Home

here

1. 80 Upload User Logout Interface cccoooocccocccccocccnncnooncnnnnnnnos 80 HTML Codes Required for User Logout Interface 81 POP3 Message occcccccoocccocccccoccconcnnnncconnnnnnnnonononancnnnononancnnnnnnnanennnnnnnns 81 MAC Address Control Interface ooocccccccccoccconnccnnccnnnnnnos 82 HecelDt information ainnean id andes eink 83 On demand User Configuration ooocccccncccccccoonccnnnnccononononon 83 On demand User Page Field and Description 84 On demand User Lists a ee eae ieee as 84 Billing CONTIGUA ON corno oie ec 85 Upload On demand User oconcccccccooocccccccccccccooncccnnnccononanononnncnononanos 86 Example of Firewall Profile coooococcoooccoococconconononoos 87 Select the Group for Applying Firewall Profile Rules 88 Example of Edit Filter Rule o cccoooococccoocccococconconononnos 88 Example of Editing Specific Route Profile 90 yi Figure 5 82 Figure 5 83 Figure 5 84 Figure 5 85 Figure 5 86 Figure 5 87 Figure 5 88 Figure 5 89 Figure 5 90 Figure 5 91 Figure 5 92 Figure 5 93 Figure 5 94 Figure 5 95 Figure 5 96 Figure 5 97 Figure 5 98 Figure 5 99 Figure 5 100 Figure 5 101 Figure 5 102 Figure 5 103 Figure 5 104 Figure 5 105 Administra
2. 19 Figure 3 3 Administrator Login cooooccncccocnnncccnnnncononcnonnnnnncnnnncnnnnoncnncnnanenoss 20 Figure 3 4 Welcome Screen o nsanra i 21 Figure 3 5 Configuration Wizard Screen ooocccccccccccccnnnccnnnccnonccooncnononononannnonnns 22 Figure 3 6 Entering Username and Password ccccceeeeeeeeeeeeeeeeeeeeesaaeees 23 Figure 3 7 Successful Login Page oooooncccccccccccccoonccnnncconononccnnnnnonononannnnnns 23 Figure 3 8 Logon Fails not an on demand user cccccooocccncccccccconccccnoccnnnnnnos 24 Figure 3 9 Successfully logon page for on demand USEF cceeeeeeeee ees 24 Figure 3 10 Redeem page cositas a 25 Figure 3 11 Remaining hours or data size oocccccccocccnconccoconncononnonncnnnnonnns 25 Figure 4 1 Main Menu of Console Interface cccccccccooccocnccnnncccnnoncnnnns 26 Figure 4 2 UNI Menu costos rete eo nce maken rd 27 Figure 5 1 Setup Wizard Interface oooocccccccccccoconcccnnnccnnononccnnoncnononannonons 31 Figure 5 2 Setup Wizard DescriptiON ccccccccocccnnnccnnnccconconcconnnnnnononannnnnns 32 Figure 5 3 Change Admin s Password Screen cccccccccsseeseeeeeeeeeeeaeeseeeeees 32 Figure 5 4 Choose the System s Time Zone ooccccnnccccccconcccnnncccccnononccnnnncnnnanononnns 33 Figure 5 5 Set System Information ooooc
3. ooooccccoooccocococconocononnos 57 Disable DHCP Server on Private LAN ccccccccccccccccccncccccnnno 58 Enable DHCP Server on Private L N ooooncccccccccccccccccnnnccccnnoos 59 Reserve IP Address Setting on Private LAN ooccccccccnnccnccco 59 Enable DHCP Relay on Private LAN oocccccoccocccncccccoccnnncnnos 60 Example of Authentication Policy 1 ocoooooccocncocnoccoooo 61 Example of Authentication Policy 2 ocooooocccnccnonocconoo 62 Exception Configurati0N ccccccccccconnnccnnncccconoonncnnnnnononanncnnnnnnnnnnonos 62 Local User Listas 63 Example of Adding User ACCOUNTS o coooocccccccnnoccccncnnnonccnnononaninnnos 65 Added User Accounts Screen ooccccnccccccoonccccncccccccoonnccononononanncnnnnonoss 65 Example of Editing User ACCOUNTS o c ooooocccccccnocccnncncnnnccnncnnnnncnnnos 65 Example of Upload User Account Interface 66 Example of Download User Account Interface 66 Figure 5 50 Figure 5 51 Figure 5 52 Figure 5 53 Figure 5 54 Figure 5 55 Figure 5 56 Figure 5 57 Figure 5 58 Figure 5 59 Figure 5 60 Figure 5 61 Figure 5 62 Figure 5 63 Figure 5 64 Figure 5 65 Figure 5 66 Figure 5 67 Figure 5 68 Figure 5 69 Figure 5 70 Figure 5 71 Figure 5 72 Figure 5 73 Figure 5 74 Figure 5 75 Figure 5 76 Figure 5
4. Back Side Public LAN Port can be connected to the open network environment WAN Port can be requires authentication connected to the Internet or before logging on to the Intranet by managed by the system and DC Power Socket Internet Switch Reset button Private LAN Port RJ11 Port resumes the factory can be connected to can be console defaults or the trustful Intranet interface or reconfigures the environment by Switch printer system We without authentication interface recommend you to for logging on to the set this configuration Internet by experts WAN Port The WAN port is connected to a network which is not managed by the system and this port can be used to connect the ATU Router of ADSL the port of Cable Modem or the Switch or Hub on the LAN of a company Public LAN Port The Public LAN port is used to connect to the desired network for management or WLAN and all users connected to the Public LAN must login successfully before using the network resources Administrator s Manual Private LAN Port The Private LAN port is used to connect to the trustful network or Ethernet In other words the computer or user connected to the system from Private LAN does not require login to use the network resources This port can be used to connect to a server such as File Server or a DataBase Server etc DC Power Socket It is used to connect the power supply RJl1 Port There have 2 fun
5. Enable Disable Attribute Logic Value Grou Authentication y P sever ft feo A pe a e pe e ee E IE EET y ee CCC ee ES ee ee Total 20 First Previous Next Las 62 Administrator s Manual Attribute After the Public LAN the system will obtain the user s attributes related to authenticated server Administrator can use certain attributes as the management rule for the setup Logic It has equal to not equal to larger than smaller than and include for your choice Value Please fill in a desired value to be evaluated to the Attribute by Logic Group It specifies a user group for all users matching the management equation Default Group If a user who does not match any management equation logins the priority of this default group will be applied Five Authentication Methods 1 Local The user s account information is stored in the device If you need to manage the user s account please click the hyperlink Local Users List on the Authentication Server interface to enter the Account Management Interface Figure 5 44 Local User List Add User Uplead User Account Dewnlead User Account Retresh ee ee a AN Users List Username Password MAC Group Remark Delete All Total OiFirst Previous Mex Last User List It provides a complete list of existing user accounts as shown in Figure 5 49 includes information such as Username Password MAC Group and Remark The Administrator can delet
6. Subnet Mask Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address 192 1682 i End IP Address 192 168 2 100 Preferred DNS Server 168 95 1 1 DHCP Server ad ENEE AS emate EEr Comiguration X Domain Mame a r WINS IP Address Lease Time Reserved IP Address List O Enable DHCP Relay Specific Route Profile From the pull down menu select your desired Specific Route Profile rule or select None Mode It provides two modes NAT Mode and ROUTER Mode NAT Mode All IP addresses externally connected through the Private LAN Port these 57 Administrator s Manual IP address must belong to the same subnet as the Private LAN Port will be converted into the IP address of the WAN Port and connected to the outside network Router Mode All IP addresses externally connected through the Private LAN Port use its own IP address for external connections Then the device acts like a Router IP Address Enter your desired IP address for the setup Subnet Mask Enter your desired Subnet Mask for the setup Related Setup for DHCP Server of Private LAN Port DHCP Server provides three choices Disable DHCP Server Enable DHCP Server and Enable DHCP Relay 1 Disable DHCP Server Disable the DHCP Server function Figure 5 37 Disable DHCP Server on Private LAN Disable DHCP Server DHCP Serer 5 Enable DHCP Server Configuration O Enable DHCP Relay 2 Enable DHCP Server If y
7. h rs mins Status Enable Disable this billing rule 85 Account Expire Date t days days days ldays days days days days days days Administrator s Manual Validity Duration t days days days ldays days days days days days days Price i lu U LU UU Administrator s Manual Type Administrator may choose Data or Time as user s billing rule Time maximum session time is 24305days Data Transfer maximum data transfer is 2002Mbyte Account Expire day After this number of days if user didn t not activate for the first time the account will be expired automatically Validity Duration The account will remain valid after this number of days prior that user has activated his her account Price Price for the online access Upload On demand User Figure 5 77 Upload On demand User Note 1 The format of each line is ID Password type Data transfer or Session length Actrvation deadine Validity duration without the quotes There must be no space between the elds and commas When adding user accounts by uploading a file any existing account Inthe embedded database that has the same user name as the one defined inthe uploaded file Will n t be replaced by the new one Note 2 The unit of data transfer is byte The unit of session length is second Upload On demand User Account File Nante File Name Key in or
8. Apply to save the settings Figure 5 82 Example of Guest Login Schedule Management Interface Login Schedule Profile Profile Name sd Enable Disable HOUR SUN MON TUE WED THU FRI SAT D 1 2 3 91 Administrator s Manual 5 4 Network Configuration Five functions are provided to control individual jobs of the network transmission which include Network Address Translate Privilege List Walled Device list and Proxy Server Properties 5 4 1 Network Address Translate 1 Static Assignments If you have several IP addresses you can assign them to the WAN port You can define at most 40 groups for the correspondence combination at the Ethernet end Virtual IP Address and WAN end Public IP Address The WAN port will automatically set the public address defined here These settings will be effective immediately after you click the Apply button Figure 5 83 Defining the Static Assignment Address Correspondence Static Assignments tem Internal IP Address External IP Address Total 40 First Prev Mext Last 92 Administrator s Manual 2 Public Accessible Server This function allows Administrator to define at most 40 virtual servers so that the computer other than those of the managed network can access the server in the managed network According to the different services provided the network service can be provided on the TCP port or UDP port or both These settings will be effec
9. Figure 5 58 Example of Deleting a User from Black List Black List Configuration Select Black List 1 Blacklistl REEL Total 1 First Prev Next Last Add User to List 5 2 4 Guest User Configuration When you select Active Guest User you can open the Guest User Configuration as shown in the following figure Figure 5 59 Guest User Configuration Management Interface Guest User Configuration 1 1 Guest User List Session Length 6 Guest User Configuration Hours 74 Administrator s Manual Guest User List The device provides 10 groups for the Guest User List If you wish to open a certain Guest User List you just need to key in the corresponding Password in the password column and then click Apply to complete the setup for the Guest User Configuration as shown in Figure 5 60 Session Length It restricts the session used by the Guest User List The default session length is set to 6 hours and the limit range is from 1 to 12 hours After you select the Active Guest User it is necessary to click Apply to enable this function Figure 5 60 Example of Guest User Management Interface Guest Users List ltern Username Password 5 2 5 Roaming Configuration The system provides roaming with GRIC Server and you only need to set up the related parameter in this page to enable the user of the GRIC Server to use the device These se
10. and then click Setup Internet Properties General Security Privacy Content Connections Programs Advanced s To set up an Internet connection click Setup Dial up and Virtual Private Network settings Add Remove Choose Settings if you need to configure 4 proxy Settings server For a connection Never dial a connection Dial whenever a network connection is not present Always dial my default connection Current Plone Local Area Network LAN settings LAN Settings do not apply to dial up connections LAN Settings Choose Settings above For dial up settings 14 Administrator s Manual 3 Press Next when the new connection wizard appears on the screen New Connection Wizard Welcome to the New Connection Wizard This wizard helps your Connect to the Internet Connect to a private network such as pour workplace network Set up a home or small office network To continue click Next p Cancel New Connection Wizard Network Connection Type What do pon want to do C Connect to the network at my workplace Connect to a business network using dial up or YPN 20 you can work from home a held office or another location Set up a home or small office network Connect to an existing home or small office network or set up a new one C Set up an advanced connection Connect directly to another computer using your serial parallel or infrared port or se
11. clear value Clear gt lt form gt If the user defined login interface includes a graphic file the HTML code of the graphic file path must be the upload graphic file In the Upload Image at the third section of this interface Upload Image File key in the path and file name of such graphic file or browse to select such file The maximum size of the graphic file is 512K Figure 5 65 Path of Graphic File in User Login Interface lt img src images xx jpg gt After the graphic file is uploaded the second section Existing Image Files of this page will list the graphic files uploaded to the device You can select or delete any graphic file and the system will show the used space of the graphic file in the third section Figure 5 66 Graphic File Description Existing Image Files user images F After the web page and graphic files are uploaded you can click Preview at the bottom of this page to preview your user interface 79 Administrator s Manual Figure 5 67 Path of Graphic File for User Logout Interface Total Capacity 512 K Now used OK Upload Image Files Upload Images Subralt Preview 2 Upload Logout Page The system will provide you with the user defined logout interface which is similar to the user login interface Figure 5 68 Upload User Logout Interface Upload Logout Page File Name AE Existing Image Files Userimages L Total Capacity 512 K Now
12. term MAC Address ltern MAC Address a ejO i Total 40 First Prey Met Last 5 2 7 On demand User Configuration On Demand user When you connect the Printer to console port there are 2000 On demand user accounts available By default the On demand user database is empty While you press the Printer s button the On demand user will be created then print out a receipt Figure 5 72 which will contain this On demand user s information Figure 5 73 Figure 5 74 82 Administrator s Manual Figure 5 72 Receipt Information Welcome Username Password q6m34m3b Price US 2 Usage 60 minute s Shared WEP Keys HEX 40 bit Valid to use until 2004 05 05 12 46 56 Thank You Figure 5 73 On demand User Configuration On demand User Configuration Store Name Max 8 char Receipt Header Welcome e q Welcome Receipt Footer Thank You e q Thank You Printer Baud Rate 38400 WLAN ESSiD rr WEP Key On demarnd Users List Billing Configuration U 83 Administrator s Manual Figure 5 74 On demand User Page Field and Description You can specify the prefix of the user name max is 8 char for example Store Name D Link Receipt Header You can configure the receipt s header in this filed Receipt Footer You can configure the receipt s footer in this filed You can specify the baud rate to support specific printer the default setting is Prin
13. 389 SO a CMS dc dc Account P l Authentication Server Secondary LDAP Server SeverIP Pot Account Y Attribute Assign to Group Lroupl w Exception Configuration O Enable Disable 5 NT Domain You just need to key in the IP address of the Domain Controller Server and determine whether or not to enable the Transparent Login function to use the NT Domain server for Authentication 69 Administrator s Manual Figure 5 53 NT Domain Setup Screen Domain Controller Authentication Serer IP address O O k servel Transparent Login Enable Disable Assign to Group LSroupl w Exception Configuration Enable Disable Transparent Login It sets up whether or not to login the device after a user logins the Windows Domain Caution 1 At present it only supports win2000 domain controller 2 If you want to use NT Domain Autheneication Please make sure 2 1 WAN port Preferred DNS Server IP address is Domain Controller Server IP address 2 2 Walled Garden List has also keyed in Domain Controller Server IP address 2 3 Policy Name is your complete Domain Name Layer 2 Authentication enable disable so called 802 1x authentication Please refer to technical handbook for a better picture of this function Some information are required such as Authentication Server IP Authentication Port Secret key for authentication Accounting Service IP Accounting Service Port Secret key for accounti
