Home

Network Access Control Gateway / Controller

1. 6 17 00 00 6 17 12 00 6 18 00 00 Custom Pages Configure Custom pages for this Service Domain Administrator can select Template Page or Upload Customize Page Template Page Choose Template to make a customized login page Click select to pick up a color and then fill in all of the banks You also can use Color Template for your template If you use Color Template please click Apply button to change all color You can change the text as your wish After finishing the setting Click Save button and Preview button to see the result gt Upload Page Choose the Upload Page selection and click Upload button to upload the designated page and photo The upload files will be listed on the File List field Below depicts an example for upload File List The name of upload page must be login html Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 51 WMS 308N Network Access Gateway Controller User s Manual Example for Upload Page Here the codes are supplied Please note that the red part is for the login feature can t not modified the green part can be modified freely by administrators lt html gt lt head gt lt title gt lt hHotspot_main_title gt lt title gt lt JAVASCRIPT lt head gt lt body gt lt hi gt lt hHotspot_main_title gt lt h1 gt lt p gt l
2. 132 Appendix F Example of AP Device Connection With VLAN 136 Appendix Use Template to setup Managed APs 139 Appendix H Use Auto Recovery To Setup Managed AP 142 Chaoter 1 Before You Start 1 1 Preface The WMS 308N is a full featured Network Access Control Gateway Controller that aggregates up to 60 access points APs built in 5000 local accounts on demand accounts and delivers centralized control and security for wireless deployments The WMS 308N is designed for applications in which a compact cost effective all in one networking solution is required The WMS 308N included a policy forced firewall Intelligent Dual WAN Load balance Wireless LAN controller IP sharing and 4 Port Giga Ethernet switch in a desktop mount enclosure This device centrallized configuration and management model enables the controllers to be deployed monitored and controlled without local IT staff 12 Package Contents WMS 308N x 1 B CD ROM With User Manual QIG x 1 B Power Adapter DC 12V 1 5 x 1 B HJ 45 Ethernet Cable x 1 e It is highly recommended to use all the supplies in the package instead of substituting any components by other suppliers to guarantee best performance Chaoter 2 System Overwew 2 1 Introduction of WMS 308N The WMS 308N applies to public access network s
3. Radius Saree Saver Rae e Run Redirect URL ink n Login Tacslabe Page iz LAJN ir WLAN L Full Typa Prejeneratec Ticket On demand Local Users Remote Radius Server LOA bearer Pert Apta TP PnP Service pij a ispast Merei ntt a Time Policy alway Hun Qo Redirect URL Link Logan Page Template Domain 5 e LAH Fart 1255 JA Auth regenerated Ticket Senn dd Leal Rents Sarre LDAD WAH Bert sina 3 TP PnP Services g Guest Service gii 17 Time E alicy Always Redirect URL Link Login l age Tamplate 20 Domain 2 E LAN LAN Auth Tyee Pragenersted Takat rn demand Users Radius Semer LDAP Server IPPnEP Service aj Bo Goes a off Time Policy alway Run Redirect URL Lak Template Page LAH Port vL ANS B Auth Types regenerated Ticket COn demiand Local Laud Radius Servei LDAP E Pori 2425 k Service aff g Guest Service oji B Time Policy Aleays Run go Redirect URL Lini B8 Login Page Template Page Devan 4 DE LAM out ah WAN Port IPPnP Service d Guest Service Tinm Policy Redirect URL Login Page Port P Auth Type t WAM Port de I
4. 21 ADD AS 9 0 0 09 99 90 99 005 50569 U H ad xHUii Dz a 23 27 41 SELB Flan L BDD TER n D 8 t fi z ii r i45 34 an x Fia zB Sel Ann om IDETE n n n 5 58 28 n 2011 57 34 FI 24 17 54 Ble zB Self 14 15 17 DELTTT APCTNINT EPs n n n 5 58 88 fi Z011 531 37 T 23 40 11 SAL 154011 Fil Fh 23224 MELETT OD METUT n n n s n FALL 829329 23 4037 SAL 114019 Ble zD 14 33 11 LOZIX ICIP 1892 185 1 30 OO LA 92 GE haste 0 DB zZz 0ll Dz 14 24 27 34 4 z 0ll Dz 23 314 27 934 Flan 0 18 29 31 182 188 1 30 OO LA Bas 0 DB a 148 24 57 94 z ll Di 23 14 27 934 Flan a0 L4 440 24 DOSS LBZ 1 45 OO LA Bas 0 a on 24 57 94 z ll Di 23 14 27 34 Flan 20 18 28 04 KI K LBZ 1 45 OO LA Bas 0 E FIE 24 57 94 Z ll Dz 23 314 217 934 Flanm 0 Et BEEBE UELELE AA 0 0 0 8 99 00 99 BOS H a xHii Dr i 21 27 84 xL fee Be GRU We LEG GO bai Was PS ANETE 0 H ad xHUil Dzaz a 23 27 48 Dee EET ha FLEA E xL fee brie Le LUJTL Be PRUs Me 288
5. On the Load Balance traffic mode the primary WAN port is When the connection is down the WAN 2 will backup automatically v Backup When primary WAN interface is WAN1 and WAN is available WAN1 s traffic will be routed to WAN2 when WAN 1 connection is down When WAN 1 connection is up the route traffic will be connected back to WAN1 automatically Connection Detect The connect detect sets the WMS 308N Device to continuously ping a user defined IP address it can be the Internet gateway for example If it is unable to ping under the user defined constraints the WMS 308N device will change Primary WAN interface to secondary WAN interface automatically This option only for Load Balance or Backup traffic mode 28 WMS 308N Network Access Gateway Controller User s Manual gt Service By default it s Disable To Enable to activate this function v IP Address To Ping specify an IP address of the target host which will be monitored Ping Interval specify time interval in seconds between the ICMP echo requests are sent Default is 60 seconds Startup Delay specify initial time delay in seconds until first ICMP echo requests are sent The value of Startup Delay should be at least 60 seconds as the network interface and wireless connection initialization takes considerable amount of time if the device is rebooted Default is 60 seconds Failure Cou
6. ccccccccccccseeceeeeeeeeeseeeeceeseeeeeeesueeeeeesaaeeeesaaaes 55 4 3 2 9 Configure a a b 60 4323 Greate Billing P ats P te e ot Merval 61 4 3 2 32 Create On Demand Users 62 4 3 2 3 3 Configure External Payment 66 43234 OConfig re Thermal PrnDtet ioco Toss Desa doo Eoo e cst US 69 4 3 2 9 5 tnt e dau a E tta ecd de pb ted a doute 74 49290 75 4 3 2 4 Configure Local Radius Accounts ccccccccseseceeeeeeceeeeeeceeseeeeeeseeaesesseeaeeeesaanes 76 4 3 2 5 Configure Remote Radius Server cccccccccccssseceeeesseceeeeeeceeseeeeeeeseeeeeeeseaeeeesanaes 79 4 32 60 Gontigure LDAP Server cee ieee RUNE Re EDT 80 439 Gonhgure Walled 81 434 Gonbgure NoNGaUON ete eec Usos 82 43 5 Monitoron LJSE totale eed ne Die oe pancetta aUe 87 49 6 88 4 4 COnMOlVOur Managed AP 91 4 4 1 Discovery Managed AP Poetae a bed eyed tudo ede e feda tein 91 4 4 2 Managed AP s Profiles
7. 353 JEB S44 ET l i cal Use KATLI TE Les 0 Im it rm TEJ Afia Ta PSP ASE Eh ba dn 18 1 Demand DATH IE in 952t9Fi B41 9B8 g n D r 2011 02 16 IE RANGE AT 1 1 EB 1 10 LIBE L U0S5IHg BEI 147 TAA 16 E l amp 22ZtSPEIAXISM 0 15 i AE Lee Pte it SRR IIES 2 14 16 3 4 58 i EH EISE 13 3 P33805 Pe a ie dae te TA D 19 D 2675025 Eecummd LE rIMFGUI DIE THE 3 SFr aa 1 x ES wu a 4 04 28 fe zm id at linh BE aka aie is it al IE 19 05 03 On Demand TEE JNBHXTRE 1A 82 58F 24 8H 1005 THT 2054 1 Fregebe rared GG IN PLDT 192 1568 21 1D Q 05 Auth Type There will shows 6 types of authentication Pregenerated On Demand Local Users Local Radius Users Remote Radius LDAP and Guest bt y y V vv Y Status There will show 10 types of status as below v v v v LOGIN Indicate that the user login system LOGOUT Indicate that the user logout system IDLE TIMEOUT Indicate that the user idle time is over timeout setting of Service Domain the system will logout user automatically USE UP Indicate that the user s service time is done SESSION TIMEOUT Indicate that the user session timeout for Remote Radius VOLUM
8. 93 44 3 Managed AP Batch 2 unser veteran 96 44 4 Managed Group 99 AAO AP GROWS S LO te alus docu 104 AAG nid PanV AP MONTO icio iut 106 45 Restrain the Users and Sharing Your Internal Service 107 4 5 1 GOonlgure TMG PONGCY ceu Foe eet eed ee nee eis editos eia 107 A oT EE slg 108 45 3 MAG FIBI deci ete lise DI Ld ee io 109 4 5 4 Virtual Server Port IP Forwarding cesses enne 110 B ic 111 NR RERO UU EE AREE 112 4 5 ObSSrver the SIallls o tette ede 114 OVORVIOW ne Fei 114 462 T 115 0 3 UB ene 117 Appendix Web GUI valid Characters 118 Appendix B System Manager Privileges cere eere 124 Appendix D Examples of Making Payments for End Users 129 Appendix E Issue Refund for
9. Sari Time SOLOS 1 End Time 2011 03 64 17 00 00 End Time 2001 0206 173000 End Time 20110206 17 00 00 ESSID Winders Wirless ESSID Fasscode Pauxode Prise 1049 LSD Price 10101750 Price LEOU UID Start 20112 032 05 1700 00 Btart Time 201101 06 1 Star Time 2011 0106 1 DO DO Time 2011 0206 17 00 00 End Time 20010206 17308 End Time 2011 02 08 17 00 00 Wirkess ESSID Wirless ESSID Tickets List Show tickets information v Code User can used ticket s Passcode for access Internet Type Quota Denote ticket s time volume policy and service quota User s Manual Passeode Prise 1040 UID 201 E ED 120000 End Time 2011 02 4 17200 04 Wirless ESSID Fasscode Prise 1090 LSD uri 2011 DE DS 1 000 End Time 2011 02 4 17200 04 Wirless ESSID v Status Show ticket s status There three types of status Unused Used and Expired v Create Time Denote the ticket create time Open Time The ticket used for the first time v Start Time Denote effective starting time of the ticket v End Time Denote effective ending time of the ticket Last Login Denote the ticket last login time Price Currency The price charged for this ticket v Delete This will delete the ticket individually Click Refresh button to renew this page Aft
10. 00 00 0000 o c 0B ERE LOGIN 192 168 1 10 OO VAD OF DB OH ela ht dae fa re ME OUT OF iS 192165110 014927054408 1245 8581 1051MB 2011 02 16 13 34 06 LOGIN 2W HX BE I92 168 1 10 00 1492 96 A4 08 0 0 ow IDLE TIMEOUT JWEHXTEE 192 168 1 1 2 B 27 1 KB 55 WAHT BE 192188110 00149204408 ayo 0B 2011 02 18 USE U 2 BL J T 4 92 08 AA D 00 FTT Pur rm 205 03 Showing i te 12 of 12 eames 2011 02 21 Fu 011 1 14 E 201 1 02 21 17 31 45 12 41 59 2011 02 14 10 18 03 ERE FEIF 10 18 2011 02 21 14 17 41 011 1 LI 14 2011 02 20 12 32 17 12 32 17 2011 02 21 12 32 17 5 011 02 2 12 3217 IP Indicate that the user s IP address MAC Indicate that the user s MAC address Packets In Indicate that the current user s packets in Bytes In Indicate that the current user s bytes in Packet Out Indicate that the current user s packets out Bytes Out Indicate that the current user s bytes out Start Time Indicate that the start time of current service users End Time Indicate that the end time of current service users t y y VV V VoM v v Plan Indicate that the current user s billing plan Click Refresh button to renew this page 90 Passcode Username Indicate that the user s passcode or username WMS 308N Network Acce
11. 551 clieri side youre using shopping or solution provider ask whether you need an API signature or a certificate Request signature il your shopping can or solution provider has Request certificate 11 your shopping or solution provider asked for username password and signature or id youre requires file based developing a custom shopping Need help deciding which credential is right Tor your needs Lear more By clicking Agree and Submit agree ihe License Agreement and Terms of Use sos 127 WMS 308N Network Access Gateway Controller User s Manual The API Username API Password and Signature will generated Click Done button to finish process View or Remove API Signature Back io Profile Summary For preconfigured shopping carts Copy and paste ite username password and signature into pour shopping configuration acmanistrati n screen For building custom shopping carts Store the folowing credeniial iniarmation in locaton with bmiled access Crach nind Segra lure AP Ussmmnme apt pheenet h AFI Fata Mx XEXXxXXXxxxx xx 5 AylwAWOyzbHCvFaSadgti Un P LaATbvgeOPgT WwkeOROTW yigEC Wum Request Data Jun 7 2010 17 55 47 0800 128 WMS 308N Network Access Gateway Controller User s Manual Joe s
12. Guest Time 17720 default is 10 Pregenerated File ID 1 32767 mene Price 1 7 digit number Currency 1 3 letters characters Quantity of Tickets 1 3069 Passcode Length 8 31 default is 8 Description Up to 32 characters Space Time Quota 1 366x24x60 default is 60 Volume Quota Default 10 Max is 102400 Effective Start End Time Date Time Format MM DD YYYY HH MM Start Time lt End Time Billing Plan Plan Name Up to 32 characters Price 1 7 digit number Currency 1 3 letters characters Passcode Length 8 31 default is 8 Wireless ESSID Up to 100 characters Space Wireless Key Up to 100 characters Space Description Up to 100 characters Space Time Quota 1 366x24x60 default is 60 Volume Quota Default 10 Max is 102400 121 WMS 308N Network Access Gateway Controller User s Manual Table A Web GUI Valid Characters continued Block Field Valid Characters Thermal Printer IP Address A B C D IP Format Command Port 1 65535 default is 5000 New Lock Password 4 8 digit number Confirm Lock Password 4 8 digit number Balance Date Time format HH MM Description Up to 32 characters Space Local Radius Username Length 4 16 0 9 2 a z lt _ lt gt 7 Password Length 4 16 0 9 A Z a z lt _ lt gt MAC Address MAC Format 12 H
13. Login Page Damain g LAN Port Typa Tira On demand Local Users Remote Radius Server LOA berrar P WARN Port iik IP PoP Service gf Tou eerie rh Tima Policy Always Run Redirect URL Link e Login Page Template Fort E Auth regenerated Ticket Local Users Remote Radios Server LOAD Server E WAN Port aita TEP Servicw aff Guest Service D Time Alwayz Aun gp Redirect URL ak i Login Page Template a TeTSED E I 2 ge LAN Part ANZ Auth Tree Takat On demand Users Serer LDAP Serer WAH Port 2 25 IPPnP Service aji B Cou SE herrie oft Always Run Redirect URL Link Login Template Page p Pork i a5 E Auth Type regenerated Ticket Loca Lud Sava WAH Port sisa 32 IPPnRP Service g Guest Service ii time Polley Run g Redirect URL p jak fi Page alm LAN Port The bonding interface for the respective Service Domain Domain 4 DE LAN Lang Avot Type Prager acr bcd Cin Garr id Loca Wears Remote Radius berver LDAP m Port i Il PnP Service bett ea gi Policy Hun Redirect URL
14. My WAN IP Netmask e MPPE Encryption MPPE 40 128 Username Enter User Name for PPTP connection Password Enter Password for PPTP connection PPTP Server IP The IP address of the PPTP server gt My WAN IP The IP address of the WAN port 26 WMS 308N Network Access Gateway Controller User s Manual My WAN IP Netmask The Subnet mask of the WAN port MTU By default it s 1460 bytes MTU stands for Maximum Transmission Unit Consult with WISP for a correct MTU setting MPPE Encryption Microsoft Point to Point Encryption MPPE encrypts data in Point to Point Protocol PPP based dial up connections or Point to Point Tunneling Protocol PP TP virtual private network VPN connections 128 bit key strong and 40 bit key standard MPPE encryption schemes are supported MPPE provides data security for the PPTP connection that is between the VPN client and the VPN server m DNS Select No Default DNS Server or Specify DNS Server IP option as desired to set up system DNS Primary The IP address of the primary DNS server Secondary The IP address of the secondary DNS server B MAC Clone The MAC address is a 12 digit HEX code uniquely assigned to hardware as identification Some ISPs require you to register a MAC address in order to access to Internet If not you could use default MAC or clone MAC from a PC gt Keep Default MAC Address Keep
15. Restore WAP S54GP 00 14 50 05 08 28 192 168 2 60 ID 2008 01 01 Download Restore WAP 954GP 00 14 50 18 36 09 192 188 2 62 80 2060 01 01 00 35 03 Restore Recovery Delete Aute Download Profile real Minutri Saws Setup 5 Configure WAP 954GP A managed AP set VAPO s ESSID to WAP 954GP A The Status of WAP 954GP A should display e before system automatically download WAP 954GP s profile to database AP Profile Management Siaiur Hori AP AddresscPort Password Last Update Time Copy To Template Download FC Restore Awto Recovery mW Ed 44 x x BEER P o WAP SHGF 00 14 58 07 01 1 192 168 2 61 80 DEI 2000 01 01 000151 Download Restore Recovery Delete WAP 051 8 00 14A 50 5 DR 720 192 158 2 60 20 teers Ga pere Greet Rexsaneeny Dele 00 1 50 18 32 098 192 188 2 82 IDE 2009 01 01 00 12 48 Download Restore Recovery Explorer User Prompt Script Prompt MAC 00 1A 50 05 08 29 Copy to template File Please input template name WAP 954GP Template 140 WMS 308N Network Access Gateway Controller User s Manual Step 7 Configure WA
16. Croup Status re 600 00 200 00 Croupo Tx 1 EN Groupi Ex E Group Chent Groupi Group Ta Groupe chent FAIH 300 00 100 00 Group Name Dau ripticm Clients Rx E Tx p oreup 080 Grup 1 a 31858 087 Gnoup 1 WAP BSANP WAP BAP Groep 1 156457 15383 192 161 B Overview Show graphs which continuously represent the current data traffic and on line clients on the respective group Groep WAP S545P fou Shogo WAP BSAHP Croup Addreda Firmware Client Tx h Rx n 192 168 2 62 C n AB 2H5 v7 0 6 Version 16686 20676 II 190 1897 158 2 63 VJ 0 65 Var tn 10503 amp 30 255 192 1568 7 561 Cans AP 57H5 V2 0 6 Version 15585 30876 z01 190 Location Show current managed AP s location on the respective group The green mark indicate the can be accessed and double click to view the respective System Information the question mark indicate the AP can not be accessed 0 WAP 954GP Group Group1 WAP 854NP Group u WAP yt RAGD Sit m VAF 3x Adrian Fel AGP Sit ong m WAP 854N See PHE 104 WMS 308N Network Access Gateway Controller User s Manual Device Information Display the device information of the respectiv
17. mgamagaaaadgas B Available AP Profile List All managed AP s profiles will be display on the list Group Select a specific group of managed APs for batch configuration Select Select desired managed AP for batch configuration Host Name Indicate the current system name of the respective managed AP AP MAC Address Indicate the current MAC address of the respective managed AP IP Address Indicate the current IP address of the respective managed AP yvy y Vv Y Status Indicate the current status of the respective managed AP after click Apply AP or Reboot AP button for batching configuration The following status Save LAN Wireless VAP Error Connect Fail 1 Upgrade Firmware Error Connect Fail 1 Upgrade Firmware Error Firmware Upload ERROR Save LAN Wireless VAP Success Check Free Memery Upgrade Firmware Now Rebooting 1 To prevent data loss during firmware upgrade please backup current settings before proceeding 2 Do interrupt during firmware upgrade including switch power on off or unplug RJ 45 cable from PoE port as this may damage managed APs B Batch Setup Select desired for batch configuration the related setting field will appear LAN Setup Specify IP address Netmask Gateway and DNS for selected managed APs Management Setup Specify desired system information administrator s password HTTP s port and Telnet S port 96 WMS 308N Network Access Gateway Controller
18. Select desired scheduling of the respective Service Domain for authentication service Scheduling setting is on Time Policy page PnP IP Plug and Play the WMS 308N supports IP PnP for the respective Server Domain At the user end a static IP address can be used to connect the system Regardless of what the IP address at the user end is authentication can still be performed through WMS 308N IP PnP only supports on NAT mode Guest Service By default it s Disable To Enable to activated guest service limitation the Guest button will appear on the login portal window Below depicts an example Guest Service 50 WMS 308N Network Access Gateway Controller User s Manual NAC Gateway Access Controller 2 Username Local Radius Password Please input Passcode Username and Password then you can use our Internet service Thanks Guest Count Limit Enter maximum number of guest to a desired number in the range of 1 100 The default value is 5 For example while the number of the guest is set to 5 only 5 guest are allowed to connect to Internet via controller at the same time JL Guest Time Enter maximum free service time for guest user within 24 hours The default is 10 Minutes the range is between 1 to 720 Minutes Expired Logine Guest Time 720 Minutes ee Blocke Freee TO Oo
19. 115 160 254 215 dport 80 92 9B 2011 02 15 12 25 38 NEW testi Local Radius src 1982 168 1 10 sport 3736 dst 119 160 254 215 dport 80 MAC 00 1A 92 9F A4 3B B Monitor IP Report The log record unreachable monitor IP report As shown in the following figure each line is a Monitor IP report record consisting of Date Time URL 2011 02 15 12 16 17 http 192 168 2 64 offline 2011 02 15 12 16 29 http 192 168 2 68 offline B AP Status The log record unreachable managed APs As shown in the following figure each line is Status record consisting of Date Time Host Name IP address MAC address 2011 02715 13 49 47 WAPSS46P 64 192 168 1 64 0011431B3ED 9 offline 86 WMS 308N Network Access Gateway Controller User s Manual 4 3 5 Monitor Online Users The administrator can view status of all online users on each Service Domain Please click on Service Domain gt Online Users the page of Online Users will appear Below depicts an example for Online User Information There provided information of Passocde IP Address MAC Address Login Time Packets In Out and Bytes In Out NM amp Online Users 5 how En entries Ar Ar x pie ut Auth Type Passcode Username Address MAC Address Login Time Packets In Out Bytes In Out Logout Local Users testi 192 168 1 11 00 16 D4 33 32 BB 2010 11 22 13 15 51 1703 2318 376 9KE 456 7KB Logout
20. 3 2 1 Step 1 3 User s Manual Software Configuration Getting Start Once the hardware installation is done set DHCP in TCP IP of the administrator s PC to get an IP address automatically Connect the PC to the LAN port of WMS 308N An IP address will be assigned to the PC automatically via the WMS 308N Launch a web browser to access the web GUI of WMS 308N by entering http 192 168 2 254 in the address field gt PheeNet Mode WMS 308N Windows Internet Explorer i htt 192 168 2 254 The following Administrator Login Page will appear Enter root in the Username field and default in the Password field Click OK button to login The server 192 168 2 254 ak WMS 30BN requires username and password Warren Thes server i5 requesting that your username and password be sent in an insecure manner basic without secure connection User root Remember password If you can t get the login screen you may have incorrectly set your to obtain IP address automatically from LAN port or the IP address used does not have the same subnet as the URL Please use default IP address such as 192 168 2 x in your network and then try it again WMS 308N Network Access Gateway Controller User s Manual You can login as root admin or operator The default username and password as follows gt Root The administ
