Home

MAP Web Manual

1. lt lt LOGIN gt ERROR lt LOGIN gt lt REQUESTED_URL gt Original Requested URL lt REQUESTED_URL gt lt SERVER_NAME gt Access Point Hostname lt SERVER_NAME gt USER LOGINNAME login name lt USER_LOGINNAME gt USER AUTH MSG radius reply message lt USER_AUTH_MSG gt gt lt body gt LOGIN DENIED lt body gt lt html gt 2 3 19 1 5 Certificates and hostname The Access Point will use the subject CN field in the installed certificates as its default hostname provided the CN field contains a valid hostname only a zA Z character is allowed AP returns the hostname as GATEWAY LOGIN URL by default External server could use the EXT_IP or using the REMOTE ADDR variable from the HTTP server to obtain the AP IP address if the hostname is not a known to the server 2 3 20 Configuration gt Login Setup gt Radius Remote Authentication Dial In User Service RADIUS is a client server protocol and software that enables remote access servers to communicate with a central server to authenticate dial in users and authorize their access to the requested system or service RADIUS allows a company to maintain user profiles in a central database that all remote servers can share It provides better security allowing a company to set up a policy that can be applied at a single administered network point Having a central service also means that it s easier to track usage for billing and for keeping network statist
2. Add button to add new rules e Click Edit button to edit the selected rule Page 32 of 80 MAP 2000 MAP 2000R Management Manual eaunnuaarins 2 ls NOT TP HM COs LL ss pe Ca Firewall Rules Rule number Network Nemask I Destination Host Subnet Network I Netmask Interface Incoming Amy Outgoing Ary Protocol G Any OTCP pon Any or ports from OLDP port Any OICMP type ev OGRE OByNumber Limits Traffic ortype amp More than packet per minute Firewall Rules Parameters Rule Number o To specify the rule number of this entry Source O Host ler ports frome Rev 1 0 Page 33 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 To specify the hostname in FQDN form or IP address as the source address o Subnet Network e To specify the network IP address as the source address e Example 192 168 5 0 Netmask e To specify the network mask e Example 255 255 255 0 e Destination o Host To specify the hostname in FQDN form or IP address as the source address o Subnet Network e To specify the network IP address as the destination address e Example 192 168 1 5 Netmask e To specify the network mask e Example 255 255 255 255 e Source Interface o To specify the interface as the source interface
3. AuthenticationReply gt lt WISPAccessGatewayParam gt gt lt lt LOGIN gt ERROR lt LOGIN gt lt USER_STATUS_URL gt Access Point Internal url to check user status lt USER_STATUS_URL gt lt USER_IP gt client IP address lt USER_IP gt USER MAC client machine MAC address lt USER_MAC gt USER LOGINNAME ogin name lt USER_LOGINNAME gt USER AUTH MODEsauthentication mode USER AUTH MODE USER AUTH MSG adius reply message lt USER_AUTH_MSG gt USER IDLE TIMEOUT user idle timeout USER IDLE TIMEOUT USER SESSION TIMEOUT user session timeout USER SESSION TIMEOUT USER CUSTOM adius custom reply attributesc USER CUSTOM LOGIN DNS KEYWORDS ans shortcut to the access point logout urlcK LOGIN DNS KEYWORDS gt lt body gt ALREADY LOGGED IN lt body gt lt html gt Page 48 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 19 1 4 3 Login Denied HTML lt lt xml version 1 0 encoding UTF 8 gt WISPAccessGatewayParam xmlns xsi http www w3 org 2001 XMLSchema instance xsi noNamespaceSchemaLocation http www acmeWisp com W ISPAccessGatewayParam xsd gt lt AuthenticationReply gt lt MessageType gt 120 lt MessageType gt lt ResponseCode gt 100 lt ResponseCode gt lt ReplyMessage gt radius reply message lt ReplyMessage gt lt AuthenticationReply gt lt WISPAccessGatewayParam gt gt
4. MAP 2000R Management Manual Rev 1 0 o To specific the firewall rules and settings to protect the WAN port e NAT o To specific the Network Address Translation NAT rule and let user to define static routes to make computers on the internal network LAN WLAN visible to external computers e VPN Server o To configure VPN server to make remote management available with enhanced security e NTP Client o To synchronize to the specified NIP Network Time Protocol server and let NTP server to control system time e Hemote Syslog o To track and log system messages to a remote syslog server e QoS o To prioritize packet based on TCP port size of packet e Traffic Shaping o To configure the upload and download bandwidth of the users e Mobile IP o To configure mobile IP for the current nodes o System Mgmt e o manage configurations and firmware file and control the administrator login password e Contains the following submenu e Password o To change the administrator login password e SNMP o To change the snmp password e Syslog Server o To configure the remote syslog parameter o Login Setup e Contains the following submenu e Login o To specific the login method e RADIUS o To define the RADIUS client settings that need to login to the external RADIUS server e Local Users Database o To define the local user accounts that allow to access e Customize e Webspace o Tools e Contains the following submenu e Ping e Download e Firmware Upd
5. before we redirected the request to our login server Table 7 Macros for Login_denied html mao BesWpim HSERVER_NAME IP address of the server REQUESTED URL The url the user requested before we redirected the request to our login server USER_AUTH MSG Reply Message attribute of the RADIUS server or english default values if not set See table 2 TRUSER STATUS URL URL of the status page This URL should be shown in a seperate window THINTERNAL WEBSPACE URL URL of the internal webspace which is THE htto SERVER_NAME HUSER_ IP IP address of the User HUSER_MAC MAC address of the user USER_LOGINNAME Loginname of the user HUSER AUTH MODE Authentication mode which has been used Can be either local for authentication via local user database or RADIUS for authentication via RADIUS USER_STARTPAGE The startpage which has been assigned by the RADIUS server using the login url attribute See table 2 USER_LANGUAGE Preferred language of the user as set by the RADIUS attribute login language See table 2 Page 58 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 USER IDLE TIMEOUT Idle timeout in seconds as set by the RADIUS attribute Idle Timeout See table 2 TRUSER SESSION TIMEOUTZ7 Session timeout in seconds as set by the RADIUS attribute Session Timeout See table 2 HUSER_ CUSTOM Full freely user customizable data which can be set by the RA
6. lt LOGIN gt SUCCESS lt LOGIN gt lt REQUESTED_URL gt Original Requested URL lt REQUESTED_URL gt lt SERVER_NAME gt Access Point Hostname lt SERVER_NAME gt lt INTERNAL_WEBSPACE_URL gt Access Point Internal Webspace URL lt INTERNAL_WEBSPACE_URL gt lt USER_STATUS_URL gt Access Point Internal url to check user status USER STATUS URL USER IP client IP address lt USER_IP gt USER MAC client machine MAC address USER MAC USER LOGINNAME ogin name lt USER_LOGINNAME gt USER AUTH MODEsauthentication mode USER AUTH MODE USER AUTH MSGe adius reply message lt USER_AUTH_MSG gt USER IDLE TIMEOUT user idle timeout USER IDLE TIMEOUT USER SESSION TIMEOUT user session timeout USER SESSION TIMEOUT USER CUSTOM adius custom reply attributesc USER CUSTOM LOGIN DNS KEYWORDS adns shortcut to the access point logout urlcK LOGIN DNS KEYWORDS gt lt body gt LOGIN SUCCESS lt body gt lt html gt 2 3 19 1 4 2 Already Logged In lt HTML gt lt lt xml version 1 0 encoding UTF 8 gt lt WISPAccessGatewayParam xmlns xsi http www w3 org 2001 XMLSchema instance xsi noNamespaceSchemaLocation http www acmeWisp com W ISPAccessGatewayParam xsd lt AuthenticationReply gt lt MessageType gt 120 lt MessageType gt lt ResponseCode gt 100 lt ResponseCode gt lt ReplyMessage gt radius reply message lt ReplyMessage gt lt
7. Extended Service Set Identifier data rates ESSID is the unique network name to identify the WLAN network The data rate specifies the maximum data transfer in the WLAN network Page 16 of 80 MAP 2000 MAP 2000R Management Manual Wireless LAN Devices TONFALL Please select device lo configure Device Radio 1 Wireless LAN Devices Parameters e Wireless LAN Devices o List down detected WLAN devices o WLAN devices are distinguished by MAC and Type o Select one of the device to configure the parameters adi J connavestion 1 Radio 1 Mesh Backhaul Radio System Settings Network AM MAC Address 00 06 66 4D 17 B4 rea aia Service Set ID SSID PLANETMeshNet PON Node to Node Role in Radio Network Mesh i Band Profile Auto e Security Data Rate Auto oum i Frequency Channel z E Firewall Enable Auto Channel Select r oewet Transmit Power MAX lel NTP LoS Traffic Shaping Mobile IP Receive Antenna Transmit Antenna Diversity i T Diversity l Rev 1 0 K Country Taiwan Apply System Mat Login Setup Toals COMM ANG Reboot Reset o Radio 1 Mesh Backhaul Radio Parameters e MAC Address o Display the MAC address of the devices e Service Set ID Page 17 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 o To specify the service set ID of the network o Default value PLANETMeshNet e Role in Radio Network o Display the role of ra
8. RADIUS server o Default value 1813 e Backup RADIUS Server o To specify the IP address of the secondary RADIUS server e Secret o To specify the login password of the secondary RADIUS server e Authentication Port o To specify the authentication port for the secondary RADIUS server e Accounting Port o To specify the accounting port for the secondary RADIUS server e Attributes e NAS ldentifier o To specify the Network Access Server NAS identifier for the MESH AP This ID attribute is included in all packets that send to RADIUS server e Called Station ld o To specify the MESH AP RADIUS client ID e NAS Port Page 50 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 o To specify the NAS port number for authentication e NAS Port Type o To specify the type of NAS port e Interim Update interval o To specify the interval of updates to RADIUS server 2 3 21 Configuration gt Login Setup gt Local Users Database Local Users Database List of Users Username Actions e Delete Change Passwort Add new User Local Users Database e List of Users o To display current local users o Click Delete to remove a local account o Click Change Password to change the password of that account e Add new User mmm Local Users Database Add new User Usemame z Password Password repeat Page 51 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Username o To specify the new local user logi
