LevelOneメーカーWHG-707の使用説明書/サービス説明書
ページ先へ移動 of 307
LevelOne Secure WLAN Control ler WHG - 31 1/315/401/50 5/515/707 User Manual.
Copyright The cont ents of th is publ ication ma y not be repr oduced in an y part or as a whole, s tored, tr anscr ibed in an inform ation retrie val s ystem, trans lated int o an y langua ge, or tr .
FCC CA UTI ON WHG - 3 11 This equipment ha s been teste d and proven to c omply with the limits for a class B digital device, pur suant to part 15 of the FCC Rules. These l imits are designe d to provide reas onable protectio n against har mful interferen ce in a r esiden tial install ation.
T able of Content s 1. Before Y ou Sta rt ................................................................................................... 8 1.1. Pr ef ac e ...........................................................................................
6.3. User Log in ....................................................................................................................... 94 6.3.1. An Exam ple of Us er Login .............................................................................
1 1. 3. Client Mobilit y ................................................................................................................ 172 1 1.4. DNS Cache ............................................................................................
17.3. Account Roaming Out ................................................................................................... 266 17.4. Seamless Cross Gateway Roaming .............................................................................. 267 Appendix A.
8 1. Before You Start 1.1. Preface This W HG Controller Us er M anual is for W LAN s ervice pro viders or net work adm inistrator s to set up a net work environm ent using t he W HG Contr ollers .
9 2. WHG Control lers Installati on Guide 2.1. WHG Con troller Cap acity T able Capacity WHG - 311 WHG - 3 15 WHG - 4 01 WHG - 505 W HG - 515 WHG - 707 Form Fact or 13" Mini - book 19”(1U) 19.
10 2.2. WHG Contro ller Hard w are Over vi ew 2.2.1. WHG - 3 11 H a r dw a re 1 Quick Buttons Reset: Pr ess and hold the Reset b utton f or over 3 s econds and stat us of LED on f ront pane l will star t to b link, r elease butto n at t his stag e to restarting the s ystem.
11 2.2.2. WHG - 315 Ha r dw ar e 1 LCD Display Allows n etwork adminis trator to c heck impor tant syste m settings s uch as network interfac e, SZ conf igurati ons, etc. The nav igations buttons f rom left to right res pectiv ely are “ Sleep ” , “ Esc ” , “ Up ” , “ Down ” , and “ Enter ” .
12 2.2.3. WHG - 401 H a r dw ar e 1 LED Indicator s There ar e three k inds of LED, Pow er , Status and Hard - d isk , to indic ate different status of the s ystem . 2 LCD Displa y Allows netw ork administrator to ch eck import ant system setti ngs such a s netw ork interface, S Z configurations , etc.
13 2.2.4. WHG - 505 H a r dw ar e 1 LED Indicator s There ar e three k inds of LED, Pow er , Status and Hard - d isk , to indic ate different status of the s ystem . 2 LCD Display Allows n etwork adminis trator to c heck impor tant syste m settings s uch as network interfac e, SZ conf igurati ons, etc .
14 2.2.5. WHG - 515 H a r dw ar e 1 LED Indicator s There ar e three k inds of LED, Pow er , Status and Ha rd - disk , to indicat e different status of the s ystem . 2 LCD Display Allows n etwork adminis trator to c heck impor tant syste m settings s uch as network interfac e, SZ conf igurati ons, etc .
15 2.2.6. WHG - 707 H a r dw ar e 1 WAN1 / WAN 2 ( SF P ) T wo com bo WAN ports (SFP) ar e connec ted to the ext ernal net work , such as the ADSL Router f rom your ISP (Internet Service Provider ). 2 L AN 5 / L AN 6 ( S F P ) Client m achines c onnect t o W HG C ontroller via thes e LAN por ts (SF P).
16 2.3. Preparation b efore the Installatio n Before you start t he ins talla tion b y either f ollowing this User Man ual or the Qu ick Installat ion Guide, belo w is a s hort preparatio n list to do. 1. Unpack the W HG Control ler and go thr oug h the pack age chec klist.
17 2.4. Unpac king & In stalling 2.4.1. WHG - 3 11 Package & Installat ion Package Checkl ist The standard p ackage of WHG - 3 11 includes: W HG - 3 11 x 1 CD - ROM (with User’s .
