist ed here b efor e log in and authentication. Up to 20 addresses or do ma in names of the websites can be defined in this list.
80 8.1.4 Walled Garden AD List Configure W alled Garden AD List, go to: Netwo rk >> W alled Gar den AD L ist . This func tion pro vi des ad verti sement lin ks to w eb pages f or us ers to acc ess fre e of cha rge before login and a uth entic ation .
81 8.2 After User Login 8.2.1 Portal URL after suc cessful login Confi gu re Portal U RL aft er a su cc essful user l ogi n , go t o: Sy stem >> General . When this f unction is ena bl e d, enter the UR L of a W eb s erver a s the Portal page. Once logged in succ essful ly , use rs wi ll be di rected to th is URL , such a s http://www.
82 8.2.2 Idle Timer Configure I dle Timer , go to: Users >> Additi onal Cont rol . If a use r has idled with no network a ctivities, the system will automatica lly kick out the user . The logout timer ca n be set between 1~1440 minutes, and the default idle time is 10 minutes.
83 8.2.3 Multiple Login Co nfig ur e M ult iple Lo gin , go to: Users >> Addi tion al Con trol . When e nabled, a user can log in fro m different co mputers with the same acco unt. (This func tion doesn’t support On - demand use rs and RADI US authentication.
84 9 Networking Features of a Gateway 9.1 IP Plug and Play Conf i gure I P Plug and Play , go to: Net work >> Client Mob ility . WHG - 1000 supp orts IP PNP func tion. User can login and acc ess ne twork with any IP address setting. Th is f unc tion is disa ble d in de fa ult s et tin gs.
85 9.2 Dynamic Domain Na me Service (DDNS) Confi gu re Dynam ic D oma in Name Se rvice, g o t o: Netwo rk >> DDNS . Before activ ating this f unction, you mus t have your Dynamic DNS hostname registere d with a Dynami c DNS provider .
86 9.3 Port and IP R edire ct Configure P ort a nd IP Redirec t, go to: Network > > NAT >> Port and IP Red ire ct . This function a llows the administrato r to set 4 0 sets o f the IP ad dres ses a t mos t for redi recti on purpose.
87 10 System Management and Utiliti es 10.1 System T ime Confi gu re System Tim e, go t o: Sy stem >> G eneral . NTP (Network Time Protoco l) communication pr otocol c an be used to synchronize the syste m time wi th remot e ti me ser ver .
88 10.2 Ma nagement IP Confi gu re Manag eme nt IP , go to: System > > Gener al . Only PCs within the M anag ement IP range on th e l ist are al lowed to acc ess t he syst em' s web mana gement in terfac e . For example, 10.2.3. 0/24 means that as long as an administr ator is using a computer w ith the IP address r an ge o f 10.
89 10.3 User Log Access IP Address Confi gu re User Log Ac cess IP History , go to: Sy stem >> Ge nera l . Specify an IP address of the a dministrator’ s computer or a billing system to get billing histo ry in formati on of W HG - 1000 wi th t he prede fin ed UR Ls.
90 10.4 SNM P Confi gu re SNMP , g o to: Syst em >> General . WHG - 1000 supports SNMP v1/v2c. If this f unction is e nabled, the SNMP Mana gement IP and the Community st ring can be ass igned for SNMP a ccess to the sy stem .
91 10.5 Thr ee - Level Administration WHG - 1000 supports three kinds of account interface. Y ou can log i n as admin , m anag er or oper ator . The defau lt usernam es and p assword s show a s fol lows: Admin : The admin istrat or can access all configuration pages of WHG - 1000 .
92 Manag er: The manager can only access the configurat ion pages under User Aut hentic ation t o manage the user acc ounts . User Na me: manager Password: m anage r Oper ator : The oper ator ca n onl.
93 10.6 Cha nge Password Configure C hange Passwor d, go to: Uti litie s >> P asswo rd Chang e . There a re t hree levels of aut hori ti es: adm in , m anag er or operator . The default user names and passw ords are a s fol lows: Admin : The admin istrat o r can access all config uration pa ges of WHG - 1000 .