9. Rev 1 0 Add Language Mow Language Default Language Login Language T If nol supplied by lhe RADIUS lt _ Eiahorgd Customizable login Parameters e Existing Files o To display the available current language and customized pages of MESH AP o Common Contains the customized language independent web page such as login html amp login denied html Click the link to access the common folder o English Contain the language dependent webpage such as login success html amp logout html Click the link to access the language folder e Upload Files o To upload the customized web pages to the MESH AP e Add Language o To add in a new language o Enter the language name and click the Add button e Default Language o The default language is preset to English Common Option F EMET Customizable Login Existing files Directory MangiCommen File Description Actions back Parent Directory Login cgi This script outputs Login html Login hirni LIser file Delete eS Log denied cg This script outputs Login demed html Login denied html User file Delete Delete Images Directory for language images Page 53 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Trafic Shaping Upload File Mbsbil amp IF oy ste mi Mgt Filename ee Password _ Upload SMHME if lng eu a M Add Language agin Setup Login Parameters RADIUS h Language Local Users Dalaba WebSpace Default Languag
10. e QoS list parameters o Protocol To specify the protocol of this entry o Port To specify the port of this entry o Packet size To specify the size of the packet of this entry o Priority To prioritize this entry o Comment To specify optional comment on this entry o Status Enable or disable this entry Rev 1 0 Status Page 40 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 15 Configuration gt Local Services Traffic Shaping This submenu defines the parameters of the traffic shaping within MESH AP Traffic is very important to limit certain user not to use more than assigned bandwidth QoS Parameters e Enable QoS o To enable or disable the QoS service e Default Upload o To specify the default upload bandwidth in kbps per user basis o Example 256 e Default Download o To specify the default download bandwidth in kbps per user basis o Example 256 e Click Apply to save configuration changed Page 41 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 16 Configuration gt System Management gt Password This submenu allows user to change the administrator login password s ETT Password Change Webbased Configuration Password New Password New Password repeat Apply ja DEH Password Parameters e New Password o To specify the new web based configuration password e New Password o To specify the entered new password again for verification purpose e Click Apply
11. from Malaysia Google Search Q There are over 100 themes and extensions available at update mozilla orq to make Firefox even better Firefox Help amp Add ons About Mozilla CDs amp Merchandise Get Involved Step 6 User Logout e Once User is done accessing the Internet or the remote Corporate Network the Session Page is used to Logout e A simple Click on the Logout button e For Pocket PC System just type in Logout e Logout can also happen under control of the Wireless Operator or when the time credit on prepaid system is expired Page 79 of 80 MAP 2000 MAP 2000R Management Manual Rev 1 0 Page 80 of 80
12. o Option Any WLAN LAN WAN LINK e Destination Interface o To specify the interface as the destination interface o Option Any WLAN LAN WAN LINK e Protocol o To specify the protocol of the rule to check o Option Any e Rules apply to any protocol TCP e Rules apply to TCP protocol e Specify an unique port or a range of port numbers UDP e Rules apply to UDP protocol e Specify an unique port or a range of port numbers ICMP e Rules apply to ICMP protocol e Specify the ICMP type GRE e Rules apply to GRE protocol By number Rules apply to specified port number such as ICQ defined port e Limits traffic o Matching rule to limit the traffic for certain application o More than packet per minute o Example Rule 5 packet per minute and allow FTP packets This means this rule is applied only when the number 6 FTP packet is received for that minute e Target o Tosetthe policy to the target rule o Option Deny Accept Free Deny To reject the packet that match the rule Page 34 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Accept To accept the packet that match the rule Free To provide the free access to that particular rule e Comments o To specify the comments of the rule e Status o Enable or disable this rule Page 35 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 11 Configuration gt Local Services gt NAT NAT Network Address Translation is the translation of an Internet Protoc
13. of secondary domain name server o Example 202 188 1 5 e DNS Client Default Domain Name o Specify the domain name of the MESH AP o Default value PLANET Page 15 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Click APPLY to save the configuration changed 2 3 3 Configuration gt Network gt Local Network This submenu defines the IP configuration of bridge interface MESH AP acts a bridge between wired LAN and wireless LAN The LAN port interface shares the same IP address range with the wireless LAN interfaces A static IP address is required on this port because MESH AP cannot function as a DHCP client on its LAN port interface The LAN port for model MAP 2000R and MAP 2100 is used to connect the wired computers to the public access network via the LAN port interface Be reminded for MAP 2000 the local network setting is for Wireless AP serviced network subnet only Local Network E unn uiam IE Address 172 16 Jz 1 amp ubnet Mask 255 55 255 i Analy Local Network Parameters e P Address o To specify the IP address on the bridge interface o Example 172 16 1 1 e Subnet Mask o To specify the network mask o Example 255 255 255 0 e Click Apply to save the configuration changed 2 3 4 Configuration gt Network gt WLAN This submenu defines the configurations to the two wireless LAN interfaces embedded in the MESH AP The WLAN LAN devices settings include the WLAN network settings such as ESSID
14. or disable enhanced traffic encryption e 128bit AES Encryption Key o To specify the 128bit AES encryption key in HEX value 0 9 A F o Example 1234567890abcdef0123456789fedcba e Click Apply to save configuration changed e Click Node MAC Filtering to trigger the screen shot as below to set a list of MAC address that needed to be blocked from the current network Node MAC Address Filter MAC Comment Status Page 20 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Node MAC Address Filter MAC Address WAP l Commet Status Enable Appi back e Node MAC filter parameter o MAC Address To specify the MAC address to be filtered out from the network o Comment To specify comments about the entry o Status To enable or disable the current entry Page 21 of 80 MAP 2000 MAP 2000R Management Manual 2 3 6 Configuration gt Network gt Route Rev 1 0 This submenu defines the static route to direct the traffic to the appropriate destination LJ GursrinumaTeuss Static Routing Enable Static Routing CI Apply Routing Table Subnet Subnet Mask Using Gateway Static Routing Parameters Enable Static Routing o To enable or disable the static routing option Routing Table o Tolist the current routing table Click Apply to save configuration changed Click Add to add new rule to the Routing Table Click Edit to edit the selected rule Device Comment Status Pag
15. round robin basis NAT NL Brera Tears Enable HAT F Apply NAT Table Add edi Fort Frotocol IF Comment Status NAT Parameters e Enable NAT o To enable or disable the NAT service e NAT Table o Alist of existing NAT rules e Click Apply to save configuration changed e Click Add to add new entry to the NAT table Page 36 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Click Edit to edit selected entry NAT List LI CONFHEILMATIM Forward Pot Protocol TCP w i L IF Comment latus Enable w Apply back NAT List Parameters Port o To specify the port of the entry o Example 23 telnet Protocol o To specify the protocol of the entry o Option TCP UDP IP o To specify the IP of the entry o Example 192 168 1 25 Comment o To specify optional comment for this entry otatus o Enable or disable this entry Example Forward port 23 telnet traffic to host 192 168 1 25 by entering 23 to port tcp protocol and 192 168 1 25 to the IP Click Apply to save the configuration changed Page 37 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 12 Configuration gt Local Services gt VPN Server This submenu defines the configurations of built in virtual private network VPN connection from a remote network The traffic in the VPN tunnels is encrypted and protected against eavesdropping Authentication and management traffic can be protected through the PPTP tunne
16. 3 20 Configuration gt Login Setup gt Radius 2 3 21 Configuration gt Login Setup gt Local Users Database 2 3 22 Configuration gt Login Setup gt Customize 2 3 23 Configuration gt Login Setup gt Webspace 2 3 24 Configuration gt Tools gt Ping 2 3 25 Configuration gt Tools gt Download 2 3 26 Configuration gt Tools gt Firmware Update 2 3 27 Configuration gt Tools gt Settings Command Menu 2 4 1 Command gt Reboot 2 4 2 Command gt Reset Info Menu 2 5 1 Info gt Status gt System 2 5 2 Info gt Status gt Interfaces 2 5 3 Info gt Status gt Services 2 5 4 Info gt Status gt Users 2 5 5 Info gt Status gt Mobile IP 2 5 6 Info gt Topology 2 5 Info 5Route 2 5 8 Info gt Syslog Links 3 Logging in through MESH AP Step 1 User Starts WEB Browser Rev 1 0 Page 2 of 80 MAP 2000 MAP 2000R Management Manual Step 2 Login Page Presented to User Step 3 User Supplies Credentials Step 4 User Login Success Step 5 Display the Request Home Page otep 6 User Logout Rev 1 0 Page 3 of 80 11 78 78 78 79 MA P 2000 MAP 2000R Management Manual Rev 1 0 1 Introduction PLANET Mesh Network features with a Web based configuration interface management tool It provides an easy access to all configuration functions Any computer either wired or wireless that establishes a valid connection with the MESH AP can access the web based configuration through a web browser For the first time configuration the
17. DIUS attribute login custom See table 2 Table 8 Macros for Login_success html mo een HUSER AUTH MODE Authentication mode which has been used Can be either local for authentication via local user database or RADIUS for authentication via RADIUS USER_STARTPAGE The startpage which has been assigned by the RADIUS server using the login url attribute See table 2 USER_LANGUAGE Preferred language of the user as set by the RADIUS attribute login language See table 2 USER_ IDLE TIMEOUT Idle timeout in seconds as set by the RADIUS attribute Idle Timeout See table 2 TRUSER SESSION TIMEOUTZz Session timeout in seconds as set by the RADIUS attribute Session Timeout See table 2 HUSER_ CUSTOM Full freely user customizable data which can be set by the RADIUS attribute login custom See table 2 Table 9 Macros for Logout html Additionally each page has the attribute HELP which enumerates the available attributes Page 59 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 23 Configuration gt Login Setup gt Webspace Choosing the default page which is displayed after a successful login can be useful to provide user some local information like the menu of a restaurant At some sites like this restaurant there can t be assumed to be a network infrastructure besides the WAN connection This is maybe also no web server in the Internet to display the menu page To serve these