18 Rack Mount ing Bracket (with Screw s) x 1 It is high ly recom mended to use a ll the su pplies in t he pac kage inste ad of s ubstitu ting any c omponents by other sup pliers to guarante e best performanc e. Installation Conn ect the po wer cor d to the power s ock et on the re ar panel.
19 connecti ng mor e wired cli ents ; or directl y to a clien t PC. The LED of port sh ould be on to in dicate a proper connecti on. 2.4.4. WHG - 505 Package & Installation Package Checkl ist .
20 E thernet Cab le x 1 Straight - t hrough Ether net Cab le x 1 Power Cord x 1 Rack Mount ing Bracket (with Screw s) x 1 It is high ly recom mended to use a ll the su pplies in t he pac kage inste ad of s ubstitu ting any c omponents by other sup pliers to guarante e best performanc e.
21 to an adm inistrator PC for configuri ng the W HG Controller s ystem . Connect a n Eth ernet cab le to the LAN1 or LAN2 Port o n the front p anel; co nnect th e other end of the Ether net cabl e to an AP f or ext ending wireless coverage, a s witch for conn ecting m ore wire d clients, or a client PC.
22 3. System Ov erview 3.1. S yste m C on cept If y ou hav e exper ienced o ther Le velOne W LAN W HG Controll er produc ts bef ore and are fa milia r wi th it s s ys t e m concept, you m ay skip th e conc ept desc ription below . Please p roceed to the ne xt section on ( Getting Starte d).
23 Administr ator/Man ager m anuall y . Exter nal A uthentication Database is a user ac count database t hat is not built ins ide W HG Controlle r . Besid es Local databas e and On - dem and datab ase, W HG C ontr oller allo ws up to t hree a ddition al Externa l Authe ntication databases sim ultaneousl y .
24 ‘Polic y’, wh ich can be chos en to bound the net work behaviors of a Grou p. The adm inistrator can defin e the F irewall Pro file, Route Profile, Sc he dule Profi le and Max Sess ions in a Polic y . The f ollowing Figur e depic ts an ex ample r elations hip o f Service Z one, G roup and Polic y .
25 WHG Control ler in a Busi ness Head quart er WHG C ontroller in a Hotel – Capable of i ntegrating with DSLAM and PMS.
26 3.2. Service Zone Concept LevelOne S ervice Z ones ar e virtua l m achines that h as its’ own network interf ace, DHC P server , auth enticati on configurat ion, us er pages a s well as securit y and user polic y settings .
27 Multi subnet ne twork envir onment On the other hand, if the int ernal net work is a Multi subnets netw ork en vironment , Ta g - Based m odel will satisf y to your cond itions.
28 3.3. AP Management Concept AP Managem ent feature is desig ned not only for i nternal n etwork A P deployment, but also o verla y deplo y me nt at rem ote locations o ver the c loud. W HG Controllers c an mana ge fr om 30 to 500 Level One Acces s Points depen ding on m odel.
29 4. Getting S tart ed 4.1. Access ing W eb Management Interface W hen you have com pleted the hard ware inst allation of your W HG Contr oller , s ystem configuratio ns can b e perform ed via buil t - in W eb Managem ent Interf ace (WMI). Step 1. C onnect your PC t o an y of the LAN ports of yo ur W HG Controller .
30 After a s uccess ful login, a Hom e Page w ill appear on the screen. For the fir st tim e, if W HG Controller is not us ing a trusted SSL cer tificate , there w ill be a “Certificate Error” , because t he bro wser trea ts W HG Controll er as an illegal website.
31 4.2. Home Page Hom e page lists f our butt ons Setu p Wizard, Qu ick Lin ks, S ystem Ov erview and M ain M enu respectivel y . Each butto n will b e descr ibed in d etail in t he follo wing s ection.
32 4.2.1. Setup Wizard Using the c onfigurati on wizard Configura tion w izard pr ovides a fas t and eas y way to c onfigur e the W HG Control ler ’s s ystem tim e, chang e Administr ator pass word, WAN interfac es, as well as lo cal user ac counts.
33 4.2.2. Quick Links The Quick Lin ks pro vide eight shortc ut links for administr ators to d irectl y access frequentl y used functi ons of the web m anagement i nterfac e.