14. 802 1X Server IP Key in the location of the RADIUS server by its IP Address or Domain Name 67 Administrator s Manual Authentication Port It is the Authentication port for RADIUS server Accounting Port It is the port reading the accounting information Secret Key It is used for encryption and decryption Accounting Service Select to enable Accounting Service as needed Authentication Method CHAP and PAP are for your choice Figure 5 51 RADIUS Setup Screen Primary RADIUS Server 502 18 Authentication Enable Disable Trans Full Name Enable Disable Server IP Authentication Port o rDefauiti18123 Accounting Port Lo rDefauiti1813 z Secret Key Accounting Service Disabled w 4 Authentication Authentication Method Server Secondary RADIUS Server Server P Authentication Port Accounting Port Mf Secret Key Accounting Service Disabled w Authentication Method CHAP w Assign to Group Groupl w Exception Configuration O Enable Disable 68 Administrator s Manual 4 LDAP You can select primary server or secondary server as the LDAP server for Public LAN If you select the LDAP Authentication method it is necessary to key in the IP Address Domain Name Port number Base DN Data of LDAP Server After you confirm the data please click Apply Figure 5 52 LDAP Setup Screen Primary LDAP Server server IP Domain NamefP address Pot Default
15. Destination Source Destination End Port End Port of Source Destination 89 Administrator s Manual 5 3 2 Specific Route Profiles The system provides the route profile setup function letting Administrator to determine the network path which suits all routers best and send the packet to the destination through network Administrator can use the pull down menu to select and set your desired route profile Figure 5 81 Example of Editing Specific Route Profile Specific Route Profile Clokaltslobal Profile Name Route Destination Gateway Default item IP Address Subnet Netmask IP Address i 2 JPA ap E 7 AS a so IS a sl E pl E DO a E of gt JA Profile Name Name of this Specific Route Profile Destination IP Address It is the network or Server IP that specifies the destination of the connection The IP 192 168 202 0 is used as the destination of the connection 90 Administrator s Manual Subnet Netmask It specifies the netmask destination the subnet mask of 192 168 202 0 is an example Gateway IP Address It specifies the IP address for the next connected router The setting here is 192 168 200 253 because it is behind the router at 192 168 202 0 After the static route is changed it is necessary to restart the system to refresh the setting 5 3 3 Login Schedule Profiles The user s login schedule can be set After the setup is completed please click
16. History Example ooccoooccccccocccccococcococoncnnconnncononcnnnnnnnononnanencnnnnens 108 Traffic History Example 2 ooococoooccocccocconcococoncnnncncononcnnnnnos 109 DHCP Server Reporting Example cocoooooncccccccccccoccccnnnncnnos 109 Notify Configuration Example ccocccccoccocccccnnccccccconcccnnnncnoss 110 vil Administrator s Manual FCC CAUTION This equipment has been tested and found to comply with the limits for a class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienc
17. Logout Timer l to logout after being idled for duration of this logout time Multiple Login It does doesn t allow multiple logins for a user Guest Account Enable disable the Guest Account Primary DNS serve Primary DNS Server IP Address Secondary DNS Secondary DNS Server IP Address server User must click Login to execute the login procedure The system will not automatically get the username and password from the previous login for the direct Public LAN login If a user login a small window will show the user s information and provide a logout button for the logout Disable stands for the case that closing the small windows will not cause a logout to the user 105 5 6 2 Interface Status Administrator s Manual In this function you can have an overview on the information of each interface including WAN port Wireless port Public LAN and Private LAN Port WAN Wireless Public LANI DHCP Saree Private LAN DHCP Server Figure 5 99 Interface Status Example interface Status MAC Address IP Address Subnet Mask Mode MAC Address IP Address Subnet Mask ESSID Channel Encryption Function Mode MAC Address IP Address Subnet Mask Status WINS IP Address Start IP Address End IP Address Lease Time Mode MAC Address IP Address Subnet Mask Status WINS IP Address Stan IF Address End IP Address Lease Time 00 02 bF 2E 13 4E 10 2 359 255 255 255 0 MAT PIA
18. address P address Subnet mask Default gateway C Obtain ONS server address automatically f Use the following DNS server addresses Preferred ONS server 1 JEEN a Alternate ONS server 2 Click the IP Settings icon and then Add in the Default Gateways column to enter the IP address of the device After this procedure is completed click Add You can ask the network administrator to give you the IP address specified for the device 118 Administrator s Manual Advanced TCP IP Settings IP Settings DNS WINS Options IP addresses IP address Subnet mask DHCP Enabled Remove Interface metric Cancel 3 Ifthe DNS Server column is blank please click Using the following DNS Server Address in the window of Internet Protocol TCP IP and then enter the DNS address or the DNS address provided by ISP After this procedure is completed click OK 21 General fou can get F settings assigned automatically if your network supports this capability Othermize pou need to ask your network administrator hor the appropriate IP settings f Obtain an IP address automatically Use the following IP address IP address Subnet mask Defaulbgateway Alternate ONS server Advanced conce 119 Administrator s Manual 7 5 Check the TCP IP Setup of Windows XP 1 Select Start Console Net
19. aee Step 4 Set Static IP Address Click Next to continue IP address 1023168 subnet mask 255 255 255 0 f Default gateway 10 2 3 175 f AY o gt p 35 Administrator s Manual e For dynamic IP address After you select Dynamic IP Address as shown in Figure 5 8 click Next to continue or Exit to exit Figure 5 8 Select the Connection Type for WAN Dynamic IP Address select the connection type for WAN port Click Next to continue Static IP Address Choose it to set static IP address Dynamic IP Address Choose itto obtain an IP address automatically For most cable modem users O PPPoE Client Choose it to set the PPPoE client s Username and Password For most DSL users 9 0 Back Next Exit e For PPPoE After you select PPPoE enter the username and password of the PPPoE as shown in Figure 5 9 Click Next to continue or Exit to exit Figure 5 9 Set WAN PPPoE Step 4 Set PPPoE Client s Information Enter the PPPoE Clients information provided by your ISP Click Next to continue Lisernarme Password 36 Administrator s Manual 5 Configure Public LAN This procedure sets the related information of the Public LAN as shown in Figure 5 10 Please enter IP and Subnet Mask and determine to Enable or Disable the DHCP Figure 5 10 Configure Public LAN Configure Public port s information Click Next to continue IP Address 192 168 1 25d FE Subn
20. and Private LAN c ccco 9 3 2 GOING States ar 17 3 2 1 System CONCEP Larios ollo b crap 17 3 2 2 Connecting Network Devices cccccccccocconncccnnnccnonononnccnnnnononannncnnnnonoss 19 3 2 9 Bega lO 20 4 Console Interface ooocccnncconnccccnncconncconnccnnnncnnnncnancnonnnnonnrenannnnanenos 26 4 1 Main Menu of Console interface ccccccccccccnnncconnncconnnonncnnnnnnnnnonncnnnnnnnnnnnanos 26 Administrator s Manual 4 2 Utilities for network debugQiNQ oocccccccccooccnnccononccnncncnnnconnonnnncnnnnonanncnnnnnnnos 27 4 3 Change admin password ccccccccseseececceeeseeeccceeesseeesaeasecessseaseeecessaeeeees 28 4 4 Reload factory detalla cancionero iria 29 4 5 A O A 29 5 Web Management Interface oncconncconncconccconoccnnnccnnnccnnarenanrnnanonos 30 5 1 System Contigua i 30 5 1 1 SONG UFATION Wizard 31 5 1 2 SV SLSM NONM AMO tia Sank decte ct aeent ees Saaverceueweenet 41 SS WAN O a da os 43 5 1 4 Authentication Configuration ccccoccnnnccnnnccccnononnccnnnncnonnnancnnnnnnnnnnnnos 45 51 5 Private COMIC UPA OM seriada lada 57 5 2 User Atenco tl 60 32b AUIMEntCa ti n FONC asiatico ioid li 60 3 2 2 Group GOMMOGUIAOM eel de 71 9293 Black sto ION ida 72 9 2 4 GuestUser ContiguratiOn siii 74 9 20 Roaming SONIQUIAUIO Nassau 75 5 26 Additi nal CONTIGUA ION e 77 5 2 7 On demand User ConfiguratiQN ccccooocnnnccnnnccccccnonnnccnnnnononnnancnnoncnnnnnnnos 8
21. been booted If the version of Windows operating system is not for servers the default TCP IP settings will treat the PC as the DHCP client procedure You can check the TCP IP setup according to the following 7 3 Check the TCP IP Setup of Windows 9x ME 1 Select Start Console Network B Control Panel Eile Edt View Go Help y Cut Copy Favorites a Back l amara j Up a Accessibilty Add New Options Hardware Control Panel EA Display Network Configures network i hardware and software Modems Microsoft Home Technical Support Fa Paste ODBC Data Sources 32bit eg Add Remove Programs Game Controllers Passwords mtb Undo x Delete Properties DateTime Internet Options b o Views Multimedia Power Management cal El Configures network hardware and sol a My Computer 112 Administrator s Manual 2 Select the TCP IP communication protocol of the network card and then click Properties Client for Microsoft Networks HOMO PONET Family Ethernet Adapter FCI 15 4 Mf Dial Up Adapter t TCPIP AMD PENET Family Ethernet Adapter PCI 15 4 4 TCP IP gt Dial Up Adapter ES femos Properties Client for Microsoft Networks Using DHCP If you want to use DHCP please select Obtain an IP Address Automatically which is also the default setting of Windows Reboot the PC to ma
22. browse the file that contains the on demand user information format as described in Note 1 86 Administrator s Manual 5 3 Group Profile The device provides three kinds of Profile configurations including Firewall Profile Specific Route Profile and Login Schedule Profile 5 3 1 Firewall Profile The system offers Global and 5 firewall profiles If you want to set up the firewall rules to suit all users you can set such firewall profile in Global and the other five firewall profiles can be set without conflict between one another Figure 5 78 Example of Firewall Profile Firewall Profiles lobaliilobal Profile Name Filter Rule Item Active Action Mame Source Destination Protocol MAC 1 L Block ANY ANY ALL 2 L Block ANY ANY ALL i dl Block ANY ANY ALL 4 LI Block ANY ANY ALL z L Block ANY ANY ALL E ill Block ANY ANY ALL Fl L Block ANY ANY ALL z LI Block ANY ANY ALL z L Block ANY ANY ALL 10 F Block ANY ANY ALL Total S0 First Prev Mext Last 87 Administrator s Manual Filter Rule Item The filter rule uses a serial filter to determine the permission of transmission from the source address to the target address or examine whether there is a data loss Please click Index Number for the detailed information Figure 5 79 Select the Group for Applying Firewall Profile Rules Firewall Profiles ay Global Global e 11 18 IF Filter 2 SIF Filter 3 J4 P Filter 4 GAP Filter
23. including four network cables with RJ 45 connectors All PCs need to install the TCP IP network protocol 3 1 2 Installation Procedure Follow the following steps to install the system 1 Make sure the power is turned off 2 Connect the WAN port Use the network cable of the 10 100BaseT to connect to the system and the network not managed such as the ATU Router of ADSL port of Cable Modem or the Switch or Hub on the LAN of a company 3 Connect the port Optional Use the network cable of the 10 100BaseT to connect to the system and the network not managed such as the ATU Router of ADSL port of Cable Modem or the Switch or Hub on the LAN of a company 4 Connect the Public LAN The Public LAN is used to connect the desired network for management or WLAN and all users connected to the Public LAN must login successfully before using the network resources Use the network cable of the 10 100BaseT to connect to the Switch or Hub of the Public LAN and then use the network cable of the 10 100BaseT to connect to the Administrator s PC If it is necessary to connect the PC or wireless AP directly to the Public LAN then we need to use the cross over line Administrator s Manual Warning Public LAN cannot connect to Layer 3 device 5 Connect the Private LAN port The Private LAN port is used to connect the trustful network or Ethernet In other words the computer connected on Private LAN does not require login to use
24. of the system the system will exit the working stage of such user and terminate the user s access right for the network In the system the device is responsible for authorization and management functions The user account information is stored in the database or other specified external Public LAN databases The process of authenticating the user s identity is executed via the SSL encrypted webpage Using the web interface can ensure that the system is compatible to most desktop devices and palm computers 18 Administrator s Manual 3 2 2 Connecting Network Devices Figure 3 2 provides a simple example of setting up a small enterprise network Figure 3 2 Example of Setting up a Small Enterprise Network In Figure 3 2 the device is set to control a part of the company s intranet The whole managed network includes cable network users and wireless network users In the beginning any user located at the managed network is unable to access the network resource without permission If you want to have the access right to access the network beyond the managed network you must open an Internet browser such as the Internet Explorer to connect to any website When the browser attempts to connect to a website the device will force the browser to redirect to the user login webpage The user must enter a username and password for Public LAN After the identity is authenticated successfully the user will gain proper access right
25. usec OK Upload Images ae Administrator s Manual The difference resides on that your user defined user logout interface must include the following HTML codes to provide users a channel to enter the username and password Figure 5 69 HTML Codes Required for User Logout Interface lt form action userlogout shtml method post name Enter gt lt input type text name myusername gt lt input type password name mypassword gt lt input type submit name submit value Logout gt lt input type reset name clear value Clear gt lt form gt POP3 Message the system can allow administrator to edit its own warning mail sent to user who has opened a mail browser without logging on to the internet beforehand Figure 5 70 POP3 Message Edit Mail Message lt DOCTYPE HTML PUBLIC AN3C DTD HTML 4 0 Transitional EN gt lt HTML gt lt HEAD lt META HITP EQUIV Content Type CONTENT text html charset us asci gt lt FONT face Times New Roman size 6 gt lt S TRONG Welcome lt S TRONG gt lt FONT size 4 gt lt STRONG To access the network please open up your browser and Enhance User Authenticate the system allow administrator to enter at most 40 81 Administrator s Manual predetermined MAC addresses only the user come from these MAC addresses will be able to reach the login page Figure 5 71 MAC Address Control Interface MAC Address Control
26. 1 and 255 milliseconds indicates the interval of the Delivery Traffic Indication Message DTIM A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages When the Access Point has buffered broadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Access Point Clients may hear the beacons and informed to receive the broadcast and multicast messages Layer2 Client Isolation You can enable this function to isolate two different domains or just Disable from system default EX 10 2 3 4 can t see 10 2 4 4 92 Administrator s Manual Figure 5 30 Wireless Port Configuration 2 Enable IP PHP ll Enable User Authentication Lal specific Route Profile Operation Mode HAT IP Address 10 2 5 100 Subnet Wask 255 255 255 0 mn Wireless Port IP PNP At the user end you can use any IP address to connect to the machine at the Public LAN section no matter what the IP address at the user end is you can obtain the Public LAN and access the network resources properly suppose you used static IP address and specified IP address Subnet Mask Default Gateway and DNS User Public LAN You can choose to Enable or Disable user Public LAN 1f you enable user authentication you have to define Specific Route Profile to user Specific Route Profile To define specific route for user to access network Operation Mode It provide