21. Gateway ww il m Monitor Gu Ticket Count a x Online Users Network 1000 00 Auth Type Tickets Domain Auth Guest DHCP Clients 800 00 Pregenerared Domain 0 0 0 600 00 On Demand 0 Domain 1 g D Service Domain TE 400 00 Payment Gateway J Domain 4 0 200 00 Thermal Printer 6 Domain 3 o g Eps 0 Local Radius 0 Domain 4 0 ss 14 50 00 74 93 3 Total 0 15841 Domain 5 a IP Address 192 1682 254 x Hetmask 155 755 755 0 Used Space D Domain 7 D 0 Ka TX Bytes 795909 System Information Display the information of the system Networking Information Display the information of the network m DHCP Clients Information Display the information of the DHCP clients B Service Domain Information Display the information of the Service Domain 114 46 2 Extra Info WMS 308N Network Access Gateway Controller User s Manual Administrator could pull out information such as Route table ARP table MAC table Bridge table or STP available in the drop down list from system The Refresh button is used to retrieve latest table information amp Extra information Ex Inks Pretecel Liwe Time STA ux remp ork Tic ee Dato B Information Select NetStatus Information on the drop down list the connection track list should show up NetStatus will show all connection track on the system the information include Protocol Live Time Status Source Destinatio
22. Port 2 Port 3 Port 4 p Fort s s s Untagged VLAN TAG Mode o Tagged Step 4 Configure Port Setup on VLAN2 Setup page enable Port 4 and set Port 4 to Untagged Port Setu Port 1 Port 2 Port 3 Port 4 p Port X s s s Untagged VLAN TAG Mode Tagged 137 WMS 308N Network Access Gateway Controller User s Manual Step 5 Configure Port Setup on LAN Setup page enable Port 4 and set Port 45 PVID to VLAN2 102 Port Setup Port PVID 802 1P Priority Port 1 Port 2 Port 3 LAN h o Port 4 VLAN2 102 o Step 6 Reboot System Step 7 Verify Wireless clients can connect WAP 954GP and WAP 854NP with correct authentication type 138 WMS 308N Network Access Gateway Controller User s Manual Use Terplate to setyo Managed APs The system supports LAN setting Time setting Wireless Basic setting Wireless Security setting and Firmware Upgrade if administrator want to configure more managed APs with same settings such as Time Server HTTP Port Wireless Advanced Setup etc The administrator can use template to configure Below depicts an example for configuration managed APs with Template Environment Description 1 Three WAP 954GP managed APs e WAP 954GP A 00 1A 50 05 08 29 e WAP 954GP B 00 1A 50 1B 3E D9 e WAP 954GP C 00
23. Pregenerated 192 168 101 10 00 15 AF 16 73 3D 2010 11 22 13 25 55 15 20 7 1 7KE Logout Showing 1 to 2 of 2 entries Auth Type Indicate the current user s authentication type Passcode Username Indicate the current user s passcode or username m IP Address Indicate the current user s IP address m MAC Address Indicate the current user s MAC address Login Time Indicate the login time for this user Packets In Out Indicate the current user s packets in and out Bytes In Out Indicate the current user s bytes in and out m Logout Click Logout to logout online users Click Refresh button to renew this page 87 WMS 308N Network Access Gateway Controller User s Manual 4 3 6 Log Inforrretion The WMS 308N can record authentication traffic history or On Demand event and the system will automatically send out the history information via notification service See Notification page The history of each day will be saved separately in the DRAM for 3 days and sorted by time the traffic provides all login and logout activity of specific date Other informations include Passocde Username IP Address MAC Address Packets In Out and Bytes In Out Please click on Service Domain gt Log Info the page of Log Info will appear amp Log Traffic Log Date 2011 02 15 On Demand Log Date 2011 02 15 The all history log are saved in the DRAM if you need restart system and also
24. Single UI for upgrading and restoring managed APs firmware WLAN Partition if enabled WLAN clients are not allowed to exchange data through the AP WAP 854NP WAP 954GP CPE 2010G CPE 2000GN 1 WLO 15814N WLO 15802N Max allowed APs Support Roaming Intra Switch Inter band Inter Switch B Central AP Monitoring lt lt lt lt 5 5 S Monitor AP Status The number of associated clients to the AP The AP information Associated Station List Monitoring IP List Load balancing based on number of users Load balancing based on utilization WMS 308N Network Access Gateway Controller User s Manual AP User Statistic Maintain all wireless clients connection history and depict statics in diagrams Support Monitor IP on third party APs System alarms and status reports on managed APs Topology Monitor list monitored device periodically updates devices status AP life check real time tracking monitors APs status AP Health Checking Provide centralized remote management via HTTP SNMP interface Support MIB s 802 11 802 1X MIBII RADIUS authentication RADIUS Accounting SYSLOG support including remote servers lt lt lt lt lt 5 5 S lt Log system log operator action log Radio Resource Management V E B B B E HH Automatic Channel Assignment and power setting for controlled APs Simultaneous air monitoring and end user service Self healing cove
25. WMS 308N Network Access Gateway Controller User s Manual Rear Panel 1 Power SOCKET 12V DC Attach the power socket here WMS 308N Network Access Gateway Controller User s Manual 3 1 3 Hardwere Installation Please follow the steps mentioned below to install the hardware of WMS 308N 1 Place the WMS 308N at a best location The best location for WMS 308N is usually at the center of your wireless network 2 Connect WMS 308N to your outbound network device Connect one end of the Ethernet cable to the WAN1 WAN port of WMS 308N on the front panel On your environment connect the other end of the cable to the external Internet The WAN1 WAN2 LED indicator should be ON to indicate a proper connection 3 Connect WMS 308N to your network device Connect one end of the Ethernet cable to LAN port of WMS 308N on the front panel Connect the other end of cable to a PC for configuring the system The LAN LED indicator should be ON to indicate a proper connection 4 Connect the DC power adapter to the WMS 308N power socket on the rear panel Please only use the power adapter supplied with the WMS 308N package Using a different power adapter may damage this system Now the hardware installation is completed To double verify the wired connection between WMS 308N and your switch router hub please check the LED status indication of these network devices WMS 308N Network Access Gateway Controller 3 2
26. re WAN TralliC uoo 28 44 4 Contigure Dynamic DNS iu icto hor eo elem EC ben Denm huc tu ved dosi 30 4 1 5 Configure Local LAN VLAN Network ccccccccccecssseceeeeeeeeeeseeeeeseeeeeeesseeeeesseeesessaaaes 31 4 16 Manage SWIICI QOS e des Ai taedet tse 37 42 Manage SY SIGNI x doe care tant dius seid e cc pu eels dain Magenta 38 424 Gonhgur System TIME Oboe uiae tare 38 422 QConhada re Management sudo sod eodd Ru Odd rosa idest oa sedo Census 39 42 9 Congre SNIVIP a o cuoco On cute ettet nuce sod o dva 42 4 2 4 Backup Restore and Reset to 43 4 2 9 Hirtnware UDdI dde ICH Ee 44 42 6 plo On a aee dut 45 427 Foma Database 46 429 RE re ee er eee 47 4 3 Access To External Network With Service DOMAIN 48 43 4 Service eet ete ott oed ee putet ed e suuni 49 432 Congre AuthentlGallOliss Rn n MU RES 54 4 3 2 1 X Authentication 54 4 3 2 2 Configure Pregenerated Tickets
27. transaction 6 1 Two In USO 518 200 io amp 17 2010 _ Search 132 WMS 308N Network Access Gateway Controller User s Manual Step 3 View the transaction detail and click Issue a refund PayPal ax My Account Send Money Request Money Merchant Services Products amp Services Overview Add Funds Withdraw History Resolution Center Prolile Transaction Details e m OK to complete the transaction Payment Status Completed What should 1 do now Seller Protection Not Eligible e Contact the buyer to confirm the purchase e Save all correspondence with the buyer bris have no shipping address on ile Following these guidelines can help protect you if a claim is filed for an unauthorized payment or items not received Tips to sell securely Express Checkout Payment Received Urique Transaction ID 4 55 492669W 4196426 Name SHEN TE The sender of this payment is Non U S Verified Email junides hen ya hoo com Payment Sent to 1 Total Amount NT 1 TWD Fee amount NT 1 TWD Net amount NT 0 TWD Issue refund kj You have up to 60 days to refund the payment and get the fees back Item amount NT 1 TW
28. 2001 01 24 11 10 4 SD Delere MEOHIMZG Unlimited Ural End Time 2011 01 18 11 28 12 2011 01 18 11 21 12 Lit Delete EX 2 Times DX Minutes Uni 34650 1 15 58 42 D 1501 1 gus Delete SMR PSF Jne Time Minutes Unused 2011 01 17 15 59 37 1 7 T lf Delere S BECALIGE E B Thermal Printer Information Show setting information in this Thermal Printer Status Display Thermal Printer status currently IP Address Denote IP address for this PSS 120 Command Port Denote command port for this Thermal Printer COM Port Denote COM port for this PSS 120 Date Denote balance date for this Thermal Printer y y y y y Description Denote additional information for this Thermal Printer Click Edit button to enter Thermal Printer Setup page 71 WMS 308N Network Access Gateway Controller User s Manual B Statistic Show on demand users statistic information for this billing plan gt gt gt gt Ticket Qty Denote ticket s quantity in this Thermal Printer Used Ticket Qty Denote used ticket s quantity in this Thermal Printer Expired Ticket Qty Denote expired ticket s quantity in this Thermal Printer Total Price Denote total ticket s price and currency in this Thermal Printer Daily Tickets Chart Show ticket s quantity of chart for this billing plan Tickets List Show tickets information gt gt VV y yyy VM v Plan Denote
29. Enter the time quota for One Time and Multiple Times policy the maximum volume allowed is 527040 minutes default is 60 minutes or enter the volume quota for Volume policy the maximum volume allowed is 102400 MB default is 10 MB M Effective Starting Time Specify desired effective starting time for this tickets databases Effective Ending Time Specify desired effective ending time for this tickets databases Click Save button for generate ticket databases in the Pergenerated Tickets Database List 55 WMS 308N Network Access Gateway Controller User s Manual B Delete Click Delete button to delete selected tickets databases After clicking delete button the alert message appears as below Message from webpage J Do vou want to delete all tickets of the FileIDr Click OK button the system will check and delete selected pregenerated tickets database The Success message will appear after deleting database Please Wait Checking and delete all tickets of the FileID B Import Tickets File Click this to enter the import tickets Click Select File button to select the binary file for the tickets upload The the Upload File message will appear Please Wait Upload File 56 WMS 308N Network Access Gateway Controller User s Manual B List Click Info button to view information of each tickets databases Below depicts an example for information of Pregenetated tickets
30. IP address of managed AP need the same with controller Click Refresh button the switch will rescan managed AP To support switch discovery the WAP 954GP need use firmware version 2 0 10 or higher the WAP 854NP need use firmware version 1 0 4 or higher the CPE 2010G CPE 2000GN 1 need use firmware version 2 1 2 or higher the WLO 15814N WLO 15802N need use firmware version V1 1 4 or higher 92 WMS 308N Network Access Gateway Controller User s Manual 4 4 2 Managed AP s Profiles Managerrent After administrator import profile of the respective managed AP the each managed AP s profile will saved in the database of switch and listed status on AP Profile Management page Up to 60 managed APs can be imported to system This section provides profiles management of the respective managed AP Administrator can copy profile to template database download profile to PC restore or auto recovery profile for managed AP Please click on AP Management AP Profile Management the AP Profile Management page will appear ft AP Profile Management Refresh Status Host Name AP MAC Address IP Address Port Password Last Update Time Copy To Template Download To PC Restore Auto Recovery Delete WAP 854NP 00 1A 50 2F 0C AB 192 168 2 60 80 2000 0 04 15 Download 1200 Serial 00 1A 50 04 91 07 192 168 2 62 80 III 2000 01 01 00 11 0 Dacos 1200 Serial 00 1A 50 01 C6 97 192 168 2 61 80
31. Manual RSSI Threshold 0 indicates 95 dom on WAP 954GP and WAP 854NP RSSI Threshold 100 respectively indicates 35 dom and 1 dom on WAP 954GP and WAP 854NP Get all site survey in the same group APs Sort group managed APs scaning list Select maximum scaning list Free Select Channel Assigned current Select Channel to AP with High Power Level Assigned current Select Channel to AP with Low Power Level Apply group managed APs Figure 4 3 Dynamic Channel and Tx Power Allocation Flow Chart B Maximum Clients Control By default it s Disable To Enable to activated maximum clients limitation in the same group APs the switch will automatically assign maximum clients limitation for group managed APs after the Auto Download Profile Interval Please see section 4 3 2 Maximum Clients Control Service Threshold Ji TX Threshold 10240 Group MAX Sevice Clients Threshold Rx Threshold is in the range of 0 120400 and set in unit of KBps The default value is 10240 KBps Specify desired receive bandwidth for wireless clients limitation in the same group of each managed AP The wireless clients unable connect to managed AP when bandwidth of receive achieve limitation 100 WMS 308N Network Access Gateway Controller User s Manual Tx Threshold Tx Threshold is in the range of 0 120400 and set in unit of KBps The default
32. SHEN CHUN TE ndes heng yahoo com NT 1 TWD NTH TWO NTO TWO Jun 17 2010 21 40 42 00 Completed 135 WMS 308N Network Access Gateway Controller User s Manual poendx F Example of AP Device Connection With VLA This section is to show independent Hotspot owners how to setup different Service Domain for AP device with VLAN tagged or untagged The Figure shows an example for AP device with VLAN tagged and untagged connect to different Service Domain On Demand Pregenerated Local RADIUS Gateway WMS 308N NAC Gateway The WMS 308N create three Service Domains Domain 1 use On Demand authentication with VLAN tag 101 Domain 2 use Pregeneraged Tickets authentication with VLAN tag 102 Domain 3 use Local RADIUS accounts authentication with VLAN tag 103 The WAP 954GP connect to WMS 308N s LAN1 port and create three VAPs with different VLAN tag 101 102 and 103 and the wireless clients can connect Internet via WAP 954GP with different authentication The WAP 854NP connect to WMS 308N s port and set VAPO without VLAN tag the wireless clients can connect Internet via WAP 854NP with Pregenereaged Tickets authentication 136 Step 1 Verify WAN and System s Time WMS 308N Network Access Gateway Controller User s Manual Step 2 Configure Service Domain set Domain 1 to On Demand authentication Domain 2 to Pregenerate Tickets authentication Domain 3 to Local Users authent
33. and logout portal page CLI access Remote Management via Telnet and SSH Hemote firmware upgrade via the Web Utilities to backup and restore the system configuration Full Statistics and Status Reporting Real time traffic monitoring Ping Watchdog Network Management VVVVVV vvv VV vM Event Syslog Status monitoring of on line users IP based monitoring of network devices Interface connection status Support Syslog for diagnosing and troubleshooting User traffic history logging User s session log can be sent to Syslog server Remote Syslog reporting to external server Traffic Analysis and Statistics SNMP v1 v2c v3 SNMP Traps to a list of IP Addresses Support MIB II NTP Time Synchronization Administrative Access HTTP HTTPS User s Manual WMS 308N Network Access Gateway Controller User s Manual WMS 308N Hardware Specifications Base Platform 32 bit MIPS24K Processor CPU Clock Speed 680 MHz Serial Port 1 DB 9 USB Port 1 Optional 3G interface radio with major brands ODM only Reset Switch Built in Push button momentary contact switch Ethernet Configuration 10 100 1000 BASE TX auto negotiation Ethernet port x 6 RJ 45 connector WAN 2 LAN 4 DRAM On board 256Mbytes On board 32 Mbytes CF Socket 1 reserved for option Built In LED Indicators 1 Power 1 Status 1 Net Status This is for AP management when system can t detect managed AP Environmental amp Me
34. as described here and click Save button to save your changes Click Reboot button to activate your changes 36 WMS 308N Network Access Gateway Controller User s Manual 4 1 6 Manage Swtch QoS The WMS 308N can recognize the QoS priority information of incoming packets to give a different egress service priority The WMS 308N identifies the packets as high priority based on several types of QoS priority information Port Base Priority 802 1p Base Priority and DiffServ Base Priority QoS function provides maximum 8 queues per port for packet scheduling with queue weight and priority assignment With different queue number usage threshold of flow control mechanism will be an important element in throughput improvement Please click on System Switch QoS Setup the Switch QoS Setup page should be appear Switch Cos Setup Qos Setup Oui Bart Fsiarity Priority ACP Bem ark Remark Cui High uri n 1 a ja nogaooooo QoS Setup When port based priority is enabled packets received from the high priority port are sent to the high priority queue of the destination port The WMS 308N provides maximum 8 queue per port for packet scheduling with queue weight and priority assignment m 802 1 QoS Setup By default it s Disable To Enable to set 802 1p priorities mapping to internal priority queue m DSCP QoS Priority This functi
35. databases Service Domain gt Pre generated Tickets DB gt Tickets Manager Ticket Information Statistics Lit Export Tickets Sewn 1 ie bial POI cerca Ticket Information Show information for selected tickets database Y File ID Identifying tickets databases Y Description Denote information of the tickets databases v Effective Starting Time Denote effective starting time of the tickets databases v Effective Ending Time Denote effective ending time of the tickets databases and Quota Denote tickets database time volume policy and service quota v Passcode Type Denote passcode type of the tickets databases v Passcode Length Denote ticket s passcode length Quantity Denote ticket s quantity in this tickets databases Price The price charged for this tickets database Statistic Show tickets database statistic information v Ticket Qty Denote ticket s quantity in this tickets databases 57 v Used Ticket Qty Denote used ticket s quantity in this tickets databases Expired Ticket Qty Denote expired ticket s quantity in this tickets databases Y Total Price Denote total ticket s price and currency in this tickets database Export Tickets There are three methods to backup your information of ticket databases WMS 308N Network Access Gateway Controller User s Manual Export BIN The administrator can backup ticket database or copy to other WMS 308N Click E
36. generated Quick Configuration e g test1 as the Username and 11111 as the Password then Click Login button Congratulation The Timer page will appear after a client has successfully logged into WMS 308N and has been authenticated by the system Now you are connected the network and Internet NAC Gateway Access Controller f Home Hello testi Connection Time 2011 01 05 19 32 38 Please Don t Close This Page 23 WMS 308N Network Access Gateway Controller User s Manual Chapter 4 Web Interface Configuration WMS 308N provides functions as stated below where they can be configured via a user friendly web based interface OPTION System Service Domain AP Management Advanced Utilities Status WAN Service Domain Device Discovery DMZ Profile Setting Overview WAN Traffic Authentication Pa IP Filter Firmware Upgrade Extra Info anagement LAN Walled Garden Parca cup MAC Filter Network Utility Event Log anagement TT AP Group Setup Function Switch QoS Notification Management Virtual Server Format Database DDNS Online Users AP Group Status IP Routing Reboot Management Log Info Website Monitor Time Policy Time Server SNMP After finishing the configuration of the settings please click Save button and pay attention to see if a Reboot message appears on the screen If such message appears system must be restarted to allow
37. here enter the Username e g test1 Password e g 11111 MAC Address optional to specify the valid MAC address of this account and Description More accounts can be added by clicking the Save button Step 6 Restart WMS 308N Click Reboot the Reboot page will appear Click Reboot button to start the restarting process x Reboot Press Reboot to Enable New Setting A Please don t interrupt the system during the restarting process When the Home Page appears it means the restart process is now completed 22 WMS 308N Network Access Gateway Controller User s Manual 3 2 3 Access Internet To verify whether the configuration of the new Local Radius accounts created via the Quick Configuration has been completed successfully Step 1 Connect a client device e g Notebook with wireless interface to scan the configured ESSID of WMS 308N e g 00 and get associated with this ESSID 2 The client device will obtain an IP address automatically via DHCP from WMS 308N Open web browser on a client device access any URL and then the DomainO s User Login Page will appear NAC Gateway Acoess Controler 5 Username testi gt Local Radius Login Password esses Please input Passcode Username and Password then you can use our Internet emma a 3 Enter the Username and Password of Local Radius account previously
38. history record consisting of 12 fields Date Status Passcode Username IP MAC Packets In Bytes In Packets Out Bytes Out Start Time End Time and Plan Date Indicate that current event s date and time Status There will show 10 types of status as below v v LOGIN Indicate that the user login system LOGOUT Indicate that the user logout system IDLE TIMEOUT Indicate that the user idle time is over timeout setting of Service Domain the system will logout user automatically USE UP Indicate that the user s service time is done VOLUME USE UP Indicate that the user s bandwidth is done KICK Indicate that the system kick out the user TIME OUT OF RANGE Indicate that the service time of Service Domain is not on schedule ADD OD ACCOUNT Indicate that the system add On Demand user account 89 WMS 308N Network Access Gateway Controller v DELETE OD ACCOUNT Indicate that the system delete On Demand user account amp On Demand Loe Show FRR entices User s Manual 2011 02 16 71827 1925 1855 1 10 T iF OF si ADD OD ACCOUNT 340238kX 0 0 0 0 00 00 00 00 00 00 0 0 OB OB 201 DEL ADD OD ACCOUNT MATCEKDS 0620 diritti Oyo OF 2011 02 16 17 34 24 DELETE ACCOUNT DELETE OD np uu LL E Uc rWEISDE Bo 0 0 DO ODCDO DOC oy oO 147 7KE 1 ET Ale ph ACCOUNT 0 0 0 0