34 4.2.3. System Overvie w This page displa ys im portant s ystem related inform ation that t he adm inistrator mig ht need to be a ware of at a gla nce, which inc ludes G eneral Sys tem s ettings, N etwork Interfac e and On line Us ers etc. A dro p - do wn m enu is a vaila ble for selecting t he inf orm ation ref resh rate f or this pag e.
35 4.2.4. Main Me nu This f eature leads to al l the deta iled co nfigurat ion pag es on the W eb Managem ent Interf ace, allo wing you t o set various n etwork ing param eters , enable an d custom i ze network s ervices, m anage us er acc ounts and m onitor user status.
36 4.2.5. Online Hel p The Help button is at the upper ri ght corn er of the W HG Controll er displa y screen . Click Help f or the Online H elp window , and t hen click the h yperlink of the rele vant inf orm ation required.
37 5. Initial Net work Setu p 5.1. Net w ork Requirem ent T ypi cally , in a net wor k environm ent, W HG C ontroller pl ay s the rol e of a gatew ay .
38 5.3. W AN1 & W A N2 Setup W HG Controllers ar e desi gned w ith 2 WAN ports f or load bala ncing a nd failo ver support. T o configure WAN por t settings , go to Mai n Menu > System > WAN1 / WAN2. WAN 1 WAN1 port supports four c onnection types: Static , Dynamic , PPPoE and P PTP .
39 1492 b ytes. In th at case, you have to enter a sm aller num ber MT U number to meet the I SP’s network ing requirem ent. Clamp M SS: Short f or Max imum Segment Size for a TCP connect ion. An end - to - end T CP conn ectio n over PPPo E will c onsum e additiona l overh ead out of each p ack et.
40 Learn DNS Server A ddress During Negotiation : W hen this chec k box is selecte d, the Co ntroller will automat ically lear n the I P addr ess of DNS ser ver throu gh DHC P messages received. Prefer red DN S Se rver: Statica lly des ignate the prim ary DNS s erver to b e used b y the s ystem.
41 W hen both WAN1 and WAN2 are properl y configure d with uplink to the inter net, WAN failover and Lo ad Bal ancing feature bec omes availab le. Load Bala ncing: Administr ator c an sprea d the s ystem traff ic across W AN1 and WAN2 ports base d on perc en tage load, calcu lated using ses sion, b ytes, or pack ets.
42 In Port - Bas ed m ode each LAN por t can be m apped to an enab led S ervice Zon e or dis abled, th is m eans the maxim um number of Serv ice Zones available to prov ide ser vice is d eterm ined by the n umber of LAN ports on the Controll er .
43 Select the mode for Isola tion: W hen enabled, ne twor k tr affic will be isola ted by V LAN tag, which m eans that inter - VLA N devices ar e seg regated f rom each other . Pleas e note th at this chec k option is not avai lable for WHG - 3 11 and W HG - 315 and are alwa ys enabled .
44 5.6. L AN Pa rtition -- Serv ice Zone C onfigure Service Zone ; g o to: System >> Servic e Zones . A Servic e Zone is a log ical net work area to cov er certa in wired and wireless ne twork s in an or ganization s uch as SMB or bra nch offices .
45 Default A uthen Option: Def ault authent ication m etho d/server t hat is us ed withi n the Service Zo ne. IP A dd ress: The IP v4 addr ess of this service zone interf ace. IPv6 Address: The IP v6 addr ess of this serv ice zone interfac e.
46 5.6.1. Planni ng Y our I nter nal N etw o r k Simple network environment For m ost sim ple internal network , suc h as there are just on ly two su bnets. U sing P ort - Ba s ed model is a n e as y and better way . In Port - Ba sed m ode, each LA N port c an onl y serve traffic from one Service Zo ne .
47 5.6.2. Configure Service Zone N etw o r k C onfigure Service Zone ; g o to: System >> Servic e Zones >> Servic e Zone Configuratio n . Router M ode NA T Mode S ervice Zone Status: Each ser vice zone can be e nabled or disabl ed exc ept for the d efault ser vice zo ne.
.
49 Item Descripti on DHCP Server 1 Start IP Address / End IP Address A range of I P ad dresses th at built - in DHCP server will as sign t o clients. N ote: please change the M anagement IP Address L .