94 Caut ion: If the admi nistrator’s passwor d is lost, the administr ator’s passwor d still can be change d through the text m ode mana gemen t in terfac e via the serial console port.
95 10.7 Bac kup / Re store and Reset to Factory Configure B ackup / Res tore and Reset to F actory Default, go to: Uti liti es >> Bac kup & Rest ore . This function is use d to backup/restore the WHG - 1000 settings. Also , WHG - 1000 can be resto red t o the fac tory default settings here .
96 10.8 Fir mware Upgrade Confi gu re Firm ware Upg rade, g o to: Util ities >> System Upgrade . The administrator can dow nloa d the l atest firm ware from w ebsi te and up grade the syst em h ere.
97 10.9 Resta rt To p erform syst em r estart, go to: Utilit ies >> Rest art . This function a llows the administrato r to safe ly restart WHG - 1000 , and the process tak e s approxi ma tely three mi nu tes. Cl ick YES to rest art W HG - 1000 ; cli ck NO to go back to the previous screen.
98 10.10 Network Utility Confi gu re Netwo rk U tili ty , go to: Ut ilitie s >> Network Uti lities . Sys tem provide some network utilities to allow administr ators to use .
99 10.10.3 Trace Route It allows administr ator to find out the re al path of packets from the gatewa y to a destina tion us ing IP addre ss or H ost d omain name. 10.10.4 Sho w ARP Table It allows administr ator to v iew the IP - to - Physical addres s tra nsl ation tables used by address resolution pro tocol (ARP).
100 10.11 Moni tor IP Link Configure Mo nitor IP Link, go to: Network >> M onit o r IP . WHG - 1000 will send out a packe t periodically to monitor the connec tion status of the IP addresses on the list.
101 10.12 Cons ole Inte rfa ce Via th e consol e port , ad mini strators can enter t he c onsol e in terfa ce for han dl ing prob lem s and situations oc curred during oper ation.
102 Dis p lay interf ace settings: I t displays the infor mati on of each network interface setting including the MAC address, IP address, and Ne tmask. Displa y the routing table : The internal routing table of the system is display ed, which may he lp to confirm the Static R oute settings.
103 Caut ion: Alt hough it d oes not req ui re a us ernam e an d pas swo rd fo r the conn ecti on vi a th e se rial p ort, the same mana gemen t int erfac e ca n be ac cess ed via SSH . The refor e, we recom men d you t o imm edi ately change the WHG - 100 0 A dmin userna me and passw ord af ter l oggi ng in t he syste m fo r the fir st t ime.
104 11 System Status and Reports 11.1 View the Status Thi s section i nclu des Sy stem , Int erfac e , Routi ng Ta ble , Onl ine User s , User Log and E- m ail & SYSLOG to provide system s tatus in for mation and online user status. 11 .1.1 System Status View Syste m Status , go to: Stat us >> S y stem .
105 The d escri pti on of t he ab ove - men tion ed tab le is as fo llow s: Item Descr iption Firmware Ve rsion The presen t firmw are vers ion of WHG - 1000 System N ame The sy stem name. Th e def ault is WHG - 1000 Portal URL The page th e users are direc ted to after init ial login succ ess.
106 11 .1.2 Interface Status Vi ew Interf ace Status, go to : Stat us >> Int erf ace . Thi s secti on pr ovides a n overvi ew of th e in terfac e for the ad min ist rator inc lu ding WAN , Zo ne Wirele ss Ge nera l Sett ing s , Zon e - Private and Zone - Public .
107 The d escri pti on of t he ab ove - men ti oned t able is a s fo llow s: Item Description WAN MAC Address The MAC address of the W AN port. IP Addres s The IP addr ess of the W AN port. Subne t Mask T he Subnet M ask of th e WAN port. Packets Out/In The tota l accum ulated pac kets in/out th rough th is W AN port s ince the gatew ay boots u p.