18. MA P 2000 MAP 2000R Management Manual Rev 1 0 PLANET Mesh Network MAP 2000 MAP 2000R MAP 2100 Web Based Management amp User Manual Rev 1 0 Page 1 of 80 MAP 2000 MAP 2000R Management Manual Table of Content 1 Introduction 2 Web based management 2 1 2 2 2 3 2 4 2 5 2 6 To start the Web based configuration Web based configuration menu overview 2 2 1 Configuration Menu 2 2 2 Command Menu 2 2 3 Info 11 2 2 4 Links Menu Configuration Menu 2 3 1 Configuration gt System Settings 2 3 2 Configuration gt Network gt WAN 2 3 3 Configuration gt Network gt Local Network 2 3 4 Configuration gt Network gt WLAN 2 3 5 Configuration gt Network gt Node to Node 2 3 6 Configuration gt Network gt Route 2 3 7 Configuration gt Security gt MAC Filter 2 3 8 Configuration gt Security gt Authentication 2 3 9 Configuration gt Local Services gt DHCP Server 2 3 10 Configuration gt Local Services gt Firewall 2 3 11 Configuration gt Local Services gt NAT 2 3 12 Configuration gt Local Services gt VPN Server 2 3 13 Configuration gt Local Services gt NTP Client 2 3 14 Configuration gt Local Services gt QoS 2 3 15 Configuration gt Local Services gt Traffic Shaping 2 3 16 Configuration gt System Management gt Password 2 3 17 Configuration gt System Management gt SNMP 2 3 18 Configuration gt System Management gt Remote Syslog 2 3 19 Configuration gt Login Setup gt Login Parameters 2
19. MAP 2000R Management Manual Rev 1 0 o From Mesh To allow access from mesh network e SNMP Trap o Enable SNMP Trap Enable or disable the SNMP trap o Trap Community To specify community for the SNMP trap o Destination To specify the destination of the trap o Authentication failures Enable or disable if authentication failures e Click Apply to save configuration changed 2 3 18 Configuration gt System Management gt Remote Syslog The capability of remote logging is critical to the functionality of the MESH AP With remote logging remote syslog server can monitor all traffic coming through the firewall any system changes and even system information from the MESH AP The remote system logger review the log files from the MESH AP and decide what to do when specific events occur Remote Syslog sas Disabled Remote Server Host to send sysing leave empty to disable save L onhg j Uso Dieu Remote Syslog Parameters e Remote Server o To specify the IP address of the remote syslog server e Click Save Config to save configuration changed 2 3 19 Configuration gt Login Setup gt Login Parameters This submenu contains the login parameters to the external RADIUS server connection Page 44 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 E Login Parameters Traffic Shaping M alii Ip Require User Login F system Mgl Enable Zeroconfig F SNMP Sy or ENE Link Alert To Users anaes Enable Link Al
20. MESH AP can be configured with a wireless computer equipped with wireless LAN adapter or a PC equipped with wired Ethernet card and crossover Ethernet cable to the MESH AP s Ethernet port For more detail please also refer to the Quick Guide e For the wireless computer that equipped with 802 11b g wireless LAN adapter the following settings are required to ensure a successfully connection to the MESH AP o ESSID PLANET o WEP disabled o TCP IP installed and enable DHCP Dynamic IP e For the computer that equipped with wired Ethernet card and crossover cable to the MESH AP s LAN port o TCP IP installed and enable DHCP e The preset MESH AP administrator login user ID and password is admin After the first time configuration the MESH AP can be managed either locally or remotely For local management computer can connect to the MESH AP by wireless interfaces to MESH AP wireless interface or wired LAN interface with crossover cable to MESH AP LAN port For remote management a VPN connection to MESH AP via the Internet can manage the MESH AP remotely The following are all MESH AP default settings e Configuration o System System e Node Name PLANET e Contact Name e Contact Phone e Contact Email e Object ID 1 3 6 1 4 1 10456 6 3 1 0 o Network WAN e Interface Type DHCPC Network e Enable DNS Client enabled e DNS Client Default Domain Name PLANET Bridge e P Address assigned automatically e Netmask a
21. P provides an option that allows administrator to redirect users to a remote server to log in to the public access interface instead of using the internal login page The advantages of using the external login server are listed as follow e The login page is completely customizable and centralized located at the web server e Users can login to the public access interface without exposing their web browsers to the SSL certificate on the MESH AP Warning messages caused by having an SSL certificate on the MESH AP that is not signed by a well known certificate authority is eliminated e Only a single SSL certificate signed by a well known certificate authority is required for the remote web server There is no need to obtain the SSL certificate for every MESH AP External Login could be used for example to deploy a centralized login portal Following diagram shows the sequence of the login process when a client start access internet using MESH AP Access Point External Login Process Client Station Hotspot Access Point RADIUS Server External Web Server Non authenticated L Request Redirect HTTP request ee lt Login Page is Sent Username amp m D Law Password Sent Radius Authentication and Accounting Request L Login Accepted 4 m Rejected Login Results 41 LL returned Return Login Results in defined template format Figure External Login Proc
22. ameters Page 66 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Reset to Factory Default o Torestore the default factory configuration e Click Reset to Factory Default to restore to default factory setting 2 5 Info Menu This menu allows the administrator to check the current status of various MESH AP components such as system interfaces It also helps to provide diagnostic tools to investigate the MESH AP behaviors Info menu consists of two submenus which known as status tools and topology The following section will discuss each submenu in details Page 67 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 5 1 Info gt Status gt System The status menu displays the information of system interfaces services and existing login users details System Uptime Time since last boot O days 16 hrs 11 minutes Hardware Salftest Ok CPU CPU Speed 127 79 Pec CEU gg Average CPU usage 195 9 Last two seconds Memory Free RAM 158437474 Ina Free Flash Memory 875138 byte Firmware Release Version planet 1 0 58 iara m m oystem Parameters e Uptime o Display the uptime in days hours minutes o Example Time since last boot 0 days 0 hrs 34 minutes e Hardware o Display the MESH AP self test after boot o Value OK means self test passed e CPU o To display the MESH AP MPC 8241 Processor status o CPU Speed Display the MCP 8241 CPU speed o Average CPU usage Since boot Di
23. ate e Settings Page 10 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 2 2 Command Menu e This menu allows the administrators to do certain commands such as download reboot reset and help links e Comprise of two different submenu o Reboot e To reboot the MESH AP o Reset e To restore the default factory setting of MESH AP 2 2 3 Info e his menu allows the administrator to view the current status of different components of the MESH AP And to provide diagnostic tools to investigate the MESH AP behaviors e Comprise of three different submenu o Status e To show the current status of different component of MESH AP e Contains the following submenu e System o To show the current system uptime CPU and memory status e Interfaces o To show the information of WAN LAN and WAN physical interfaces e Services o To show the current status of various services available on the MESH AP e Users o To show the list of online users and their detail information that had login to the MESH AP successfully o Topology e To provide a simple topology overview of the mesh network o Route e Display the information of routing table inside the system o Syslog e Display the log messages from the system 2 2 4 Links Menu e This menu provides the HTML links to the MESH AP main webpage and PLANET homepage Page 11 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 Configuration Menu This section explains the detailed se
24. ay IP Address o To specify the default gateway for routing o Example 172 9 100 1 e Primary DNS IP Address o To specify DNS server to be used o Example 172 9 100 1 e Secondary DNS IP Address o To specify secondary DNS server to be used e DHCP Domain o To specify the domain name for the DHCP clients o Example PLANET e IP Pool Table o Alist of tables that display the IP assignment Page 30 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 adi J cor DHCP IP Pool System Settings Network WAN Stat IP Address 172 9 100 2 Local Network ER EndlP Address 172 8 100 254 je UE Default Lease 86400 Foute Maximum Lease 66400 Security Local Service Comment AutolP 2h DHCP Server Status Enable nal Firewall nx MAT xml xxx VPN Server Apply Delete M TP h ea C Le LoS Traffic Shaping Mobile IP System Mat Login Setup Tools amem Reboot Reset e DHCP IP Pool Parameters e Start IP Address o To specify the start IP of the IP pool table o Example 172 9 100 2 e End IP Address o To specify the end IP of the IP pool table o Example 172 9 100 254 e Default Lease o To specify the lease time to be assigned to the client stations o Example 3600 e Maximum Lease o To specify the maximum least time to be assigned to the client stations o Example 86400 e Comment o To specify the comments of the current entry of the table e Status o To enable or disable the current
25. ble information which can be send to by the RADIUS An example for the usage can be to provide account information local news etc It is also possible to pass multiple arguments in one string and separate them using Java script The Attribute type is 200 and it is accessible via the macro USER_CUSTOM Table 2 Attributes accepted from the RADIUS during Login authentication Acct Status Type Value Start Indicates start of Session to the RADIUS Table 3 Attributes send to the RADIUS during Login accounting none Table 4 Attributes accepted from the RADIUS during Login accounting RADIUS Attribute Description Acct Status Type Value Stop Indicates stop of session Acct Input Octets The number of bytes received by the user Acct Output Octets The number of bytes transmitted by the user Acct Input Packets The number of packets received by the user Acct Output Packets The number of packets transmitted by the user Acct Session Time The time in seconds from logging in until the last time a transmission was detected Table 5 Attributes accepted from the RADIUS during Logout accounting e Customizable Login The login page can be customized to serve the customers requirements The customer can upload his own web design to the hotspot AP Page 56 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Fixed System file Figure 6 3 Login Sequence Figure above shows the login seque