27. 192 168 3 254 255 255 255 0 mix 4 Enabled MAT 00 12 5F 2E 13 40 192 168 1 254 255 255 255 0 Enabled PA 192 168 1 1 192 168 1 100 1440 Mints MAT 00 02 6F 2E 13 A0 192 166 2254 255 255 255 0 Enabled PLA 192 168 2 1 192 168 2 100 1440 Minis 106 Administrator s Manual Figure 5 100 Interface Status Example L WAN Wireless Encryption function of wireless Mode Public LAN mode NAT mode MAC Address The MAC address of the Public LAN IP Address The IP address of the Public LAN cin 107 Subnet Mask The Subnet Mask of the Public LAN Administrator s Manual MN Subnet Mask The Subnet Mask of the Private LAN port Enable disable the DHCP function on the Private LAN port WINS IP Address Set the WINS server IP address on the DHCP server Private Start IP Address Starting IP Address in DHCP IP range DHCP Server End IP address End IP Address in DHCP IP range The lease time of the IP address 5 6 3 Current Users In this function you can obtain the information of each online user including Username IP Address MAC Address Packets In Bytes In Packets Out Bytes Out Idle Time and Logout Administrator can use this function to force a specific online user to logout If you want to force a user to logout you only have to click the hyperlink Logout next to the online user s name Figure 5 101 Online User Data Current Users List Pkts In Pkts Gut Item Username idle Logout Bytes I
28. 2 5 3 Group Pro MS ati a a id 87 Doel IFC WAM Pro Oasis 87 5 32 DPECHIC ROUTE Profiles unica 90 533 Login Schedule Proviles ecs cs oc Sev oe a a a teses eks 91 5 4 Network GOntigura OM nt tn 92 5 4 1 Network Address Translate ooonccccccocnnnconccoconnonnonononnnnnnnnancnnnononanenss 92 He PRMIege Sra ic 94 Dao MONO RSE det diada 96 944 Waled Garden stat data 98 545 0 E siose n an aiai 99 3 46 Dynamit DNS ade 100 5 5 A A aac nae aae eet aia oan te eee 100 Administrator s Manual 50 1 Change PassWord 100 5 5 2 Backup Restore Strategy iceri e 101 599 Firmware Upgrade neriasi a 102 594 ROSA A O E 103 5 6 A eee E aoe eee 103 roy Pal Sye oS eee eee ti td 103 562 ACS SLATS a aa aa a aa 106 A A eee ae a een 108 304 MATING HON a E A E 108 9 60 07 DHCP Server REDOMING ita ti A N 109 5 66 Notify GOMMGUEATION isses E AE 110 Technical SUD Oir 111 Appendix Windows TCP IP Setup cooccoccconcconccconcconoconancnnnnas 112 7 3 Check the TCP IP Setup of Windows 9x ME ccceccssseeeeeeeeeeeeeeeeeeeees 112 7 4 Check the TCP IP Setup of Windows 2000 c 0ooooooonnncccccccnnncccccnnnncnnncnnnannnnos 116 7 5 Check the TCP IP Setup of Windows XP cccccccesseeeeeeeeeaeeeeeesaaeeeeees 120 Administrator s Manual Figure Index Figure 3 1 The User Public LAN FlOW cocccooooccoccccccocconccococconccononccnncnnnnos 18 Figure 3 2 Example of Setting up a Small Enterprise Network
29. 5 i Global Global Figure 5 80 Example of Edit Filter Rule Edit Filter Rule Rule Item 1 Rule Name Enable This Rule Action Block Protocol source MAC Address et Specific MAC Address Filter Start End Interface Subnet blask Operator Por Port The figure above sets up the first IP Filter rule for the first firewall profile in which all of its contents are sent from 192 168 1 1 and the destination 1s 192 168 1 100 Port 54 packets which will be blocked directly by the system regardless of TCP UDP or ICMP 88 Administrator s Manual Rule Name Name this IP Filter rule Enable this Rule Such rule will be effective when selected Action If your setting matches Pass The packet passes successfully Block The packet is blocked Protocol Provides three kinds of protocols TCP UDP and ICMP for your choice All stands for all three protocols chosen Source MAC Source Address of the MAC Address Source Destination IF Source Destination Interface includes 4 interfaces WAN Public LAN Private LAN and wireless for your choice ALL stands for all the four interfaces Source Destination IP Address IP address of Source Destination Source Destination Subnet Mask Subnet Mask of Source Destination Source Destination Operator Provides the comparison rules Equal Not Equal gt Larger Than and lt Less Than Source Destination Start Port Start Port of Source
30. 77 Figure 5 78 Figure 5 79 Figure 5 80 Figure 5 81 Administrator s Manual POPS Setup Screen ococccccccccoocccccnnccoconcnonccnnnnnnnnnnnncnnnnnnnononannnnnnnnnnnnnnnns 67 RADIUS Setup Sres ed 68 EDAP SElUD cren E 69 NT Domain Setup Screen ccccccccccccoonncccnncccccccoonccnnnnnononancnnnnnnononnnans 70 Layer 2 Authentication oocooocccccconcncoccnnnncnnncnonnoncnnnnnanonconanennos 71 Group Configuration Screen oooccccccccccccconcccnnnccccnnnonncnnnonononancnnnns 72 Example of Black LISU viure lr 73 Example of Adding User to Black List 73 Example of Deleting a User from Black List 74 Guest User Configuration Management Interface 74 Example of Guest User Management Interface 75 Roaming ConfiguratioN cocccccooonnncconnccccconoonccnnnonononancnnnnnnnnnnnnnos 76 Additional Configuration ccccccccccccnnnccnnnccncncnnnncnnnonononanncnnnnnnnos 77 Upload User defined Login Interface ooooccoccocoocconncnno 78 HTML Instructions Required for Using User Defined Interface 79 Path of Graphic File in User Login Interface 79 Graphic File Description ccocccccooccnncccnnccccononoconnncnonnnnanccnnns 79 Path of Graphic File for User Logout Interface
31. Administrator s Manual Administrator s Manual Version 1 0 1 Administrator s Manual Copyright The intellectual property rights and copyright of this manual belong to vendor and are protected by the R O C copyright laws and international copyright laws No part or the manual in its entirety may be transshipped transmitted duplicated distributed displayed published or broadcasted in any form or by any means without the prior written permission of vendor The trademarks mentioned in the manual belong to the owners of the respective registered companies or organizations Administrator s Manual Table of Contents le APPO C icv sinise seve devesevadetaeevecetecevensvenewencvenesecseeecesenuescesesececexcesccceseseiect 1 ile Bret IMMOGUCH OM da dotada 1 1 2 Bollore YOURS A iris rr aaa 2 1 2 1 A ee ene eee ee ee eee ee eee eee eae 2 1 2 2 Document Convenio Meca a Ea 2 2 Product DeSCHPUO Nimri nadal 3 2 1 PACKAGE CONS IS a ia 3 2 2 A a tet es adalat aaite r 3 2 3 Hardware Pet Sed ds E 5 2 4 Technical SOSCCHIC ATOMS rd 6 2 4 1 LACAN OAS iaa 6 2 4 2 INGE WOM III ac ra RAS 6 2 4 3 FOWA oe antares aces secre PP A a 6 2 4 4 User Manageme nt serioena D i 6 2 4 5 ACMI S Dea UO Mes cea cco se has ater seen ce gee nat tbe aco aae eens 7 2 4 6 PAG COUN G a e is 7 3 INSTala ON on 8 3 1 E O e a ctedesaan 8 3 1 1 System REQUIEM Si adds 8 31 2 Installation Procedure lr 8 3 rey Setting up the PC for the Public LAN
32. Age DHCP lease file entries sorted by Name Find the entry for this IP address EA Find the entry for this MAC address Po Find the entry for this Client Name Po 109 Administrator s Manual 5 6 6 Notify Configuration The device will save the history into the internal DRAM If you want to automatically send the history to your email address please enter your e mail address in the receiver field Figure 5 105 Notify Configuration Example Notify Configuration Interval SyslogTo fy Pt History Email Sender The email address of administrator server who is in charge of the history bookkeeper Receiver The email address of a predefined IP user who is being monitored Interval The Interval column shows the interval for sending the history email If you choose one day then the history mail will be sent to you once a day Syslog To It specifies the IP and Port of the Syslog server 110 Administrator s Manual 6 Technical Support If you have any other technical questions please feel free to contact our technical support department 111 Administrator s Manual 7 Appendix Windows TCP IP Setup If you have not changed the factory default settings and are using Windows 95 98 ME 2000 TCP IP it is not necessary to make any modification here With the factory default settings the device will automatically assign an appropriate IP address and related information to each PC after the PC has
33. C Address List ltern MAC Address Group Remark l 2 f Guest y AEE E alo B Guest v A erp Guest v E Guest eet i IO of Guest v Total 1 00 First Prev Next Last 5 4 3 Monitor IP List The system will send out the packet regularly to monitor and control the status of the IP addresses on the list If the monitored IP address does not exist the system will send out an e mail to Admin once every 30 minutes such as 1 00 1 30 2 00 2 30 and 3 00 until the problem is fixed Click Monitor to view all monitored IP Figure 5 88 A maximum of 40 IP address for the monitoring 1s allowed 96 Administrator s Manual Figure 5 88 Monitor IP List Admin Email Interval Monitor IP List term IP Address tem IP Address 11 13 15 17 19 Total40 First Prev Next Last Sender The email address of administrator server who is in charge of the monitoring Receiver The email address of a predefined IP user who is being monitored Interval The interval time for administrator server to dispatch a warning or an instruction message Monitor IP list The list of the IP addresses taken under surveillance Monitor Show monitor IP status Figure 5 89 97 Administrator s Manual Figure 5 89 Monitor IP result Monitor IP result Bo IP Result 1 192 169 1 200 oS 5 4 4 Walled Garden List This system allows users to login to certain websites before
34. External Network from Network Section Managed by System If all the steps are set properly so far we can further connect the device to the managed network to experience the controlled network access environment First connect a user end device to the network at the Public LAN and set the dynamic access network After the network address is obtained at the user end open an Internet browser and link to any website Then the default login webpage will appear in the Internet browser 22 Administrator s Manual Figure 3 6 Entering Username and Password User Login Page Username st Password e Cea Remaining Key in the created username and password in this interface And then click on the Enter button for both standard user and on demand user Figure 3 7 Successful Login Page A Login Successfully Microsoft Internet Explorer Hello test postfixi Losin Successfully Please close this window or click this button to thank you Login time 2004 4 13 11 59 35 After this user login successfully you have just completed the setup and allowed it to provide you with a managed network environment This user can also browse the webpage on the Internet Nevertheless if you are not a on demand user please do not click on Remaining because the following error window will appear 23 Administrator s Manual Figure 3 8 Logon Fails not an on demand user User Login Page
35. LAN data by batch processing 1 2 Before you Read 1 2 1 Audience This manual is intended for system or network administrators therefore we assume that our readers have acquired networking knowledge to a certain extent and are able to complete the setups step by step following the instructions of this manual in order to use for a better manage of network system and user data 1 2 2 Document Convention For any caution or warning that require special attention of readers eye catching italic font put in box is used as highlight An example is given below Warning For security purposes you should immediately change the Administrator s password Administrator s Manual 2 Product Description 2 1 Package Contents The standard package of the system includes Wireless System x 1 CD ROM Administrator s Manual and Quick Installation Guide x 1 Power adaptor x Ethernet cable x 1 console cable x 1 Wall mount 2 2 Front Panel Public LAN Indication Light WAN Indication Light up if being connected to Light Public LAN of th Light up if being AO Ac Open connected to network environment WAN port managed by the system Private LAN Indication Light Wireless Indication Power Indication Light up if being connected to Light ae 9 Light Light up if Light up if power Private LAN port of the trustful Is on wireless is Intranet environment o functioning properly Administrator s Manual
36. Protocol The default wide area network protocol that provides communication Install across diverse interconnected networks Uninstall Description Show icon in taskbar when connected OK Cancel Using DHCP If you want to use DHCP please select Obtain an IP Address Automatically which is also the default setting of Windows Reboot the PC to make sure an IP address is obtained Internet Protocol TCP IP Properties x General You can get F settings assigned automatically if your network supports this capability Othenwise you need to ask your network administrator for the appropriate F settings IP address Subnet mask Default gateway Obtain ONS server address automatically Use the following ONS server addresses Preferred DNS server S E Advanced canoe Alternate DHS server 117 Administrator s Manual Using Static IP Address If you have completed the setup for your PC please inform the network administrator before modifying the following setup 1 Click Advanced in the window of Internet Protocol TCP IP Internet Protocol TCP IP Properties l Al xj General You can get IF settings assigned automatically if pour network supports this capability Otherwise you need to ask your network administrator hor the appropriate IP settings f Obtain an IP address automatically Use the following IP
37. Username Password esees Sorry this feature is available for on demand user only The following is the successful login page for on demand user There is an extra function the Redeem button that user can add credit in the current account if the remaining usage is considered to be insufficient Figure 3 9 Successfully logon page for on demand user A Login Successfully Microsoft Internet Explorer A a E Hello bestifiprors tii Login Successfully Please close this window or click this bution to thank Fou Login time 20044 13 11 59 35 Remaining Usage 40 30 Attention The maximum session time data transter is 24305 days 2003Mbyte If the redeem amount exceeds this number the system will automatically reject the redeem process After user has paid the redeem cost at counter he she will get another username and password by key in this information in the appropriate window the system will merge the two accounts 24 Administrator s Manual and put together the available usage Figure 3 10 Redeem page Usemame O This window will show the remaining hours or data size for user s online access Figure 3 11 Remaining hours or data size Day Hour Min Sec Mbps 25 Administrator s Manual 4 Console Interface The interface provides two types of function A The device provides a RJ11 interface for the administrator to handle different problems and situations occur
38. ain access to the Internet over the LAN How do vou connect to the Internet connect through a phone line and a modern connect through a local area network LAN lt Back d te D Cancel 5 Do not choose any option in the following LAN window for Internet configuration Internet Connection Wizard xl Local area network Internet configuration Select the method you would like to use to configure your proxy settings IF you are not sure Which option to select select automatic discovery or contact pour network administrator Automatic configuration may override manual settings To ensure the use of manual settings disable automatic configuration Automatic Configuration Automatic discovery of proxy server recommended Use automatic configuration script Address Manual Proxy Server lt Back net gt Cancel 12 Administrator s Manual 6 When the system asks Do you want to set up an Internet mail account now choose No Internet Connection Wizard i x Set Up Your Internet Mail Account An Internet mail program i installed on pour computer Internet mail allows you to receive and send e mail messages To successtully set up pour Internet mail account you must have already signed up for an e mail account with an Internet service provider and obtained important connection information If you are missing any information the wizard asks you to prov
39. alt Figure 5 49 Example of Download User Account Interface Users List Usemame Password MA Group Remark download 2 POP3 If POP3 is used for the Public LAN you just need to set the Public LAN mechanism to POP3 The setup for primary server or secondary server is available Enter the IP address or domain name of the Primary POP3 Server and its Primary POP3 Server port Such setup will be enabled immediately after you click the Apply button It is not compulsory to set up the Secondary POP3 Server 66 Administrator s Manual Figure 5 50 POP3 Setup Screen Authentication Policies Configuration Authentication 3 pestin3 w Prefered Authentication Method L Policy Policy Name postie P s postfix name Policy Status O Enable Disable Black List Profile Primary POPS Server server IP oman Name IP address Pot PDefaut 110 C Enable SSL Connection Authentication Secondary POPS Server C Enable SSL Connection Server Assign to Group L Sroupl w Exception Configuration Enable Disable Enable SSL Connection if you select this option POP3 Protocol will do the Authentication 3 RADIUS The RADIUS server sets the external Authentication for user accounts The setup for primary server or secondary server is available and such setup will be enabled immediately 802 1X Public LAN Select to enable 802 1X as needed Click the hyperlink Edit to enter the edit interface of the