108 11 .1.3 Routing T able View Sys tem Status, go to: Status >> Ro uting Ta ble . All the Policy Rou te ru les an d Global Pol icy Route rul es wi ll be list ed her e. Als o it w ill show t he System Route ru les spec ified by ea ch i nterfac e.
109 11 .1.4 Current Use rs Vi ew Curr ent Us ers , g o t o: Status >> Onlin e Users . In this pa ge, each online user’s info rmation inc luding Usern ame , IP A ddress , MAC Addr ess , Pkts In , Bytes In , Pkts O ut , Bytes Out , Idle and Kick Out will be shown .
110 11 .1.5 Us er Log Vi ew User L og , g o to: Status >> Use r Log . Thi s page is u sed to ch eck th e traffi c hist ory of WHG - 1000 . Th e hi story of ea ch d ay wil l be sa ved separ ately in the DRAM fo r at least 3 days (72 full ho urs) .
111 Expir ation Time , an d Rema rk , of on - demand user act ivi ties. Roaming Out U ser Lo g E ac h line is a roa ming out t r af fic hist or y rec or d con sis ting of 1 4 fie lds , Date , Ty p.
112 11 .1.6 Local U ser Monthly Network Vie w L oc al Us er M on thly Ne two rk Us age , go to: Status > > User Log . Monthly Net work Usage o f Local User The system kee ps a cum ulated re cord of the traffic data gener ated by ea ch Local user in the late st 2 calend ar months.
113 11.2 Notific atio n Confi gu re No tific at io n , go to : S tatu s > > E- mai l & S YSLOG . WHG - 1000 can automatically se nd the notification of Monitor IP R eport , Use rs Log and Ses sion Log to up to 3 particular e - ma il a ddr es ses .
114 11 .2.1 E- Mail Confi gu re Noti fica tion, g o to: St atus >> E - mai l & SYSLO G . Notific atio n E - m ail Se ttings : Receiv er Email Addre ss (es): Up to 3 e - ma il addres s can be s et up t o r ecei ve the n oti fica tion.
115 11 .2.2 SYSLOG SYSLOG Server S ettin gs: There are 4 types of SYSL OG supported: System Log , On -dem and User L og , Session Log , and HTTP We b Log . E nter one or tw o of the Syslog s erver IP address and P ort num ber to speci fy wh ich and from whe re th e rep ort sh oul d be sen t t o.
116 11.2.3 FTP FTP Server S ettings: FTP Server S ettings FTP Destination: Ses sion Log wi ll be sent to th e F TP s erver a utoma ti call y duri ng every d efi ned int er v al in Se ssio n Lo g ema il no tif ica t ion. Th e max imum log file siz e is 12 8K.
117 11.2.4 Event Log Event Log: T he Event Lo g pro vides the system activities records. The administrato r can monitor the system st atus by checki ng t his l og.
118 12 Advanced Applicatio ns 12.1 Upload/ Download Local Users Accounts To Upload / Download Local Users Acco unts, go to: Use rs >> A uthent ication, cli ck C onfi gure button of Local . Or cl ick Q uick Link s >> Loc al Use r M anage ment from system Home page.
119 then sav e it on disk..
120 12.2 RADI US Advanced Settings Confi gu re RADIUS Adv anced Settings, go to : U sers >> Authent icati on . Clic k C onfi gure of RADIUS . Complete vs. On ly ID F or RADIUS a uthenticat ion, ther e is an option to se nd the complete username with postfix o r userna me onl y .
121 12.3 R oam i ng O ut Confi gu re local user Roam ing Out , go to: User s >> Aut hent icat ion, click confi gure of Local . Under certain conf igurat ions , WHG - 1000 can act as a RAD IUS server for R oaming Ou t l ocal u ser logged from othe r system.
122 12.4 Cust omizable Pages Configur e Cu s t om Pa g e s , go to: Syst em >> Zo ne Conf igur ation , click C onfigure in Pub lic z one . There a re several use r login and logout page s that can be custom iz ed by the administr ator . Y ou can sel ect Te mpl ate P age o r External Page .