26. customers it is possible to store a simple page locally in the MESH AP MESH AP provides up to 1MB of space for administrator to store some local information This submenu allows administrator to manage the local information to be display after successful login of the MESH AP locally Webspace Existing files File Actions index hmi Delete Upload File Filename Browsa Upload Webspace parameter e Existing files o To display the existing webpages for local information o Click Delete to remove the selected webpage e Upload File o To upload a new webpage for local information o Click Browse button to select the file to be uploaded o Click Upload button to upload the selected file 2 3 24 Configuration gt Tools gt Ping Ping sends ICMP request messages to the network host The connectivity between the network host and MESH AP is proven working when an ICMP respond message from the network host Page 60 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Ping Command Ping 025718663 Number of pings 2 Output Ping Parameters e Ping o To specify the host IP address to ping o Example 202 157 186 63 e Number of pings o To specify number of count to send the ping command o Example 2 e Click Start button to start the Ping command e Output o Display the Ping command result Page 61 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 25 Config
27. detailed interface information Interface LAN J Information Login Setup Hardware Address 00 30 4F 4E OS 6F ved tum IP Address Ping Beast Address Download Firmware Update Netmask Settings MTU Size g C CHM i A FLOS MESES MITU 1500 Reboot Reset Data transfer ERA bytes 0 0 0 b TX bytes 070 0 b Status Tm Data packets oy STEM Interfaces Services EX packets 0 Vui RX errors Mobile IP rM S I TN Interface Parameters e Information o Hardware Address Display the interface MAC address o IP address Display the interface IP address o Bcast address Display the interface Broadcast address o Netmask Display the interface Netmask e MTU Size o MTU Page 70 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Display the interface Maximum Transfer Unit e Data Transfer o Rx bytes Display the received bytes on the interface o Tx bytes Display the transmitted bytes on the interface e Data Packet o Rx packets Display the received packets o Rx errors Display the received error packets o Rx dropped Display the received dropped packets o Tx packets Display the transmitted packets o Tx errors Display the transmitted error packets o Tx dropped Display the transmitted dropped packets 2 5 3 Info gt Status gt Services ath Services Parameters e Status o Display current status of various service configured and running Services Statu
28. dio e Data Rate Profile o To configure the date rate of this device e Frequency Channel o To configure the channel of this device o Default value 7 e Enable Auto Channel Select o To enable the auto channel selection mechanism o Default value disabled e Transmit Power o To specify the transmit power o Default value MAX e Receive Antenna o To specify the diversity of the antenna o Default value diversity e Transmit Antenna o To specify the diversity of the antenna o Default value diversity e Country o To specify the regulatory domain of the radio Note This value also will apply to Radio 2 e Click Apply to save configuration changed a CONFMOUJRATION Radio 2 Access Point Radio System Settings Network MAN MAC Address OU OB GE AD 14 82 QI NUS Service Set ID SSID PLANET Node to Node Enable Broadcast SSID Route Role in Radio Network Access Point Security Band Profile Auto La C al Servi ce Data Pate Auto DHCP Server Firewall Frequency Channel 36 pl mm Enable Auto Channel Select w alls Transmit Power MAX tunt Shaping Receive Antenna Diversity Mobile IP P d Transmit Antenna Diversity System Mat in Login Setup eeu Ta C Repoot Reset aa o Wireless Interface Radio 2 Parameters e MAC Address o Display the MAC address of the devices e Service Set ID o To specify the service set ID of the network Page 18 of 80 MA P 2000 MAP 2000R Management Manual R
29. e Login Language Lei change e Existing files o Show the existing common folder web pages o To upload a new customized page click Delete button to remove the existing customized page and upload the new file Click back to link back to customizable login main page e Upload Files o To upload the customized web pages to the MESH AP e Add Language o To add ina new language o Enter the language name and click the Add button e Default Language o The default language is preset to English Language Option e g English DHCP Seared Few Customizable Login Existing files Trafic Shaipi motile IP Directory flangfEnglish eet File Description SNMP back Parent Directory Syne e 3 OTI Login success cgi This script outputs Login success himi Login Setup Login success hirni User file L cin F arame bar amp i RADIUS Local Users Database Logo gif User filie LIE aal F Logout cgi This script outputs Logout html Logout html User file Sessionstatus fin User file D Comm ARD FEE EE d Statuskeload hir User file Page 54 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Upload File Filename Browsa Upload Add Language MewLanguage Add Default Language Login Language Engish E j ia A E fi connano If not supplied by ihe RADIUS Leu Change i e Language Common Folder Parameters e Existing files o Show th
30. e Please select a new fash image Firmware Update Parameters e Click Browse button to browse to the location of new firmware and select that file e Example a firmware img e Click Upload button to upload the new firmware to MESH AP During the process the services will shutdown After the firmware upgrade the MESH AP will reboot To know when will be process completed simply set the MESH AP back to default before upgrade and ping the default IP address of the MESH AP Once the reboot process completed then the MESH AP will reply the ping Page 63 of 80 MAP 2000 MAP 2000R Management Manual Rev 1 0 2 3 27 Configuration gt Tools gt Settings a Configuration Save Config Click one of the links below to save the conhiguration Image Description glaoinercfg Complete configuration that can ba restored later Restore Config Please select the configuration to upload Filename algelnet cfa Upload Install New Webserver Certificate Upload Certificate AE Upload certificate as PKCS 12 file Extension pi2 Drawse Upioea The PKCS 12 file must contain Public key Private key Access Control From LANAWLAN Interface e Allowed From WAN Interface F Allowed From Backbone Interface E Allowed From VEN Interface E Allowed From Network O Allowed Subnet Netmask Save Cong Use Delou Configuration Parameters e Save Config o Save the con
31. e 22 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 This Static routing rules will be available after either Add or Edit button is pressed I commaumercnes Static Routing Entry Subnet M tmask Galowy ODevca WAN v Comment Status Enable w Analy o Static Routing Rules Parameters Subnet o To specify the IP subnet to be routed o Example 192 168 2 0 Netmask o To specify the network mask value of the IP subnet o Example 255 255 255 0 Gateway o To specify the gateway for the specified route o Example 192 168 1 1 Device o To specify the interfaces for the specified route o Example WAN Route Using o To specify the route using device or gateway o Example Gateway Comment o To specify the comment for the specified route otatus o To enable or disable the specified route Click Apply to save the configuration Click back to go back to Configuration 2Network Route 2 3 7 Configuration gt Security gt MAC Filter This submenu enable the MESH AP to control the access from the client based on the MAC address Page 23 of 80 MAP 2000 MAP 2000R Management Manual Rev 1 0 T MAC Access D E Es FH LIN AT S Enable MAC Access Control C i Operation Type ne Sii Apply MAC Access Control Tabla E MAC Address Comment Status MAC Access Parameters e Enable MAC Access Control o To enable or disable MAC access control e Operation Type o To specify the type of operation of the cont
32. e existing common folder web pages o To upload a new customized page click Delete button to remove the existing customized page and upload the new file e Click back to link back to customizable login main page e Upload Files o To upload the customized web pages to the MESH AP e Add Language o To addin a new language o Enter the language name and click the Add button e Default Language o The default language is preset to English Description of RADIUS Client Several parameters are transmitted from and to the RADIUS Server to allow centralized logging and configuration on a per user base The following data is exchanged with the RADIUS Attributes starting with PLANET are vendor attributes with the vendor ID 22222 ID will change Table 1 Attributes send to the RADIUS during Login authentication Reply Message Message to display to the user Can be accessed by the login macro USER AUTH MSG Idle Timeout Idle timeout in seconds Session Timeout Session timeout in seconds login language Preferred language of the user Attribute type 1 Accessible by the macro USER_LANGUAGE The string can contain only the characters a zA Z0 9 Page 55 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 RADIUS Attribute Description login url The URL the user should be redirected after successful login Attribute type 2 Accessible by the macro TRUSER STARTPAGETHR login custom Full freely cusumiza
33. ead Write Password snmpv3rwuser SNMPv3 Secret Password snmpv3password e SNMPv3 Secret Passphrase snmpv3passphrase Remote Syslog e Mode Disabled o Login Setup Login e Require User Login enabled e Idle timeout 300 e Login method http and https Radius e NAS Identifier PLANET Called Station ID PLANET NAS Port 1 NAS Port Type 19 Primary authentication port 1812 Primary accounting port 1813 Secondary authentication port 1812 Secondary accounting port 1813 e Interim Update Interval 180 Local Users e No users enrolled Page 6 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 Web based management 2 1 To start the Web based configuration a Start the web browser b Enter https IP Address of the MESH AP in the address box make sure HTTPS but not HTTP C Accept the security certificate and click Yes to proceed Security Alerk a xj Information you exchange with this site cannot be viewed or changed by others However there i a problem with the site s security certificate is The security certificate was issued by a company you have nat chosen to trust View the certificate to determine whether you want to trust the certifying authority e The security certificate date is valid The name on the security certificate is invalid or does nat match the name af the site Do vau want to proceed es View Certificate d The Web based configuration login page opens after