40. ate Enable Disable Permit MAC Address List User Control It applies the rules for general users Logout Timer If a user has idled and not used the network for a while the system will automatically log out the user Such logout time can be set in the range of 1 1440 and the default logout time 1s 10 minutes Multiple Login After you have selected this function the user with the same ID can log in from several computers Friendly Login After you select this function the login page will automatically obtain the username and password from previous login The login page will be dismissed and user no longer needs to enter username and password to login The username and password for login will be saved for 12 hours Logout When a user login a small window will appear and show the user s information and provide you with a logout button for the logout If you choose to 17 Administrator s Manual enable the friendly logout when you close such window it will pop out a confirmation window asking if user really wants to logout If you do not select this option closing the window will not log out the user User Friendly Credit Reminder For On Demand Users who have paied before they access internet they can check how much time left from the login window and if they only have 10 mintues left the screen will show some message as below You only have 10 minutes left if you still want to access internet please check
41. ccccccccccccoonccnnnnccnononccnnnnnnnononannnnnos 34 Figure 5 6 Select the Connection Type for WAN Port ocooooocccccccccccccoocccnos 35 Figure 5 7 Set the Connection Type for WAN Static IP Address 35 Figure 5 8 Select the Connection Type for WAN Dynamic IP Address 36 Figure 5 9 Set WAN PPPOE ociosos int a 36 Figure 5 10 Configure Public LAN oooocccccccccccccoonccnnnnccncconccnnnnnonononannnnnns 37 Figure 9 11 Set DHCP SENO e de 37 Figure 5 12 Set Wireless Access Point Connectio0nN oooooccccnncccccccoonccnns 38 Figure 5 13 Configure Wireless port oocccccccccoocoonncconnncconoonccnnnncccononannnnnos 39 Figure 5 14 Enable DHCP Sever of Wireless Port oooooccccocccccoccooncos 39 Figure 5 19 Restall sanidad Riba 40 Figure 5 16 System Configuration ccoocooonnnccnnccccccoconncnnnnncnnnonnncnnnnnonononannnnnns 41 Figure 5 17 Example of WAN Static IP Mode o cccccooooccccccccccccncccnoo 43 Figure 5 18 Figure 5 19 Figure 5 20 Figure 5 21 Figure 5 22 Figure 5 23 Figure 5 24 Figure 5 25 Figure 5 26 Figure 5 27 Figure 5 28 Figure 5 29 Figure 5 30 Figure 5 31 Figure 5 32 Figure 5 33 Figure 5 34 Figure 5 35 Figure 5 36 Figure 5 37 Figure 5 38 Figure 5 39 Figure 5 40 Figure 5 41 Figure 5 42 Figure 5 43 Figure 5 44 Figure 5 45 Figure 5 46 Figure 5 47 Figure 5 48 Figur
42. chings pial whenever a network connection is not present Hever dial a connection e sways dial my default connection Gurren one Seb Default Local Area Network LAM settings LAN Settings OK Cancel pp Administrator s Manual 3 Choose I want to set up my Internet connection manually or I want to connect through a local Area network LAN and then click Next x Welcome to the Internet Connection Wizard The Internet Connection wizard helps you connect your computer to the Internet you can use this wizard to set up a new or existing Internet account want to sign up for a new Internet account My telephone line is connected to my modern want to transter my existing Internet account to this computer My telephone line i connected to my modern Mant to set up my Internet connection manually or varies onnect through a local area network LAN To leave pour Internet settings unchanged click Cancel To learn more about the Internet click Tutorial Totenel Back C n Cancel 11 Administrator s Manual 4 Choose I connect through a local area network LAN and click Next Internet Connection Wizard l x Setting up your Internet connection IF you have an Internet service provider account you can use pour phone line and a modern to connect to it IF your computer is connected to a local area network LON you can g
43. counterjumper Internet connection detection the device detects if the Internet connection is functioning properly by dropping direct packet to the predetermined URL or IP address URL or IP address this predetermined URL will be used as a target address to check the Internet connection Upload File 1 Upload Login page There are three frames with blue edges which represent 3 sections for user to define the user interface If you want to use user defined interface please enter the filename of the login webpage in the first part of the interface or browse and click such file If you want to recover the factory default setting of the login interface click the Use Default Page button After the upload is completed click the Preview at the bottom of this page to preview your user defined login user interface Figure 5 63 Upload User defined Login Interface Upload Login Page File Name eS 1brott Use Default Page The user defined login interface must include the following HTML codes to provide a channel for the user to key in username and password 78 Administrator s Manual Figure 5 64 HTML Instructions Required for Using User Defined Interface lt form action userlogin shtml method post name Enter gt lt input type text name myusername gt lt input type password name mypassword gt lt input type submit name submit value Enter gt lt input type reset name
44. ctions but can t be used at the same time 1 Connect to a specific printer for on demand user to print out tickets 2 If you need to set the Administrator s Password you can connect a PC to this port used as a Console Serial Port and use terminal connection program such as the super terminal and the parameter is 9600 8 N 1 None flow control to change the Administrator s Password 2 3 Hardware Specifications Dimensions 14 9cm W x 4 7cm H x 24 8cm L Weight 470g Power DC12V 1A 5 50 Operating Temperature 5 45 C 5 Fast Ethernet RJ 45 Connectors 1 RJ11 Ports Supports 10 100Mbps Full Half Duplex Transfer Speed Administrator s Manual 2 4 Technical Specifications 2 4 1 Standards e Supports IEEE 802 1x e Supports IEEE 802 11g 2 4 2 Networking e WAN interface supports Static IP DHCP client and PPPoE client e Interface supports static IP e Supports NAT mode and router mode e Built in DHCP server e Built in NTP client e Supports Redirect of network data e Supports IPSec ESP PPTP and H 323 pass through under NAT e Customizable static routing table e Supports Virtual Server e Supports DMZ Server e Supports machine operation status monitoring and reporting system e Supports roaming across networks 2 4 3 Firewall e Provides Several DoS protection mechanisms e Customizable packet filtering rules e Customizable walled garden free surfing area 2 4 4 User Ma
45. de then administrator can management this device with browser again 9 Synchronize clock with NTP server Immediately check and correct the clock through the NTP protocol and network time server Since the device does not support manual setup for its internal clock therefore we must reset the internal clock through the NTP 4 3 Change admin password Besides supporting the use of console management interface through the connection of null modem the device also supports the SSH online connection for the setup When using a null modem to connect to the console we do not need to enter administrator s password to enter the console management interface When SSH is used to connect the device the username is admin and the default password is also admin This set is the same as those for the Web management interface You can use this option to change the administrator s password Even if you forgot the password and are unable to login the console management interface from the Web or the remote end of the SSH you can still use the null modem to connect to the console management interface and set the administrator s password again Caution Although it does not require a password for the connection via the serial port the same management interface can be accessed via SSH Therefore we recommend you to immediately change the Admin username and password after you login the system for the first time 28 Administra
46. defined on the device Please refer to Figure 3 1 for the user Public LAN flow 19 Administrator s Manual 3 2 3 Begin Installation After the device is connected to network devices you can start setting the device to control your network environment In the following sections we will guide you step by step to set up a system composed of individual device 3 2 3 1 Entering the Web Management Interface 1 Opening Browser After the installation and the foregoing setup is completed use the network cable of the 10 100BaseT to connect to the Private LAN port please open the browser such as Microsoft IE On the website enter the administrator s URL such as https 192 168 2 254 IF you can t get the login screen this may because you have set your network to obtain an IP address automatically from Private LAN port and this IP address does not belong in the same subnet as this URL please specify an IP address such as 192 168 2 xx in your network then do it again 2 Keying in the Administrator s Username and Password In the opened webpage you will see the login screen as shown in Figure 3 3 Please key in admin in the Username column and then admin in the Password column Click Enter to login Figure 3 3 Administrator Login System User fil Aebwork Configeration Authentication SOUR PTS conrquratian Welcome To Administrator Login Page Please Enter Your User Name and Password To S
47. dress If the setup for your PC is completed please notice the network administration staff before changing the following settings l Click Advanced in the Internet Protocol TCP IP window Internet Protocol TCP IP Properties EJE General Alternate Configuration You can get F settings assigned automatically if pour network supports this capability Othenwise you need to ask your network administrator hor the appropriate F settings 5 Obtain an IP address automatically 0 Use the following IF address Obtain DNS server address automatically 6 Use the following DNS server addresses Preferred ONS server harcore ee ose Alternate DNS server AAA 2 Click the IP Settings icon and enter the IP address of the device in the Default Gateways column and then click Add After this procedure is completed click OK You can ask the network administrator to give you the IP address specified for the device Advanced TCP IP Settings IP Settings IF addresses IF address Subnet mask DHCP Enabled Remove Default gateways Gateway Automatic metric 122 Administrator s Manual 3 If the DNS Server field is blank please click Using the following DNS Server Addresses in the Internet Protocol TCP IP Window and key in the DNS address or DNS address provided by ISP After this procedure is completed click OK Internet Protocol TCP IP Propert
48. e 5 49 Administrator s Manual WAN Dynamic IP Mode ocooooocccccccccoccnnccccooccncoconcconnconnancnnnnos 44 WAN PPPOE Mode tina dais 44 Dial on Demand aora 44 Authentication ConfigurationN ooocccccccccoccoonnccnnnncnonancconnnnnnos 45 Example of Public LAN Interface Configuration 45 Disable the DHCP Server on Public LAN occcccocooccccnncccccccooo 46 Enable the DHCP Server on Public LAN ooooccccccccccccccccccccccccccccnonos 47 Reserve the IP Address Setting on Public LAN 47 Enable the DHCP Relay on Public LAN oooccooccoooo0oono 48 Example of Wireless Interface Configuration 49 Security SEMING aenea Recto ede eee sae Rata 50 Advance setting Of Wireless cccccceccnseeeeeseeeeeeseeeeeeneeeeesaeeneesaeeneenaes 51 Wireless Port Configuration 2 cccccccceecceeeceeeeeeeeaeeeeeeeneeseeseeesaeees 53 Disable the DHCP Server on WirelessS occooooooocccccccccncnnooo 54 Enable the DHCP Server on WirelesS ccccccoooooooccooooccccnnno 54 Reserve the IP Address Setting on Wireless 55 Enable the DHCP Relay on Wireless 0ooccccoooooooccconccccnonoo 55 WDS CoOnfIigUratlON eves estes ee ote rte te eee ok ee 56 Example of Private LAN Interface
49. e Connection Type for WAN Port step 5 Configure Public Port s Information step 6 Set Wireless Access Paint Connection step 7 Configure Wireless Port step O Restart yu Exit 1 Change Admin s Password Please change the admin s password as shown in Figure 5 3 Click Next to continue or Exit to exit Figure 5 3 Change Admin s Password Screen You may change the admin s account password by entering In a new password Click Nextto continue New Password emo Verity Password acoso H 990 Exit 32 Administrator s Manual 2 Choose the System s Time Zone Choose your system s time zone as shown in Figure 5 4 Click Next to continue or Exit to exit Figure 5 4 Choose the System s Time Zone select the appropriate time zone for the system and click Next to continue 3 Set System Information After logging on successfully you will see fields for Home Page NTP Server and DNS server Succeed Page It will direct you to the website after a user logs on You can enter the website of your company or any major entry website External Time Server Please enter the website of the timer server DNS Server Please enter the DNS server that provides service on the network Click Next to continue or Exit to exit 33 Administrator s Manual Figure 5 5 Set System Information Setup Wizard Step 3 Set System Information Enter System Information a
50. e Windows operating systems other than those for servers the default setting of the TCP IP will treat the PC as the DHCP client and such function 1s called obtain an IP address automatically If you want to use the static IP in the Public LAN or Private LAN section or check the TCP IP setup please refer to Appendix Windows TCP IP Setup 3 1 3 2 Internet Connection Setup Windows 9x 2000 1 Choose Start Console Internet Options ETE File Edit View Favorites Tools Help Address B Control Panel Go E ENE Accessibility Add Remove Add Remove Administrative Date Time Control Panel Options Hardware Programs Internet Options wy Configures your Internet display l l and connections settings Display Folder Options Fonts Windows Update z c Windows 2000 Support mee oN T CH 88 g keyboard Mouse Networkand Phone and Power Options Dial up Co Modem ee Wee e E Printers Regional Scanners and Scheduled Sounds and Options Cameras Tasks Multimedia System Users and VMware Tools Paccamrds x Configures your Internet display and connections settings ka My Computer 2 Choose the Connections Icon and then click Setup 10 Internet Properties x General Security Content Connections Programs Advanced ba Use the Internet Connection Wizard to Setup connect your computer to the Internet C Dial up settings Add Renae Se
51. e for each one of the end user Network Configuration These parts used to set all ofthe settings concerning Internet mainly Utilities These parts provided functions for modify users password file of Copy Recovery system Firmware upgrade and Restart service Status These parts provided information for spying System Status Interface Status Current Users you also can see Traffic History and set up Notify Configuration Click System Configuration gt Configuration Wizard and the configuration wizard will appear on the screen as shown in Figure 3 5 21 Administrator s Manual Figure 3 5 Configuration Wizard Screen System User z Profil Network E Configuration Authentication P PTA Configuration stile Configuration Wizard System Information WAN Configuration Authentication Configuration A biii Private LAN Configuration A all System Configuration Configuration Wizard The 119 HotSpot Router is an Ethernet Broadband Router with access control features ideal for hotspot small business and enterprise networking The wizard will guides you through the process of creating a baseline Strategy Please follow the wizard step by step to configure the 110 HotSpot Router Fun Wizard Click Run Wizard and the configuration wizard will guide you through the seven steps to complete the setup Please refer to Chapter 5 1 1 Configuration Wizard for the detailed description 3 2 3 2 Accessing