123 Page for cl i ent to l ogi n wi th u sername a n d pa ss word. External Pag e: Choose the Ext ernal Page option if y ou wish to us e user pages loca ted o n a designated websi te. Click the button o f Confi gure fo r each cu stom pages and enter the URL of its ’ cor respon din g external login page and then click Apply .
124 Appendix A. Network Configuration on PC & User Login Network Configurati on on PC After WHG - 1000 is in stalled, the following conf igurations must be set up on the PC: Int ernet Connect ion Set up and TCP/I P Net work Setup .
125 3) Choose “ I w ant to set up my Int ernet connection m anually, or I want to connect through a local Area netw ork (LAN)” , and then click Next .
126 6) Choose “No” and then cli ck Next . 7) F ina lly , clic k Finish to exit the Internet Conne ction Wiza rd . Now , the set up is complete d. Windo ws XP 1) Choose Sta rt >> Co ntrol Pan el >> Internet Option .
127 2) Choose th e Conne cti ons tab, and then click S etup . 3) W hen the Welcome to the New Conne ction Wiz a rd window appears , click Next . 4) Choose “Con nect to t he I nternet” and then cl ick Next .
128 5) Choose “Set up m y co nnection manua lly” and then click Next . 6) Choose “ Con nect using a broadb and connec tion th at i s al ways on ” and then c lick Nex t . 7) F ina lly , clic k Finish to exit the Conne ction Wiza rd . Now , the setup is complete d.
129 TCP/IP N etwork S etup If the oper ating system of the PC in use is Windows 95/98/ME/2 000/XP , keep the default se ttings without any c hanges to directly sta rt/restart the s ystem.
130 3) Using DH CP: If you want to use DHCP, click on the IP Addre ss tab and choo se “Obt ain an IP addr ess au tom atic ally” , and then c lick OK . T his is a ls o t he d ef ault setting of W indows. The n, reb oot th e PC t o make sure an IP address is o btained from WHG - 1000 .
131 4.2) Cli ck on the Gat eway tab. En ter t he gateway address of WHG - 1000 in the “ New g ate way” field and clic k Add . Then, cli ck OK . 4.3) Cli ck on DNS Co nfigu ratio n t ab. If th e DNS Ser ver fiel d i s empt y , s elect “Enab le D NS” a nd ent er D NS S erve r address .
132 2) Rig ht click o n the Loc al Area Con nect ion icon a nd select “Proper ties” . 3) Select “ Inter net Prot ocol (TCP/IP)” and then click Propert ies . Now, you can choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “ Obta in an IP add ress autom atica lly” , an d th en cli ck OK .
133 5) Using Specif ic IP Ad dres s: If y ou want to us e a spe cifi c IP addre ss, acq ui re the f oll owin g in formati on from th e network ad ministrator: the IP Address , Subne t Mask and DNS Serv er address provided by your ISP and the Gateway address of WHG - 1000 .
134 5.4) Enter the ga teway a ddr ess o f WHG - 1000 in the “ Gate way ” fie ld , and then cl ick Ad d . After back to the IP Settings tab, cl ick OK to com plete the conf igurat ion. Check the TCP/IP Setup o f Windo w XP 1) Select St art >> Control P anel >> Network Connection .
135 3) C lick on the Gen eral tab and choose “ Internet Protocol (TCP/IP )” , and then cl ick Prop ert ies . Now, you ca n choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “O b tain an IP addres s autom atica lly” and click OK .
136 5.1) Ch oose “ Use t he fol lowin g IP addres s” and en ter the IP address , Subnet mask . If the DNS Server fiel d i s empty , sel ect “Using the f ollowing DNS serve r addres ses” and ent er th e DNS S erver a dd ress . Th en, cl ick OK .
137 Appendix B. Policy Priority Global P olicy, Authentic ation Polic y and User Policy WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy can be assign to diffe rent Auth enticati on Server .
138 Appendix C. WDS Management The P ublic Zo ne of WHG - 1000 supports up to 2 WDS links. WDS (Wireles s Distribution Sy stem) is a functi on used to conn ect A Ps (Acce ss Points) wireles sly to e xtend wi rele ss covera ge. Th e WDS manage ment func tion of the sy stem can help ad ministr ators to setup two WDS links.