34. entry of the table JA DHCP Fixed Addresses Fixthis Hardware address T T T Ta this IF Commer ooo Status Enabie E E e DHCP Fixed Addresses Parameters o Fix this Hardware address Page 31 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Fix the Hardware address to a fixed IP o Tothis IP Fix the Hardware address to this IP o Comment Optional comments for this entry o Status Enable or disable this entry 2 3 10 Configuration gt Local Services Firewall To safeguard MESH AP from any intruders MESH AP features a customizable firewall The firewall stops and blocks any unauthorized user access from the WAN port It used to control both incoming and outgoing data To customize the firewall the rules need to be specified MESH AP monitors the IP datagram that travel in and out analyzes the packet based on the firewall rules and decides whether to accept or deny that packet Firewall rules apply to both wired and wireless LAN network interfaces P Firewall Lr E Bir EB LIB A TELS Enable Firewall C Default Policy amp ccapt Apply Existing Firewall Rules Source Destination In Out Protocol Limit Target Comment Status Firewall Parameters e Enable Firewall o To enable or disable the firewall e Default Policy o Set the default policy for the firewall rule o Select Option Accept or Deny o Default value Accept e Existing Rules o Display the current firewall rules Click
35. ert id Cui SEMIS Change WLAN1 ESSID To Service TempUnavailable Local Ueers Database Update Interval 100 c ugtamize Click Configure Details and Apply for more configurable parameters as below User Login Parameters I td dhe Enable POP push Enable Inter Hotspot Authentication APP Redirect User To Fiease specify the extemal login server LIRL leave empty to disable Timeouts O 5 Idie Timeout M0 seconds Auto Rielogin after idle logout Session Timeout Login Method seconds HTTPS E Allowed Pom 24558 HTTP E Allowed pack Login Parameters e Require User Login o To enable or disable the MESH AP Login service e External Login Server o To specify the URL for the external login server o Leave empty to disable this feature e lIdle Timeouts o To specify idle timeouts in seconds o Value entered will be override by RADIUS server o Default value 5 minutes e Auto Relogin after idle logout o Click to enable the auto relogin after idle timeout e Session Timeout o To specify session timeout in seconds o Value entered will be override by RADIUS server o Default value 0 minutes e HTTPS allowed o To enable or disable the login through https e HTTP allowed o To enable or disable the login through http e Click Apply to save configuration changed e Click Use Default to use the default value Page 45 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 19 1 Using the External Login Server MESH A
36. ess 2 3 19 1 1 Configuring the MESH AP Login to the access point configurations under Login Setup gt User Login Parameters enter the External Login URL e g https Awww server com Login php client CLIENT IP There are several macros available in order to retrieve information from the access point Description TRCLIENT IP The IP address of the login client REQUESTED URL Original URL on which the client is requesting Page 46 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 TRGATEWAY LOGINHE The Access Point s external login gateway https lt accesspoint domain gt lt https_port gt X_Login cgji Where lt accesspoint domain gt is the Common Name CN found in the Webserver Certificates https port is the configured Secure login port TEXT IP Return the WAN IP address of the access point H HNAS_ID Return the NAS Identifier of the access point DOMAIN Return the hostname CN in the certificates TRPORT HIT TPS Return the secure login port of the access point Table Defined Macros in the external login URL Note that the external server hostname must be able to resolve by the Access Point for proper Access Control Setup This could be verified using the Tools gt Ping page in the web based configurations page Access Control to the external server is automatically done during startup or after configured the new server address Thus if the external server is using dynamic IP add
37. ev 1 0 o Default value PLANET e Enable Broadcast SSID o To enable or disable the broadcast SSID of the device e Role in Radio Network o Display the role in radio network e Data Rate Profile o To configure the date rate of this device e Frequency Channel o To configure the channel of this device o Default value 1 e Enable Auto Channel Select o To enable the auto channel selection mechanism o Default value enabled e Transmit Power o To specify the transmit power o Default value MAX e Receive Antenna o To specify the diversity of the antenna o Default value diversity e Transmit Antenna o To specify the diversity of the antenna o Default value diversity e Click APPLY to save configuration changed 2 3 5 Configuration gt Network gt Node to Node LLco 79 1 Node to Node System Settings Network VWAN ode Name PLANET EA US Enable Automatic IP configuration v M ETRAS Manual IP Configuration Route IP Address io 8 100 1 Security subnet Mask 255 0 o Local Service Enable Node Handshaking Shared MAT 128bit Pre shared Key ees Enable Enhanced Traffic Encryption Traffic Shaping 128bit AES Encryption key Mobile IP System Mat a Login Setup Nade MAC Filtering Tools i g COM LAMP C Reboot Reset Node Parameters e Node Name o Display the name of the node Page 19 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Enable Automatic IP Configuration o To enable o
38. figuration image to a file e Restore Config o To update the MESH AP configuration with saved configuration o Click Browse button to browse to the location of new configuration image and select that file o Example a MESH_AP1 cfg o Click Upload button to upload the new configuration e Install New Webserver Certificate e Install Web Server Certificate Upload our web certification that certified by authorized Certificate Authority CA Click browse button to select the certificate file from user designated source Page 64 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Click Upload button to upload certificate to MESH AP Example webserver mesh p12 Page 65 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 4 Command Menu 2 4 1 Command gt Reboot Reboot Veen Renbocdtling The access port will Cone ali eer wht are Currently connecte r se meir c nnecti on t the anor unii me unit has completed me restart process and resume operanon Please enter the time to reboot seconds B Reboot Reboot Parameters e Time to reboot o To specify a delay in time before rebooting e Click Reboot to initiate the reboot sequence 2 4 2 Command gt Reset Reset Warming Resetting the access point to ite factory default configuration will Cause all changes that have bean made to the unit to be permanently lost The access point wall reboot once this function rs executed Reset Par
39. fresh to obtain the current mesh network topology e Output 2 5 7 Info gt Route Display the MESH AP IP routing table Route Parameters e Click Refresh to obtain the current IP routing table information Route Refresh Simple Topology View Rev 1 0 Command Output Kernal IP routing table Dart ination 10 18 23 1 t 16 83 I 10 16 170 1 172 16 23 0 172 16 2 0 182 188 1 0 10 16 23 0 T2 16 83 0 UTZ 16 170 0 IO 18 170 0 10 0 A27 D D 0 d 0 0 0 224 D D D i224 0 0 1224 0 0 0 default def auli Gates LI LI m 10 18 23 10 18 23 1 I0 18 33 10 16 170 1 In 18 170 1 bez 168 1 254 10 18 23 1 G ena 255 265 255 255 P66 266 255 285 255 265 285 255 T 25b 266 255 0 255 255 255 0 256 265 266 D 255 0 0 0 256 0 0 0 240 220 n 240 0 240 0 D 0 5 A i a c Eme 0 Flags Metric Ref SRS SSSSOSR RA ROKR BSS B G c p cO Dg SD en Iface athi 0 mthi D shi D nihi 0 bro D eth 0 ath n sth athb D wth athi 0 lo 0 ethi 0 erhi athl D stk sihi 0 ath planet planet 10 9 100 1 gt planet planet 10 9 106 1 planet planet 10 9 100 1 gt planet planet 10 9 45 1 Page 73 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Output o Display the curre
40. he name of contact for assistant for the node o Example John Tomson e Contact Phone Page 12 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 o To specify the phone number of the contact person e Contact Email o To specify the email of the support person o Example support abc com e Object ID o Display the object ID of the system e WAN IP Address o Display the WAN IP address of the system e Bridge IP Address o Display the Bridge IP of the system e Node IP Address o Display the Node IP of the system e Descriptor o To specify the description of the system 2 3 3 Configuration gt Network gt WAN This submenu defines the configuration of WAN port interface Three options are available to configure the WAN port interface to connect to the Internet They are known as DHCPC Dynamic Host Configuration Protocol client Static IP and PPPoE Point to Point Protocol over Ethernet Network parameters are for the configurations of gateway IP DNS IP Foute Security Local Service DHCP Server Firewall NAT VPM Server HTF rus Traffic Shaping Mobile IP System Mat Login Setup Tools g C D A C Reboot Reset Conriauration B WAN System Settings Nena Interface Type WIM DHCP Local Network LAN Static IP Mode to Mode Y EPI Configure Details and Save Network Parameters Gateway IP Address Enable DNS Client vi Primare ONS Server IP Address Secondary DNS Server IP Address DNS Client Default Do
41. hod O WPAPSK Preshared Key 8 63 character WPA EAP RADIUS Encryption Please Select Encryption Cipher OTKEP DAES SemConhg WPA 802 11i parameters o WPA PSK To specify the authentication mode to WPA Pre Shared Key o WPA EAP RADIUS To specify the authentication mode WPA EAP an external radius server is needed for this type of authentication o TKIP To specify the encryption cipher to Temporal Key Integrity Protocol TKIP o AES To specify the encryption cipher to Advanced Encryption Standard AES e Available authentication mode are WPA PSK with TKIP WPA PSK with AES WPA EAP with TKIP WPA EAP with AES e Click Save Config to save configuration changed Page 27 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e WEP 802 1x au Authentication amp Encryption LJ CurerinumaTn WEP 802 1x O 802 1x assignment of 125 bit key 802 1x assignment of 1 bit key OQ 128 Bit CO 64 Bit See Con WEP 802 1x Parameters o 802 1x assignment of 128 bit key To specify the authentication mode to 802 1x 128bit o 802 1x assignment of 64 bit key To specify the authentication mode to 802 1x 64bit o 6128 bit To specify the authentication mode to WEP 128bit Example 01234567890abcdef1234567890 o 664 bit To specify the authentication mode to WEP 64bit Example 0123456789 e Select one of the radio button to enable the authentication type e Click Save Config to save configu