52. e or search user information in this management interface You can 63 Administrator s Manual also use the Delete All function key to delete all user accounts If you want to edit the content of individual user account please directly click the hyperlink of the desired user account to enter the Edit Account Interface Click the Refresh button to show the most updated data Add User Click Add Users on the User List to enter the Add User interface and key in your desired information such as new username password compulsory MAC an Remark not compulsory Then click on the Apply button to complete the insertion Figure 5 45 and Figure 5 46 Edit Account Click the desired username that you want to modify from the User List to enter the User Account Interface and then key in your desired information such as username and password compulsory MAC and Remark optional Then click Submit to complete the modification Figure 5 48 Upload User Account Click Upload User Accounts to enter the Upload User Accounts interface Click the browser button to select the text file for the user account Then click Submit to complete the upload The format of the uploading file is text file and each line represents a User Account Format Username Password MAC Remark each parameter is separated by a comma and no space is allowed between MAC Remark but the comma is still needed Figure 5 49 Dow
53. ed IP address for setup e Subnet Mask Enter your desired Subnet Mask for setup Related Setup for DHCP Server of Public LAN DHCP Server has three choices Disable DHCP Server Enable DHCP Server and Enable DHCP Relay 1 Disable DHCP Server Disable the function of DHCP Server Figure 5 23 Disable the DHCP Server on Public LAN Disable DHCP Server DHCP Server Enable DHCP Server Configuration O Enable DHCP Relay 2 Enable DHCP Server Enable the functions of DHCP Server Appropriate setup is needed for the standard enabling of DHCP server and the setup information for DHCP Server includes DHCP Scope Start IP Address End IP Address Preferred DNS Server Alternate 46 Administrator s Manual DNS Server Domain Name WINS Serve and Reserved IP Address List Figure 5 24 Enable the DHCP Server on Public LAN O Disable DHCP Serer Enable DHCP Server DHCP Scope Start IP Address 192 168 1 1 End IP Address 192 168 1100 Preterred ONS Serer Altemate DNS Server Domain Mame WINS Sener Lease Time Reserved IP Address List DHCP Server Configuration Enable DHCP Relay If you want to use the Reserved IP Address List function please click the hyperlink of the Reserved IP Address List on the management interface Then the setup of the Reserved IP Address List as shown in the following figure will appear Please ente
54. ed radio TV technician for help Installation and use of this Wireless AP Router must be in strict accordance with the instructions included in the user documentation provided with the product Any changes or modifications including the antennas made to this device that are not expressly approved by the manufacturer may void the user s authority to operate the equipment The manufacturer is not responsible for any radio or television interference caused by unauthorized modification of this device or the substitution of the connecting cables and equipment other than manufacturer specified It is the responsibility of the user to correct any interference caused by such unauthorized modification substitution or attachment Manufacturer and its authorized resellers or distributors will assume no liability for any damage or violation of government regulations arising from failing to comply with these guidelines Your device contains a low power transmitter When device is transmitted it sends out RadioFrequency RF signal viii Administrator s Manual CE CAUTION European standards dictate maximum radiated transmit power of 100mW EIRP and frequency range 2 400 2 4835 GHz In France the equipment must be restricted to the 2 4465 2 4835 GHz frequency range and must be restricted to indoor use For the following equipment Wireless AP Route C 09840 Is herewith confirmed to comply with the requirements set out in the Council Direc
55. elay on Private LAN O Disable DHCP Server O Enable DHCP Server ib Enable DHCP Relay Configuration DHCP Server IP L 5 2 User Authentication This option provides to Administrator the advanced system set up according to the following detailed items including Authentication Policies Group Configuration Black List Configuration Guest User Configuration Roaming Configuration Additional Configuration and On demand User configuration 5 2 1 Authentication Policy The device provides a simple interface simplifying the complicated management setup and the system provides a total of 5 management setups Administrator can adopt different Authetication methods according to each management setup Each management setup has at most 20 management rules to go with the group configuration so that the management on general users 1s once more diversified and flexible Administrator can select the desired management set up through the pull down menu In addition a layer 2 Authentication is also possible 60 Administrator s Manual Figure 5 41 Example of Authentication Policy 1 Preferred Authentication Policies Authentication i 1 postfix Policy Authentication Policies Configuration Authentication 3 postting Prefered Authentication Method L Policy Policy Name pestix3 t s postfix name Preferred Authentication Method This Authentication method is put to be the Preference Authentication Policy It is the preferred Authen
56. et Mask 255 255 256 0 i O Disable DHCP Server Enable DHCP Server 9 g Back Next Exit Click Next to continue or Exit to exit e If you choose to enable the DHCP please refer to Figure 5 11 Figure 5 11 Set DHCP Server etup Wizard Step 5 Set Public Port s DHCP Server DHCP settings Click Next to continue DHCP Scope start IP Address 192 168 1 1 End IP Address 192 166 1100 Domain Name yahoo com tw Preferred DNS Server 1168 95 1 1 Altemate DNS Sever Back Next Exit A A A AA 37 Administrator s Manual Related information for enabling the DHCP Server includes DHCP Start IP Address DHCP End IP Address Domain Name Primary DNS IP Address and Secondary DNS IP address Fillling in the correspondent values click Next to continue or Exit to exit 6 Set Wireless Access Point Connection Please enter SSID name and select a channel and the AP mode then click next Figure 5 12 Set Wireless Access Point Connection Setup Wizard Step 6 Set Wireless Access Point Connection Enter in the SSID name and Channel number to be used for the Wireless Access Point Click Next to continue SSID Hotspot Channel E Dynamic AF Mode Mixed E 9 0 Back Next Exit Caution Here provides channel from 1 to 13 however different region would provides different chanel depending on the local channel control For example if you are in Taiwan you can onl
57. hannel from the list to correspond with your network settings between and 11 in North America All points in your wireless network must use the same channel in order to make sure its correct functioning 49 Administrator s Manual Transmission Mode There are 3 mode you can select 11b only 2 4G 1 11Mbps 11g only 2 4G 54Mbps and Mix mode b and g SSID broadcast Allows the SSID to be broadcast on your network You may want to enable this function while configuring your network but make sure to disable 1t when you finished With this enabled someone could easily obtain the SSID information with site survey software and get unauthorized access to your network Click Enable to broadcast Click Disable to increase network security and prevent the SSID from being seen on networked Figure 5 28 Security setting Security WEP Key Enable Disable WEP key encryption G4bits 128bits Mode HEX w oro k e os Osl WEP Key Wired Equivalent Privacy A data privacy mechanism based on a 64 bit 128 bit or 256 bit shared key algorithm If you do not wish to utilize WEP encryption make sure the Disabled is selected Mode There are two types that you can select HEX and ASCII Advance setting in detail Please click the hyperlink of Advance 90 Administrator s Manual Figure 5 29 Advance setting of Wireless Advance Authenticaiton Type Auto i Default Auto Transmission Rates Default Auto CTS Pro
58. hat goes with the system Schedule Profile It sets up the schedule that goes with the logging in system Bandwidth The bandwidth that goes with the system 5 2 3 Black List Configuration The device provides a black list function for the system Administrator can add delete or edit a specific black list Each black list has at most 40 users If a user logs into the system and such user is on the black list then the access will be blocked Administrator can use the pull down menu to select the desired black list Administrator s Manual Figure 5 56 Example of Black List Black List Configuration Select Black List Name ser Remark Total O First Prev Next Last Add User to List If you click the hyperlink of Add User to List the Add Black List will appear Figure 5 57 Example of Adding User to Black List Add Users to Blacklist Blacklistl Ho Lisername Femark After you enter the ID of a user in the black list click Apply For example if you successfully add the user b1 into the black list the system will display a notice to Administrator 73 Administrator s Manual User b1 has been added After clicking Previous you will return to the Black List Configuration If you want to delete a user from the black list select the delete check box and then click the Delete button Caution After you delete a user no message or request of confirmation will appear
59. ide contact pour Internet service provider Do vou want to set up an Internet mail account now O Yes Cancel 7 Click Finish to exit the Internet Connection Wizard Now you have completed the setup Internet Connection Wizard xj Completing the Internet Connection Wizard You have successfully completed the Internet Connection wizard Your computer is now configured to connect to pour Internet account After you close this wizard you can connect to the Internet at any time by double clicking the Internet Explorer icon on pour desktop E To connect to the Internet immediately select this bos and then click Finish To cloze the wizard click Finish lt Back d O m J Cancel 13 Administrator s Manual Windows XP 1 Choose Start Console Internet Option E Control Panel File Edit View Favorites Tools Help E pack y D search Folders Ts r Address vE Control Panel A ETE Accessibility Odd Hardware Administrative Date and Time Er Switch to Category view Options a Tools See Also A i Display Folder Options Game Internet To Windows Update Controllers Options g Help and Support Fo ef i keyboard Network Phone and Power Options Connections Modem Printers and Regional and Scanners and Scheduled Sounds and Faxes Language Cameras Tasks Audio Devices S a pl System Taskbar and User Accounts Mware Tools 2 Choose the Connections icon
60. ies General Alternate Configuration ou can get IF settings assigned automatically if your network supports this capability Otherwise you need to ask pour network administrator for the appropriate IP settings Obtain an IP address automatically O Use the following IP address Obtain DNS server address automaticall Cie Use the following DNS server addr FERES Preferred ONS server AE Alternate DNS server ra 123
61. ign ln User Name Password 20 Administrator s Manual 3 System Setup After successfully logging on to the device and entering into the web management interface you can run the installation wizard to help you complete the setup Figure 3 4 Welcome Screen System User z priri Network ey Configuration Authentication EUR Configuration tue Welcome to the administration system The administration system allows you to set various networking parameters enable and customize network services manage user accounts and monitor user status Administration functions are separated into six categories System Confiquration User Authentication Group Profile Network Configuration Utilities and Status Each of them is described briefly below System Configuration This section relation with system configuration include Configuration Wizard System Information WARN Configuration Authentication Configuration Private Configuration User Authentication This section relation with user authentication authorizations and accounting include Authentication Policy Group Configuration Black List Configuration Guest User Configuration Roaming Configuration Additional Configuration and On demand User Configuration Group Profile This section relation with profiles that use for various user group include Firewall Profiles Specific Route Profiles and Login Schedule Profiles these parts of setting only can use for User Group cant us
62. ing link To close this wizard click Finish 3 2 Getting Started 3 2 1 System Concept The system is responsible for controlling all network data passing through the system The users under the managed network must be authenticated in order to obtain the right to access the network beyond the managed network The Public LAN mechanism at the user s end is provided via the system server and the SSL encryption is used to protect the webpage When a user at Public LAN is requesting the system server software will check the Public LAN database at the rear end to confirm the user s access right The Public LAN database can be the local database or any external database If the user is not an authorized user the system will refuse the user s request for the access In the meantime it will also continue blocking the user from accessing the network If the user is an authorized user then the system will authorize the user with an appropriate access right so that the user can use the network The 17 Administrator s Manual concept of the operation of the whole Public LAN procedure is shown in the following figure Figure 3 1 The User Public LAN Flow 1 AcLiot trit lo accece the y he frog Pa e j F e Pa nae aytin gus Actes Az f To the netvrork AT e chat via yeb ble we If the online user remains idle without using the network for a time exceeding a predetermined time or the online user logs out
63. ipment Quick Installation Online Immediately The installation and setups are easy without changing the present existing network architecture You can install and login the system within a short time and establish the security mechanism With the protection by the system users must be authenticated before logging on to the network and the administrator can assign a fine grained priority to each user stratifying the scope and right of using network resources Friendly Management and Application Interfaces The system is not only easy to install but also has friendly management interface and operation logic which allow you to get a hand on it easily You can use all the functions of the system with a click A full web based management interface allows you to operate and Administrator s Manual manage the system online by browser At the user end the login Public LAN is also operated through the browser and it does not require installing any additional software interface Integrating the Existing User Password Database In general most organizations use specific database system to centralize and manage user passwords before introducing the wireless network into the organization The device supports Local POP3 SSL RADIUS and LDAP external Public LAN mechanisms and allows you to integrate the current user password database This system also provides a built in user database so that the administrator can create or upload Public
64. ke sure an IP address is obtained 113 Administrator s Manual TCP IP Properties IO EEE Se ee ok Ar gal SED e Using Specific IP Address If you have completed the setup for your PC please inform the network administrator before modifying the following setup l If the DNS Server column is blank please click Enable DNS and then enter the DNS address or the DNS address provided by ISP After this procedure is completed click OK 114 Administrator s Manual TCP IP Properties Bindings Advanced NetBIOS DAS Configuration Gateway WINS Configuration IF Address Disable DNS Domain DNS Server Search Order Domain Suffix Search Order cance 2 Click the Gateway icon and enter the IP address of the device in the new gateway After this procedure is completed click Add You can ask the network administrator for the IP address specified for thedevice TCP IP Properties Bindings Advanced NetBIOS DMS Configuration Gateway WINS Configuration IP Address The first gateway in the Installed Gateway list will be the default The address order in the list wall be the order in which these machines are used Hew gateway f Add Installed gateways Remove Cancel 115 Admini 74 Check the TCP IP Setup of Windows 2000 1 Select Start Console Network and Dial up Connections File Edit View Favorites To