50 The adm inistrator can reser ve a l ist of s pecific I P addresses for s pecial devic e with certain MAC addr ess. Fill a set of IP address and MAC addres s as res erve, a dditional inf orm ation can be entere d in the Desc ripti on fie ld. C lick Apply to activate your settings.
51 5.6.3. WISPr A ttri butes in Ser vice Zone W IS Pr or W ire less Internet Service Pro vider roam ing - Pr onounced "whisper , " W ISPr is a draft pr otocol subm itted to the W i - Fi Alli.
52 5.7. I P v6 C onfigure Service Zone ; g o to: System >> IPv6 . System implem ents IPv6 f eature a nd suppor ts oper ating in IPv6 net work ing enviro nm ent. When IPv 6 is enab led, adminis trator m ay assign IPv4 I P addres s as well as I Pv6 addres s to eac h interf ace s uch as WAN1, WAN2, Def ault Service Zo ne, Ser vice Zon e1, etc .
53 6 to4: 6to 4 is a n Interne t trans ition m echanis m for migrating f rom IPv4 to I Pv6, a system that al lows IP v6 pack ets to be trans m itted over an IPv4 ne twork (gener ally the IPv4 inter net) without the need to conf igure explicit tu nnels.
54 6. User Authentication a nd Grouping 6.1. Overvi ew of User Authentication Database • Built - in User Databa ses Local and On - dem and are Controll er ’s built - in user dat abases des igned t o house static an d tempor ary acc ounts respectiv ely .
55 Go to Mai n Menu > Us ers > Authen tication Click on t he server nam e to set the configura tion f or that part icular ser ver . After c ompleting and click ing Apply to save the set tings . Then go bac k to S ystem > Ser vice Z ones a nd enable or disab le an y server in each ser vice zone as you prefer .
56 6.1.1. Configuri ng On - dema nd The adm inistrator can ena ble and c onf igure this a uthe ntication method to c reate on - dem and us er accou nts. This function is designe d for hotspot o wners to pr ovide tempor ary user s with f ree or pa id wireles s Intern et acces s in the hotspot en vironm ent.
57 system only; ne ver get onl ine a nd no need to go thr ough a uthentica tion. N etTicketGen is an ex ample of term inal server t hat is req uired to be conf igured her e bef ore it can operate with Co ntroller .
58 Receipt Heade r: Ther e are 3 rec eipt h eaders s upporte d b y the system . The entered cont ent wi ll be pr inted on the rec eipt. These he aders are optio nal. Receipt Footer : The ent ered cont ent wi ll be pr inted on the receip t. This footer is opti onal.
59 network . Pri ce: T he unit pr ice of the res pective bil ling pla n. Enable: Check the check box to ac tivate t he plan. D eac tivated bi lling pl ans can not be use d to ge nerate ondemand g uest acc ounts. Quick A c count Creation: Check the c heck box to enable Q uick Account Cr eation .
60 o Usage - time with No Expiration Time: Can access internet as lon g as account has remaining quot a (usable tim e). N eed to act ivate the p urchas ed acc ount with in a giv en tim e period b y loggin g in for the first t ime. Ideal f or short ter m usage.
61.
62 Hotel Cut - off - time: Hotel C ut - off - time is the clock tim e (normall y check - out time) at which the on - dem and accou nt is cut off (made ex pired) b y the system on the f ollowin g da y or many days later .
63 o V olume: Can access internet as long as acc ount val id with rem aining quota (tr affic volum e). Account expires when Valid P eriod has be en use d up or q uota dep leted. I deal for small q uantit y applica tions such as s ending/r eceiving m ail, transf erring a file et c.
64 o Dura tion - time with Ela psed Time : Account ac tivated upon the account creati on tim e. Count do wn begins im mediate ly after account cr eated and is cont inuous r egardl ess of logging in or out. Ac count expires o nce the E lapsed T ime has b een reac hed.
65 o Dura tion - time with Cut - off T ime: Cut - off Time is the c lock time at whic h the on - dem and account is cut off (m ade expired) by the s ystem on that da y . For exam ple a shopp ing m all clos ing hour is 23:00; operators selling on - dem and tick ets c an create use t his pla n to crea te tick et set to be Cut - off on 23:0 0.