42. ics Created by Livingston now owned by Lucent RADIUS is a de facto industry standard used by a number of network product companies and is a proposed IETF standard This submenu contains all options to define the settings that MESH AP need to communicate to the external RADIUS server It contains login RADIUS and local users The following sections explain the configuration parameters in detail Page 49 of 80 MAP 2000 MAP 2000R Management Manual g C oamriaLimATiION RADIUS Client Rev 1 0 Server system Settings Network Primary RADILIS Server UT mcd e Secret eee security Local Service Authentication Fort 1812 E M Accounting Port 1813 NAT VPN Server NTP Backup RADIUS Server Tram c Shaping secret ETE Mobile IP Authentication Part 1812 System Mat Accounting Port 1813 Passward SM Syslog Serer H Att ri b utes ee The following fields are optional RADIUS NAS Identifier PLANET EE Called Station Id PLANET NAS Part 1 NAS Port Type Wireless IEEE 802 11 Interim Lipdate Interval 180 E Tools Radius Client Parameters e Server e Primary RADIUS Server o To specify the IP address of the primary RADIUS server o Example 192 168 1 2 e Secret o To specify the login password of the primary RADIUS server o Example secretpassword e Authentication Port o To specify the authentication port for the primary RADIUS server o Default value 1812 e Accounting Port o To specify the accounting port for the primary
43. l VPN Server Conmoumanion y sem setings VIE Enable YEN Serer F VPN User List User Name Password Assigned IP Comment status VPN Server Parameters e Enable VPN Server o To enable or disable the VPN Server service o Example enabled e Click Apply to save configuration changed e In VPN User List click Add to add new entry click Edit to edit selected entry User List CONMOUVRATIOH Lisaeriarne rr t arity Password Loc al Serice Assian IP DHCP Saree sag ma j Comment NENNEN F Irma NAT Fal 7 s 1 VEN Server adus Enable HTE TUA Tiu Apply Irafhc Shaperig Miahilie IF back e User List Parameters o Username To specify the username of a VPN user o Password To specify the password of the VPN user o Assign IP To specify the IP assigned to this VPN user o Comment To specify optional comments on this entry o Status Enable or disable this entry 2 3 13 Configuration gt Local Services gt NTP Client Network Time Protocol NTP is a protocol that is used to synchronize computer clock times in a network of computers Developed by David Mills at the University of Delaware NTP is now an Internet standard In common with similar protocols NTP uses Coordinated Universal Time UTC to synchronize computer clock times to a millisecond and sometimes to a fraction of a millisecond Page 38 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 The term NTP app
44. lies to both the protocol and the client server programs that run on computers MESH AP acts as the NTP client that initiates a time request exchange with the time server As a result of this exchange the client is able to calculate the link delay its local offset and adjust its local clock to match the clock at the server s computer NTP Client jel C Da FUB LMLATRCD i Enabla NTP Chen 2 Server paul n amp p org Sarver gt Seaver a Timezone M AR ele Lumpur hoch NTP Client Parameters e Enable NTP o To enable or disable the NTP client service e Server 1 o To specify the IP of the NTP server o Example pool ntp org e Server 2 o To specify the IP of the NTP server e Server 3 o To speciry the IP of the NIP server e Timezone o To specify the timezone e Click Apply to save the configuration changed Page 39 of 80 MAP 2000 MAP 2000R Management Manual 2 3 14 Configuration gt Local Services gt QoS This submenu defines the parameters of the QoS within MESH AP 7 Quality of Service QoS ie CraMONERRABOATUENAE4 Enable QOS F QoS Table Add Ede Protocol Fort Size range Priority Comment QOS parameters e Enable QOS o To enable or disable the QOS setting e Click Add to add new entry to the QoS table e Click Edit to edit the selected entry Decors tds Protocol TEP w Fort Packatsize bytets tol bytefs Priority Background sw comment Status Enable w Apply
45. main Name PLANET Apply cm WAN Interface Parameters e Interface Type gt DHCPC o The ISP s DHCP server automatic assigns an IP address to the WAN interface o To select DHCP client option click the DHCPC radio button o Click Configure Details and Save button to configure that option Page 13 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Interface Type gt Static IP o To manually assign a fixed IP address to the WAN interface o To select the Static IP option click the Static IP radio button o Click Configure Details and Save button to configure that option amem WAN Interface Static IP IF 132 166 B H Metrmiask 255 255 255 0 dna e Static IP Parameters e P o To specific the IP address of the WAN interface e Netmask o To specific the network mask of the static IP address e Click Save Config to save the configuration changed e Interface Type gt PPPoE o ISP assigns a valid IP address to the WAN interface after MESH AP logon to the ISP s PPPoE with supplied valid username and password o To enhance to network security MESH AP supports server side authentication feature PPPoE server needs to supply valid username and password to authenticate itself Only CHAP Challenge Handshake Authentication Protocol is supported for this feature o Two authentication types are supported in the PPPoE mode i e PAP Password Authentication Protocol and CHAP Challenge Handshake Authenticati
46. n name e Password o To specify the new local user login password e Password repeat o To specify the new local user login password again for verification e Click Add new User to add the new local user 2 3 22 Configuration gt Login Setup gt Customize The login page can be customized to serve the administrator requirements The administrator can upload his or her own web design to the MESH AP Figure below shows the login sequence After a successful login the user is identified and his or her preference language is known if the RADIUS server has sent that option Therefore the welcome and logout page can be adjusted according to the language Login html Welcome Page Deny Page Login_success html Login_Denied html Logout Page Logout html This submenu contains the configurations for administrator to customize his or her login welcome deny and logout pages MESH AP uses English as default preference language Administrator can also customize his or her preference language QoS TM Customizable Login Mobile IP System Mal Existing files Pars er SNMI Directory Tang Syslog Sons les ES File Description Actions USO I Common Directory containing language independent uim ad RAHUS EEEE Delete Customize Engish Directory for language Engish files that are displayed before login Upload File Filename Browse Wipload Page 52 of 80 MA P 2000 MAP 2000R Management Manual
47. nce It consists of system fixed parts which cannot be modified by the user and parts to be customized After a successful login the user is identified and his preferred language is known if it has been sent by the RADIUS server Therefore the welcome and logout page can be adjusted according to the language The files can be uploaded to the hotspot AP and are sharing the flash space with the Web based configuration All kinds of files can be uploaded html pdf etc It just needs to be ensured that the naming of the key files like Login success html remains In this way a page can be created on a local PC and afterwards the files can be uploaded without need to change any link The html files are not displayed directly furthermore they are parsed by a corresponding cgi script in the same directory which substitutes some macros which are containing dynamic values like the username and IP address A sample welcome page looks like this HTML BODY lt H1 gt Hello USER_LOGINNAME lt H1 gt lt BODY gt lt HTML gt The following macros can be used Page 57 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Macro Description oo HSERVER_NAME IP address of the server TRREQUESTED URL The url the user requested before we redirected the request to our login server Table 6 Macros for Login html mo meme SERVER NAME IP address of the server TRREQUESTED URL The url the user requested
48. nt IP routing table interfaces information Page 74 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 5 8 Info gt Syslog To view the system messages and significant events that occur on the MESH AP Syslog Command Bi rlE gatewny syslog info syslocd started BumyBex vil RO tt 13 01 3340000 U 15 gateway user notico hap Starting ntpd 00 16 gateway urer notice hap Starting webrerverr 200218 gateway uzer notice hap Configuring iptables ruler 00 19 gateway urer notice hipi Setting urer defined firewall rules 3 00 19 gateway user notice hapi Starting Radius Client A002 19 gatewwy umar notice heap Starting RANTS client i L gateway wrer notice hapi Enabling routing ip forward 0 20 gateway user notice hap Starting DHCP J 00 20 gateway local info dhcepd Internet Software Conrortium DET Server 7 0515 Nay 2 06 00 20 gateway local imfo dhcpdi Copyright 1995 18988 1937 1554 100 The Internst Software Consortia Eny 2 O8 00220 gateway local info dhepd All rights reserved May 2 08 00 20 gateway local info dhcpd May 7 OBT DR2U gntewsy lorail mfo dhrpd Finanse contribute if you find this software useful Bay 2 OB iUD 2 gateway locali info dhepd For info please wrest http wmr irc org dhcp contrib bral Mar 2 08 00 20 gateway local info dhcpdi T a ferreo ame die SESSPRRSSIE Syslog Parameters e Click Refresh to obtain the current system logging inf
49. ol address IP address used within one network to a different IP address known within another network One network is designated the inside network and the other is the outside Typically a company maps its local inside network addresses to one or more global outside IP addresses and unmaps the global IP addresses on incoming packets back into local IP addresses This helps ensure security since each outgoing or incoming request must go through a translation process that also offers the opportunity to qualify or authenticate the request or match it to a previous request NAT also conserves on the number of global IP addresses that a company needs and it lets the company use a single IP address in its communication with the world NAT is included as part of a router and is often part of a corporate firewall Network administrators create a NAT table that does the global to local and local to global IP address mapping NAT can also be used in conjunction with policy routing NAT can be statically defined or it can be set up to dynamically translate from and to a pool of IP addresses MESH AP of NAT lets an administrator create tables that map e Alocal IP address to one global IP address statically e A local IP address to any of a rotating pool of global IP addresses that a company may have e A local IP address plus a particular TCP port to a global IP address or one in a pool of them e A global IP address to any of a pool of local IP addresses on a