65. l Figure 5 93 Change Administrator s Account Change Password Ohl Password New Password VWerty Password Caution If you lost or forgot the Administrator s Password you can still change the Administrator s password through the text mode management interface on the serial port 5 5 2 Backup Restore Strategy It provides the backup function resumes current setting This function can also restore the factory default setting Figure 5 94 Backup and Restore Backup Restore Strateqy Import Active Strategy Download Statesy Load Strategy File Name Uplead Statesy Resetting to the Factory Default configuration 101 Administrator s Manual Import Active Strategy Generate the backup image file Load Strategy It loads the backup graphic file for the setup status Caution Such graphic file must be generated Resetting to the Factory Default configuration Restore to the default setting 5 5 3 Firmware Upgrade You can upgrade your firmware from the vendor website Figure 5 95 Executing the Firmware Upgrade Firmware Upgrade Current Version 1 00 23 Warning Firmware upgrade may cause data loss Please refer to the version description to see if there is any limitation before upgrading your firmware Click Browse to browse the files After you have found the firmware image file click Submit and the browser will upload such file to the device and then the s
66. lsory on the management interface After the information is keyed click Apply to complete the setup Figure 5 33 Reserve the IP Address Setting on Wireless Reserved IP Address List Wireless Item Reserved IP Address MAC Description 1 10 2 3 22 11 11 11 11 11 11 fidstds 2ftL FL PL Total 40 First Previous Next Last 3 Enable DHCP Relay If you want to enable the DHCP Relay mode you must specify other DHCP Server IP Address Figure 5 34 Enable the DHCP Relay on Wireless Disable DHCP Server Ea O Enable DHCP Server E Enable DHCP Relay ENS DHCP Server IP ____ i WDS Configuration provides a possibility to extend the Network access The device is acting as a Repeater receiving access request from AP or clients and pass the 55 Administrator s Manual request to obtain authentication Figure 5 35 WDS Configuration Enable Disable tem MAC Address Configuration in A MAC address the MAC address of peripheral equipment supporting the device to extend the wireless access A maximum of three such equipments is possible for the extension 56 Administrator s Manual 5 1 5 Private Configuration Set up the Specific Route Profile rule execution mode IP address and Subnet Mask of Private LAN Port as shown in the following figure Figure 5 36 Example of Private LAN Interface Private LAN Configuration Specific Route Profile None Mode NAT E Private LAN IP Address Tzs
67. n System Name lle Hotspot Gateway 3 z 7 Administrator Into tll appear when Internet connection fail http yw yahoo com tr Succeed Page http iewe yahoo com tw 0 0 0 04000 Remote Manage IP ex 192 160 5 1 or 192 160 3 Of24 SNMP Enable Disable Device Time 200407720 17 12 35 Enable NTP MTP Administrator s Manual tockusnonayyanill ay tock usno nayy mil System Time Server ex tock usno nawy mil lime MOMO fone Set Device Date and Time Caution Click on apply button will automatically use the current setting without restart the system The on line users will nonethelessly be disconnected because of the information update System Name The name of system Administrator Info It lets the Administrator enter the related information such as administrator s name telephone number and e mail If a user connects to the device and the WAN Port has a connection problem the user login screen will show the data entered in these 41 Administrator s Manual columns on screen Succeed Page You can enter the website of the Web Server When a user logs on the user will be linked to this home page automatically The home page is usually set to the website of the company No matter which webpage the user wants to link the user will be redirected to the set website here Remote Manage IP You can set up the system to connect the WAN Port to a website that co
68. n Bytes Out Retresh 5 6 4 Traffic History You can check the history of the device by this function The history of each day will be saved independently This system will save the history in the DRAM for more than 3 days Figure 5 102 History Example Traffic History Date Size Byte 2004 04 22 65 108 Administrator s Manual Caution Since the history is saved in DRAM if you need to restart the device and want to keep the history then please manually duplicate the history If you have entered Administrator s e mail address in the system configuration interface then the system will automatically send out the history of the previous day to such e mail address The first line of the history is the title and the actual history starts from the second line Each line includes a record and each record consists of 10 fields Date Type Name IP MAC Packets In Bytes In Packets Out and Bytes Out to show the history of each user Figure 5 103 Traffic History Example 2 Traffic History 2004 04 22 Date Type Name IP MAC Pkts In Bytes In Pkts Out Bytes Out 5 6 5 DHCP Server Reporting The system provides the DHCP Server related reports for your reference You can get the current users leasing the IP by sorting the IP Age and Name or search the data by IP MAC and Client Name Figure 5 104 DHCP Server Reporting Example General Statistics DHCP lease file entries sorted by IP DHCP lease file entries sorted by
69. nagement e Supports at least 500 on line users concurrently e Supports Local POP3 SSL RADIUS and LDAP Public LAN mechanisms Administrator s Manual e Supports two or more Public LAN mechanisms simultaneously e Can choose MAC address locking for built in user database e Can set the time for the user to login to the system e Can set the user s idle time e Can specify the connection to MAC address without Public LAN e Can specify the connection to IP address without Public LAN e Permits or refuses all connections when the WAN interface fails e Supports web based login e Provides several friendly logout methods e Supports RADIUS accounting protocol to generate the billing record on RADIUS server 2 4 5 Administration e Provides online status monitoring and history traffic e Supports SSL encrypted web administration interface and user login interface e Customizable user login amp logout web interface e Customizable redirect after users are successfully authenticated during login amp logout e Supports Console management interface e Supports SSH remote administration interface e Supports web based administration interface e Supports SNMP v2 e Supports user s bandwidth restriction e Supports remote firmware upgrade 2 4 6 Accounting e Supports built in user database and RADIUS accounting Administrator s Manual 3 Installation 3 1 Installation 3 1 1 System Requirements Standard 10 100BaseT
70. nd click Nextto continue EA meee Succeed Page http yahoo com t lex http dama yahoo com PEE tock usn o naww mil External Time Server tock usno nawy mii ex tock usno nawy mil DNS Server CER 990 Exit 4 Select Connection Type for WAN Port To select the connection type for WAN PORT you can choose any of the following three types as shown in Figure 5 6 e For static IP address please select Static IP Address Figure5 7 e For dynamic IP address please select the Dynamic IP Address Figure 5 8 e For xDSL and using PPPoE to connect to Internet please select PPPoE Client Figure 5 9 Figure 5 10 Click Next to go to the next stage 34 Administrator s Manual Figure 5 6 Select the Connection Type for WAN Port Step 4 Select the Connection Type for WAN Port select the connection type for WAN port Click Next to continue Static IP Address Choose it to set static IP address Dynamic IP Address Choose itto obtain an IP address automatically For most cable modem users PPPoE Client Choose it to set the PPPoE client s Username and Password For most DSL 390 Back Next Exit e For static IP address After you select Static IP Address please enter the IP Netmask and Gateway of WAN PORT as shown in Figure 5 7 Click Next to continue or Exit to exit Figure 5 7 Set the Connection Type for WAN Static IP Address Setup Wizard
71. nd to have the network access right without going through the Public LAN you only have to key in the IP address at user end as shown in Figure 5 90 privilege IP address This system allows at most 100 Privilege IP addresses These settings will take effect immediately after you click Apply 94 Administrator s Manual Warning Permitting certain IP address to have network access rights without going through standard authentication process at the Public LAN may cause security problems Figure 5 86 Privilege IP Address Privilege IP Address List ltern Privilege IP Address Remark 10 IO Total 1 00 First Prey Mex Last 2 Privilege MAC Address List Besides permitting specific IP address at user end to have the free network access right without going through the Public LAN the system also provides a way to do so according to the MAC address at the user end In Figure 5 87 Direct Connecting MAC Address enter the MAC address at the user end This system permits at most 100 Privilege MAC addresses to have network access right without going through the Public LAN The format of the MAC address is XX XX XX XX XX XX These settings will be effective immediately after you click Apply 95 Administrator s Manual Warning Permitting specific IP address to have network access rights without going through the Public LAN may cause security problems Figure 5 87 Direct Connecting MAC Address Privilege MA
72. ng service Administrator may also enable disable the accounting service and assign the Authentication to a group 70 Administrator s Manual Figure 5 54 Layer 2 Authentication Authentication Policies Configuration Authentication Server IP f Authentication Port 1812 Default 1812 Layer 2 Accounting Server IP ld Authentication Accounting Port Defautt 1813 Accounting Service Enabled w Assign to Group lGroupl w Caution We do not suggest Administrator to enable this function unless in extreme circumstances If Administrator enables the layer 2 authentication all settings at Layer 3 Local RADIUS POP3 LDAP External will all be OVERRULED and ERASED 5 2 2 Group Configuration In the system there are Guest and 5 other user groups for Administrator to manage the firewall profile route profile and online connection speed in order to control the users Administrator can use the pull down menu to select the desired route profile combining the firewall profile and the route profile with bandwidth control 71 Administrator s Manual Figure 5 55 Group Configuration Screen Group Configuration CUES tCest e Group Name Guest Firewall Profile Global Global w Specific Route Profile Global Global w Schedule Profile ale IIA lt Bandwidth Group Name 1 Named this Group Firewall Profile The firewall profile that goes with the system Specific Route Profile The route profile t
73. nload User Account Click Download User Accounts in the User List to enter the Download User Accounts interface and the system will directly list all created user accounts and show a hyperlink for the download at the bottom of the screen Move the cursor of the mouse to such hyperlink and press the right button of the mouse to save as new file Then you can list the user accounts and load them into your computer Figure 5 50 64 ltern IN Administrator s Manual Figure 5 45 Example of Adding User Accounts Add User MAC AA AA AAA ADA AA Password rll ee III os aa i Ja j 4 j j 4 j y a 4 Figure 5 46 Added User Accounts Screen Llser Roson has been added User Gavin has been added User Lisa has been added User Hans has been added Figure 5 47 Example of Editing User Accounts Edit Account Username Password wac Oooo X X Back to Users List Administrator s Manual Figure 5 48 Example of Upload User Account Interface Note The format of each line ts ID Password MAC Group Remark without the quotes There must be no space between the fields and commas The MAC field could be omitted but the trailing comma must be retained When adding user accounts by uploading a file existing accounts inthe embedded database that are also defined inthe data file will be replaced by the new ones Upload User Account File Name BE subr
74. ns given by the Wizard step by step fill in the required set values And then restart to activate the setting Please click the Run Wizard button on the Setup Wizard interface as shown in Figure 5 1 to start the system setup Figure 5 1 Setup Wizard Interface Configuration Wizard The 110 Hotspot Router is an Ethernet Broadband Router with access control features ideal for hotspot small business and enterprise networking The wizard will quides you through the process of creating a baseline Strategy Please follow the wizard step by step to configure the 1109 Hotspot Router The Setup Wizard Interface as shown in Figure 5 2 describes the installation procedure and there are 8 procedures as listed below Change Admin Password Choose System s Time Zone Set System Information Select the Connection Type for WAN Port Configure Public Port s Information Set Wireless Access Point Connection Configure Wireless Port s Information A LOA SS SP eS Restart 31 Administrator s Manual After a brief check over of the whole process click Next to continue or Exit to exit the Setup Wizard Figure 5 2 Setup Wizard Description etup Wizard Welcome to the 11q Hotspot Gateway Setup Vizard The wizard will guide you through these seven quick steps Begin by clicking on Next step 1 Change Admin s Password Step 2 Choose system s Time Zone step 3 Set system Information Step 4 Select th
75. ntrols the functions such website could be 10 2 3 0 24 It means that as long as you are at the IP address of 10 2 3 0 24 you can execute the functions to control the system Another example is 10 0 0 3 as long as you are at the IP address of 10 0 0 3 you can execute the function by connecting to the WAN port and manage the functions SNMP the device supports SNMP v2 read only data access The Administrator can specify the IP address and the SNMP community name to determine the target of the management information base MIB exported from the system Device Time 2004 03 30 13 42 01 Enable NTP NTP Server jtockusnonavymnil ex tock usno nawy mil System Time Time Zone GM T O8 00 Tape v gt Set Device Date and Time System Time The device supports NTP communication protocol to correct the network time Please specify the IP address of a server on the system configuration interface Universal Time is Greenwich Mean Time GMT Time Zone Set up the time zone and the default is GMT 08 00 42 Administrator s Manual Device Time 20040330 13 42 01 O Enable NTP System i Set Device Date and Time Time Set Device Date and Time Set up the current time 5 1 3 WAN Configuration There are 3 methods of obtaining IP from the WAN Port Static IP Address Dynamic IP Address and PPPOE 1 Static IP Address Manually specify the IP address of the WAN Port which is applicable for the net
76. ols Help de Back mp search Folders AHistory is i x Ej Date Time Display Folder Options az E as r Control Panel Er O Game Internet Keyboard Mouse Network and Dial up Controllers Options Connections Connects to other computers networks and the Internet Windows Update Network and Phone and Printers Windows 2000 Support _ Dial up Modem Tonneckions QE Regional Scanners and Sounds and Options Cameras Tasks Multimedia System Users and VMware Tools Le Connects to other computers networks and the Internet My Computer 2 Click the right button of the mouse on Local Area Connection Properties Pa Local rea Network and Dial Connection EES up Connections Disable Status Local Area Connection Create Shortcut Type LAN Connection Delete Rename Status Enabled AMD PCNET Family PCI Ethernet Adapter w Displays the properties of the selected connection 116 strator s Manual icon to select Administrator s Manual 3 Select Internet Protocol TCP IP and then click Properties Local Area Connection Properties E ajx General Connect using Ba AMD PCNET Family PCI Ethernet Adapter Components checked are used by this connection m Client for Microsoft Networks File and Printer Sharing for Microsoft Networks Fie and Printer Sharing for Transmission Control Protocol Internet
77. ou enable the DHCP Server function it is necessary to have appropriate setups to properly enable the DHCP server The setup related data includes DHCP Scope Start IP Address End IP Address Preferred DNS Server Alternate DNS Server Domain Name WINS Serve and Reserved IP Address List 98 Administrator s Manual Figure 5 38 Enable DHCP Server on Private LAN gt Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address 122 168 2 1 End IP Address 192 166 2 100 Preferred OMS Server 168 25 1 1 Alternate ONS Server DHCP Server Configuration Domain Name Reserved IPF Address List O Enable DHCP Relay If you want to use the Reserved IP Address List function please click the hyperlink of the Reserved IP Address List on the management interface Then the setup of the Reserved IP Address List as shown in the following figure will appear Please enter the related Reserved IP Address MAC and some description not compulsory on the management interface After the information is keyed in click Apply to complete the setup Figure 5 39 Reserve IP Address Setting on Private LAN Reserved IP Address List Private LAN Item Reserved IP Address hA Description ph ja Jj Total 40 First Previous Mext Last 99 Administrator s Manual 3 Enable DHCP Relay Enable the DHCP Relay mode If you want to set up this mode it is necessary to specify another DHCP Server IP address Figure 5 40 Enable DHCP R