66 o Dura tion - time with Begi n - and End Ti me: Define exp licitl y the Begin Time a nd End T ime of the account. Count down b egins imm ediately af ter account acti vation a nd expires whe n the End Time has been reac hed. Idea l for pr ovidin g internet service t hrou ghout a sp ecific per iod of ti m e.
67.
68 5) External Paym ent Gatew ay This s ection is for m erchants to s et up an external pa yment gate way to acc ept pa y me nts in or der to provide wireless acces s service to end custom ers who wish t o pa y for the ser vice on - l ine. The f our options ar e A uthorize.
69 6) On - dem and A c count Creation After at l east one plan is enabled, t he adm inistrator can ge nerate on - dem and use r acc ounts here . Click on the Create but ton of the desire d plan and an on - dem and user account will be c reated.
70 Network operator ca n als o choose t o create ondem and acc ounts in batch. S im ply specif y the number of acc ount to be genera ted and click “ Create ” at th e bottom of the page.
71 o Online: the account is currentl y in use. o Expired: the account is not valid an y more, ev en there is rem aining qu ota to be u sed. o Out of Quota: the account has ex ceeded t he quot a limit. o Redeemed: the account ha s been applied for accoun t renewa l.
.
73 6.1.2. Configuri ng RADIUS Rem ote Aut henticat ion Di al In User Servic e (RADIU S) is a network ing pro tocol th at prov ides centr alized Authentic ation, A uthori zation, an d Acc ounting (A AA) m anagem ent for computer s to conn ect and us e a net work service.
.
75 Server . T o suppor t EA P - SIM a uthent ication, please enable this f eature a nd enter 8 02.1X Sett ings to conf igure the AP’s that supp ort ass ociated cl ients to authe nticate b y EAP - SI M. Username F ormat Select t he form at which the us er lo gin inf ormation is sent to the extern al RADIUS Server .
76 adminis trator t o make chang es in session characteri stics wi thout requi ring to acc ess Contr oller W MI t o ini tiate c hange. For ex ample, a network admi nistrat or may need to ter minate a session or change th e auth oriz ation attributes associated w ith a session.
77 A ttributes Priori ty The drop do wn select ion lis t allo ws 3 opt io ns: Follow Server’ s Setting , Overw rite Se rver ’s Settin g and Set if not prese nted . If Follow Server’ s Setting is selected, s ystem will use the RADIU S attributes set in t he rem ote RADIU S server .
78 Protocol Password A uthent ication Pr otocol (P AP) . Accounting S e rvice Enable / D isable R ADIUS a ccountin g Accounting S e rver Enter the Ac counti ng Ser ver dom ain nam e or IP addre ss. Accounting P ort Enter the Port num ber us ed for ac counting Accounting Secret Key Secret Ke y used f or acc ounting.
.
80 N ame : Co nfigura ble text s tring d esignat ed as the m nem onic nam e of t his authentic ation opt ion . Postfix: Is the text str ing e ntered as a post fix in t he acc ount field f or notif ying the Controll er which authent ication data base t his ac count belo ngs to.
81 to the orga nizatio n, group, or dom ain nam e (AD) of ex ternal dir ector y . Binding T ype: This s pecifi es the bin ding t ype and sea rch sc ope for LD AP authenticati on with 4 bindin g types avai lable: U ser Ac count, A nonym ous , Specifie d DN and W indows AD.
82 Usern ame For mat : W hen Compl ete o ption is check ed, both the us ernam e and p ostfix will be trans ferr ed to the server for auth enticati on. W hen O nly ID option is c heck ed, only the user name will be tr ansfer red to the external s erver for authe ntication .
83 login func tion. These s ettings will bec ome eff ective imm ediatel y after click ing the Apply button. Serv er : T he IP address of the extern al NT Dom ain Server . T ransparent Login: This f unction ref ers to W indows NT Dom ain singl e sign - on.
84 The s ystem provides SI P prox y for SIP clients (devices or s oft clients) pass through NA T . Af ter enab le SIP prox y server , all SI P traffic can pa ss thr ough NA T wit h a sele ctive but f ixed WAN interf ace.
85 The s ystem provides SI P prox y functiona lity , which al lows SI P clients to p ass throu gh NA T . W hen enabled, all SIP traffic can pas s throug h NA T via a fixed WAN inter face.