50. on Protocol Only CHAP Challenge Handshake Authentication Protocol is supported in the Server Side Authentication feature o To select the PPPoE option click the PPPoE radio button o Click APPLY button to configure that option Page 14 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 PPP over Ethernet ja D BurHELIM A TER Authentication Authentication type FAF v semana Password Server side Authentication CHAP Only Enable Server side agtmenticanon CHAPF OnM E Servers Usemamne Servers Password Apply o PPP over Ethernet Parameters e Authentication e Authentication type o To select the PPPoE authentication type either CHAP Challenge Handshake Authentication Protocol or PAP Plain Text Authentication Protocol e Username o To specify the PPPoE logon user name e Password o To specify the PPPoE logon password e Server side Authentication CHAP Only e Enable server side authentication o To enable or disable this option e Servers username o To specify the server username e Servers password o To specify the server password e Click Apply to save the configuration changed Network Parameters e Gateway IP Address o Specify the IP address of the default gateway e Enable DNS Client o Enable or disable the DNS Client e Primary DNS Server IP Address o Specify the IP address of primary domain name server o Example 168 95 1 1 e Secondary DNS Server IP Address o Specify the IP address
51. ormation e Output o Display the current system logging information Page 75 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 6 Links This menu provides the HTML links to the MESH AP main webpage and PLANET homepage Click the link to access the respective web page Page 76 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 3 Logging in through MESH AP This chapter describes the basic steps to use the MESH AP service Step 1 User Starts WEB Browser e User is ready to access the Internet and starts Web Brower and requesting default Home Page Mozilla Firefox E E B x File Edit View Go Bookmarks Tools Help O a E gt EL em Annan google con s Getting Started E Latest Headlines Step 2 Login Page Presented to User e Connecting to the Service e The requested Home Page is intercepted by MESH AP and replaced by a User Login Page e The Login Page is protected by SSL HTTPS e CA Certificate is automatically downloaded prior to accessing the Login Page e Note PDA Users can use HTTP Non SSL Login 9 PLA Networking INET MAP 2000 Family s User Login Username Password b Page 77 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Step 3 User Supplies Credentials e Logging On e User supplies his her ID and Password to access the Internet e User Credentials are validated against RADIUS Server Step 4 User Login Success e Welcome Page e Upon Successf
52. r disable the automatic IP configuration to MESH AP This option will assign an IP address automatically based on the MAC address of the WAN devices The assigned IP range is as follow 172 16 0 0 12 reserved for Bridge device e MESH AP s bridge will be assigned 172 X Y 1 e MESH AP s client will be assigned from 172 X Y 2 to 172 X Y 254 e X amp Y would be deduced from the WAN devices 10 0 0 0 8 reserved for Node IP e MESH AP s node will be assigned 10 X Y 1 e MESH AP s vpn server will be assigned 10 X Y 254 e MESH AP s vpn client will be assigned from 10 X Y 2 to 10 X Y 12 Example With deduced X 9 and Y 100 from WAN MAC 09h 64h then MESH AP s node IP will be assigned with 10 9 100 1 the VPN server will be assigned with 10 9 100 254 the VPN client will be assigned from 10 9 100 2 to 10 9 100 12 For the bridge it will use 172 9 100 1 and the MESH AP s client will be assigned with IP address ranging from 172 9 100 2 to 172 9 100 254 by MESH AP s DHCP server o Default value enabled e IP Address o To specify the IP address of the node o Example 10 9 100 1 deduce from the WAN MAC address e Subnet Mask o To specify the network mask of the node o Example 255 0 0 0 e Enable Node Traffic Encryption o To enable or disable node traffic encryption e 128bit Encryption key o To specify the encryption key of node traffic in HEX value 0 9 A F o Example 1234567890abcdef0123456789abcdef e Enable Enhanced Traffic Encryption o To enable
53. ration changed Page 28 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e Off Authentication amp Encryption Encryption Off Eneryphon OFF back LI Commouranion Off Parameters o Encryption OFF To disable encryption and authentication e Click Encryption OFF button to disable encryption and authentication Page 29 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 9 Configuration gt Local Services gt DHCP Server MESH AP acts as a DHCP server by default This means it will assign IP address to client stations on Wireless and Wired network except model MAP 2000 up to 254 clients is supported in each node LU DHCP Server g CoOmriaiimAaTiIocot System Settings NGL OF Enable DHCP Server v WAR Subnet Mask 255 255 255 O Local Network AR Gateway IP Address 172 9 100 1 bnc uius Primary DNS IP Address 172 9 100 h x Secondary ONS IP Address Security Local Seni ce DACP Domain PLANET DHCP Server Firewall Appi NAT VPN Server NTP mum ans IP Pool Table Traffic Shaping Mobile IP System Mat Add Edit ae ue Start IP End IP Default Lease Maximum Lease Comment Status 17291002 1729 100 254 86400 S6400 AutolP Enable coe __ Fixed IP Table DHCP Server Parameters e Enable DHCP Server o To enable or disable the DCHP Server o Default value enabled e Subnet Mask o To specify the network mask of the DHCP server o Example 255 255 255 0 e Gatew
54. ress the Access Control will become invalid after the address has changed 2 3 19 1 2 Gateway Login URL This is the gateway between the external server and the access point s radius client External server will have to send back the e USERNAME e PASSWORD e CLIENT_IP information to the access point All information should be encoded according to the RFC 1738 specification E g for the username Donald Duck the POST should contain USERNAME Donald 20Duck 2 3 19 1 3 Gateway Logout URL External server could forcing a logged in station to logout using the logout URL https lt accesspoint domain gt lt https_port gt X_Logout cgi CLIENT_IP lt client ip address gt 2 3 19 1 4 Login Reply After processing the authentication request the Access Point will reply the External Server with the following contents 2 3 19 1 4 1 Login Success lt HTML gt lt lt xml version 1 0 encoding UTF 8 gt lt WISPAccessGatewayParam Page 47 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 xmlns xsi http www w3 org 2001 XMLSchema instance xsi noNamespaceSchemaLocation http www acmeWisp com W ISPAccessGatewayParam xsd lt AuthenticationReply gt lt MessageType gt 120 lt MessageType gt lt ResponseCode gt 50 lt ResponseCode gt lt ReplyMessage gt radius reply message lt ReplyMessage gt lt AuthenticationReply gt lt WISPAccessGatewayParam gt gt lt
55. rface o Hardware Address To display the MAC address of the WAN interface o IP address To display the IP address assigned to the WAN interface e LAN WLAN Bridge Information o To display the LAN WLAN Bridge interface general information o Click LAN WLAN Bridge Information link to display details information o Interface To display current state of the LAN WLAN Bridge interface o IP address To display the IP address assigned to the LAN WLAN Bridge interface e WLANO Information o To display the WLANO interface general information o Click WLANO Information link to display details information o Interface To display current state of the WLANO Bridge interface o Hardware Address To display the MAC address of the WLANO interface e WLANT1 Information Page 69 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 o To display the WLAN1 interface general information Click WLAN1 Information link to display details information o Interface To display current state of the WLAN1 Bridge interface o Hardware Address To display the MAC address of the WLAN 1 interface O e LAN Information o To display the LAN interface general information o Click LAN Information link to display details information o Interface To display current state of the LAN interface o Hardware Address To display the MAC address of the LAN interface 2 5 2 1 Detailed Interface Information Each interface provides its link to display the
56. rol ie block or pass through e MAC Access Control Table o List the MAC address configured e Click APPLY to save the configuration changed e Click Add to add new entry e Click Edit to edit the selected entry The MAC access control entry will be available after Add or Edit button is pressed P MAC access control entry D D Css FHELIN ATE s MAC Address Comment Status Enable LI back Page 24 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 o MAC Access Control entry Parameters e MAC Address o To specify the MAC address of the entry o Example 00 30 4f 08 6A 37 e Comment o To specify the comment for the entry e Status o To enable or disable the entry Page 25 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 8 Configuration gt Security gt Authentication This submenu configure the authentication method to off WEP 802 11x or WPA 802 1 1i This security option provide more robustness in network security Pu Authentication amp Encryption Access Point Radio L Comroumarsos OWfPA B0 111 OWEP S02 1x GO Conbigure Details and Save Authentication Parameters o To configure WPA 802 11i click on the radio button of the WPA 802 1 1i Page 26 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 e WPA 802 11i Authentication amp Encryption LJ Serer Tees WPA 802 11i Authentication Please Select Authentication Met
57. rs to configure the various MESH AP settings including network setting VPN server Security setting WLAN interface setting and so on Local Service system Mat e Comprise of seven different submenu Login Setup o System Settings Tools g COMMANDO e Contains the setting of general info and operation mode of the device e Contains options to fine tuning the network operations e Contains the following submenu iren e WAN Eabb o To select and configure the WAN connection interface o To specific the basic network configuration such as hostname domain etc e Local Network o To specific the address of local logy network Route e WLAN Syslog o To configure the WLAN interfaces settings such as ESSID data rate channel e Node to node o To configure the node configuration such as node ip e Route o To modify the network routing table o Security e Contains option to configure the type of security e Contains the following submenu e MAC Access o To specific the access control rule based on the MAC address e Authentication o To specific the type of authentication such as WEP 802 1x and 802 1 1i o Local Service e Contain the options to configure the various network services such as DHCP server firewall VPN server etc e Contains the following submenu e DHCP Server o To configure the MESH AP to act as a DHCP server to the bridge interface o To specify fixed IP address e Firewall Page 9 of 80 MA P 2000