78. passing through the Public LAN You only need to enter the IP address or Domain Name of these websites into the Walled Garden List You can enter up to 20 addresses into this list This function lets you provide some free service to users For example you can provide a brief introduction of the local site facilities and path guide on a website and list the address of the website in the Walled Garden Even the users having no network access right can link to the website of the Walled Garden to obtain the precious information related to the local site This function can be used to provide users a free chance to experience the network service The customer can experience the actual network service without any preparation in advance These settings will be effective immediately after you click Apply Figure 5 90 Defining Walled Garden Server Address Walled Garden List ter Address term Address PO i oy fe rr 37 gt A NE 98 5 4 5 Proxy Server Properties Administrator s Manual Internal Proxy Server the device has a built in proxy server if you active this function end user can specify the device as proxy server no need to enter the IP address and Port External Proxy Server Base on security management only port 80 is allowed it will appear on login webpage If you have built a Proxy Server in your network environment and the user s browser 1s set to Proxy you must setup your External Proxy Server IP Addres
79. ports require of authentication one is General Public LAN the other is Wireless port Figure 5 21 Authentication Configuration Authentication Configuration Sse f Public Port i Wireless Port 1 Public LAN Figure 5 22 Example of Public LAN Interface Configuration Public Port Enable IP PNP C Enable User Authentication Ol Specific Route Profile Operation Mode NAT v IP Address 192 168 1254 Public Port Subnet Mask Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address 192 168 1 1 End IP Address 192 168 1 100 P F efe rre d D N 5 Smer DHCP Server Configuration Alternate DNS Server WINS Server OO Lease Time Reserved IP Address List O Enable DHCP Relay 45 Administrator s Manual IP PNP At the user end you can use any IP address to connect to the machine at the Public LAN section no matter what the IP address at the user end is you can obtain the Public LAN and access the network resources properly suppose you had used static IP address and specified IP address Subnet Mask Default Gateway and DNS e User Authentication You can choose to Enable or Disable user Public LAN if you enable user authentication you have to define Specific Route Profile to user e Specific Route Profile To define specific route for user to access internet e Operation Mode It provides two modes NAT Mode and ROUTER Mode IP Address Enter your desir
80. r s Manual 4 2 Utilities for network debugging Figure 4 2 Utility Menu Configuration Ubi lity Please select UtLLites rada rare path Dieelay interface settings Display routing table Display ARP table Display system up tine Check service status Sets device into safe rode Synchronize clock with NTP server Main menu The console interface provides several utilities to assist the Administrator to control the system conditions and debugging The utilities are described as following l Ping host IP By sending ICMP echo request the online condition with specific target can be tested Trace routing path Trace and inquire the routing path to a specific target Display interface settings It displays the information of each network interface setting including the MAC address IP address and netmask Display the routing table The internal routing table is displayed to assist the confirmation of successful setup of another Static Route Display ARP table The internal ARP table is displayed Display system live time The system live time time for system being turn on is displayed 21 Administrator s Manual 7 Check service status The current execution status of each service is checked 8 Set device into safe mode If administrator is unable to use Web Management Interface on the browser while device unexplicitly fails Administrator can choose this utility and set into safe mo
81. r only signifies that the Industry Canada technical specifications were met Administrator s Manual 1 Preface 1 1 Brief Introduction Wireless network breaks through the barrier of traditional thinking and releases unlimited innovation and implementability which becomes the working attitude and living environment pursued by people nowadays In addition manufacturers try very hard to lower the entry level and thus more consumers are happy to have such technology to get rid of the tangled network cables and limitations However the problems accompanying the wireless technology cannot be overlooked The ways of preventing your neighbors from borrowing your wideband or becoming your Network Neighbor to enter your computer system anytime are the important topics when upgrading to wireless users The system is easy to set up and operate but also has built up gates to filter user s entrance and exit and thus takes care of both the strictness of management and the convenience of usage Finally you can have peace of mind to carry out the wireless construction or implement a wireless studio at home Also we integrate a wireless port which supports 54Mbps wireless networking standard and is almost five times faster than the widely deployed 802 11b products in homes enterprises and public wireless hotspots around the country 802 11b and 802 11g share the same 2 4GHz radio band so it can also work with existing 11Mbps 802 11b equ
82. r the related Reserved IP Address MAC and description not compulsory on the management interface After the information is keyed click Apply to complete the setup Figure 5 25 Reserve the IP Address Setting on Public LAN 47 Administrator s Manual Total40 First Previous Next Last 3 Enable DHCP Relay If you want to enable the DHCP Relay mode you must specify other DHCP Server IP Address Figure 5 26 Enable the DHCP Relay on Public LAN Disable DHCP Server Enable DHCP Server liada Enable DHCP Relay Configuration DHCP Sener IP st 48 2 Wireless Port Administrator s Manual Figure 5 27 Example of Wireless Interface Configuration Wireless Configurati n Wireless Port DHCP Server Comkuration Wireless Port SSID Auto Channel Selection Channel 1 Transmission Mode Mired SSID Broadcast Layer Client Isolation w Security Advance Enable IP PNP Ga a Enable User Authentication IP Address 192 168 3254 Subnet Mask 255 255 255 0 O Enable DHCP Server O Enable DHCP Relay SSID The SSID is the unique name shared among all devices in a wireless network The SSID must be the same for all devices in the wireless network It 1s case sensitive must not exceed 32 characters and may be any keyboard character Auto Channel Select The system will automatically select the appropriate channel Chanel Select the appropriate c
83. ral icon and then select Internet Protocol TCP IP Click Properties i Local Area Connection Properties PP E General Authentication Advanced Connect using ES AMD PCNET Family PCI Ethernet Adapter This connection uses the following tems E Client for Microsoft Networks File and Printer Sharing for Microsoft Networks QoS Packet Scheduler Internet Protocol TCP IP Install Jrnimsta Properties D Description Transmission Control Protocol nternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected Using DHCP If you want to use DHCP please select Obtain an IP Address Automatically which is also the default setting of Windows Reboot the PC to make sure an IP address is obtained Internet Protocol TCP IP Properties General Alternate Configuration You can get F settings assigned automatically if pour network supports this capability Otherwise pou need to ask your network administrator hor the appropriate IP settings g gt Obtain an IF address automatically Use the folla TP address Obtain DNS server address automatically Use the following DNS server addresses SS Say 121 Administrator s Manual Using Static IP Ad
84. red during operation To link to the RJ11 interface of the device you need a modem cable The terminal simulation program that you use such as the super terminal should be set to the parameter value of 9600 8 n 1 The main console is a basic interface using interactive dialog boxes Please use the arrow keys on the keyboard to browse the menu and press the Enter key to select specific menus and confirm entered value B It also can be as a printer interface that connects to specific thermal line ticket printer e o No Warning These two functions can t be used at the same time 4 1 Main Menu of Console interface Once you properly connect to the serial port of the device the console welcome screen will appear automatically If the welcome screen does not appear in the terminal simulation program automatically please try to press the Down arrow key so that the terminal simulation program will send some commands to the serial port and the welcome screen or the main menu will appear again If you are still unable to see the welcome screen or the main menu of the console please check if the connection of your cables and the setup of the terminal simulation program are correct Figure 4 1 Main Menu of Console Interface 11g HotSpot Router Basic Configuration Please select Functions ilit i i T i assword Change pane ea BaseuorE eset Reload Factory default stark Restart 119 HotSpot Router 26 Administrato
85. roxy Server Enabled internet Connection Detection Pass 55H 10 0 0 078 Manage SNMP Disabled Retain Days 3 Days History Email To PLA External Tine Servel tock Usno na Fil Tine Date Time GHIT 0 00 Thu 22 Apr 2004 15 13 33 0800 kile Logout Timer 10 Minis User Multiple Login Disabled Guest Account Disabled Preferred DONS Server 162 95 1 1 DNS Ahemate DNS Server i Login Disabled PFri endiby Logout Disabled Figure 5 98 System Status Description Firmware Version The firmware version currently used System Name Administrator s related information will be shown on the login Administrator Info l screen when a user has a connection problem 104 Administrator s Manual Succeed Page The starting web page after a user logs on successfully Syslog To The IP address and port number of the external Syslog Server Proxy Server Proxy Server is enabled or disabled When the connection at WAN is abnormal Internet Internet Connection Connection Detection all online users can log on to the Detection network It permits a specific IP address to set up the device from the Remote Manage IP WAN port SNMP Enable disable SNMP management function The system will retain the user information up to a maximum of Retain Days 3 days Send the history to this email address The device uses an External Time Server to check time The system time is local time It is the logout time for idling The online user will be forced
86. s The SNMP screen allows you to customize the Simple Network Management The default value is set to Default Depending on the wireless mode you have selected a default set of supported data rates will be selected The default setting will ensure maximum compatibility with all devices You may also choose to enable all data rates by selecting ALL For compatibility with former Wireless B devices select 1 2Mbps Antenna select The default value is set to Diversity In Diversity mode both antennas will be enabled Otherwise you can have wireless transmission operating only on the Left or Right antenna Beacon Interval This value indicates the frequency interval of the beacon The default value is 100 Enter a value between 20 and 1000 milliseconds The Beacon Interval value indicates the frequency interval of the beacon A beacon is a packet broadcast by the Access Point to synchronize the wireless network RTS Threshold This value should remain at its default setting of 2346 Should you encounter inconsistent data flow only minor reductions are recommended Fragmentation Threshold This value specifies the maximum size for a packet before data is fragmented into multiple packets It should remain at its default setting of 2346 A smaller setting means smaller packets which will create more packets for each transmission Only minor reductions of this value are recommended DTIM Interval The default value is 3 This value between
87. s and Proxy Port in order to have proper operations in the Proxy network environment These settings will be effective immediately after you click ltern Figure 5 91 Proxy List Built in Proxy Server Server P Internal Proxy Server Enable External Proxy Server 99 Apply Disable Port Administrator s Manual 5 4 6 Dynamic DNS Dynamic DNS the device provides a convenient DNS function translating the IP address of WAN port to a domain name facilitating Administrator to connect to WAN port If the DHCP is activated at WAN port this function will also update the newest IP address regularly to DNS Server Figure 5 92 Dynamic DNS Dynamic DNS DONS Enable Disable Provider Username E mail Po Password Key Administrator may choose to enable disable this function choose his own DNS provider define a hostname for WAN port IP address this hostname will be the domain name for WAN port and key in the ID and password at DNS provider 5 5 Utilities This function provides utilities for you to customize and maintain your system including Change Password Backup Restore Strategy Firmware Upload and Restart 5 5 1 Change Password To change the Administrator s password please key in the present Administrator s Password in the field and then the new Admiunistrator s Password You must key in the new password twice for confirmation purposes 100 Administrator s Manua
88. s two modes NAT Mode and ROUTER Mode IP Address Enter your desired IP address for setup Subnet Mask Enter your desired Subnet Mask for setup Related Setup for DHCP Server of Public LAN DHCP Server has three choices Disable DHCP Server Enable DHCP Server AND Enable DHCP Relay 1 Disable DHCP Server Disable the function of the DHCP Server 93 Administrator s Manual Figure 5 31 Disable the DHCP Server on Wireless Disable DHCP Server DHCP Server O Enable DHCP Server Configuration Enable DHCP Relay 2 Enable DHCP Server Enable the functions of the DHCP Server Appropriate setup is needed for the normal enabling of the DHCP server and the setup information includes DHCP Scope Start IP Address End IP Address Preferred DNS Server Alternate DNS Server Domain Name WINS Serve and Reserved IP Address List Figure 5 32 Enable the DHCP Server on Wireless Disable DHCP Server Enable DHCP Server DHCP Scope StartlP Address EndlP Address Domain Name WINS Server Lease Time Reserved IP Address List DHCP Server Contiquration Enable DHCP Relay If you want to use the Reserved IP Address List function please click the hyperlink of the Reserved IP Address List on the management interface Then the setup of the Reserved IP Address List as shown in the following figure will appear Please enter the related Reserved IP 94 Administrator s Manual Address MAC and description not compu
89. t up this computer so that other computers can connect to it Caso tos 15 Administrator s Manual 5 Choose Set up my connection manually and then click Next New Connection Wizard Getting Ready The wizard i preparing to set up your Internet connection How do you want to connect to the Internet of Internet service providers ISPs For a dial up connection ou al ee your account name password and a phone number for your SF For a broadband account pon won t need a phone number O Use the CD I got from an ISP lt Back Gf Newt JU Cancel 6 Choose Connect using a broadband connection that is always on and then click Next New Connection Wizard Internet Connection How do you want to connect to the Internet Connect using a dial up modem This ype of connection uses a modem and a regular or ISON phone line O Connect using a broadband connection that requires a user name and password Thiz ts a high speed estan using ether a OSL or cable modem our SP may refer to this connection ti Is eae active ae Hee e pou to sign In EY MEE 16 Administrator s Manual 7 Click Finish to exit the Connection Wizard Now you have completed the setup New Connection Wizard Completing the New Connection Wizard Tour broadband connection should already be configured and ready to use IF your connection is not working properly click the follow