39. is 389 Identity Enter the Administrator s Identity for access to the directory service Password Enter the Administrator s Password for access to the directory service m Base DN Enter the Base Distinguished Name DN in the Base DN field The base DN indicates the starting point for searches in this LDAP server Account Attribute Enter the account attribute of the LDAP server Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 80 WMS 308N Network Access Gateway Controller User s Manual 4 3 3 Configure Walled Garden This function provides certain free services or advertisement web pages for users to access the websites listed before login and authentication Up to 20 address or domain names of the websites can be defined in this list User without the network access right can still have a chance to experience the actual network service free of charge Please click on Service Domain gt Walled Garden the page of Walled Garden Setup will appear Enter the Walled Name IP Address Domain Homepage and Description then click Save button to add website on the list amp Walled Carden Serup Walled Garden Walled Garden List IP ddraig Domain wv ona com Edit Click Reboot button to activate your changes After add website on the list the Walled Name will appear on Log
40. keep the history please manually copy and save the informations before restarting B Traffic Log As shown in the following figure each line is traffic history record consisting of 10 fields Date Auth Type Status Passcode Username IP MAC Packets In Bytes In Packets Out and Bytes Out Traffic HATETE 2011 02 18 17 30714 Pregenerared TIME GUT RANGE GBORORE 182 188 1 10 14c02 0F A4 08 103 144 283 2 57 KB 2011 02 16 17 47 37 Local Users LOGIN test 192 168 1 10 A408 0 0 OB 0E 2011 02 16 17 50 28 al Use OUT te 4 GOKE 2011 02 18 17 50 52 On Demand LOGIN 182 188 1 10 0 14 02 0F A4 08 OB 200 FOS 18 EO Din D emand IMHE OUT OF 92 155 1 10 DO pad zu 1265 BG ie 2011 02 18 18 22 00 Guest LOGIN 182 188 1 10 00 14 02 0F A4 08 08 2011 02 16 18 32 48 Guest USE UP 122 168 1 1 92 0F 4 1183 1688 273 5KB 2011 02 16 18 34 08 On Demand LOGIN ZWBHX BE 192 168 1 10 00 LAC 9 2 04 aoe 2011 02 18 18 52 52 On Demand DLE TIMEOUT WAM BE 1892 168 1 10 0 14 92 0F A4 0 27 1KB 9 4KB 2011 02 16 18 54 66 On Demand LOGIN ZWBHXTEE 122 168 1 10 00 1A 92 0F 0 0 OB QE 2011 02 16 19 05 03 On Demand ust ur ZW HX BE 92 168 110 20 a pN 1005 978 57 AKB 204 2011 02 18 1007 28 Dre generare d LOGIN urmzeca 182 1
41. levis 192 108 2 01 00 1 50 07 01 11 WAP CenARCIMS 2 0 10 2011 02 04 17 12 38 192 158 2 51 155 255 255 0 192 168 2 1 SavekReboot AP 192188260 00 1 50 0508 29 Jjaaaaesa WAP S540P CenARPC2HSV2010 20112502 08 1712 AP 192 168 2 60 258 255 256 0 192 168 2 1 Save amp Reboot AP b Geine 92158202 18 36 09 WAP SHGP CenAPG2H5wvz010 2011 02 04 17 12 38 192 168 2 82 255 255 255 0 192 168 2 1 LAM Setup system Message P Address 192 188 2 80 Aute increment IP Aclelrzxx MAC Alldirexs PHereajk 255 255 255 0 192 108 2 254 DO 1A 50 07 01 11 Change IF 192 168 2 60 PGareway 192 168 2 1 Ve 108 2 234 A DNE Default Server specify ONE Server iP 192 1052 254 ASS hange E 192 168 2 Grime naro 102 153 2 8 La ln por t Database ore 102 2 q mport te Database Secondary ONS 17 IAA 2 87 a 5 1g Epam rs Dankbare based AD Step 4 Check the respective managed AP s profile in the Profile List and change Auto Download Profile Interval to 1 minute then chick Save button AP Profile Management 78 T Name amp ddress Fort Fasaswornd Laat Update Time Copy To Template Download Restore Auro Recovery WAPSSOGP DOTASODTOL T 192 168 261 eere 2009 01 01 00 38 24
42. lt _ lt gt Port 1 65535 IP Address Domain A B C D IP Format or Domain IP Address to Ping A B C D IP Format Ping Interval 60 3600 default is 300 Startup Delay 60 3600 default is 300 Failure Count To Reboot 1 99 default is 3 SNMP RO RW community Length 1 32 0 9 A Z a z lt _ 1 lt gt RO RW user Length 1 31 0 9 A Z a z G _4 li lt gt RO RW password Length 8 32 0 9 A Z a z G _4 li lt gt 3 Community Length 1 32 0 9 A Z a z G _4 li lt gt 5 IP A B C D IP Format 120 WMS 308N Network Access Gateway Controller User s Manual Table A Web GUI Valid Characters continued Block Field Valid Characters IP Filter Source Destination Address A B C D IP Format Source Destination Mask 0 32 source Destination Port 1 65535 MAC Filter MAC address MAC Format 12 HEX characters Virtual Server Description 32 characters Private IP A B C D IP Format Private Public Port 1 65535 IP Routing Destination Net Mask Net A B C D IP Format Mask 0 32 OSPF Area 0 4294967295 DMZ IP Address A B C D IP Format Time Policy Start From End To Time Format hh mm Start From End To Service Domain Login Timeout 1 60 default is 10 Hedirect URL URL Format Guest Count Limit 17100 default is 5
43. of the system administrator manager will be able to locate the system easily m Root Password Log in as root user and is allowed to change its own Root user also can change admin user s and operator user s password Click Save button to activate the new password New Password Please input the new password of administrator Check New Password Please input again the new password of administrator B Admin Password Log in as admin user and is allowed to change its own Admin user also can change operator users password Click Save button to activate the new password New Password Please input the new password of administrator Check New Password Please input again the new password of administrator 39 WMS 308N Network Access Gateway Controller User s Manual Operator Password Log in as a operator user and is not allowed to change its own Click Save button to activate the new password New Password Please input the new password of administrator Check New Password Please input again the new password of administrator Admin Login Methods The admin manager can enable or disable system login methods it also can change services port Click Save button to activate the admin login methods gt Enable HTTP Select Enable HTTP to activate HTTP Service gt HTTP Port Please input 1 65535 value to set HTTP Port default value is 80 gt Enable HTTPS Select Enable HTTPS to activate HTTPS Servi
44. proble Password Cancel and return to Cenwell Hotspot Forgot email address or password Step 4 After login Paypal The payment information will appear Click Pay Now buiton to get passcode Review your payment PayPal amp Secure Payments If the information below is correct click Pay Now to complete your payment Learn more about how PayPal withdraws funds Description Amount Item total Add special instructions to merchant Itern total MTEI Total HT 1 TWO Enter dift certificate reward or discount Payment Methad PayPal Balance PayPals exchange rate as of Jun 17 2010 1 LI S Dollar 31 4421 Taiwan New Dollars More funding options Contact Information jundeshen yahoo com Cancel and return ta Hotspot 130 WMS 308N Network Access Gateway Controller User s Manual Step 5 After clicking Pay Now button the process of paying confirm will appear Please don t close this window WAS 105R Hotspot Gateway 802 11B G N MIMO Hotspot Gateway Paying now Step 6 After paying confirm the system will create Passcode for end users login Click Login button to enter Login page Write down your Login Passcode before you click Login button Create Success Login Passcode MC7MK667 number 10600001 _ omw One Time 60 mins 2010 06 17 nm Starting Time 2010 06 17 21 18 24 DN NEN Step 7 Input generate
45. that current event s date and time Status There will show 10 types of status as below LOGIN Indicate that the user login system LOGOUT Indicate that the user logout system v IDLE TIMEOUT Indicate that the user idle time is over timeout setting of Service Domain the system will logout user automatically v USE UP Indicate that the user s service time is done v VOLUME USE UP Indicate that the user s bandwidth is done v KICK Indicate that the system kick out the user v TIME OUT OF RANGE Indicate that the service time of Service Domain is not on schedule ADD OD ACCOUNT Indicate that the system add On Demand user account DELETE OD ACCOUNT Indicate that the system delete On Demand user accont Passcode Username Indicate that the user s passcode or username IP Indicate that the user s IP address MAC Indicate that the user s MAC address Packets In Indicate that the current user s packets in Bytes In Indicate that the current user s bytes in Packet Out Indicate that the current user s packets out Bytes Out Indicate that the current user s bytes out Start Time Indicate that the start time of current service users t y y V ve yy M v End Time Indicate that the end time of current service users 85 WMS 308N Network Access Gateway Controller User s Manual Plan Indicate that the current user s billing plan B Session Log system can recored connection details of each user
46. the default MAC address of WAN port on the system gt Clone MAC Address If you want to clone the MAC address of the PC then click the Clone MAC Address button The system will automatically detect your PC s MAC address The Clone MAC Address field will display MAC address of the PC connected to system Click Save button can make clone MAC effective gt Manual MAC Address Enter the MAC address registered with your ISP Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 27 WMS 308N Network Access Gateway Controller User s Manual 4 1 3 Configure WAN Traffic The section is for administrators to configure the control over the entire system s traffic though the WAN interface WAN1 and WAN2 ports WAN Traffic Semp m Traffic Setup Primary WAN Interface Select desired primary WAN interface for system Traffic Mode There are three types None Load Balance and Backup Load Balance Outbound load balancing is supported by the system When enabled the system will allocate traffic between WAN1 and WAN2 dynamically according to designed algorithms based on the Bandwidth e WANT Max Bandwidth Specify the maximum download and upload bandwidth that can be shared by clients of the port WAN2 Max Bandwidth Specify the maximum download and upload bandwidth that can be shared by clients of the WAN2 port
47. 07 01 11 e WAP 954GP C 00 1A 50 1B 3E D9 e WAP 954GP D 00 1A 50 05 08 19 2 Replace WAP 954GP D to WAP 954GP A Step 1 The WMS 308N can t detect WAP 954GP A on AP Profile Management page AP Profile Management Statue AF Address IP AdidreziPort Pass vu ceni Update Tine Copy Template Download To Restore Deleie B 192 168 2 60 1000 01 01 00 10 20 Restore Recovery Step 2 Replace WAP 954GP D to WAP 954GP A Step 3 Click Recovery button on the WAP 954GP A 00 1A 50 05 08 29 Step 4 The Scanning Available AP window will appear Scanning Available AP 142 WMS 308N Network Access Gateway Controller User s Manual Step 5 The WAP 954GP D 00 1A 50 05 08 19 will display on the Available Recovery AP List and the status show Available Use amp AP Profile Management gt AP Profile Auto Recovery AP Information Available Recovery AP List Adan Rescan Test iF MA Password Status 1A 0 10 74 900 ETETE Model is Different 02 4c Model is Different lt TT available Use Recovery Success then device is reboot now Close Step 6 Select WAP 954GP D and click Recovery button then the WAP 954GP D will reboot Step 7 The WAP 954GP D 00 1A 50 05 08 19 will on the AP Profile Management List and the configuration will be the same with the WAP 954GP A A
48. 1 50 07 01 11 2 Set WAP 954GP A s profile to template Step 1 Device Discovery too amp Device Discovery LAN Setting Im pore IP MAC Address Fasswnrd FAW Version Date Piode IP He lmaik 192 158 2 234 11 43 05 08 I0 eseerse WAPMRMAGP CenAPOIHSYIO010 2011 02 08 17 12 34 192 188 2 234 255 255 28 0 192 188 2 1 Get Info 192 168 2234 0011450700011 asaasan CemaAPG2M v2010 2011 02 04 17 12 38 AP 192 158 2 254 255 255 255 0 192 168 2 1 _ AP Igz 1582254 OF DAD IBID bittis WAG Cen Y 10 FOUND 17 12 38 192 168 2 254 1256 255 255 1372 1585 2 1 Step 2 Change IP address of the respective managed AP amp Device Discovery i F LAN Setting lm port foun Mat Addrexs Parse or d Version Bind IP awk mmy 5 System id iA 32 158 2 54 lato Increment IP Address MAC Address Message 155 255 255 0 A 5805 168 Ton ncn 139 WMS 308N Network Access Gateway Controller User s Manual Step 3 Import profile of the respective managed AP afresh Device Discovery 3 LAN eiting EN im gat Taree IP BC Address HoitName Veriien Date Made Edit IP Address Neimask Gatcway fe Get
49. 20 209 GO 25 Was eee iud 4 ME 13 728 xHUil Daz a 21 27 48 Dee 27 27 48 Flan E PPLE ADD 0D MAANI dtas 9 0 0 09 99 00 99 POS BB H ad xHii Dar ai Sea Deed a d1 458 FLEA zB Sel 17 31 55 Ann om Leese n n n 5 d n a 2011 55 34 91194198 FAL 17 31 58 5X zn 23224 HELETE APTTININT BST err n n n 5 00 0 89 55 5n a 7 2011 55 33 FH 53 24 HELETE n n n 5 0 08 Bn5 55 55 58 m a 7 2011 55 33 Plan 3 zB LI ss 188 338 LA bay n a 201125752345 94119141 ai 18 00 22 TORE OUI OT PANGE KKEZJEPAY LOZ 1088 12 39 00 18 Bas Gs kaise 284 1 ndi 147 708 2011 0190 34 57 41 314 27 41 D 18 44 08 LOFIE zMEHKETET 182 188 1 30 00 18 82 0 DB a 2B ZD ll Di 15 34 44 17 zD0l1l1 Di io 34 32 17 Flen 4 18 342 937 IOLE LIMIPOUI zMEHETET LOZ 188 212 3260 00 18 kaise ag F 472 Z011 7D2 19 34 34 17 2011 T 2 42 17 Blam 4 za a 18 01 07 DORIS NEHE 192 288 0 ae 9 EB ad xDii ba al z li Da az Ged Flan 20 08 Ua EEE TE en ERT EE 1 1 1 19 GO Lai PS eee bo WB aad mm xHUii Dz aB SOB Ged bs FLEA A Date Indicate
50. 32 for this billing plan Wireless ESSID Enter the ESSID of AP Wireless Key Enter the Wireless key of the AP such as WEP or WPA Description Enter any additional information that will appear at the bottom of the receipt Policy Type There are different policy for this billing plan One Time Multiple Times Volume and Unlimited Until End Time Select One Time or Multiple Times or Volume the Quota sub item should be shown up Quota Enter the time quota for One Time and Multiple Times policy the maximum volume allowed is 527040 minutes default is 60 minutes or enter the volume quota for Volume policy the maximum volume allowed is 102400 MB default is 10 MB Effective Starting Time Specify desired effective starting time for this billing plan Effective Ending Time Specify desired effective ending time for this billing plan Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 61 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 3 2 Create On Demand Users After configuring billing plans administrator can create and delete on demand users on this section Click Info button on Billing Plans List page to enter the On Demand Information page In the On Demand Information page Administrator may create and delete on demand users Service Domain gt Billing Plans Setup gt On Demando information Plano informat
51. 6425 Crigirnal payment TWO Amount Relunded by Seller TWD Fees Relunded by Pay Pal TWO Total Retund Amount HT i TWD Source ol Funds Balance Note you don have enough money in your PayPal account 1o cover ihis relund well use your primary bank account tor all of the redund Deme Core 134 Step 6 Go My Account and verify Transaction Details My recent activity Payments received Payments sen My recent activity Lasi 7 days 10 2010 dJun 17 20100 Archive Whars this Date Dm Jun 17 2010 Fee Reversal From 4 17 2010 Relund Account ES PayPal Send Money Overview Add Funds Withdraw History Transaction Details Request Money Resolution Center Name Grail Cancelled Fee SHEN TE Merchant Services Pralile Refund Unique Trarsaction ID 847 234108 381 423T See related 55C 482559 4196426 Original Transaction WMS 308N Network Access Gateway Controller Payment status Completed Completed Products amp Services User s Manual View all ol my trarmaciiorm Payment status glossary Details Order status Schons Gross Details TWO HT 1 TWO Payment Fram SHEN CHUN TE Helied Transaction Refunded Details HT 1 TWD HT 1 TWD HT o TWD osme Cand Sent to Email Total Amount Fee amount Net amount
52. 88 1 10 0 14 02 0F A4 08 ayo OB Showing 1 to 1 of 1 enties Date Indicate that current event s date and time Auth Type There will shows 6 types of authentication Pregenerated On Demand Local Users Local Radius Users Remote Radius LDAP and Guest 88 WMS 308N Network Access Gateway Controller User s Manual Status There will show 10 types of status as below v v v t y V VV IP LOGIN Indicate that the user login system LOGOUT Indicate that the user logout system IDLE TIMEOUT Indicate that the user idle time is over timeout setting of Service Domain the system will logout user automatically USE UP Indicate that the user s service time is done SESSION TIMEOUT Indicate that the user session timeout for Remote Radius VOLUME USE UP Indicate that the user s bandwidth is done KICK Indicate that the system kick out the user TIME OUT OF RANGE Indicate that the service time of Service Domain is not on schedule Passcode Username Indicate that the user s passcode or username Indicate that the user s IP address MAC Indicate that the user s MAC address Packets In Indicate that the current user s packets in Bytes In Indicate that the current user s bytes in Packet Out Indicate that the current user s packets out Bytes Out Indicate that the current user s bytes out B On Demand Log As shown in the following figure each line is traffic
53. D Wireless Key Wireless Key i 5 Description Description Preview Save Change these settings as described here and click Save button to save your changes Click Preview button to preview ticket in the Billing Plan 0 Below depicts an example for previewing ticket Click Close button to close window Package 0 oj 2011 01 06 17 52 20 o 2011 01 06175220 _ Click Reboot button to activate your changes 19 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 4 Configure Local Radius Accounts WMS 308N provide Local Radius server authentication Please click on Service Domain gt Authentication gt Remote Radius Server the page of Remote Radius Server Setup will appear Administrator can add accounts by manual or import accounts file Service Domain gt Local Radius Accounts Management J Cri n paste Banus i EEE Tiram 1 5 ot 5 Group Enter specify name for group and click Add button to create Up to 20 group can added E B Group List Display all of groups the list click Delete to remove Group Name and all of accounts in group X click Edit to change Group Name lt Create Radius Accounts Username Enter the Username for local radius authentication 4 16 alohanumeric and specify characters supported Password Enter the Password for local radius authentication 4 16 alp
54. D Sales Tax NT O TWD Shipping NT O TWD Handling NT O TWD Quantity 1 Order Description 7 7 Invoice ID 100600001 Date Jun 17 2010 Time 21 18 28 GMT 08 00 Status Completed Payment Type Instant 133 WMS 308N Network Access Gateway Controller User s Manual Step 4 Click Continue button to next page PayPal My Account Send Maney Request Maney Merchant Services Products amp Services Overview Add Funds Withdraw History Resolution Cemer Prolile Issue Refund You can issue a lull or partial relund tor days aller ihe original payment was seni When you issue a relund PayPal redunde ihe lees including partial lees 1or partial To issue a refund emer ihe amount in ihe Refund Amount field and click Continue Name SHEN CHUN TE Email Transaction ID SSC 490659041 96425 payment TWD Relund amour 1 H Inveice Number optional Hole 1o buyer optional 255 characters left corea Step 5 Click Issue Refund button to refund this payment PayPal My Account Send Money Request Money Merchant Services Products amp Services Overview Add Funds Withdraw History Resculion Gemer Profile Review and process refund Conlin ihe retur details and then click Issue Refund To make changes click Edit Name SHEN GHUN TE Email Hundes hen yahoo com Transaction ID 55 482655 41 9
55. E USE UP Indicate that the user s bandwidth is done KICK Indicate that the system kick out the user TIME OUT OF RANGE Indicate that the service time of Service Domain is not on schedule Passcode Username Indicate that the user s passcode or username IP Indicate that the user s IP address MAC Indicate that the user s MAC address Packets In Indicate that the current user s packets in Bytes In Indicate that the current user s bytes in Packet Out Indicate that the current user s packets out Bytes Out Indicate that the current user s bytes out 84 WMS 308N Network Access Gateway Controller User s Manual B On Demand Log As shown in the following figure each line is traffic history record consisting of 12 fields Date Status Passcode Username IP MAC Packets In Bytes In Packets Out Bytes Out Start Time End Time and Plan Tare Zrarus Parroco Tearns Tackazms In Im Fuokece Deo yras Sesec Tima End Tima Plan NUEUEUEUEUEUEUETE See NC NC RC RC e RIF 7aXEUEUEUEUEUEUEUECECECECECECHERNCHNC ee EC EU EU EU EUNT EUNT NUNT AN UAE EC CRI UT EU NTNTN U NT ss EC E AN ETE E E E EUE NU EEUU EUEUEU EU EUEUEUE NE EN NUN UA NEUE EE CC AT EC Tam xDii za4 a GALT da LE A 9 0 0 0 H ad xHil Dz a4 Baie JULI SEV Fiir
56. EX characters Description Up to 32 characters Space Remote Radius Primary Secondary Server IP A B C D IP Format Authentication Account Port 1 65535 Secret Key 1 64 characters LDAP Server IP A B C D IP Format Port 1 65535 Identity Length 1 16 0 9 A Z a z Password 1 16 characters Base DN 1 64 characters Account Attribute 1 64 characters Walled Garden Walled Name 4 32 characters Space IP Address Domain A B C D IP Format or Domain Homepage URL Format Description 32 characters Space 122 WMS 308N Network Access Gateway Controller User s Manual Table A Web GUI Valid Characters continued Block Field Valid Characters Notification Sender From E mail Format SMTP Server A B C D IP Format or Domain Port 1 65535 default is 25 Username Length 1 64 0 9 A Z a z lt _ 1 lt gt Password Length 1 64 0 9 A Z a z lt _ 1 lt gt E mail Format Sending Interval 10 4200 default is 1440 IP A B C D IP Format 123 WMS 308N Network Access Gateway Controller User s Manual Agoendx System Manager Privileges There are three system management accounts for maintaining the system namely the root admin and operator accounts are with different levels of privileges The root manager account is empowered with full privilege to Read amp Write while th
57. Gateway or Interface to the destination IP network 112 WMS 308N Network Access Gateway Controller User s Manual Protocol Set static routing rule to RIP or OSPF network Select RIP to associate specific network on RIP routing process Select OSPF to associate specific network with the specified area on OSPF routing process OSPF Area Default is 0 the range is from 0 to 4294967295 Click Save button to add Routing rule to List There are maximum 20 rules allowed in this List All rules can be edited or removed on the List Click Reboot button to activate your changes 113 WMS 308N Network Access Gateway Controller User s Manual 4 6 Observer the Status 46 1 Overview Detailed information on System Network DHCP Clients and Service Domain can be reviewed via this page System Service Domain AP Management Advance Utilities Status amp Overview EN E MEN E System Info Bx Port Link Info Gh x WANT Monitor Host Name WMS 308N 125 00 System Infa parent cae WANT WAN 100 00 Port Link Info CPU Info Description Network Access Control Gateway 75 00 Memory Info Firmware Version VO 0 3 50 00 Firmware Date 2011 03 24 12 30 58 25 00 LAH1 LAN LANS LANA Device Time 2011 03 28 03 55 59 0 etm ea one i eie 1 li namie once System Up Time 24 03 DE erence tr Mod Primary DNS Status Renew Secondary DNS MAC Address 00 1A 50 00 74 54 IP Address Hetmask