139 Appendix D. RADIUS Accounting This sec tion will briefly introduc e the basic configur ati on of RADIUS server to work with VSA for the purpose to control the maximum client v olume usage (upload; download or upload + download tr affic). Thi s VSA will be sent from RADIUS server to gatew ay along with an Access - Accept pac ket .
140 If the amount o f traff ics i s larger than 4 GB, the attributes o f “XXXX - 4G B” wi ll be used . Fo r example, if the amount is 5 GB, the following settings should be set: “ WHG - 1000 - Byte - Amount = 1048576” and “ WHG - 1000 - Byt e - Amount - 4GB = 1” .
141 Step 3 Cli ck Edit P rofile and sel ect th e Adv ance d Ta g . Cli ck Add to add a new Ven dor- spec ific attribute..
142 Step 4 Add a new attribute und er Vend or - sp ecific Set “ Vendor Code = 21920 ”. Check Yes to conform to the RADIUS RFC. Cli ck Configure At t ribut e to pr oceed.
143 Step 6 Follow t he sam e step s t o cr eate oth er Vendor- speci fi c At trib ut e i f needed..
144 3. VSA configuration in R ADIUS server (Free RADIUS) This se ction will gu ide you thr ough VS A conf iguration wi th Free RADIUS v1.0. 5 running on “F edor a” .
145 Step 4 Edit and sa ve the contents of the fil e “dict ionary . WHG - 1000 ” as f oll ows: Administ rator can also add other a ttributes as the table sta ted in Section 2 with the same format. Step 5 Edi t the fi le “d icti onary” un der the fol der “f reeradi us” .
146 Step 6 T o inclu de “dic t iona ry . WHG - 1000 ” in the dic tio na ry of RADI US se rv er , ins ert it in an i n crem ental posi tion as foll ows. Step 7 Open the “r adius” databas e. Step 8 Insert VSA i nto RADIUS respo nse. In this example, the max imum download and upload tr affics in bytes fo r group03 us ers is 1MBytes.
147 Step 9 Re start RADIUS daemon to get your settings activ ated..
148 Appendix E. On - demand Account types & Billi ng Plan This sec tion explains the para meters as well as the differ ent account types pro vided when editing billing plans in On - demand a uthenticat ion. o Usage - t ime with Expi ration Time : Can access inter ne t as long as account v alid with remaining quota (us able time).
149 o Usage - t ime with No E xpir ation T ime: Can acc ess internet as long as acc ount has remaining quota (us able time). Ne ed to ac tivate the purchased acco unt within a given ti me peri od by l oggi ng in for t he fi rst ti me. Ideal for sh ort t erm us age.
150.
151 Hotel C u t- off - t ime : Hot el Cut - off - time i s the cl ock ti me (n ormall y check - out time) at which the o n - demand account is cut off (made expired) by the system on the foll ow ing day or many days late r .
152 o Volum e: Can access internet as long as account v alid with remaining quota (tr affic vo lume). Accoun t exp ires when V al id Peri od has been used up or quota depleted. I deal for small quantity a pplicat ions suc h as sending/r eceiving ma il, trans ferr ing a file etc .
153 o Durat ion - t ime with E laps ed T ime: A ccount activ ated upo n the account creation time. Count down begins imme diately after account c reated and is continuous re gardless of logging in or out. Account exp ires once t he Elapsed Time has b een reac hed.
154 provi din g intern et ser vice i mmed iat ely aft er acco unt creati on th rough out a sp ecifi c peri od of ti me. Begin T ime is the time that the ac count will be activ ated for use. I t i s set t o accoun t creat ion tim e. Elapse d Tim e is the time interva l for which the account is v ali d for internet access (xx hrs yy mins ).
155 plan to cr eate ticke t set to be Cut - off on 23:00. If an account of this kind is crea ted after the Cut - of f Time, the account will automatica lly expire. Begin T ime is the time that the ac count will be activ ated for use. It is se t to account creat ion tim e.