58. s Service Status Actions DHCP Server Ok DNS Client Ok DNS Server Ok Restan Network Interfaces OK NTP Client Disabled PPPoE Disabled Restor FFTP Server Ok Remote Syslog Disabled Rostan Routing OK Posten SNMP Server OK Roster Us r Database OK Webbased Configuration OK E Whebservers Ok MA P 2000 MAP 2000R Management Manual Rev 1 0 o Click Restart button to restart the selected service 2 5 4 Info gt Status gt Users uh Online Users Database List of Users Mo users logged m Online Users Database Parameters e List of Users o Display the current logon user list o Username Display the logon user name Click this link to display the user details o IP address Display the IP address assigned to the logon user interface o Actions Click Logout button to logout the user manually 2 5 5 Info gt Status gt Mobile IP Mobile IP Mobile IP Status UP AC P Network Gateway nw m Name Using Orii 1 00 60 B3 8B EA 0B 172 16 1 5 1E Te dette ten den ue eoo 10 16 1 1 n a Ina l BIN Display the status of the mobile IP status 2 5 6 Info gt Topology Display the current topology of the mesh network Page 72 of 80 MAP 2000 MAP 2000R Management Manual CONFIGURATION System Settings Network Security Local Service system Mat Login Setup Tools ol comme Reboot Reset Status kH o ute t Syslog PLANET Web Topology Parameters e Click Re
59. splay the CPU usage since boot in terms of percentage o Average CPU usage Last two seconds Display the CPU usage of last two seconds in terms of percentage e Memory o Free memory Display the available free system RAM memory o Free Flash Memory Display the available free system FLASH memory e Version o Secondary version Display the current secondary firmware version o Tertiary version Display the current tertiary firmware version Page 68 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 5 2 Info gt Status gt Interfaces Display the LAN interface WLAN interfaces and WAN interface general information Local Service l nte maces System Mat esuornd WAN Information Login Setup Tools Interface running Bi T Hardware Address DD 30 4F 4 B 98 64 lomniaoa NU IP Address 203 70 249 202 Settings LAN WLAN Bridge Information Interface running Reboot IP Address 172 8 100 1 L Camano WLAN 0 Information Interface running Hardware Address LD DO B BB 4D 17 B4 IP Address 10 9 100 1 WLAN 1 Information Users hiobile IF Interface running Topology Hardware Address DO DB BB 4D 14 82 Route Syslog LAN Information Interface running Harrhware Address NAAN ar AA NAAF Interfaces Parameters e WAN Information o To display the WAN interface general information o Click WAN Information link to display details information o Interface To display current state of the WAN inte
60. ssigned automatically WLAN e WLANO Page 4 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 SSID PLANETMeshNet Radio role Mesh Rate profile Auto Frequency channel 7 Auto channel selection disabled Transmit power Max O O O OOO e WLAN 1 SSID PLANET Broadcast SSID disabled Radio role Access Point Rate profile Auto Frequency channel 1 Auto channel selection enabled Transmit power MAX O O O O OOO NODE e Auto IP configuration enabled e Traffic encryption disabled e Enhanced traffic encryption disabled Route e Static Routing disabled o Security MAC Access e MAC Access control disabled Encryption e Encryption disabled e Authentication type open e Deny non encrypted data disabled Authentication e Mode None o Services DHCP Server e DHCP Server enabled e Subnet Mask assigned automatically e Gateway IP Address assigned automatically e Primary DNS IP Address assigned automatically e DHCP Domain PLANET e IP Pool Table assigned automatically Firewall e Mode Disabled NAT e Mode Enabled NTP Client e Mode Disabled QoS e Mode Enabled e Default Upload 256 e Default Download 256 o Management Webbased password e Username admin e Password admin Page 5 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 SNMP Password e SNMPv2 Read Password public SNMPv2 Read Write Password private SNMPv3 Read Password snmpv3rouser SNMPv3 R
61. the security certification has been accepted Connect to 172 15 175 1 User name uw Password Remember my password cam e Enter the user name and password By default the user name and password are both set to admin Page 7 of 80 MAP 2000 MAP 2000R Management Manual Rev 1 0 f After login successfully the Web based configuration main page is open which is appealed as below 44 X9 be o XX v htpsi7291001 1 PLANET Networking amp Commentato g CONFIGURATION System Settings Network system Settings Walp Node Name Local Network WLAN Mode to Mode Route Made Location Node Operate Mode Contact Name Security Local Service System Mat Lagin Setup Tools Contact Email Contact Phone Object ID Descriptor WAN IP Address Bridge IP Address rd Mode IP Address Status Topology 43 PLANET Technology Corp TW Q Google search B eo MAP 2000 Family PLANET Factory 1 Zone A Gateway Tomson tomsoni company cam Ts scbsdetadsbo ST PLANET Mesh Network 203 70 249 202 172 8 100 1 10 9 100 1 Page 8 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 2 Web based configuration menu overview This section gives a brief summary to the menu options of the Web EMT Een based configuration OW rbi LR 2 2 1 Configuration Menu System Settings Network e his menu allows the administrato
62. to save configuration changed Page 42 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 2 3 17 Configuration gt System Management gt SNMP au camer i SNMP version boh w SNMP ye Read ony community assas Conhrm ssa Rend Vnte community on Conin aasaaaa SNMPv3 Read only Semano samprouser ReadWrite usemame empreusar Secret password LLLI Coni eassassasasaaas Secret passphrase assaaasssbesse Coni esesasasasaaen a Access control From WAN Interface O Akmed From LAINAWLAM Interface C Allowed From VPN interface C Allowed From Mash Interface O Allewed From Network O Allowed Subnet MNeltmask SNMP Trap Enable SNMP Trap O Trap Community Destination Authentication failures O Send Trap Apply SNMP Password Parameters e SNMP Version o To specify the version of the SNMP e SNMP v2 Read Password o To specify the SNMP v2 read password e SNMP v2 Read Write Password o To specify the SNMP v2 read write password e SNMP v3 Read Password o To specify the SNMP v3 read password e SNMP v3 Read Write Password o To specify the SNMP v3 read write password e SNMP v3 Secret Password o To specify the SNMP v3 secret password e SNMP v3 Secret Passphrase o To specify the SNMP v3 secret passphrase e Access control o From WAN To allow access from WAN interface o From LAN WLAN To allow access from LAN WLAN interface o From VPN To allow access from VPN interface Page 43 of 80 MA P 2000
63. ttings and options provided by the Configuration Menu Configuration menu allows the administrators to configure the various settings including network setting VPN server setting WLAN interface setting and so on Configuration menu consists of seven different submenus They are known as system settings network security local services system management login setup and tools Each submenu has its own options to provide complete configuration settings Figure below shows the main page of the Configuration Menu P Ljco w o System Settings system Settings Network TN Node Name PLANET pipes Node Location Factory 1 Zone A opus praag Node Operate Mode Gateway o A Contact Name Tomson r E m Contact Email tomsan cormpany corm system Mat Contact Phone eal setup Object ID 1 3 6 14 1 10456 6 3 1 0 de Descriptor PLANET Mesh Network WAN IP Address 203 70 249 202 Bridge IP Address 1 2 8 100 1 Bong Node IP Address 10 8 100 1 Status Ta p ao a i 2 3 1 Configuration gt System Settings Administrator also can assign name and location to MESH AP for better management oystem parameters e Node Name o To specify the name of the node o Example PLANET e Node Location o To specify the location of the node o Example Factory 1 Zone A Ivy road e Node Operate Mode o Display the operation mode of current node For MAP 2000 MAP 2100 Gateway or Relay For MAP 2100 only fixed at Relay mode e Contact Name o To specify t
64. ul Authentication and Authorization the MESH AP ISP can present user with User and or Location specific Welcome Page to further the User Experience De EX yew de ones Tob tee ww unl Lu a S a Pit ll nat Mena Lahan success cac reduito Ja cf tache encode Ranoni eh de n Me cerry Sted d Lest Heads Welcome user Statue D ali Here s your login mii i s fu Connertian Hotspot IP 172 16 1 1 Yeur IP 172 15 2 Stans onlme Your MAC 00 D106 2 ED Orla oot Auth Mode local 3 ri Ob Language Idle Timeur 306 rue e Sesivon Leneout Custom Strug Status Logout keywords logout ne can or wt unti you wil be tranzberred our public homepage Click bere to ane an mtre daction Step 5 Display the Request Home Page e After the Welcome Page User is now presented with the Home Page initially requested and is now ready to surf the Net e A Session Page is now displayed to User with information on e Duration of Usage e Capacity of Data Transfer e Time Left for Prepaid System or etc Page 76 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Mozilla Firefox Start Page Mozilla Firefox P i 8 x File Edit View Go Bookmarks Tools Help Qa M M Ej x e http www google com myjJFirefox client FireFox a amp rls2org mozilla en US official fm Getting Started E Latest Headlines Firefox Start Google Web Images Groups News Advanced Search Preferences Search the web pages
65. uration gt Tools gt Download D conrsuration I Download VUA c I System Information Security Release Version planet 1 1 182 Local Service System Mat TFTP Information Password SNMP Syslog Server Login Setup Server IP Address Tools Ping File Name Download j ES Firmware Update gli Type edk Settings File Operation upload Exi JK g COMHAD Reboot Reset Download Parameters e System Information Display only o Display the information about the firmware of the system e Server IP Address o To specify the IP address of the TFTP server o Example 192 168 1 91 e File Name o To specify the name of the file o Example config e File Type o To specify the file type o Option config firmware Config configuration image Firmware firmware image e File Operation o To specify the operation type o Option upload download download and reboot Upload upload to TFTP server Download download to MESH AP Download and reboot reboot after finish download to MESH AP e Click Apply to perform operation 2 3 26 Configuration gt Tools gt Firmware Update This option allows user to update the MESH AP firmware Caution Please don t switch off the device while updating the firmware It may take average about 6 minutes to update the firmware Page 62 of 80 MA P 2000 MAP 2000R Management Manual Rev 1 0 Firmware Firmware Update Caution Don t switch off the device while updating the firmwar

MAP Web Manual

Contents

Download Pdf Manuals

Related Search

Related Contents