58. Help Favorites 5h LrreeHetmal v Certificate Error Navigation Blocked There is a problem with this website s security certificate The security certificate presented by this website was not issued by a trusted certificate authority The security certificate presented by this website was issued for a different website s address Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server We recommend that you close this webpage and do not continue to this website Click here to close this webpage i Continue to this website not recommended More information Click Continue to this website to access the WMS 308N s GUI The WMS 308N s Home page will be appear 41 4 2 3 WMS 308N Network Access Gateway Controller User s Manual Configure SNMP SNMP is an application layer protocol that provides a message of format for communication between SNMP managers and agents By enabling SNMP function the administrator can obtain the system information remotely Please click on System gt SNMP Setup and follow the below setting SNMP Semp bh are VW 4 SNMP v2c Enable Check to enable SNMP v2c gt gt ro community Set a community string to authorize read only access rw community Set a community string to authorize read write access SNMP v3 Enable Check to enable SNMP vs SNMPv3 suppo
59. Internet connectivity to employees students guests or other groups of users Pregenerated Account OnDemand Account Database Database Load Balancing e 1 WMS 308N NAC Gateway Poe ee rrr rr e i LDAP Server RADIUS Server Managed AP WMS 308N Network Access Gateway Controller User s Manual 2 3 Specification gt Access Point Management and Support WMS 308N Network Access Gateway Controller Support B 60 Access Points per Controller B Max 500 wireless client per Controller B Provide Local Account 5000 AP Management Control Monitoring B Centralized AP Management v lt lt lt lt lt Group management maintain set of setting templates that simplify the task to assign the same setting to multiple APs AP Automatic configuration and provisioning by WMS 308N Locally maintained configuration profiles for managed APs Auto discovery for managed APs Automatic recovery of APs in case of system failure Central firmware Upgrade Select multiple APs and upgrade their firmware at the same time including bulk upgrade Remote Firmware upgrade Zero Configuration technology to restore defective AP s setting onto the replacement AP B Central AP Control Provides MAC address Control list of client stations for each managed APs Access Filter Time based AP access control
60. Lipk Lagin Template Page Domain 7 Port WLAN B Auth Pregenerated Ticket Diedra ry Leal Lauri Riadeud Sarvue LDAP Saver F WAM Port auta p IP PnP Serving amp Guest Service B Time Policy Abuayz Run Redirect URL Lite Login Page Tareglate Page Auth Type The authentication type for the respective Service Domain There are five types Pregenereated Ticket On demand Local Users Remote Radius Server and LDAP WAN Port Indicates the outgoing traffic for the respective Service Domain IPPnP Service Indicates status of IP PnP service for the respective Service Domain Guest Service Indicates status of Guest service for the respective Service Domain Time Policy Indicates scheduling of authentication service for the respective Service Domain Redirect URL The redirect URL for this Login page of Service Domain Click Hyperlinks to enter redirect URL Login Page The custom page for this Service Domain There are two types Template page or Upload page 5 Click tools icon on the top right corner of each Domain settings window the Service Domain page will pop up 48 4 3 1 WMS 308N Network Access Gateway Controller Configure Service Domain User s Manual Administrator can configure Service Domain with different authentication service type specified outgoing traffic IP PnP service guest free service idle time redirect URL schedul
61. Log On Demand User Log and Session Log Enter the specify IP address and Port number to sent report A The all history log are saved in the DRAM if you restart system the all of history log will empty Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes If the history E mail has been entered above Notification settings after Sending Interval the system will send History E mail to receiver s E mail address automatically B Traffic Log As shown in the following figure each line is traffic history record consisting of 10 fields Date Auth Type Status Passcode Username IP MAC Packets In Bytes In Packets Out and Bytes Out Date Indicate that current event s date and time 83 WMS 308N Network Access Gateway Controller User s Manual Date pe Statii FPa ssa2ode Userzame IE Pacmeta I Packets Cut Bytes Cut exand LOT 94 Lae B 18 19 KICE 1 lR M Lir 18 it i l Ai ZEB 68 EiA iul dal 165 1 Dan HICA Lee 3 6 af 3 n lt emand LOGI 198 1 5 1543758 Jm 16 1 Des no ra LES LA JAIS aa toe 1 1 As 254 i4 Pregenerate Cus IE DA ni H H 18 4 OUT OT RANGT Seon 1 SS
62. N Network Access Gateway Controller User s Manual 46 3 Event Log The Event log displays system events when system is up and running Also it becomes very useful as a troubleshooting tool when issues are experienced in system E tirkah TI Bi System Time The date and time when the event occurred m Facility It helps users to identify source of events such System or User Severity Severity level that a specific event is associated such as info error warning etc m Message Description of the event Click Refresh button to renew the log or click Clear button to clear all the record 117 WMS 308N Network Access Gateway Controller User s Manual WebGUI valid Characters Table A Web GUI Valid Characters Block Field Valid Characters VLAN Tag 1 4094 Addises A B C D IP Format IP Netmask 128 0 0 0 255 255 255 252 IP Gateway A B C D IP Format Hostname Length Up to 32 0 9 A Z a z _ lt gt Total Upload Download 0 102400 0 is unlimited default is 512 Individual Upload Download 0 102400 0 is unlimited default is 512 Group Upload Download 0 102400 0 is unlimited default is 512 Session Limit per IP 10 500 0 is unlimited 802 1P Priority 0 7 MSTI 0 15 Start End IP A B C D IP Format DNS1 DNS2 WINS IP A B C D IP Format D
63. P 5 Password The default password is default while administrator import managed AP s profile Enter the correct password of the respective managed AP to access Last Update Time Indicate the last update time of the respective managed AP 93 WMS 308N Network Access Gateway Controller User s Manual B Copy To Template Click Copy button to save profile of the desired managed AP to template database The alert window should be appear then enter desired template s name and click OK button to save Below depicts an example for copy profile to template Template is a mechanism that keep one AP as a standard profile then other APs can share the same Template without repeatedly keying all the parameters Explorer User Prompt Script Prompt MAC 00 1A 50 1B 3E D9 Copy to template File Please input template name C 001A501B3ED9 WAP 954GP B Download To PC Click Download button to save profile of the desired managed AP to local PC B Restore Click Restore button to restore profile to managed AP the AP Profile Restore page will appear amp AP Profile Management gt AP Profile Restore ADO Dei l PLP Itt 1 FIL Te el AP Information Display the MAC and IP address information of the selected managed AP s profile Restore Type Select desired profile type for selected managed AP to restore The switch supports three
64. P limit yy y V VV v WMS 308N Network Access Gateway Controller User s Manual Configurable user black list Export Import local users list to from a text file Web based Captive Portal for SSL browser based authentication Authentication Type IEEE802 1X EAP LEAP EAP TLS EAP TTLS EAP GTC EAP MD5 RFC2865 RADIUS Authentication RFC3579 RADIUS Support for EAP RFC3748 Extensible Authentication Protocol MAC Address authentication Web based captive portal authentication gt Authorization Authorization access control to network resource such as protected network with Intranet Internet bandwidth VPN and full stateful packet firewall gt Accounting gt gt gt v Vv Vy V v Provides billing plans for Pregenerated accounts Provides billing plans for On Demand accounts Enables session expiration control for On Demand accounts by time hour and data volume MB Detailed per user traffic history based on time and data volume for both local and on demand accounts Support local on demand and external RADIUS server Contain 10 configurable billing plans for on demand accounts Support credit card billing system by PayPal Provide session expiration control for on demand accounts Support automatic email network traffic history Dual WAN gt gt gt Load Balancing B Outbound Fault Tolerance B Outbound load balance B Multiple Domain Support B Traffic Bandwidth Management by indiv
65. P 954GP B and WAP 954GP C with WAP 954GP A s Template e Click Restore button on the WAP 954GP B and WAP 954GP C the AP Profile Restore page will appear e Select Load From Template Profile in Restore Type e Select WAP 954GP Template in the Template Profile List then click Restore button amp AP Profile Management gt AP Profile Restore n Li Top M l 1 Step 8 Verify WAP 954GP B and WAP 954GP C settings The VAPO s ESSID will be WAP 954GP A All settings will be the same with the WAP 954GP A in addition to IP address remains unchanged amp AP Profile Management Statur Horr Name AF Mac Address Address Fort Fasiw cid Lait Updare Time Copy Templare Delete e Delete e L 141 WMS 308N Network Access Gateway Controller User s Manual Appendix H Use Auto Recovery To 5 Managed AP WMS 308N supports centralized management of each AP When the system has failed AP the administrator needs to replace the AP and set the same as before Using WMS 308N to quickly configure new AP the new AP s seiting will be the same as before Below depicts an example for Auto Recovery function Environment Description In this case the WMS 308N control three managed APs and one of managed AP is failed We replace new AP and use Auto Recovery to quickly setup 1 Four WAP 954GP managed APs e WAP 954GP A 00 1A 50 05 08 29 e WAP 954GP B 00 1 50
66. P Profile Management Status Pow AP MAC IP Addrexzs Port Password Last Update Time Copy To Template Download To PC Restore luin Recovery Delete uam ia 32 5 5453 37 1 5 i NA TE S00 152 188 2 81 Ed EA Z TAE en ET i 23 192 168 2 50 80 143
67. PPnP Service Guest Service OG Time Policy Redirect URL Login Page WVLANA Ticket On demand Luca Users Remote Radius berver LDAP SVET Auts elt off Bfemym Hasn Lir Template Page WLAN Pregenerated Ticket Cur Lia Laura Serve LDAP Save et elf Run ime WMS 308N Network Access Gateway Controller User s Manual gt Click Tool Icon on Domain 0 window the Service DomainO Setup page will appear For each Service Domain by default authentication type is none authentication type can be selected in Pregenerated Ticket On Demand Local Radius Remote Radius Server and LDAP Server and select one authentication type for Default Auth Type Below depicts an example for Local Radius 1 MES lt d Lah 4 pn OS Pul Select Local Radius for DomainO s Authentication Type Enter the Redirect URL that users should be initially directed to when successfully authenticated to the network gt Click Save button 21 WMS 308N Network Access Gateway Controller Step 5 Add Local Radius Accounts User s Manual Click Service Domain gt Authentication gt Local Radius Accounts the Local Radius Accounts Management page will appear amp a Gaus Mangcem mmt Anew account can be added into the Local Radius Database To add a account
68. Reboot This function allows administrator to restart system with existing or most current settings when changes are made Click Reboot button to proceed and take around three minutes to complete x Reboot Sometimes it may be necessary to reboot the system if it begins working improperly Rebooting the system will not delete any of your configuration settings Click reboot button to reboot the system A reminder will be available for remaining time to complete If power cycle is necessary please wait till completion of the reboot process Please Wait System 15 restarting please wait for 75 seconds The Home page appears upon the completion of reboot 47 WMS 308N Network Access Gateway Controller User s Manual 43 Access To External Network With Service Domain WMS 308N supports 8 Service Domain administrator can quickly setup via this page amp Service Domain Setup Daman DB P rt LAH P Avo Typa Pregame Duet unm dermani eers Remote Radius Esrvar LDAP Siner a Port IPPP Service en i on a Tire Poly always Hun Redirect URL Lipk Login Page Temolabe Page Domain 4 i i r LAN Port Auth Type Pregenerated Ticket Cn darnand Leal Radsus Saree Sai E Port ar 2e IP PoP Services g Guest Service oii Time Polity Abus Redirect URL ini
69. System Information System Name fo tat Increment Root Password Login Methods Port 80 Enable Telnet Port User s Manual Time Server Setup Specify correct Time zone setting for selected managed APs The default NTP Server is switch s LAN IP address The local time of managed APs will follow WMS 308N s local time Setup Time Use NTP NTP Enable Disable Default NTP Server Customize Time Server optional Time Zone Daylight Saving Time Wireless Basic Setup Specify Band Channel and Tx power for selected managed APs Wireless Basic Setup Band Made 802 11bg Coumry US Channel Auto Assign One Channel 11 2 462 Ghz Tx Power VAP Setup Specify ESSID and Security Type for selected managed APs 97 WMS 308N Network Access Gateway Controller User s Manual Aute increment Upgrade Firmware Via TFTP Enter TFTP Server IP address and firmware file and then click Apply AP button to upgrade Fimware Upgrade Via TFTP Server Upgrade Firmware Via URL Enter URL address example http 192 168 2 10 xxx bin and then click Apply AP button to upgrade Firmware Upgrade Via HTTP URL 98 WMS 308N Network Access Gateway Controller User s Manual 4 4 4 X Managed AP Group Managerrent Administrator specify managed APs in the same group and locate managed APs on the specified map The switch s
70. The system supports RIP Routing Information Protocol and OSPF Open Shortest Path First dynamic routing and allows you to manually configure static network routes Please click on Advance IP Routing and follow the below setting a IP Routing 5Serupn AL FE settings MOUTH L care ch uan i Service Destination Mask via OSPF RIP Delete BIET On Onto OF eere Edis i On Deere Eds On 6254 Om OSPF Settings OSPF Service By default it s Disable To Enable to activated OSPF routing service Route ID The router ID is typically derived by each router from its interface IP address Distribute RIP over OSPF Allow RIP routes will redistributed into OSPF Settings RIP Service By default it s Disable To Enable to activated RIP routing service Side Devices Specify desired interface WAN1 WAN2 LAN or VLAN1 VLAN7 for sending and receiving of RIP packets Distribute OSPF over RIP Allow OSPF routes redistributed into RIP Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes Routing Rules Mode Click Enable to activated static routing Destination Net Mask Specify desired destination IP network address with format of A B C D M Via Select a next hop of
71. User s Manual example for Even Distribution of Bandwidth set Total Max Upload or Download to 9 Mbps if one user access Internet the maximum upload or download is 9 Mbps if three users access Internet at the same time the maximum upload or download is 3 Mbps by each user Total Max Upload The Total Max Upload is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Total Max Download The Total Max Download is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Individual Bandwidth Set each users Individual Upload Download Below depicts an example for Individual Bandwidth set Group Upload or Download to 6 Mbps and Individual Upload or Download to 3 Mbps if one user access Internet the maximum upload or download is 3 Mbps if three users access Internet at the same time the maximum upload or download is 3 Mbps by each user Bandwidth Control service 9 Enable Disable Type Even Distribution of Bandwidth Individual Bandwidth Individual Upload Kbit s Individual Download Kbit s Group Total Limit Q Enable 9 Disable Group Upload Kbit s Group Download kbit s Guest Service O Enable Disable Guest Upload Kbit s Lo Guest Download kbit s fo session Limit per IP sessions v Individual Upload The Individual Upload is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s 33 WMS 308N Network Access Gat
72. Weeiess info Sth 1A 99 16 73 3d IEEE 802 111 assonated 2008 01 01 05 09 54 info STAM 1A 50 16 73 3d RAADIUS starting accounting sesion 49850078 3 0 HORNO 2000 01 01 05 09 54 Wweless inte ath STAG 50 16 72 34 WA pairwise key handshake completed WPA 2000 01 01 05 09 55 IE SIE Inte ath STA 50 16 73 34 group kay handshake completed eA 2009 01 01 01 10 04 Info STA GO 50 18 73 34 group key handshake completed WPA 2009 01 01 05 10 04 sth 14 50 48 71 34 WPA received EAPOL Key 2 2 Group with unexpected replay counter 105 WMS 308N Network Access Gateway Controller User s Manual 4 4 6 Third Party AP Monitor WMS 308N will send out a packet periodically to monitor the connection status of the IP addresses on the list If the monitored IP address does not respond the system will send an e mail to notify the administrator that such destination is not reachable After entering the related information click Add button and these settings will become effective immediately Green light means online and red light means offline The system provides 50 monitor IP address fields on the Website Monitor List Please click AP Management Website Monitor the Website Monitor page will appear amp Website Monitor Hee On each monitored item with a WEB server running administrators may add a link for the
73. accessing the Internet and sent out to a specified Syslog Server or E Mail based on defined interval time As shown in the following figure each line is traffic history record consisting of 10 fields Date Time Session Type Username Service Domain Source IP Source Port Destination IP Destination Port MAC 2011 02 15 12 25 22 NEW testi Local Radius dm 0 src 1982 168 1 10 sport 3676 dst 122 116 218 88 dport 80 MAC 00 1A 982 9F A4 9B 2011 02 15 12 25 22 NEW testi Local Radius TCP dm 0 src 192 168 1 10 sport 3688 dst 122 116 218 88 dport 80 MAC O00 1A 92 9F A4 9B 2011 02 15 12 25 22 NEW testi Local Radius dm src 192 168 1 10 sport 3690 dst 122 116 218 88 dport 80 MAC 00 1A 92 9F A4 9B 2011 02 15 12 25 22 NEW testi Local Radius TCP dm 0 src 1982 168 1 10 sport 3691 dst 202 89 225 189 dport 443 MAC 00 1A 92 9F A4 9B 2011 02 15 12 25 23 NEW testi Local Radius dm 0 src 1982 168 1 10 sport 3694 dst 122 116 218 88 dport 80 MAC 00 1A 982 9F A4 9B 2011 02 15 12 25 23 NEW testi Local Radius TCP src 182 168 1 10 sport 3685 dst 122 116 218 88 dport 80 00 1 92 9 4 9 2011 02 15 12 25 38 NEW testi Local Radius TCP dm 0 src 1982 168 1 10 sport 3725 dst 119 160 246 241 dport 80 MAC O00 1A 92 9F A4 9B 2011 02 15 12 25 38 NEW testi Local Radius dm 0 src 1982 168 1 10 sport 3732 dst 119 160 254 215 dport 80 MAC 00 1A 92 9F A4 9B 2011 02 15 12 25 38 NEW testi Local Radius src 182 168 1 10 sport 3733 dst
74. acket loss and latency time are available in the Result field while running the PING test Destination IP Domain Enter desired domain name i e www google com or IP address of the destination and click ping button to proceed The ping result will be shown in the Result field Times By default it s 5 and the range is from 1 to 60 It indicates number of connectivity test B Traceroute Allows tracing the hops from the WMS 308N device to a selected outgoing IP address It should be used for the finding the route taken by ICMP packets across the network to the destination host The test is started using the Start button click Stop button to stopped test Destination Host Specifies the Destination Host for the finding the route taken by ICMP packets across the network MAX Hop Specifies the maximum number of hops max time to live value traceroute will probe 45 WMS 308N Network Access Gateway Controller User s Manual 42 7 Format Database This function allows administrator to format system s database Click Format button to proceed and take around three minutes to complete Format Datebase Format Database Clear amp ccounts Tickets 1 Do not interrupt during format database including power on off as this may damage system 2 While system format database the Power Status Green LED will change to Amber LED 46 WMS 308N Network Access Gateway Controller User s Manual 4 2 8
75. are all using the same spanning tree Each MSTI is identified by a number the range can be numbered 0 through 15 The Common Instance Spanning Tree CIST is always MSTI ID 0 m DHCP Check Enable to activate DHCP Server on VLAN LAN port Start IP End IP Specify the range of IP addresses to be used by the DHCP server when assigning IP address to clients DNS1 DNS2 The Domain Name System DNS is an Internet phone book which translates domain names to IP addresses These fields identify the server IP addresses where the DNS requests are forwarded by the WMS 308N DNS1 server IP is mandatory It is used by the DNS Proxy and for the device management purpose DNS2 server IP address is optional It is used as the fail over in case the primary DNS server will become unresponsive 35 WMS 308N Network Access Gateway Controller User s Manual WINS IP Enter IP address of the Windows Internet Name Service WINS server this is optional Domain Enter the domain name for this network Lease Time The IP addresses given out by the DHCP server will only be valid for the duration specified by the lease time Increasing the time ensure client operation without interrupt but could introduce potential conflicts Lowering the lease time will avoid potential address conflicts but might cause more slight interruptions to the client while it will acquire new IP addresses from the DHCP server Change these settings
76. ation Pregenerated Tickets On Demand Users Local RADIUS Accounts Remote RADIUS Server and Remote LDAP Server This section depicts to configure the settings for pregenerated tickets on demand users and authentication server If authentication does not selected the clients can access Internet without authentication 4 3 2 1 Authentication Management The WMS 308N supports multiple login for one accounts and administrator can configure alias name of the respective authentication type on login page Please click on Service Domain gt Authentication gt Authentication Management and follow the below setting amp Authentication Management Multiple Login Service Enable Disable Auth Type Alias Auth Type Service Name Description Pregenerated Ticket Pregenerated Ticket O OE Local Radius Local Radius OS Remote Radius Server Remote Radius Server Po LDAP Server Server Doo OE m Multiple Login Click Enable button to activate multiple login service and Disable to inactivate multiple login service Auth Type Denote authentication type of the system m Service Name Enter desired alias name of the respective authentication type login page B Description Enter desired description name of the respective authentication type Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 54 WMS 308N Network Acce