156 peri od of ti me. For exam pl e durin g exhi biti on event s or la rge conven tion s such as Compu tex wher e each regi stered p arti cip ant wi ll g et an i ntern et accou nt valid fro m 8: 00 AM J un 1 to 5:00 PM Jun 5 created in batc h like coupons .
157 Appendix F. External P ayment Gateways This sec tion is to show independent Hotspo t owners how to configu re relat ed set ti ngs i n order to a ccept payments vi a Aut horiz e.net, Pa y Pa l , Secu rePay or W orlPay , making the Ho tspot an e - commerce environ ment for end u sers t o pay for and obt ain Inte rnet a cces s with credit card s.
158 Service D isclaimer Content/ Choose Billing Pl an for Authorize.N et Payme nt Page/C lient’ s Purc hasing Recor d Service D isclaimer Content V iew servi ce ag reem ents an d fee s for the s tand ard paym ent g ate way servi ces he r e as wel l a s addi ng n ew or edi ting services di scl aimer .
159 Author ize.Net P ayme nt Page Fields Config uration/ Autho rize.N et Payme nt Pag e Remark Cont ent Authorize.Net P ayme nt Page Field s Configurat ion o Item: Ch ec k the box to sho w this item o n the customer’ s pa yment inter face. o Displayed Tex t : Ent er w hat n eeds t o be shown for t his fiel d.
160 o E- mail: An email address may be provided along with the billing information of a transacti on. Thi s is t he custom er’ s email addre ss and should contain an @ symbo l. o Customer ID : This is a n int er na l ide nt ifie r for a cus to mer that ma y be ass ocia te d wit h th e billing informa tion of a tr ansac tion.
161 2. Payments via PayPal Configure P ay ments via Pa yP al, go to: User >> Authe nticati on >> On - dem and User >> Ex te rnal P aym ent Gatew ay > > P ayPal . Before se tting up “Pa yPal” , it is re quired that the ho tspot owners have a valid P ayP al “Business Account ” .
162 Service Disclai m er Co ntent / Ch oose Billin g Pl an fo r PayP al P aymen t Pag e o Service Di sclaimer Co ntent: Vi ew t he s ervice agre ement and f ees f or th e stand ard payment gat eway se rvices a s w ell as add or edi t th e ser vice d iscl aim er cont ent h ere.
163 3. Payments via SecurePay Confi gu re P aym ent s via S ecurePay , go to: User s >> Auth ent icatio n >> On - demand Use r>> External Pay ment Gatew ay >> SecureP ay .
164 SecurePay Pag e Configur ation Merch ant ID: The ID that is a ssoc iated with the Me rchant Acco unt. Merch ant Pa ssword : This is the key use d by Secure Pa y to va li date all the tr ansactions. Paym ent G ateway URL : The defa ult website address to post all trans action data.
165 4. Payments via World Pay Confi gu re P aym ent s via WorldPay , g o to: Users >> Auth entic atio n >> On - de mand User >> Ex ternal Payment Gateway >> WorldP ay . WorldPay Payme nt Configur ation World Pay Insta llatio n ID: The ID of the associated Merchant Acco unt.
166 Vi ew the se rvice a gre emen t and fees fo r the st an dard paym ent gatew ay ser vices a s wel l as add or edi t th e servi ce d iscl aimer c onten t he re. Wo rl dPay Billing Con fig urat ion These 10 plans are the plans in Bi lli ng Con figu rati on , a nd the desired plan(s) can be enabl ed.
167 STEP ④ . Check the Enabl e Payment Resp onse chec kbox. STEP ⑤ . Enter the P ay ment Response URL . URL : <wp display item=MC_callback> STEP ⑥ .
Een belangrijk punt na aankoop van elk apparaat LevelOne WHG-1000 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen LevelOne WHG-1000 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens LevelOne WHG-1000 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding LevelOne WHG-1000 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over LevelOne WHG-1000 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van LevelOne WHG-1000 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de LevelOne WHG-1000 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met LevelOne WHG-1000 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