90. tection Mode Disable Default Disable Basic Rates Default Default Default 100 Milliseconds Range 20 1000 RTS Threshold Default 2346 Range 256 2346 Fragmentation Beacon Interval 2446 Threshold Default 2346 Range 256 4346 DTIM Interval Default 3 Range 1 255 Authntication Type The default is set to Auto where it auto detects for Shared Key or Open System Shared Key is when both the sender and the recipient share a WEP key for authentication Open Key is when the sender and the recipient do not share a WEP key for authentication All points on your network must use the same authentication type Transmission Rates The default setting is Auto The range is from 1 to 54Mbps The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds or you can keep the default setting Auto to have the Access Point automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible connection speed between the Access Point and a wireless client CTS Protection Mode The default value is set to Disabled When set to Auto a protection mechanism will ensure that your Wireless B devices will connect to Access Point when many Wireless G devices are present However performance of your Wireless G devices may decrease 91 Administrator s Manual Basic Rate
91. ter Baud Rate re Assign to Group You can assign the on demand to a pre determined group WLAN ESSID You can specify the AP s ESSID in this filed WEP Key You can specify the AP s WEP key in WEP Key filed On demand User List A list about on demand user A sample list is shown below Figure 5 75 On demand User List Ondemand Users List lisername Password Remain Time olume Status Expire Time Delete All e Total 4iFirst Previous Next Las To delete specific user accounts click on the checkboxes besides those user accounts then click the Delete button To delete all user accounts click Delete All Billing Configuration Billing rule for Administrator to setup at most 10 profiles 84 Button Figure 5 76 Billing Configuration Status Enable Disable O Enable Disable Enable 6 Disable O Enable Disable O Enable 6 Disable O Enable 6 Disable O Enable Disable Enable 6 Disable O Enable 6 Disable O Enable 6 Disable Data O Time Data O Time Data O Time O Data Time O Data O Time Data Time Data O Time Data O Time Data O Time Data O Time Billing Configuration Type 1 Move h rs mins Mone h rs mins moye hh rss mins Move h rs mins Move h rs mins Move h ra mins Moye hh rs mins Move h rs mins Mone h rs mins Mone
92. the network resources This port can be used to connect to a server such as File Server or a DataBase Server etc Use the network cable of the 10 100BaseT to connect to the Switch or Hub of the Private LAN and then use the network cable of the 10 100BaseT to connect to the Administrator s PC If it is necessary to connect the PC or wireless AP directly to the Private LAN then we need to use the cross over line 6 Turn on the power Plug the bundled power supply connector into the socket 7 Check the LED indication light After the power is on the power indication light should be lit The WAN and indication lights should be lit when the WAN and ports are properly connected to the network equipment The corresponding indication lights also should be lit when the Public LAN and Private LAN ports are properly connected 3 1 3 Setting up the PC for the Public LAN and Private LAN After the installation the following must be set up for the Public LAN and Private LAN sections TCP IP Network Setup Internet Connection Setup 3 1 3 1 TCP IP Network Setup If the operating system of your PC is Windows 95 98 ME 2000 XP then you just need to keep the default setting without any change to directly start restart the system Administrator s Manual During the process of starting the system the system with DHCP function will automatically assign an appropriate IP address and related information to each PC For th
93. tication group Authentication Methods Configuration Authentication method setup Authentication Policy The system provides 5 policy groups for your choice Select the desired control group from the pull down menu Preferred Authentication Method After selecting the item it means that the selected setup control group as shown above is the preferred Authentication method Policy Name In the postfix of this management setup the system will control the priority according to the following postfix when the user logs in the system Policy Status You can select Enable default or Disable If you select Disable then such postfix will be disabled Warning Policy Name cannot use those words GRIC MAC IP 61 Administrator s Manual Figure 5 42 Example of Authentication Policy 2 Black List Profile Local POP3 RADIUS LDAP NT Domain Local Users List Authentication Servel Assign to Group Exception Configuration O Enable Disable Black List Profile To select a blacklist profile Authentication Server Provides 5 Authentication Methods Local POP3 RADIUS LDAP and NT Domain Assign to Group Assign a group to the control group from the pull down menu Exception Configuration It permits Exception Configuration It permits to exclude certain accounts as shown in the following figure from being limited by restrictions above Figure 5 43 Exception Configuration Exception Configuration
94. tive immediately after you click Apply Figure 5 84 Defining Public Accessible Server Public Accessible Servel ltem SAU E oo Local Server Port Type Enable 1 Eoo ee a O O EE OTP Ou O 2 OTP Ouo O 3 OTcP OupP O a pi OTcp Cuo O s Otee Ouo O i OTP Ouo O 7 OTP Ovor O OTP Ouo Ol 3 OTcp Ouo O 10 OTce Oupe O 3 Port and IP Redirect When any user attempts to connect to the destination defined in this interface the connection packet will be converted to the corresponding destination You can define at most 40 groups on this interface for the redirect condition These settings will be effective immediately after you click Apply 93 Administrator s Manual Figure 5 85 IP Address and Network Port Redirect Pont and IP Redirect Destination Translated to Destination ltern Type IF Address Fort IF Address Fort PEL te Our a Ed OrceroOue afd OTe Our afd te v0 sf Orter Our ed Ore Our loo por Ji OreroOue poo por Jj OTe Ove alo pol Jj OTe Our vpo op OP Ove Total 40 First Prey Next Last 5 4 2 Privilege List 1 Privilege IP Address List Although all devices at the user end are managed sometimes you still need to have a user end with some exception processing For example if the server has been put on the managed network and you want to login to the network from such server without going through the Public LAN To permit a specific device at the user e
95. tive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility 89 336 EEC Low voltage Directive 73 23 EEC and the Amendment Directive 93 68 EEC the procedures given in European Council Directive 99 5 EC and 89 3360EEC The equipment was passed The test was performed according to the following European standards e EN EN 300 328 2 V1 2 1 2001 08 e EN 301 489 17 V 1 2 1 2002 04 e EN 50371 2002 e EN60950 2000 Administrator s Manual IC CAUTION To prevent radio interference to the licensed service this device is intended to be operated indoors and away from windows to provide maximum shielding Equipment or its transmit antenna that is installed outdoors is subject to licensing Operation is subject to the following two conditions 1 this device may not cause interference and 2 this device must accept any interference including interference that may cause undesired operation of the device This Class B digital apparatus complies with Canada RSS 210 Cet appareil num rique de la classe B est conforme a la norme CNR 210 du Canada The abbreviation IC before the registration number signifies that registration was performed based on a Declaration of Conformity indicating that Industry Canada technical specifications were met It does not imply that Industry Canada approved the equipment DoC The term IC before the certification registration numbe
96. tor s Manual 4 4 Reload factory default It will reset the system configuration to factory defaults 4 5 Restart It will restart the device 29 Administrator s Manual 5 Web Management Interface This section gives a complete description on the setup Table 5 1 shows all options and functions and may facilitate your operation on the device Table 5 1 Functions List System Configuration User Network Status Authentication Profile Configuration Configuration Wizard Authentication Firewall Network Change System Status Profiles Address Password Function Translate System Information Specific Privilege List Backup Interface Configuration Route WAN Configuration Black List Login Authentiction Guest User Traffic Configuration include Configuration History auth Port amp wireless port Private Configuration Roaming Configuration Addition Notify Configuration Configuration On demand User configuration 5 1 System Configuration This option provides the following detailed functions to further set up your system these 30 Administrator s Manual functions include Configuration Wizard System Information WAN Configuration Authentication Configuration and Private LAN Configuration Please refer to the explicit setup if you need more information 5 1 1 Configuration Wizard The Wizard will guide you through the setup All you need is to follow the procedures and instructio
97. tor s Manual Example of Guest Login Schedule Management Interface 91 Defining the Static Assignment Address Correspondence 92 Defining Public Accessible Server o o ocoooooooccccccccccccnoocccnnnncnnnnnos 93 IP Address and Network Port Redirect oooooooocccccccccccco 94 Privilege IP AddressS ooccccccoooccocccccoocconocononcnnonnnancnnnonnnanennnnnnnos 95 Direct Connecting MAC AddresS cccccoooocccccnnccccoccconccnnnnonnnnnos 96 MONIHOFIP LISTo eroaa arei 97 Monitor IP TeSUl Essen aseo 98 Defining Walled Garden Server Address occccooconccccnncccccncnoo 98 POM LSE einai sate biel wu nsacear ciclo 99 Dynamic DNS sixes Ae ee ee es Re 100 Change Administrator s AccouUnNt o ccc oooooncccnnnccncnnocccnnnnnnnnnnnnos 101 Backup and ReStore oooocccccocccccccoccococoncnncnnononononcnnonnnnnncnnanencnnanens 101 Executing the Firmware Upgrade cccccooooccoccccoccconccnnocconnnos 102 Resta aiii irreal 103 System Status Example ooooooccccccccccccoooncconnconononnonononononenanennnns 104 System Status Description ccoccccooconncccnnnccconononcconcnnnnnnanonnnos 104 Interface Status ExXample ooooonccccoccccconccoccconnnccocnnnccnnnnnnnononans 106 Interface Status Example ooooocccccccccccccooncconnconononncnnnnconononans 107 Online User Dala us isc it 108
98. ttings 19 Administrator s Manual will be effective immediately after you click the Apply button The GRIC user will be able to use the webpage gric shtml and is provided with username password IP and MAC so that the device will provide the Authentication and authorization functions Figure 5 61 Roaming Configuration Roaming Configuration Server F Authentication Port Accounting Port secret Key Accounting Service Disabled Authentication Method PAP w Default Group Lavoupl w Below is a GRIC example Authentication Port IP address 192 168 1 254 Username xyz and his IP address 192 168 1 100 Password xyz MAC address 01 23 45 67 89 ab The gric shtml example should look like this https 192 168 1 254 loginpages gric shtml uname xyz amp uip 192 168 1 100 amp upwd xyz amp umac 01 23 45 67 89 ab User can also use browser to key in GRIC username or username GRIC on ID field and user s password at the login webpage of Public LAN 76 Administrator s Manual 5 2 6 Additional Configuration Figure 5 62 Additional Configuration Additional Configuration Logout Timer 19 Mints 1 1440 User Control Multiple Login C Login 12 Hours Friendly Logout L User Friendity Credit Reminder Enable Disable Internet Connection E URL Upload File Upload Login Page Upload Logout Page POP3 Message Edit Mail Message Enhance User Authentic
99. work Connection amp Control Panel File Edit View Favorites Tools Help Q O B P search Ey Folders 233 Address Control Panel Vg Control Panel a Accessibility Add Hardware Administrative Date and Time E Switch to Category View Options eS Tools See Also OS c Display Folder Options Internet Windows Update Controllers Options 0 Help and Support D h Keyboard Mouse N de hone and Power Options odem b e Printers and Regional and Scanners and Scheduled Sounds and Faxes Language Cameras Tasks Audio Devices S 4 e D Speech System Taskbar and User Accounts YMware Tools 2 Click the right button of the mouse on the Local Area Connection icon to select Properties Network Connections File Edit View Favorites Tools Advanced Help O Back 5 yo Search Ky Folders EA Address e Network Connections LAN or High Speed Internet Network Tasks ocal Area Connection a Create anew nabled connection MD PCNET Family PCI Ethern Set up a home or small Disable office network f i Status Disable this network Renal device P x Repair this connection Bridge Connections mi Rename this connection View status of this connection 2 Change settings of this connection Create Shortcut Delete Properties Other Places G Control Panel My Network Places i My Documents 120 Administrator s Manual 3 Click the Gene
100. work environment that the IP address cannot be obtained from WAN Port automatically Figure 5 17 Example of WAN Static IP Mode WAN Configuration IP address subnet mask WAN Port Default gateway h Preferred DNS Server 1689511 O Alternate DNS Server fe Dynamic IP Address PPPoE Client 2 Dynamic IP Address It is applicable for the network environment of WAN Port to obtain automatically the IP address through a DHCP Server constructed in the network of the WAN Port 43 Administrator s Manual Figure 5 18 WAN Dynamic IP Mode WAN Configuration O Static IP Address Dynamic IP Address PPPoE Client WAN Port 3 PPPoE If WAN Port uses the network environment connected by PPPoE please select PPPoE and set the username and password Figure 5 19 WAN PPPoE Mode WAN Configuration Static IP Address Dynamic IP Address WAN Port 2 PPPoE Client usemame sd Password Dial on demand Enable Disable 3 1 Dial on Demand When the Dial on Demand function is enabled under PPPoE the system will automatically disconnect the user after an idle time as specified here Figure 5 20 Dial on Demand WAN Configuration O Static IP Address O Dynamic IP Address PPPoE Client on Usemame Eon Maximum ldle Time Dial on demand Enable Disable hlinutes 44 Administrator s Manual 5 1 4 Authentication Configuration The device have two
101. y select Channel 1 11 but in Europe region it supports Channel 1 13 7 Configure Wireless port s information This procedure sets the related information of the Wireless port as shown in Figure 5 13 Please enter IP and Subnet Mask and determine to Enable or Disable the DHCP 38 Administrator s Manual Figure 5 13 Configure Wireless port IF Address Subnet Mask 255 255 255 0 O Disable DHCP Server Enable DHCP Server e If you select to enable the DHCP please refer to Figure 5 14 Figure 5 14 Enable DHCP Sever of Wireless Port DHCP settings Click Next to continue DHCP Scape start IP Address 1192 168 3 100 End IP Address 192 168 3 200 Domain Mame yahoo com tw Preferred DNS Server 168 95 1 1 Alternate DNS Server Related information for enabling the DHCP Server includes DHCP Start IP Address DHCP End IP Address Domain Name Primary DNS IP Address and Secondary DNS IP address After this setup is completed click Next to continue or Exit to exit 39 Administrator s Manual 8 Restart If you are sure that your setup is correct please click the Restart button to restart and complete the setup procedures If you do not want to keep the previous setups please click Exit It will invalidate the previous setups Figure 5 15 Restart A Setup Wizard Step 8 Restart 40 5 1 2 System Information Figure 5 16 System Configuration System Informatio
102. ystem will start upgrading the file You must restart the system before the upgrade firmware is effective If you have modified any setting remember to save the setting before restarting the system Warning Please restart the system through the management interface Do not turn off the system directly and then turn on the power again Doing so may damage the upgraded firmware 102 Administrator s Manual 5 5 4 Restart This function allows you to safely restart the system the restart takes about three minutes If you need to turn off the power we recommend you to restart the system and turn off the power after you hear a beep Figure 5 96 Restart Do you want to restart 116 HotSpot Router Caution All online users connected to the system will be disconnected when the system is restarting 5 6 Status This function provides the system status information and the online user status such as System Status Interface Status Current Users Traffic History DHCP Server Reporting and Notify Configuration 5 6 1 System Status You can use this function to get an overview of the system status Please refer to the following example 103 Administrator s Manual Figure 5 97 System Status Example System Status Curent Finnware Version 1 00 03 System Name 116 HotSpot Gateway Admin info sorry The service is temporarily unavailable Succeed Page http iha yahoo corr ty External Syslog Server PA SA P

here

Contents

Download Pdf Manuals

Related Search

Related Contents