77. ation or restore all of the settings in the system to the factory default settings Save Settings To Click Save button to save the current configuration and database to a local disk File Download you want to save this find a program online to open it z Mame config bin Type Unknown File Type From 192 168 272 254 While files fram the Internet can be useful same files can potentially harm your computer IF vou do nat trust the source do not find program to open this file or save this file what s the risk Load Settings from Click Browse button to locate a configuration file and database to restore and then click Upload button to upload The system will restart after uploading configuration and database Reset To Factory Default Click Default button to reset back to the factory default settings The system will restart after uploading configuration and database 1 Do not interrupt during Profile upload or Reset to Default including power on off as this may damage A system 2 While Profile upload or Reset to Default the Power Status Green LED will change to Amber LED 43 WMS 308N Network Access Gateway Controller User s Manual 4 2 5 Firmware Upgrade The administrator can download the latest firmware from website and upgrade the system here It might take a few minutes before the upgrade process completes and the system needs to be restarted to act
78. billing plan for this ticket Code User can used ticket s Passcode for access Internet Clicking hyperlinks to view this ticket information as below Click Print button the ticket will print from Thermal Printer again Package 2 P Passcode JC863XEG 13 Price 3 00 USD m Type Quota One Time 60 mins a Create Time 2010 06 08 16 44 24 im Start Time 2010 06 09 16 44 24 e End Time 2010 06 14 16 44 24 2 Wireless ESSID p Wireless Key Description Print Close Click Print button to print On Demand Tickets from Thermal Printer Type Quota Denote ticket s time volume policy and service quota Status Show ticket s status There three types of status Unused Used and Expired Create Time Denote the ticket create time Open Time The ticket used for the first time Start Time Denote effective starting time of the ticket End Time Denote effective ending time of the ticket Last Login Denote the ticket last login time Price Currency The price charged for this ticket 72 WMS 308N Network Access Gateway Controller User s Manual Delete This will delete the ticket individually When administrator click Delete button the alert message will appear as below Message from webpage E3 22 Do vau want to delete the ticket A On this List it only shows all of generated tickets from Thermal Printer After you login system via On Demand authentication the timer page will appear Don
79. ce gt HTTPS Port Please input 1 65535 value to set HTTPS Port default value is 443 If you already have an SSL Certificate please click UploadKey button to select the file and upload it Enable Telnet Select Enable Telnet to activate Telnet Service Telnet Port Please input 1 65535 value to set Telnet Port default value is 23 Enable SSH Select Enable SSH to activate SSH Service V V yy y4 SSH Port Please input 1 65535 value to set SSH Port default value is 22 Click GenerateKey button to generate RSA private key The Display the host key footprint gray blank will be show content of RSA key E main SMTP Relay Select Enable Service to activate Email SMTP Relay function Enter SMTP relay server in IP Address Domain field Ping Watchdog The ping watchdog sets the WMS 308N Device to continuously ping a user defined IP address it can be the Internet gateway for example If it is unable to ping under the user defined constraints the WMS 308N device will automatically reboot This option creates a kind of fail proof mechanism Ping Watchdog is dedicated for continuous monitoring of the particular connection to remote host using the Ping tool The Ping works by sending ICMP echo request packets to the target host and listening for ICMP echo response replies If the defined number of replies is not received the tool reboots the device Enable Ping Watchdog control
80. chanical Characteristics Operating Temperature 0 55 Storage Temperature 20 75 Operating Humidity 1096 to 8096 Non Condensing Storage Humidity 5 to 90 Non Condensing Unit Dimensions 243 x 150 x 45 5 mm Width x Depth x Height WMS 308N Network Access Gateway Controller User s Manual Chapter 3 Base Installations 3 1 Installations 3 11 SystemRequirements Standard 10 100Base T including five network cables with RJ 45 connectors gt All PCs need to install the TCP IP network protocol 3 1 2 Panel Function Descriptions Front Panel SN NAC Gateway ANIA 1 Power Status LED Green ON indicates power on OFF indicates power off When system restart LED Amber will flash three times after system up LED Amber ON indicate the Flash is busy For example format database create or delete accounts etc 2 Console The serial RS 232 DB9 cable attaches here 3 Reset Press and hold the button for more than 10 seconds until Power Status LED Amber FLASH to reset the system to default configurations After you release button the LED Amber will ON and system s database will be formatted until LED Green ON to restart system 4 WANT1 WAN Two WAN ports are available on the system LED Green ON indicates 10 100 Mbps link is established on the port LED Amber ON indicates 1000 Mbps link is established on the port 5 LAN Clients devices connect to WMS 308N via LAN ports 14
81. d passcode and click Login button to login Internet Service p Passcode MC7MK66Z Click here to purchase by PayPal or Credit Card Online Please input Passcode Username and Password then you can use our Internet service Thanks 131 WMS 308N Network Access Gateway Controller User s Manual goendix Issue Refund for PayPal Step 1 Click on Service Domain gt Authentication gt On Demand gt Payment Gateway Setup and then click Information button on the Billing Plan Setup List to enter Payment Gateway Information page Click on selected passcode s hyperlinks for viewing this ticket s Invoice Number a E E a E E E a Plan Code Type Quota Status Create Time Open Time Start Time End Time Last Login Price Currency Delete One Time 60 2010 06 17 2010 06 17 2010 06 17 2010 06 22 2010 06 17 i pleb Minutes Sia 21 18 24 21 15 45 21 18 24 21 18 24 21 15 49 l s A Showing 1 to 1 of 1 entries Package 2 Passcode HC7HEK66zZ DANT Print Step 2 Please login in PayPal and click on History gt Find a transaction Then enter Invoice Number in Invoice ID and specify the time period for search Click Search button to view the transaction details PayPal Account Send Money Request Money Merchant Services Products amp Services Owerview Add Funds Withdraw History Resolution Center Profile History Hecerd Activity All activity Find
82. desired to set up the managed APs Example If you select three managed APs and set start IP address to 192 168 2 60 then the three managed APs IP address range from 192 168 2 60 to 192 168 2 62 IP Netmask Specify IP netmask as desired to set up the managed APs IP Gateway Specify default gateway as desired to set up the managed APs DNS Specify primary and secondary DNS server IP as desired to set the managed APs B System Message Display system message for each managed APs after clicking Save amp Reboot AP Get Info Import or Refresh button IP Address Indicate the current IP address of the respective managed MAC Address Indicate the current MAC address of the respective managed AP Message Display the current message of the respective managed AP v Error 401 Unauthorized System can t access managed APs after clicking Get Info or Refresh button to detect and access managed AP The correct password must be entered on this field and Click Save amp Reboot AP button to activated setting Y Error Device already exist The same IP address or MAC address already exist in the database Change IP xxx xxx xxx xxx System change IP address of the respective managed Import to Database System import configuration profile of the respective managed AP to flash Error Profile Download ERROR System can t download profile of the respective managed the
83. e M ete Mode Dynamic IP Mode MAC Address 30200 74 94 IP Address Metmask Gateway ae Online Users Domain Auth Guest Domain 0 Domain 1 D Domain 2 0 Domain 3 Domain 4 Domain 5 Domain amp a Domain 7 Total LU WMS 308N Network Access Gateway Controller User s Manual 3 2 2 Quick Configuration WMS 308N provides wireless and wired network service with authentication required for clients in Service Domain Clients in the each Service Domain are isolated with each other WMS 308N supports 8 Service Domains Domain 0 to Domain 7 Administrator can select authentication type on each Service Domain If Authentication Required is enabled the clients are required to get authenticated successfully before access the Internet Configuration Steps Step 1 Change Root s Password Click System gt Management the Management Setup page will appear Enter a New Root Password for the Root account ad retype in the Check Root Password field 4 30 alphanumeric and specific characters not support Space gt Click Save button Root Password New Root Password Check Root Password 6 For security concern it is strongly recommended change the Root password Step 2 Select Connection Type for WAN1 Port and Set DNS Server Click System gt WAN the WAN Setup page will appear Select the appropriate Connection Type for WAN1 port there a
84. e admin manager account is Read only m ee AN LL Trafic None LANVLAN Read amp Wrie None QoS Setup Read amp Write None System Information L RootPassword Read None Management __ AdminPassword Read amp Write Operator Password _ None Service Domain Read amp Write Authentication Management Authentication Pregenerated Read amp Wrie None Authentication OnDemand Read amp Write Thermal Printer Read amp Write Authentication Local Radius a lee ME Authentication Remote Radius Read amp Write Authentication LDAP ___ _ Walled Garden Read amp Write None Potification Read amp Wrie OnineUsers Write Read amp Write Read amp Write Read amp Write Discovery Read amp Wrie APProfile Management Read amp Writ P Ed __ Read Write None Group Status Read amp Write Read amp wile WebsiteMonitor None E Ne Service Domain Read amp Write IP Fil
85. e group Groupe SP Since Lu TFETUTERTECETTXTT ITFETUEEZECTTTITDP NUT dI da7 II uw Hawk Heme Tet Hame WAP Sep feel Host Heres Lorin locate e lakal LP WRG HOr ial CI EDI M Dead D Firmiwarg Version Can LIGJ 7 0 12 Fiera VID 10 Fone Can AMIA 2 0 09 lume Data 2011 01 08 17111 1 Fimea Gate 2050 008 17 12 34 Pires Dale 2011 02 08 L7 12 18 Devita Pane 2003 01 02 Pout Denit The 2523 01 01 0012818 The DOS GE O1 Zacbem Up 27102 Syetem Up Time 27112 Dyte Tm 2714 Default Gatemey Lil 1 1 Daelau Gateway L2 4E 1 1 Desfaul Gadi 22 16E 2 1 Brie EHE Lem 3 1 1 Diary PHE 1 1 Bray DER 92 1 1 Secondary Berondary DHS Sergedary Online Users Display all associated clients status of the respective group GroupO WAP 954GP Group Group WAP 854NP Group IP Address VAP ESSID MAC Address RSSI TX RX Rate TX RX SEQ 192 168 2 61 VAPO WAP 954GP 0 00 1A 50 16 73 3d 52 36M 36M 2 247 Devices Syslog Display all system events of the respective group Cahora WAP EP Ghat TYEAP HSANP Grupi Devica 1192 158 2 52 Time Facility Severity 2505 01 01 00 04 58 Syriam info Authentication succegghul for root from 192 1858 2 50 2009 01 01 05 09 54
86. e period for this rule Click Save button to add IP filter rule to List There are 20 rules maximum allowed in this IP Filter List All rules can be edited or removed on the List Click Reboot button to activate your changes 108 WMS 308N Network Access Gateway Controller User s Manual 45 3 MAC Filter The administrator can setting MAC Filter via this page Please click on Advance gt MAC Filter and follow the below setting amp MAC Filter Action Select the desired access control rule the options are Only Deny List MAC Only Allow List MAC or Disable define certain clients in the list which will have granted access to the Access Point while the access will be denied for all the remaining clients Access Control Type is set to Allow define certain clients in the list which will have denied access to the Access Point while the access will be granted for all the remaining clients Access Control Type is set to Reject m MAC Address Enter MAC address in this field There are maximum 20 clients users allowed in this MAC address list m Time Policy Select specified time period for this rule Click Save button to add MAC filter rule to List There are maximum 20 rules allowed in this MAC Filter List All rules can removed on the List Click Reboot button to activate your changes 109 WMS 308N Network Access Gateway Controller User s Manual 45 4 Virtual Server P
87. easy access by selecting a protocol http or https and click the Add button After clicking Add button the IP address will become a hyperlink and administrators can easily access the host by clicking the hyperlink remotely Click Delete to remove the setting on the list Click Refresh button to renew status 106 WMS 308N Network Access Gateway Controller User s Manual 45 Restrain the Users and Sharing Your Internal Service 4 5 1 Configure Policy Administrator can define time policy for Service Domain IP Filtering MAC Filtering and Virtual Server There are 10 policy can be defined Please click on Advance gt Time Policy to enter Time Policy Setup page Time Policy Setup sun L Eh wea O r Werk Tire Delete E dil 1 Tus i Fe 1 1 13 55 Peles Ed Tut Wed n 02 00 03 53 Delete Edit Policy There are 10 Policy can be selected m Schedule Rule Select desired schedule for this policy m Time Schedule Select desired day of week and time period for this policy Below depicts an example for On Schedule and Out of Schedule On Schedule Out of Schedule Click Save button to add schedule to policy There are 10 schedule maximum allowed in the each time policy schedule can be edited or removed in the each time policy Click Reboot button to activate your changes 107 WMS 308N Network Access Gat
88. er configuring Thermal Printer general setting administrator must select billing plan for this Thermal Printer Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 70 WMS 308N Network Access Gateway Controller User s Manual Click Info button to enter Thermal Printer Information page In the Thermal Printer Information page administrator may generated and delete ticket manually amp Service Domain gt Billing Plans Setup gt Thermal Printer Setup gt Printer Information Thermal Printer Information Statistics T F rar E dT 7 Par Total Pace I amp J ir Description Pr show io rne FSEAF CUR Unlimited End Time Unused 2011 01 20 10 28 30 2011 01 20 1028 30 2011 01 25 1 28 30 10 5D Delere KYAZXEBM Multiple Times amp Minutes Unused 2011 01 20 18 28 24 2011 01 28 10 28 24 1 01 25 4 Delete One Time 60 Minutes Unused 2011 01 20 10 28 18 2011 01 20 10 2 amp 18 11 01 25 10 28 1 USL Delere Volume 3000 Unused 2011 01 20 10 28 03 2011 01 20 10 28 03 11 01 25 1 Delene One Time 10 Minutat Unused 2011 01 20 10 27 58 2011 01 28 10 27 58 11 01 25 16 27 53 D Delete ane Time Minwted Ungied 2011 21 19 11 13 52 71 21 1 47 14 Delete BCPBH2KD Esd Time Unused 2011 01 19 11 13 37 2011 01 19 11 13 37
89. er you login system via Pregenerated authentication the timer page will appear Don t close Timer page Because the Logout button on this page If Timer Page doesn t appear in the browser please enter http s hs logout to open Timer Page 99 WMS 308N Network Access Gateway Controller 4 3 2 3 Configure On Derrand User s Manual Administrators can enable and configure this authentication method to provide clients access in a Hotspot environment Major functions include billing plans creation accounts creation accounts monitoring list thermal printer support billing report statistics and external payment gateway support There are three method to generate on demand accounts Generate by Manual Print from Thermal Printer Generate after Online Payments Click on Service Domain gt Authentication gt On Demand then the Billing Plans List page will appears amp Service Domain gt Billing Plans Setup Billing Plans List Status Plan Name Type Quota Price 0 Package 0 Unlimited Until End Time 10 00 USD 1 Package 1 Multiple Times 60 Minutes 5 00 USD 2 On Package 2 One Time 60 Minutes 3 00 USD 3 On Package 3 Volume 3000 MB 5 00 USD Off Package 4 Unlimited Until End Time 10 00 USB 5 Off Package 5 Unlimited Until End Time 10 00 USD 6 Package 6 Unlimited Until End Time 10 00 USD Package 7 Unlimited Until End Time 10 00 USD 8 Off Package 8 Unlimited Until End Time 10 00 USD Off Packa
90. espective managed AP before you import profile to system B Source IP Indicate the current IP address of the respective managed AP B MAC Address Indicate the current MAC address of the respective managed AP B Password Enter the current password of the respective managed AP The system use default password to access managed AP If managed AP can t get F W Version F W Date Mode and LAN Setting or display error message Error 401 Unauthorized on System Message field The correct password must be entered on this field and click Get Info button to get information of the respective managed AP or click Save amp Reboot AP button to change password of the respective managed AP 91 WMS 308N Network Access Gateway Controller User s Manual B HostName Indicate the current hostname of the respective managed B F W Version Indicate the current firmware version of the respective managed AP B F W Date Indicate the current firmware date of the respective managed AP B Mode Indicate the current operating mode of the respective managed AP B LAN Setting Indicate the current LAN setting of the respective managed AP the respective managed AP can configure LAN setting and click Save amp Reboot AP button to activated setting B LAN Setup Assign IP range for specify managed APs on LAN Setup field and click Save amp Reboot AP button to activated IP Address Specify Start IP address as
91. ets to the gateway if the destination host is not within the local network Gateway IP address should be from the same address space on the same network segment as the WMS 308N s external network interface 25 WMS 308N Network Access Gateway Controller User s Manual Dynamic This configuration type is applicable when the WAS 103R is connected to a network with the presence of a DHCP server all related IP information will be provided by the DHCP server automatically If the IP Address do not assigned from DHCP server the system need manual connect to DHCP server Hostname The Hostname of the WAN port PPPoE This configuration type is applicable when the WMS 308N is connected to a network with the presence of a PPPoE server WANT Setup Disable O statici O Dynamic IP pppoe O Username Password MTU User Name Enter User Name for PPPoE connection Password Enter Password for PPPoE connection MTU stands for Maximum Transmission Unit For PPPoE connections you may need to set the MTU setting in order to work correctly with your ISP Default is 1492 bytes PPTP The Point to Point Tunneling Protocol PPTP mode enables the implementation of secure multi protocol Virtual Private Networks VPNs through public networks WANT Setup Disable O statici O Dynamic IP pppoe Username PO Password Server IP f
92. eway Controller User s Manual 4 5 2 IP Filter The administrator can setting IP Filter via this page Please click on Advance gt IP Filter and follow the below setting amp Fitter Setup Source Address Mask Enter the desired source IP address and netmask the mask must be a plain number i e 192 168 100 10 32 Source Port The source port s required for this rule A single port may be given or a range may be given as start end which will match all ports from start to end inclusive m Destination Address Mask Enter the desired destination IP address and netmask the mask must be a plain number i e 192 168 1 10 32 Destination Port The destination port s required for this rule A single port may be given or a range may be given as start end which will match all ports from startto end inclusive m In Out This option used for specialized packet alteration The system support In INPUT for packets coming into the interface itself or Out FORWARD for altering packets being routed through the interface Protocol This option allows you to select protocol type The system support TCP UDP or ICMP m Listen Enable Yes to match TCP packets only with the SYN flag Active Enter Deny to DROP specialized packet Pass to ACCET the specialized packet Interface Select specified interface where filtering of the incoming passing through packets is processed m Time Policy Select specified tim
93. eway Controller User s Manual Y Individual Download The Individual Download is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Group Total Limit By default it s Disable To Enable to activate Group Total Limit e Group Upload The Group Upload is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s e Group Download The Group Download is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Guest Service By default it s Disable Enable to activate bandwidth control service for guest users Guest Upload The Guest Upload is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Guest Download The Guest Download is in the range of 0 102400 Kbit s 0 indicates unlimited default is 512 Kbit s Session Limit per IP The number of sessions is in the range of 10 500 0 indicates unlimited default is 0 Port Setup The port setup is different between LAN and VLAN Setup page On the LAN Setup page the system manager can set each port s PVID and 802 1p priority for the PVID The specified priority will only be assigned to the untagged frame and then system can map the untagged frame to the proper output queue for 802 1Q based QoS Just specify the priority to 0 if you don t turn on the QoS or use other QoS mechanisms instead of 802 1Q based On the VLAN Setup page the system manager can set tagged
94. from the drop down list the options are Disabled Only Deny List MAC or Only Allow List MAC define certain wireless clients in the list which will have denied access to the Access Point while the access will be granted for all the remaining clients Action is set to Only Deny List MAC define certain wireless clients in the list which will have granted access to the Access Point while the access will be denied for all the remaining clients Action is set to Only Allow List MAC v Address Enter MAC address in this field There are maximum 20 clients allowed in this MAC Filter List The MAC Address of the wireless clients can be added and removed to the MAC Filter List using the Add and Delete buttons 101 WMS 308N Network Access Gateway Controller User s Manual Map Click Map to configure location setting the respective Group Location Setup page will appear and the administrator specify flag mark as location on the Map from the Device List 6 The MAP function ONLY supports monitor with width resolution for 1280 or above AP Croup Setup Management gt Group WAP 954GP Group Location Setup Device List ps i200 Serial m 1200 Serial m n CPE 20106G CPE 20106 A ts F EL wl i 1 4 Double click flag the basic management setting page will appear Specify desired System Name Description Location HTTP Po
95. ge 9 Unlimited Until End Time 10 00 USD B Status Display billing plan status currently B Plan Name Display name of respective billing plan B Type Quota Denote respective billing plan time volume policy and service quota B Price he price charged for respective billing rule B Edit This will edit billing plan individually There are 10 billing plan can be edited B Info This wil show accounts list and create accounts individually 60 Info Info Info Info Info Info Info Info Info Info Info WMS 308N Network Access Gateway Controller User s Manual Click Edit button on Billing Plans List page to enter the Billing Plan Setup page In the Billing Plan Setup page Administrator may configure plans a Service Domain gt Billing Plans Setup gt Billing Plano Setup Billing Setuy Policy Setting E g El Leave B Status By default it s Disable To Enable to activate this billing plan B Plan Name Enter plan name for this billing plan B Price The price charged and currency for this billing plan The Paypal payment gateway does not support Customize Currency Passcode Type There are different passcode type for this billing plan Digit All Letters Mix Letter Digit Select All Letters or Mix Letter Digit the sub item should be shown up Select desired excluding letters for passcode of ticket databases Passcode Length Specify desired passcode length between 8 to
96. ge of monitoring This will show up as the sender s E mail SMTP Server The IP address Domain of the sender s SMTP server v Port The port of the sender s SMTP server Default is 25 Encryption Some SMTP server need encryption linking for sending E mail The system provides encryption for sender s SMTP server SMTP Auth Some SMTP server need authentication username and password for sending E mail The system provides authentication for sender s SMTP server Username The sender s authentication username for STMP server Password The sender s authentication password for STMP server 82 WMS 308N Network Access Gateway Controller User s Manual Notification E mail Setup Receiver E mail Address es Up to E mail address can be set up to receive the notification These are the receiver s E mail address Sending Interval The time interval in minute to send the E mail report Default is 1440 minutes the range is between 10 to 4200 minutes SMTP Sending Test Click Send button to verify Notification E mail settings Below depicts an example for success sending test Sand Test Success Receiver E mail 1 testibpheenet com Racaiver E mail 2 Receiver E mail 3 sender From pheenet gmail com SMTP Server smtp gmail com Port 465 Encryption SSL SMTP Auth 1 Username gmail com Syslog Setup There are 3 types of Syslog supported Syslog
97. hanumeric and specify characters supported MAC Address Enter the MAC address for local radius authentication optional Description Enter appropriate text to denote this account Group Select specify group for local radius authentication default is None Click Save button to add new account all of accounts can be edited Username can not edit and deleted 76 WMS 308N Network Access Gateway Controller User s Manual B Local Radius Accounts List gt Delete Select specify group and click Delete button to remove accounts of specified group gt Import Accounts File Select specify group on Group option and click Select File button to select the text file for uploading the accounts of specified group The Upload File message will appear Please Wait Upload File 77 WMS 308N Network Access Gateway Controller User s Manual The upload file should be a text file and the format of each line is Username Password MAC Description without the quotes There must be no spaces between the fields and commas The MAC field could be omitted but the trailing comma must be retained When adding accounts by uploading a file the existing accounts in the embedded database uploading process will fail Below depicts an example for text file Password Username MAC Description test1 11111 00 11 22 33 44 55 01 the testi user test2 22222 the test2 user Username Description Passw
98. ication amp Service Domain Setup i LAN Port GA Auth Prager erated Ticket OA Let Tare LOP ir WAR Port Auto ge TP On A Lest Service aj Time Policy Run Redirect URL Link Legen Pape Template Page Romain 1 ra 4 LAM Prat Agth regenerated T Dn deena 281 Lire Hee Ramon WAN Prt Put PPP mE Service zu g Guest Service Tinia Policy Run Redirect URL Lipk Legin Temolate Page Tein 2 DE LAN P Tyee prequmaratud Ticket tha demand Hamta Hadit LOAP ir WUAM Erf 2e TP PoP Service amp Guest Service gii B Time Policy Always Run Redirect URL Link Lagin Page Template Page Tu LAN Part GS Auth Type Praeger aabed Ticket Dr Local eer Ramott rer faker 4 WAR Pert Zur Service A Guest Service i Q Time Policy Run Redirect WAL Link Page Template Page Step 3 Configure VLAN on VLAN 1 VLANS Setup page set VLAN1 s tag to 101 VLAN2 s tag to 102 and VLAN3 s tag to 103 VLAN Tag ID 101 Step Configure Port Setup on VLAN1 VLAN3 Setup page enable Port 1 and set VLAN TAG Mode to Tagged Port Setu Port 1
99. idual and distribution on different network Service Domain WAN Connection Detection WMS 308N Network Access Gateway Controller gt QoS Enforcement Packet classification via DSCP Differentiated Services code Point Diff ToS IEEE802 11p CoS IEEE 802 1Q Tag VLAN priority control IEEE 802 11e WMM Automatic mapping of WMM priorities to 802 1p and IP DSCP IGMP Snooping for efficient multicast delivery Upload and Download Traffic Management Firewall Built in DoS attack protection Inspection Full stateful packet filter Access Control List Layer 7 Protocol Blocking Multiple Domain Support Active Firewall Session 16 000 Network Vv vvv Vv Vv Support NAT or Router Mode User s Manual Support Static IP Dynamic IP DHCP Client PPPoE and PPTP on WAN connection DHCP Server per Interface Multiple DHCP Networks 802 3 Bridging Proxy DNS Dynamic DNS IP Port destination redirection DMZ server mapping Virtual server mapping H 323 pass through Built in with DHCP server Support Static Routing Binding VLAN with Ethernet interface Support MAC Filter gt gt gt gt WMS 308N Network Access Gateway Controller Support IP Filter Support Walled garden free surfing zone Support MAC address and IP address pass through Support IP Plug and Play IP PnP gt System Administration gt Vv vv V Three administrator accounts Provide customizable login
100. in page Below depicts an example for Walled Garden NAC Gateway Access Controller amp Username amp Local Radius Password Please input Pasacode Username and Pasawerd then you can use our Internet service Thanks 81 WMS 308N Network Access Gateway Controller User s Manual 4 3 4 Configure Notification WMS 308N can automatically send the notification of Traffic Log On Demand Log Session Log Monitor Report and AP Status to 3 particular E mail addresses The notification of AP Status is triggered by the event when a managed APs becomes unreachable during Auto Download Profile Interval period A trial email is provided by the system for validation The system also supports recording System Log On Demand User Log and Session Log via remote Syslog servers Please click on Service Domain gt Notification the page of Notification E mail Setup will appear and enter the related information and select the desired items and then apply the settings Notification Semp amp MTP amp MTP 2 z j Oe M ail Tra 1 t ani pP ES Li E LI L E SMTP Server Setup There are two SMTP Server supported when two SMTP servers enabled the system use SMTP 1 for primary SMTP server and SMTP 2 for backup SMTP server Enabled Click Enabled to activated SMTP Server Sender From The E mail address of the administrator in char
101. ing authentication service and customization login page Click on Service Domain gt tools icon or Service Domain gt Service Domain to enter Service Domain Setup page Service Domain Setup IP Setup DHCP Client Authentication Options Auth Type O Pregenerated Ticket On Demand Local Radius Fi Remote Radius Server Dafawt Auth Type Local Radius Specify WAM Port WAN traffic must be specified Load Balance z Enabis Disa bie MAT Service Login Options Login Timeout f Redirect URL httpz www pheenet com Time Akways Run v IP PnP Service Disable o Disabis Guest Count Limit Ouest Time m nubes emplate Page Setting Color Template Gray gt Font Color Z4cdcdc Background Color Login Main Titie Gateway Login Sub Tithe Access Controller Fu ia n r B 1 T H ran nein Help Content i A PE Please input Passcode Username and Password use our Internet service Thanks m gt gt Login Footer Tithe gt Copyright by Corpor Color Z2b2b2b E Preview 49 WMS 308N Network Access Gateway Controller User s Manual Authentication Options Select authentication type for the respective Service Domain The system supports multiple authentication in the respect
102. ion 2 Request API credentials to create your own API username and password PayPal d My Account Send Money Request Money Merchant Services Products amp Services Cverview Add Funda Withdraw History Resolution Center Profile API Access An API Apaication Programming Interlace allows PayPal soliware communicate with your odine store or shopping Setting up permissions and credentials C hocee one ol the ldlowing oglio 1o intecrate your PayPal payment sotution with your online store or shopping Option 1 Gran permissions 1o a third pany 1o use certain PayPal APIs on Option 2 Request credentials create your own username and your hall pase word this oplion il This oplion applies 1o You are using pre intecrated shopping hoetecd a third pany Cusiom websites and online stores Your website is hosled and managed by thirc parlty service provider Pre indegrated shopping cans running on your crm server Gran APL permission credeniials Select Request API signature and click Agree and Submit button to generate API username API password and API signature Account Send Money Request Money Merchant Services Products amp Services Request API Credentials Back 1o Profile Summary credeniiala consis of three elements AN userrame API password Biher an signature or
103. ion s Laits T Daily Tickets Chart Jedes Until unused 2011 01 22 14 03 4 2011 01 22 14 03 4 2011 01 27 14 03 4 un ust Delete CMa fees ied Une End Tie POLIO 13 59 2011 01 22 13 59707 1 Delte F i j Delete Lindl End Time Unused 2011 01 22 13 50 01 2011 01 22 13 50201 2011 01 27 13 5601 10 00 usn Delere NCOTTWBA 1 213 Delete Showing 1 cathe B Plan Information Show plan information in this billing plan Status Display billing plan status currently Plan Name Display plan name in this billing plan Price The price charged in this billing plan Wireless ESSID The ESSID of AP in this billing plan Wireless Key The Wireless key of the AP in this billing plan Description Additional information in this billing plan Type and Quota Denote time volume policy and service quota in this billing plan Effective Starting Time Denote effective starting time in this billing plan t y V V ve V VM v Effective Ending Time Denote effective ending time in this billing plan 62 WMS 308N Network Access Gateway Controller User s Manual Click Preview button to preview ticket in the billing plan Below depicts an example for previewing ticket Click Close button to close window Package 2 om sjo ome DN NN _ DN Endi
104. is 10 to 20 the Private Port can be 30 to 40 or other 10 ports range Click Save button to add Virtual Server rule to List There are maximum 20 rules allowed in this List All rules can be edited or removed on the List Click Reboot button to activate your changes 110 WMS 308N Network Access Gateway Controller User s Manual 4 5 5 DMZ The Demilitarized zone DMZ can be enabled and used as a place where services can be placed such as Web Servers Proxy Servers and E mail Servers such that these services can still serve the local network and are at the same time isolated from it for additional security DMZ is commonly used with the NAT functionality as an alternative for the Virtual Server IP Port Forwarding while makes all the ports of the host network device be visible from the external network side Please click on Advance gt DMZ and follow the below setting amp DM Setup m DMZ Check Enable button to activate this function and Disable to deactivate m IP Address Enter the IP address of the computer or server to be used as DMZ host only DMZ host can be activate at any time period Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 111 WMS 308N Network Access Gateway Controller User s Manual 45 6 IP Routing The IP Routing Settings allows you to configure routing feature in the gateway
105. ivate the new firmware amp Firmware ipg rade Breese Upgrade From time time the may release new veniam of rhe vestem s F imwane You cam Check Firrmraare burton o check and amp swnisad up ro Sace firmware and gigi reranyer bartan te the file frem your local harddisk B Upgrade Via Local Click Browse button to locate the new firmware and then click Upgrade button to upgrade B Upgrade Via TFTP Server Enter TFTP Server IP address and firmware file and then click Upgrade button to upgrade B Upgrade Via HTTP URL Enter URL address example http 192 168 2 10 xxx bin and then click Upgrade button to upgrade 1 To prevent data loss during firmware upgrade please backup current settings before proceeding 2 Do not interrupt during firmware upgrade including power on off as this may damage system 3 Never perform firmware upgrade over wireless connection or via remote access connection 44 WMS 308N Network Access Gateway Controller User s Manual 4 2 6 Network Utility The administrator can diagnose network connectivity via the PING utility Please click on Utilities gt Network Utility and follow the below setting amp Nenvork Utility hnn B Ping This utility will help ping other devices on the network to verify connectivity Ping utility using ICMP packets detects connectivity and latency between two network nodes As result of that p
106. ive Service Domain gt Auth Type Select desired authentication type for this Service Domain each Domain support multiple authentications Default Auth Type Select default authentication type for the respective Service Domain Specify WAN Port By default it s Auto Select desired WAN port for the respective Service Domain the clients will connect to Internet via specific outgoing WAN port NAT Service By default it s Enable to activated NAT service To Disable to unactivated NAT service B Pregenerated Ticket When Pregenerated Tickets selected in Auth Type field the Tickets DB will appear Select desired tickets database for Pregenerated authentication after creating the tickets database on the Pregenerated Tickets page See Section 4 5 2 2 B Login Options When authentication type selected in Auth Type the Login Options setting field will appear Login Timeout Enter Idle timeout for this Service Domain If users has idled with no network activities the system will automatically logout the users The Login Timeout can be set between 1 to 60 minutes and the default timeout is 10 minutes Login Redirect URL Enter the website of a Web Server to be the homepage When users log in successfully they will be directed to the homepage set such as hitp www yahoo com tw Regardless of the original webpage set in the users computers they will be redirect to this page after login Time Policy
107. j eeeeeee 2000 91 00 11 10 3 CPE 2010G 00 1A 50 1B 74 9B 192 168 2 65 80 eeeseee 2009 0 07 4t WAP 954GP 00 14 50 05 08 29 192 168 2 68 80 2009 01 01 00 04 02 o WAP 954GP 00 1A 50 1B 3E D9 192 168 2 67 80 2009 01 01 00 04 00 o WAP 954GP 00 1A 50 07 01 11 192 168 2 66 80 eeeeeee 2009 Recovery o CPE 2010G 00 1A 50 07 06 C1 192 168 2 63 80 eeeseee B Status Indicate the current status of the respective managed AP The following three status gt o On Line Indicate the current managed AP able detected gt v Off Line Indicate the current managed AP unable detected gt e Changed Indicate the current managed AP s settings changed The switch will automatically download profile after the Auto Download Profile Interval gt Upgrading Indicate the system upgrade on current managed AP If Status shows empty it indicates the Password is incorrect You need change correct password and click Save button s Host Name Indicate the current system name of the respective managed AP B MAC Address Indicate the current MAC address of the respective managed AP IP Address Port Indicate the current LAN IP address and port of the respective managed AP If the managed AP s IP Address and Port changed after importing profile Administrator need change IP address and port then click Save button to activated Otherwise the switch unable access managed A
108. l of available managed AP will display in the list These managed APs not yet imported to profile list Y Indicate the current IP address of the respective available managed AP MAC Indicate the current MAC address of the respective available recovery AP v Password The default password is default Enter the correct password of the respective managed AP to access v Status Display the current status of the respective managed AP If the status shows Available Use the managed AP can used if the status shows 401 Unauthorized the managed AP can not accessed The correct password must be entered on Password field and Click Test button to access Click Rescan button to scan available managed AP B Delete Click Delete button to remove profile on the list B Auto Download Profile Interval The interval in the range of 1 14400 and set in unit of minutes The default value is 5 minutes During every interval the system automatically download profile or configure setting on the respective AP 95 WMS 308N Network Access Gateway Controller User s Manual 44 3 Managed AP Batch Setup WMS 308N supports batch configuration of the managed APs for automatically assigning IP addresses from a range of IP addresses to the selected managed APs for configuring wireless general and security settings to the selected managed APs for upgrading firmware to the selected managed APs amp Raich Seni Management
109. low depicts an example for LAN 31 WMS 308N Network Access Gateway Controller User s Manual amp LAN gt LAN Serup Domain Bandwidth Contre DHCP Server t VLAN Tag ID Virtual LAN the system supports 7 tagged VLAN port VLAN1 The valid values from 1 to 4094 The default VLAN1 s tag VLAN 7 s tag are from 101 to 107 VLAN VLAN Tag ID 101 Some system and VLAN switch do not support VLAN tag 1 IP Address The IP address of the LAN VLAN port The default LAN s IP address as 192 168 2 254 and the default VLAN1 s VLAN7 s IP address as 192 168 101 1 192 168 107 1 Netmask The Subnet mask of the VLAN port default Netmask is 255 255 255 0 Bandwidth Control By default it s Disable To Enable to activate bandwidth control service Bandwidth Control Service Enable Disable 9 Even Distribution of Bandwidth Individual Bandwidth Total Max Upload _Kbit s Total Max Download Kbit s Guest Service Enable 9 nisable Guest Uplaad Kbit s Guest Download JKbit s 5 ali session Limit per IP 0 sessions L Enable the desire option among Even Distribution of Bandwidth or Individual Bandwidth Even Distribution of Bandwidth Set users distribute Total Max Upload Download Below depicts an 32 WMS 308N Network Access Gateway Controller
110. n IP address and Port B Route Information Select Route Information on the drop down list to display route table WMS 308N could be used as L2 L3 device It doesn t support dynamic routing protocols such as RIP or OSPF Static routes to specific hosts networks or default gateway are set up automatically according to the IP configuration of system s interfaces When used as a L2 device it could switch packets and as L3 device it s capable of being a gateway to route packets inward and outward r Route Information Destination 192 168 101 0 182 168 102 0 192 168 103 0 182 168 2 0 132 168 1 0 192 168 104 0 182 168 105 0 182 158 106 0 182 168 107 0 Gateway Netmask 0 0 0 0 255 255 2755 0 0 0 0 255 255 25 0 0 0 0 255 255 2 0 0 0 0 255 255 25 0 0 0 1 255 255 255 0 0 0 0 255 255 25 0 0 0 1 255 255 2 0 0 0 0 255 255 25 0 0 0 1 255 255 255 0 0 0 0 3 U LIE E 192 1568 2 7 115 interface eth1 101 eth1 102 WMS 308N Network Access Gateway Controller User s Manual B ARP Table Information Select ARP Table Information on the drop down list to display ARP table ARP associates each IP address to a unique hardware address MAC of a device It is important to have a unique IP address as final destination to switch packets to ARP Table Information IP Address MAC Address Interface 192 168 2 254 00 11 22 66 88 50 eth 192 158 1 44 00 14A 92 90F A4 OB eth1 116 WMS 308
111. nd authentication the timer page will appear Don t close Timer page Because the Logout button on this page If Timer Page doesn t appear in the browser please enter http s hs logout to open Timer Page lf administrator wants to refund transaction please see Appendix Issue Refund for PayPal 68 WMS 308N Network Access Gateway Controller User s Manual WMS 308N can generate ticket of on demand users manually or automatically from Thermal Printer Please click on Service Domain gt Authentication gt On Demand gt Thermal Printer Setup to enter the Thermal Printer List page In the Thermal Printer List page Administrator may configure Thermal Printer setting and generate tickets manually and delete tickets amp Service Domain Billing Plans Setup gt Thermal Printer Setup Thermal Printer List Status IP Address Command Port COM Port Date Description Edit Info 0 Off 5000 COM 23 59 Edit Info 1 Off 5000 COMI 23 50 Edit Info 2 Off 5000 COMI 23 50 Edit Info 3 Off 5000 COMI 23 50 Edit Info Off S000 COM 23 59 Edit Info 5 Off 5000 COMI 23 50 Edit Info 5 5000 COMI 23 50 Edit Info 7 Off 5000 COM 23 50 Edit Info a Off 5000 COM 23 59 Edit Info Off 5000 COMI 23 50 Edit Info lf administrator wants to generate tickets from Thermal Printer system must use PSS 120 to control Thermal Printer B Status Display Thermal Printer status currently B IP Address Denote IP address
112. ng Time 2010 06 12 13 14 39 Click Add Accounts button the create page will appear as below Click Cancel button to close window Package 2 omm _ LN NNI n 2010 06 12 13 15 03 Create Click Create button to add new account for this billing plan Below depicts an example for creating ticket WMS 308N Network Access Gateway Controller User s Manual Package 2 P Passcode BASXCR79 m Price 3150 a Type Quota One Time 60 mins B Create Time 2010 06 07 13 15 25 mi Starting Time 2010 06 07 13 15 29 e Ending Time 2010 06 12 13 15 29 2 Wireless ESSID APOO APOL p Wireless Key 1234567890 Description Billing Plan 2 Print Close B Statistic Show on demand users statistic information for this billing plan Ticket Qty Denote ticket s quantity in this billing plan Used Ticket Qty Denote used ticket s quantity in this billing plan Expired Ticket Qty Denote expired ticket s quantity in this billing plan Total Price Denote total ticket s price and currency in this billing plan B Daily Tickets Chart Show ticket s quantity of chart for this billing plan B Tickets List Show tickets information Plan Denote billing plan for this ticket Code User can used ticket s Passcode for access Internet Type Quota Denote ticket s time volume policy and service quota Status Show ticket s status There three types of status Unused Used and Expi
113. nt specify the number of ICMP echo response replies If the specified number of ICMP echo response packets is not received continuously the primary WAN traffic will be routed secondary WAN If Connection Detect is disabled on Load Balance or Backup the system will use default value Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 29 WMS 308N Network Access Gateway Controller User s Manual 4 1 4 Configure Dynamic DNS Dynamic DNS allows you to make an assumed name as a dynamic IP address to a static hostname Please click on System gt DDNS and follow the below setting Dynamic DNS Setup DDNS Service O Enable 9 Disable Serivce Provider Hostname Username Password Enabled Select Enable for DDNS function each time your IP address for WAN is changed the information will be updated to DDNS service provider automatically B Service Provider Select the correct Service Provider from the drop down list here included are dyndns dhs ods and tzo embedded in the WMS 308N m Hostname This field represents the Host Name you register to Dynamic DNS service and expect to export to the world m User amp Password User Name and Password is used as an identity to login DDNS service Change these settings as described here and click Save button to save your change
114. o D Examples of Making Payrrents for End Users Step 1 Click the link below the login window to pay for the service by credit card via PayPal WAS 105R Hotspot Gateway 602 11B G N MIMO Hotspot Gateway P Passcode Click here to purchase by PayPal or Credit Card Online Step 2 Select service package and Click Buy Now button to send out this transaction There will be a connecting message as below WAS 105R Hotspot Gateway 802 11B G N MIMO Hotspot Gateway Price Type Effective Time Range USD 10 00 Unlimited 0 days 0 hrs 0 mins to 5 days 0 hrs 0 mins USD 5 00 Multiple Times 60 mins 0 days 0 hrs 0 mins to 5 days 0 hrs 0 mins usp 3 One Time 60 mins 0 days 0 hrs 0 mins to 5 days 0 hrs 0 mins WAS 105R Hotspot Gateway 802 11B G N MIMO Hotspot Gateway Connecting to PayPal 129 WMS 308N Network Access Gateway Controller User s Manual Step 3 You will be redirected to PayPal website to complete the payment process You can pay service fee via Paypal account or use your credit card Click continue checkout hyperlinks PayPal is the safer easier way to pay PayPal Secure Payments PayPal securely processes payments for Cenwell Hotspot Pay with PayPal in a couple of clicks You can use your credit card without exposing your card number ta the seller Log in to PayPal You can speed through checkout without stopping ta enter your card number or address Emai Don t hawe
115. of respective PSS 120 B Command Port Denote command port of respective Thermal Printer B Port Denote COM port of respective PSS 120 B Date Denote balance date of respective Thermal Printer B Description Denote information of respective Thermal Printer B Edit This will edit billing plan individually There are 10 billing plan can be edited B Info This wil show accounts list and create accounts individually Click Edit button to enter Thermal Printer Setup page In the Thermal Printer Setup page administrator may configure related settings 69 WMS 308N Network Access Gateway Controller Y User s Manual B Service Domain Billing Flan 5Serup Thermal Printer Thermal Printer Semp inam EF Print TUE Billing Plan Setup Lis B Service By default it s Disable To Enable to activate this function B IP Address Enter IP address of PSS 120 B Command Port Enter command port of the Thermal Printer B Port Select COM port for PSS 120 B Balance Date Enter balance date for statement printing from Thermal Printer Thermal Printer can print Current Balance or Early Balance statement Below depicts an example for Balance Date Balance Date 6 17 23 59 Current Date Early Balance Current Balance 6 17 00 00 6 17 23 59 6 18 00 00 6 18 20 00 B Description Enter additional information for this Thermal Printer Aft
116. omain Length Up to 32 0 9 A Z a z _ lt gt Lease Time 600 99999999 default is 86400 Switch QoS DSCP 0 63 Weight 1 128 DSCP Remark 0 63 802 1p Remark 0 7 WAN Manual MAC Address 12 HEX characters IP Address A B C D IP Format IP Netmask 128 0 0 0 255 255 255 255 IP Gateway A B C D IP Format PPTP Server A B C D IP Format My WAN IP A B C D IP Format My WAN IP Netmask 128 0 0 0 255 255 255 252 Hostname Length Up to 32 0 9 A Z a z _ lt gt User name Length Up to 32 118 Password WMS 308N Network Access Gateway Controller dE User s Manual MTU 576 1492 Primary Secondary DNS A B C D IP Format 119 WMS 308N Network Access Gateway Controller User s Manual Table A Web GUI Valid Characters continued Block Field Valid Characters DDNS Hostname Length Up to 32 0 9 A Z a z _ User Name Length Up to 32 0 9 A Z a z Password 1 _ lt gt Management System Name Length 1 32 0 9 A Z a z Space lt _ 1 lt gt Description Length Up to 50 characters Space Location Length Up to 32 0 9 A Z a z Space lt _ lt gt New Password Length 4 30 0 9 A Z a z lt _ lt gt Check New Password Length 4 30 0 9 A Z a z
117. on can be used to set the translation table for mapping DSCP value to internal priority queue The range of DSCP is 0 63 and the range of priority queue is 0 7 Bg Queue Weight Setup Set weight and type Strict Priority SP or Weighted Fair Queue WFQ for dedicated port for using queues There are priorities as queue value in strict queues It means strict queue value 5 carrying higher priority than strict queue value 4 Queue Indicate 8 priority queue Strict High By default it s Enable for Strict Priority queue To Disable to set WFQ weight value Weight Set WFQ in weight ration from 1 to 128 gt DSCP Remark Select Enable to activate DSCP remark function of the respective priority queue and assign DSCP remark value from 0 to 63 802 1p Remark Select Enable to activate 802 1p remark function of the respective priority queue and v assign 802 1p remark value from 0 to 7 37 WMS 308N Network Access Gateway Controller User s Manual 4 2 Manage the System 4 2 1 Configure System Tine System time can be configured via this page where manual setting and NTP server configuration are both supported Please click on System gt Time Server and follow the below setting amp Time Server Setup m m p ou uk Z E Bm BI B yt F System Time Display the current time of the system m Setup Time Use NTP Enable Network Time Protocol NTP to synchronize the sy
118. or untagged on each port Please note that the VLAN s port was set to untagged the port need set PVID instead of port For example when VLAN 1 s Port 1 enabled and set Port 1 to Untagged on VLAN Setup page The Port 1 need set PVID to VLAN1 on LAN Setup page 34 WMS 308N Network Access Gateway Controller User s Manual Port Setup Port PVID 802 1P Priority Port 1 LAN v lo Port 2 LAN v 0 4 LAN 0 Port Setup Port VLAN TAG Mode Untagged Tagged Port 1 5 Port 2 Port 3 Q Port 4 Q Port Indicate the system s RJ 45 interface port By default it s enabled To disable to unactivated LAN s VLAN s port PVID Port VID Select desired default VLAN ID on the respective port all untagged packets arriving at the device are tagged with the port PVID 802 1P Priority Priority value is in the range of 0 7 the default is 0 Specify desired priority value on the respective port gt VLAN TAG Mode Select Tagged or Untagged on the respective port m MSTP By default it s Disable To Enable to activate MSTP with up to 16 Spanning Tree instances The multiple spanning tree network protocol provides a loop free topology for any bridged LAN VLAN MSTP is defined in the IEEE Standard 802 1s MSTI Multiple Spanning Tree Instances MSTI MSTP enables the grouping and mapping of VLANs to different spanning tree instances So an MST Instance MSTl is a particular set of VLANs that
119. ord B Export Accounts File Click Export button to save accounts file to PC The the File Download window will appear File Download you want to save this file find a program online to open it Mame radius accounts dat Type Unknown File Type From 192 158 2 253 P 5 While files from the Internet can be useful some files can potentially e harm your computer IF vou do nat trust the source do not find program to open this file or save this whats the risk B Search Enter a keyword to be searched in the text field and all matching the keyword will be listed These settings will become effective immediately after clicking the Save button 78 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 5 Configure Remote Radius Server WMS 308N provide remote Radius server authentication Please click on Service Domain gt Authentication gt Remote Radius Server the page of Remote Radius Server Setup will appear amp Service Domain gt Remote Radius Server Setup Radius Server Service Enable Disable Primary Server IP Secondary Server IP Authentication Port Accounting Port Secret Key Accounting Service Enable Disable Authentication Type Save B Service By default it s Disable To Enable to activate this function B Primary Secondary Server IP Enter the IP address of the A
120. ormation for this billing plan gt gt gt gt Ticket Qty Denote ticket s quantity in this billing plan Used Ticket Qty Denote used ticket s quantity in this billing plan Expired Ticket Qty Denote expired ticket s quantity in this billing plan Total Price Denote total ticket s price and currency in this billing plan Daily Tickets Chart Show ticket s quantity of chart for this billing plan Tickets List Show tickets information t y V V yyy Plan Denote billing plan for this ticket Code User can used ticket s Passcode for access Internet Type Quota Denote ticket s time volume policy and service quota Status Show ticket s status There are three types of status Unused Used and Expired Create Time Denote the ticket create time Open Time The ticket used for the first time Start Time Denote effective starting time of the ticket End Time Denote effective ending time of the ticket Last Login Denote the ticket last login time Price Currency The price charged for this ticket 67 WMS 308N Network Access Gateway Controller User s Manual Delete This will delete the ticket individually When administrator click Delete button the alert message will appear as below Message from webpage v Do vau want to delete the ticket On this List it only shows all of generated tickets through External Payment Gateway After you login system via On Dema
121. ort IP Forwerding A certain area in the network can be exposed to the Internet in a limited and controlled way for on line game or video conferencing via this page Please ensure the internal port to be used is not occupied by other applications Please click on Advance gt Virtual Server and follow the below setting amp Virtual Server Serup un SSS Save hear m Virtual Server Check Enable button to activate this rule and Disable to deactivate Description Enter appropriate text to denote name of the Virtual server B Private IP The corresponding IP address of the LAN port used for the respected service Enter the LAN IP address of the assigned host m Protocol The communication protocol of session Select an appropriate protocol type either or UDP protocol Private Port The private port s required for this rule A single port may be given or a range may be given as start end which will match all ports from start to end inclusive m WAN Interface Select specified WAN interface where forwarding of incoming packets is processed m Public Port The public port s required for this rule A single port may be given or a range may be given as start end which will match all ports from start to end inclusive m Time Policy Select specified time period for this rule The Private Port and Public Port can be different but the port range need the same example Public Port
122. p PheeNet Network Access Control Gateway Controller User s Manual Ver 0 0 3 WMS 308N Table of Contents Chapter 1 Before You Start 4 ki PROTEC ern rS 4 k2 Package siio icu eiu uM 4 Chapter 2 System 5 2 1 dJntroductomorl WMS S08N 5 22 CONC DL 5 Qo 6 Chapter Base Installations ess aires eph osa a eta ae lec ra ets idea aa 14 S iuc Mi eed 14 9 1 1 System BegulrelTIellls qe 14 3 1 2 Panel FUNCTION Descriptions eet ont hie dto dea a 14 SENSE eA NUM E EU E RE 16 GOMIGUI mH 17 fee gt g an et ee ttre ee Pe rt UTER 17 922 QUICK CONMGUIATION optet aree opea oet 19 3 2 3 ACCESS IMENE E eite pss se eee 23 Chapter 4 Web Interface Configuration 24 4 1 Connect WMS 308N to the external Ne twork cccccsecceeesseeeeeeeeeeeeeeeeeeeeseeeeseeseeaeeeeseaees 25 Network TREGUING ING sso cst E E EM 25 41 2 WAINIPOFUqe necem erdt aqua eau asc eee thease utu eed aue etre dates 25 44 9 Gonhg
123. r example www businessname com PPP PPP Step 2 Edit NECESSARY settings in API Access Please click on Profile gt API Access in the Account Information PayPal My Account Send Money Request Money Merchant Services Products amp Services EH Owerview Add Funds Withdraw History Resoution Center Profie Summary Justin Shen Secure hari ID SKeKeAHMBTNVTY your Profile information please click on a link below Account Information Email Street Address Phone Password Nol Fications Language Preference Time Zone iManage User API Access Business Information Additional Owners Glose Account Identification Preference Merchant Fees Financial Information Cedi Debi Gars Bank Accounis Balances Ns and Dicounis Account Siale menis Recurring payments dashboard preappibved payme nis 126 selling Preferences Auctions Regional Shipping Galulations Saved Buttons Payment Receiving Preferences Insiani Payment Nolficalion Preferences Reputation Customer Service Message Website Payment Preferences Encrypied Payment Settings Cusiom Payment Pages Invoice Templates Language Encoding WMS 308N Network Access Gateway Controller User s Manual After click Access on Account Information the API Access setting will appear Click Request API credentials in Opt
124. rage based on dynamic RF condition Dense deployment options for capacity optimizations Multiple BSSID per Radio 8 Hot Standby at AP mode supports fail over as a standby AP Load Balance with another available AP Real time users limitation Radio Management Coverage interference detection onvergence 8 Hardware queues per port IEEE802 11p Class of Service Quality of Service CoS QoS IEEE802 11e Wi Fi Multimedia WMM 8 BSSID per radio DiffServ Codpoint DSCP ireless Encryption WPA personal and enterprise WPA2 personal and enterprise AES CCMP 128bit FIP 197 WEP40 64 and 104 128 bit TKIP RC4 40 SSL and TLS RC4 128 bit and RSA1024 and 2048 bit EAP TLS EAP TTL MSCHAPv2 Wireless Security IEEE802 1X network login user authentication EAP MD5 TLS TTLs over LAN EAPoL transport with PEAP and EAP TLS authentication RADIUS server authentication RFC2618 WMS 308N Network Access Gateway Controller User s Manual IEEE802 1X user authentication of controller management on controller Telnet and console sessions Multiple access privilege levels Hierarchical management and password protection for management interface EAP offload for AAA server scalability and survivability Stateful 802 1X authentication for standalone APs SSID and Location based authentication Multi SSID support for operation of Multiple WLANs B Simultaneous Centralized and distributed WLAN support Identity Based Security 802 1X A
125. rator can access all area of the WMS 308N Username root Password default gt admin The admin can access the area under Service Domain Wireless and Advanced setting Please see Appendix B Username admin Password admin gt operator The operator only can access the area of On Demand authentication to create edit and print out the new on demand user accounts Please see Appendix B Username operator Password 1234 4 After a successful login the Home Page will appear on the screen System Service Domain AP Management Advance Utilities Status Overview NENNEN MEM Host Mame WHhEz 308N Port Link Infa System Info edem WAHI 2 Port Link Info CPU Info 4 Description Network Access Control Gateway Memory Info aie Firmware Verston Cen AC VO 0 3 Firmware Babe 2011 03 24 12 30 58 LAH1 LAN Dewice Time 2011 03 28 03 55 53 System Time 04 03 Primary DNS Secondary DNS Monitor k Network 1000 00 800 00 Ticket Count Auth Type Tickets DHCP Clients Pregenerated 600 00 On Demand Service Domain eet 400 00 Payment Gateway 200 00 Thermal Printer Eps Local Radius g zs 1A 50 D0 74 93 MAC Address 00 14 4 Total 0 15841 IP Address 132 168 2 254 TER 755 755 rz 2 Netmask 255 255 255 0 Used Space 0 00 TX Bytes 796909 18 WANI Monitor 125 00 100 00 si 75 00 50 00 25 00 BOS 0 m a
126. re four types of WAN1 connections to be selected from Static IP Dynamic IP PPPoE Client and PPTP Client Enter the IP Address of a DNS Server provided by your ISP Internet Service Provider Contact the ISP if the DNS IP Address is unknown Click Save button WAN Setup Eee E 53 06 WMS 308N Network Access Gateway Controller User s Manual Step 3 Choose System s Time Zone Click System gt Time Server the Time Server Setup page will appear Select the appropriate NTP Server Time Zone from drop down list gt Click Save button 9 Setup Time Use NTP Default NTP Server time stdtime gov tw optional Time Zane GMT Dublin Edinburgh Lisbon London Daylight Saving Time Before Hotspot service active make sure the Local Time is correctly Step 4 Select Authentication Type for Service Domain Click Service Domain the Service Domain Setup page will appear amp Service Domain Setup 2 rung DE LAN Fort E WAN Port TP PoP Service D Guest Service Tiere Policy Zo Redirect URL Login Page m Preegenarated Ticket On derrand Loca Wipers Remote Radius Eerver LDAP Server Aut mn Link Template Page Domain 4 _ r Port Auth Type WAN Port de IPPnP Service g Guest Service B Time Policy VLAN4 Pregenerated Ticket Lead
127. red Create Time Denote the ticket create time Open Time The ticket used for the first time Start Time Denote effective starting time of the ticket End Time Denote effective ending time of the ticket Last Login Denote the ticket last login time t y y VV VV y v v Price Currency The price charged for this ticket 64 WMS 308N Network Access Gateway Controller User s Manual Delete This will delete the ticket individually When administrator click Delete button the alert message will appear as below Message from webpage v Do vau want to delete the ticket a On this List it only shows all of generated tickets through clicking Add Accounts button After you login system via On Demand authentication the timer page will appear Don t close Timer page Because the Logout button on this page If Timer Page doesn t appear in the browser please enter http s hs logout to open Timer Page 65 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 3 3 Configure External Payment Gateway This section is for merchants to set up an external payment gateway to accept payments in order to provide access service to end customers who wish to pay for the service on line amp Service Domain gt Billing Plans Serup Payment Setup 1 1 Select Paypal to enable External Payment Gateway Before setting up PayPal it is req
128. rt and Telnet Port then click Save amp Reboot button to activate your change on managed AP WAP Uu 5A40P Management Setup System Information System Name WAP SGP Description WiFi G 500mw Location Login Methos Port Jeo Enable Telnet V Port 23 Save amp Reboot 102 WMS 308N Network Access Gateway Controller User s Manual Edit Click Edit to configure settings of the respective group in the list Delete Click Delete to remove the respective group in the list B Upload Map Setup Select desired Map to upload Click Preview to view the respective Map click Delete to remove the respective Map The system supports JPG JPEG PNG and GIF format If you enable Dynamic Channel Allocation Maximum Clients Control or MAC Filter Control service you also need manually enable managed AP s settings to activated these services on Wireless Advanced Page When these services enabled the switch will automatically control channel txpower maximum clients and MAC filter during every Auto Download Profile Interval Please see section 4 3 2 103 WMS 308N Network Access Gateway Controller User s Manual 4 4 5 Group Status This section provide detailed information of group on Overview Location Device Information Online Users and Device Syslog can be reviewed via this page
129. rted button to create PayPal Business Account on Business field the Account Sign Up page will appear 125 PayPal WMS 308N Network Access Gateway Controller cho User s Manual ose Enterinformaten Confirm Account Sign Up Business Account Business Mame Category Address Line 1 Address Line 2 optional City State Province Region Postal Code Country Of Registration Date of Registration Business Type Primary Currency Customer Service Email Choose category Please enter your address in Erxjish as shown in ihe example 1000 5 1 Dunhua 5 A Taipei fF fF Taiwan Choose a Value Taiwan Mew Dollars Customer Service Phone 4886 ext Business URL optional fF Secure Transaction e Your Business Information Please enter ihe information lor your group onganizalion government nonrprolit individual business or pariners hip Please enter ihe email address lor example name gpdomain com This email address will be shared only with 1hose who purchase irom you will be provided 1o buyers during payment so hat they can contact you needed You will be asked erter an email address for your Pay Pal profile on ihe next page can be ihe same diferent your Customer Service Email Please enter your Business URL lo
130. rts the highest level SNMP security gt gt gt gt SNMP ro user Set a community string to authorize read only access SNMP ro password Set a password to authorize read only access SNMP rw user Set a community string to authorize read write access SNMP rw password Set a password to authorize read write access SNMP Trap Events such as cold start interface up amp down and association amp disassociation will report to an assigned server gt gt Community Set a community string required by the remote host computer that will receive trap messages or notices send by the system IP Enter the IP addresses of the remote hosts to receive trap messages Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 42 WMS 308N Network Access Gateway Controller User s Manual 4 2 4 Restore and Reset to Factory Current settings on the system can be backed up or previous backed up settings can be restored as well as resetting the system back to factory default can be performed via this page Please click on Utilities gt Profile Setting and follow the below setting Profile Save Profile Save save Settings To PC Save Load Settings From PC LBrowse J Upload Reset To Factory Default In this page YOU Can Save your current configuration restore a previously saved configur
131. s Click Reboot button to activate your changes 30 WMS 308N Network Access Gateway Controller 4 1 5 Configure Local LAN VLAN Network User s Manual Here 15 the instruction for how to setup the local LAN VLAN IP Address and Netmask Please click on System gt LAN the LAN List should be appear This page shows information of LAN s VLAN s settings LAN Setup LAN List Port WLAN Tag ID IP Address HEU am avid DHCP Individual Group Distribution Session 192 168 2 254 0 VLAN 10 192 168 101 1 0 2 102 192 168 102 1 0 On VLAN3 103 192 168 103 1 0 104 192 168 104 0 On VLANS 105 192 168 105 1 0 VLAN 106 192 168 106 1 0 On VLAN 10 192 168 107 1 0 On m Port Indicate the system s LAN VLAN port VLAN Tag ID Indicate the VLAN tag of the respective VLAN port Only for VLAN1 VLAN7 m IP Address Indicate the IP address of the respective LAN VLAN port m Individual Indicate the Individual Max Upload Download of the respective LAN VLAN port Group Indicate the Group Upload Download of the respective LAN VLAN port B Distribution Indicate the Distribution Upload Download of the respective LAN VLAN port Session Indicate the Session of the respective LAN VLAN port m DHCP Indicate the DHCP server status of the respective LAN VLAN m Edit Click Edit button to configure LAN VLAN s settings Click Edit button on this page the setup page should be appear Be
132. s own settings The network is divided into maximum of 8 groups each defined by VLAN Tag Each Domain has its own 1 login portal page 2 authentication options 3 LAN VLAN interface IP address range 4 Session number limit control 5 Traffic shaping 6 IP Plug and Play IP PnP 7 Multiple Authentication Enable DHCP or not and DHCP address range Enable authentication or not Types of authentication options Local RADIUS LDAP On Demand and Pregenerated Web login logout redirected page customizable Default Policy B NAT or Route Mode B Specific Route WAN1 or WANe or a specified gateway B Login schedule Bandwidth max min Authentication gt VV VV VY Authentication single sign on SSO client with authentication integrated into the local authentication environment through local domain LDAP RADIUS MAC authentication and 802 1X Customizable Login and Logout Portal Pages Customizable Advertisement Links on Login Portal Page User authentication with UAM Universal Access Method 802 1X EAPoLAN MAC address Allow MAC address and user identity binding for local user authentication No Of Registered RADIUS Servers 2 Support MAC control list ACL Support Multiple Login service on one Accounts Support auto expired guest accounts Users can be divided into user groups Each group role may get different network policies in different service zones Max simultaneous user session TCP UD
133. ss Gateway Controller User s Manual 4 3 2 2 Configure Pregenerated Tickets This section is for administrators to pregenerated authentication tickets for entire external Network There are four types of policy ticket can be generated One Time Multiple Times Volume and Unlimited Until End Time Please click on Service Domain gt Authentication gt Pregenerated Tickets and follow the below setting a Service Domain Pregene rated Tickers DB thing Pregenerated Tickets Database List m File ID Enter the 8 hex digit number for identifying tickets databases Price The price charged for this tickets databases B Currency Select currency from drop down list or enter customize currency for this tickets databases m Quantity of Tickets Specify desired quantity of tickets for this databases Passcode Type There are different passcode type for this tickets databases All Digit Letters Mix Letter Digit Select All Letters or Mix Letter Digit the sub item should be shown up Select desired excluding letters for passcode of ticket databases m Length Specify desired passcode length between 8 to 32 for this tickets databases m Description Enter the tickets databases description Policy Type There are different policy for this tickets databases One Time Multiple Times Volume and Unlimited Until End Time Select One Time or Multiple Times or Volume the Quota sub item should be shown up B Quota
134. ss Gateway Controller User s Manual 4 4 Control your Managed AP WMS 308N supports to manage up to 60 managed access points AP WLAN users are connected to the network via the managed APs and they can be configured in this section This section include the following functions Device Discovery AP Profile Management AP Batch Setup Management AP Group Setup Management AP Group Status Notification and Website Monitor 4 4 1 Discovery Managed Use this function to detect all of managed APs in the local area network by the current discovery process Each discovered managed APs can configured Password IP address Netmask or Gateway Importing managed APs profile for Profile Management Please click on AP Management Device Discovery the Device Discovery page will appear amp Device Discovery Aube inter eel B Import Click Get Info button to get current information the selected managed AP or Click Refresh button to get information of the detected managed APs Select desired managed AP and click Import button to import respective managed AP s profile to system then the success message Import to Database will be displayed on System Message field Up to 60 managed APs can be imported to system If the managed AP s IP address are the same or already exist in the profile list the system can t import profile to database please use LAN Setup to configure different IP address of the r
135. stem time with NTP server gt Default NTP Server Select the NTP Server from the drop down list gt Time Zone Please set a time zone from where the accurate time can be supplied GMT 08 00 Taipei for example Daylight saving Enable Daylight saving time from where the accurate time needed If Time server setting selected in Setup Time User NTP please verify system s Default Gateway and DNS setting first B User Setup Administrator can set Time manually Click Set Time button and Save button to change Local Time Time Display Format Administrator can set system s time format Enter a desired time format or use the default provided Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 38 WMS 308N Network Access Gateway Controller User s Manual 4 2 2 Configure Managerrent The administrator can later obtain the geographical location of the system via the information configured here The administrator also can change system password and configure system login methods Please click System gt Management and follow the below settings Management Setup aim 1 System Information gt System Enter a desired name or use the default provided Description Denote further information of the system Location Enter related geographical location information
136. t hHotspot_sub_title gt lt p gt lt div id CW_MSG gt lt div gt lt Main Login Form Content gt lt div id CW_INFO gt lt span id CW_HELP gt lt span gt lt div gt lt Main Help Content gt lt div id WALLED gt lt div gt lt Walled Garden gt lt hHotspot_footer_title gt lt body gt lt html gt If login page need insert images or css file please include path upload vlan0 upload vian7 the 0 vlan7 indicate Service DomainO Server Domain7 below depicts an example for insert image001 gif image file to login page of Service DomainO img src upload vilan0 image001 gif gt Below depicts an example for div id WALLED gt lt div gt content di v cl 5 ad gt lt a href htt p ww googl cont title target _bl ank gt Googl ed gt gt You only can modify div class ad gt here is define CSS content for lt div class ad gt float left display inline block text align center width 100px margin 5px padding 5px 52 WMS 308N Network Access Gateway Controller User s Manual background fff font size 14px font weight bold text decoration color red ad hover ad a hover ad a active background 333333 color blue 53 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 Configure Authentication WMS 308N support 5 types of authentic
137. t close Timer page Because the Logout button on this page If Timer Page doesn t appear in the browser please enter http s hs logout to open Timer Page 73 WMS 308N Network Access Gateway Controller User s Manual 4 32 35 Billing Plan Report Click on Service Domain gt Authentication gt On Demand to enter the Billing Plans Report page Administrator can get a complete report or a report of a particular period a Service Domain Billing Plans Setup gt Billing Plan Report Search Creat Ime Kange Search Resull B On Demand Type There are four type can be selected ALL On Demand Payment Gateway and Thermal Printer B Search Selecta time period to get a period report The report tells the total income and individual accounting of each plan for all plans available for that period of time B Print Administrator can print report on the screen 74 WMS 308N Network Access Gateway Controller User s Manual Click on Service Domain gt Authentication gt On Demand to enter the Ticket Customization page Administrator can edit text on printed ticket on this page 4 32 characters supported on these text setting field amp Service Domain gt Billing Plans Setup gt Ticket Customization Setu Ticket Customization Setup Passcode Passcode Price Price Quota Quota Create Time Time Start Time Start Time End Time End Time Wireless ESSID Wirless ESSI
138. ter Read amp Write None Filter Read amp Write Noe Advance Virtual Server Read amp Write Routing Read amp Write None TimePoicy 1 Read amp Write Backup Settings Read amp Write None Profile Settings Restore Settings Read amp ue L Nene Utilities System Upgrade stem Up System Upgrade rade i Format Database Rebot Read amp Write None 124 WMS 308N Network Access Gateway Controller User s Manual Appendix C Create PayPal Business Account This section is to show independent Hotspot owners how to configure related settings in order to accept payments via PayPal making the Hotspot an e commerce environment for end users to pay for and obtain Internet access using their PayPal accounts or credit cards As follows are the basic steps to open and configure a Business Account on PayPal Sign Up Process Step 1 Sign up for a PayPal Business Account and Login Here is alink https www paypal com cgi bin webscr cmd registration run PayPal Create your PayPal account Secure 7 Your country or region Taiwan gt Your language Engish Already have a PayPal account Upgrade mow Personal Premier Business For individuals who shop online For individuals who buy and sell For merchants who use company or online group name Learn about low PayPal lees Click Get Sta
139. the settings to take effect All online users will be disconnected during restart 24 WMS 308N Network Access Gateway Controller User s Manual 41 Connect WMS 308N to the external Network 4 1 1 Network Requirement Basically in general network environment the main role of WMS 308N is a Gateway It manages the entire network from internal network to Internet Then the first step is to prepare an Internet connection from your ISP and connect it to the WAN or WAN 2 port of WMS 308N 4 1 2 Configure WAN Port Here is instruction for how to setup the WAN There are two WAN port can selected and configured The connection types for each WAN port Static IP Dynamic IP PPPoE and PPTP Please click on System gt WAN and follow the below setting A WAN Setup hth 9014 207 43 06 Static IP The administrator can manually setup the WAN IP address when static IP is available preferred WANT Setup Disable statici Dynamic IP pppoe Address 192 168 1 254 _ IP Netmask 255 25 5 2 55 0 IP Gate Way 1192 168 1 1 IP Address The IP address of the WAN port IP Netmask The Subnet mask of the WAN port IP Gateway The IP address of the host router which resides on the external network and provides the point of connection to the next hop towards the Internet This can be a DSL modem Cable modem or a WISP gateway router WMS 308N will direct all the pack
140. types of restore method Load From AP Profile Load From Template Profile and Load From Upload File Click Restore button to change current managed AP with the selected profile Load From AP Profile Select desired profile from AP Profile List All imported profiles will be on the AP Profile List the system use MAC address 12 hex characters of the respective managed AP for profile s name Load From Template Template is a mechanism that keep one AP as a standard profile then other APs can share the same Template without repeatedly keying all the parameters Select desired profile from Template Profile List All saved template profiles will be on the Template Profile List Click Delete button to remove template file on the list Template Profile List Template Profile List 9914501B3ED9 WAP 954GP bin C 001A502FOCAB WAP 854NP bin Delete Template File Delete 94 WMS 308N Network Access Gateway Controller User s Manual Load From Upload File Select desired profile from local PC Upload File From PC Load Profile From PC Browse B Auto Recovery Click Recovery button to upload profile to new or unlist managed AP the AP Profile Auto Recovery page will appear amp AP Frons Management AP Profile Auto Wer 1 Tt Lt ta Eee Available Wie AP Information Display the MAC and IP address informations of the selected managed AP s profile Available Recovery List Al
141. uch as WiFi Hotspot network management guest access hospitality deployments which requires reliability efficiency and security It combines an IP Router Firewall Multi WAN QoS enforcement and Access Controller for use in wireless environments One single WMS 308N can serve up to 500 simultaneous users takes control over authentication authorization accounting and routing to the Internet as well as to the operating central Built in AAA system allows the owners set up public access services without extra RADIUS server 2 2 System Concept WMS 308N Network Access Gateway Controller provides authentication authorization and accounting for a wired or wireless networks Hotspot technology allows Internet providers to offer Internet access to customers while applying certain Internet use rules and limitation It is convenient for Internet cafes hotels airports schools and universities The Internet provider gets complete tracking records of per customer time spent on the network data amount sent received real time accounting and more To begin browsing a client must go through a registration process with the provider and then enter a Passcode Username of access ticket in a browser Login window that appears on the attempt to open a webpage Hotspot technology proposes providers to establish and administrate a user database which can be useful for enterprise such as airports hotels or universities that offer wireless or Ethernet
142. uired that the merchant owners have a valid PayPal API Username API Password Please see Appendix C Accepting Payments via PayPal Appendix D Examples of Making Payments for End Users for more information about setting up a PayPal Business Account relevant maintenance functions and example for end users The Paypal payment gateway does not support Customize Currency Billing Plan After opening a PayPal Business Account the merchant should find the API Signature of this PayPal account to continue External Payment Gateway Setup B Username This is the Login ID E mail address that is associated with the PayPal Business Account B Password This is the Login Password that is associated with the PayPal Business Account B API Signature This the key used by Paypal to validate all the transactions B Invoice Number An invoice number may be provided as additional information against a transaction B Current No Show current invoice number B Information Click this button to view accounts information for PayPal 66 Service Domain gt Biling Plans Setup gt Payment Gateway Setup gt Payment Gateway Information WMS 308N Network Access Gateway Controller User s Manual Shure LII ale Shoei Llo of 1 B Payment Gateway Information Show current ticket s invoice number B Statistic Show on demand users statistic inf
143. upports automatically channel assignment and power setting for managed APs real time wireless clients limitation in the same group managed APs AP Group Setup Management Ls Uhe pact 7061 KE m save B Create AP Group Setup Create group managed APs Group Name Specify desired name for group Group Description Enter appropriate text to denote this group Group Map Background Select desired map for group background The Map must upload from Upload MAP Setup field first B Dynamic Channel Allocation By default it s Disable To Enable to activated dynamic channel allocation function and select desired channels with specify RSSI Threshold and High Low Power Level the switch will automatically assign suitable channel and tx power for group managed APs after the Auto Download Profile Interval Please see section 4 3 2 Figure 4 3 depict flow chart for dynamic channel allocation Dynamic Channel Allocation Service Enable Disable Country US v Band Made 2 4GHz MEM v Channel Free Channel Move Select Channel 2 2 417 Ghz 3 2 422 Ghz 4 2 427 Ghz 5 2 432 Ghz 7 2 442 Ghz 8 2 447 Ghz 9 2 452 Ghz 10 2 457 Ghz 1 2 412 Ghz 6 2 437 Ghz 11 2 462 Ghz RSSI Threshold m Hight Pawer Level Level 9 Low Power Level Level 3 99 WMS 308N Network Access Gateway Controller User s
144. uthentication RADIUS server B Authentication Port The port number used by Authentication RADIUS server Use the default 1812 or enter port number specified B Accounting Port The port number used by Accounting RADIUS server Use the default 1813 or enter port number specified B Secret Key The secret key for system to communicate with RADIUS server Support 1 to 64 characters B Accounting Service Select this to enable or disable the Accounting Service for accounting capabilities B Authentication Type Select the desired authentication type from the drop down list the options are CHAP and PAP Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes 79 WMS 308N Network Access Gateway Controller User s Manual 4 3 2 6 Configure LDAP Server WMS 308N provide remote LDAP server authentication Please click on Service Domain gt Authentication gt LDAP the page of LDAP Server Setup will appear amp Service Domain gt LDAP Server Setup LDAP Server Service Enable Disable _ server IP Port Identity manager Password Base DN mE ajem dd Account Attribute Save B Service By default it s Disable Enable to activate this function m Server IP Enter the IP address of the LDAP server Port Enter the Port of the LDAP server default port
145. uthentication with WPA WAP 2 and 802 111 B Local Accounts of 802 1X Authentication B Support RADIUS LDAP for AAA server B User Name and encryption key binding for strong network identity creation B Local User Data Base for AAA fail over protection Wireless Roaming Support B Inter AP roaming B Fast roaming B L2 roaming gt User Management Vv y VV v Support 500 simultaneous authentication users Max 5000 Pregenerated On Demand Local RADIUS authentication users Users Session Management Configurable user Black list with schedule Allows MAC address and user identity binding for local user authentication Authentication methods supported Pregenerated On Demand Local RADIUS LDAP and Remote RADIUS SSL protected login portal page Session idle timer Login Session idle time out setting Session and account expiration control User Log and traffic statistic notification via automatically email service Login time frame control session limit Real Time Online Users Traffic Statistic Reporting Support local account roaming gt WMS 308N Network Access Gateway Controller User s Manual seamless Mobility User centric networking manages wired and wireless users as they roam between ports or wireless APs gt Service Domain gt gt V A Integrating with WAP 854NP WAP 954GP and other future PheeNet products to have Service Domain feature and each Service Domain can have it
146. value is 10240 KBps Specify desired transmit bandwidth for wireless clients limitation in the same group of each managed AP The wireless clients unable connect to managed AP when bandwidth of transmit achieve limitation Group MAX Service Clients Enter maximum number of clients to a desired number in the range of 0 256 The default value is 32 For example while the number of client is set to 32 only 32 clients are allowed to connect with each managed AP in the same group B MAC Filter Control By default it s Disable To Enable to activate MAC filter control in the same group APs the switch will automatically assign block MAC address of the wireless clients for group managed APs after the Auto Download Profile Interval Please see section 4 3 2 B Group List Display created group in the list gt gt gt gt Group Name Display name of the respective group Description Display description of the respective group Background Indicate an used photo of the respective group MAC Filter Indicate an used MAC filter of the respective group Click link to configure MAC Filter of the respective group the the respective Group MAC Filter Setup page will appear The each group managed APs use the same MAC filter setting AP Group Setup Management gt Group MAC Filter Setup z MAE F MAC Address Delati J MAC Delete Action Select the desired access control type
147. will enable Ping Watchdog Tool IP Address To Ping specify an IP address of the target host which will be monitored by Ping Watchdog Tool 40 WMS 308N Network Access Gateway Controller User s Manual gt Ping Interval specify time interval in seconds between the ICMP echo requests are sent by the Ping Watchdog Tool Default is 300 seconds gt Startup Delay specify initial time delay in seconds until first ICMP echo requests are sent by the Ping Watchdog Tool The value of Startup Delay should be at least 60 seconds as the network interface and wireless connection initialization takes considerable amount of time if the device is rebooted Default is 300 seconds gt Failure Count To Reboot specify the number of ICMP echo response replies If the specified number of ICMP echo response packets is not received continuously the Ping Watchdog Tool will reboot the device Change these settings as described here and click Save button to save your changes Click Reboot button to activate your changes Without a valid certificate users may encounter the following problem in IE8 when they try to access WMS 308N s GUI https 192 168 2 254 There will be a Certificate Error because the browser treats WMS 308N as an illegal website 7 Certificate Error Navigation Blocked Windows Internet Explorer mm Oe j JE 192 168 2 254 v Fille Edit View Favorites Tools
148. xport button the ticket databases FilelD passcode bin will be download from system Below depicts an example for exporting tickets database v Export TXT File Download you want to save this find a program online to open it Mame passcode _00001 bin Type Unknown File Type From 192 158 1 254 harm your computer IF do nat trust the source do not find ig 2 While files from the Internet be useful some files can potentially program to open this file or save this whats the risk Export Tickets Export Mode Export BIN Export TXT Printable Generate Format XML CSV TXT Generate There are three type of file list XML CSV and TXT only Passcode Click Generate button the passcode list of ticket databases will be download from system v Printable The selected ticket databases can be previewed on the screen Click Print button the tickets will be shown including the information of Passcode Price Start Time End Time and Available SSID on the screen Administrator can print tickets on the screen for customer Export Tickets Export Made Export BIN Export TXT 9 Printable 58 WMS 308N Network Access Gateway Controller Below depicts an example for printable tickets Passeodie Paaseade 28510134 Prede LOXG2UZW Price 1030150 Price 10101750 Price 1000 USD mri Eimer 20112 032 05 1700 00 Start Time 201101 06 1

Network Access Control Gateway / Controller

Contents

Download Pdf Manuals

Related Search

Related Contents