86 A warning m ess age can be custom ized at Main Men u > S ystem > Gen eral pag e which will be d ispla yed on the web browser of newl y connec ted users when a Service Z one ’s authenticat ion is u nder the Suspend s tatus.
87 6.2. Users Group Group prof iles are used t o divid e users b ased on r ole . A Gr oup prof ile can be desi gnated for differentiat ing a gr oup of user s with sim ilar stat uses e.
88 6.2.1. A ssi gn users to a Group C onfigure Group set tings ; go to: Use r s >> Group . This s ection sho ws how t o group users, ho w to ru le eac h grouped user with d ifferent p olicy as he moves to differ ent service zone. The follo wing exam ples will help you bett er und erstand t his sect ion.
89 In this ex ample, G roup 1 us ers ar e allowed t o acces s the i nternet i n 5 plac es; Servic e Zone 0,1,4,6, an d 8. The y must f ollow polic y 1 at Ser vice Z one 1, 6 a nd 8. The y are ruled b y Polic y 3 at Ser vice Zone 1 and b y Polic y 8 at Service Zo ne 4.
.
91 At Servic e Zone 1 , Group 1 user is ruled by Polic y 3. Group 2 is b y Policy 9 a nd Gr oup 3 is b y Polic y 1 1. Ot her Groups ar e not enab led to access Service Zon e 1.
92 o Group Option: T he nam e of Group opt ions av ailable f or selec tion. o Enabled : Se lect E nabled t o allow clients of the en abled G roups t o log in to this Service Zo ne und er constraints of th e selected Polici es. Check Enabled of each ind ividua l Group t o assign it to the Servic e Zone listed.
93 6.2.3. QoS T raf fic Class and Bandw idt h Control Configure QoS; go to: Use rs >> Group >> QoS Prof ile . QoS Profile: Set param eters f or traffic class ification. o T raff ic Class: A T r affic Class c an be chose n for a G roup of users .
94 6.3. User Login 6.3.1. An Example of User Login Norm ally , users will be auth enticated b efore the y get net work ac cess through W HG C ontrol ler . This s ection pres ents the basic authentic ation f low for en d users . Pleas e mak e sur e that the W HG C ontr oller is conf igured pr operl y and network related set tings are done.
.
96 6.3.2. Default A uthe ntica tion In each Ser vice Z one, ther e are different t ypes of authentic ation d atabase ( LOCA L, POP3, RADIUS, LDAP , NTDO MAIN, OND EMAND, and SIP) that are su pport ed b y the entire s ystem .
97 7. Polici es and Access Control 7.1. Policy C onfigure Polic y ; go to : Us er s >> Poli cy . W HG C ontroller s upports multipl e Policies , includ ing on e Global Policy and ind ividual Polic ies . Eac h Polic y consi sts of acces s control p rofiles that can b e config ured respec tivel y and app lied to a c ertain Group of users .
.
99 7.1.1. Firew all Firewall Pro file (Glo bal Po licy): C lick Setting for Fi rewall Prof ile . T he Firew all Conf igurat ion will appear . Click Predefine d and Custom Service Pr otocols to edit the protoc ol list . Click User F irewall Rules to edit t he rules .
100 The Predef ined Service Protocols ca n not be deleted. Click Add to ad d a custom servic e protoco l. Th e Protocol Ty p e can be define d from a list of service b y protoc ols ( TCP/UDP/IC MP/IP ); a nd then define the Source Port (range) and Destination Port (range); cl ick Apply to save this protoc ol .
101 Selecting t he Filter Rule N um ber 1 as an ex ample: o Rule Number: T his is the r ule se lected “1” . Rule N o. 1 has the h ighest pri orit y; rule No. 2 has the second pr iorit y , a nd so on. o Rule Nam e: T he rule nam e can be changed here.
102 Mach ine Firew all Rules – Input (Global Po licy Only) This c onfiguratio n page is for adm inistrator s to co nfigur e firewal l rules which will be enfor ced fr om the s ystems perspecti ve to filt er incom ing tr affics pass ing throug h WAN ports fr om exter nal network s.
103.
104 7.1.2. Routing Speci fic Route Profile: Clic k the bu tton of Setting for Specific Route P rofile , t he Spec ific Rou te Prof ile list will a ppea r . 7.1.2.1 Specific Route Speci fic Route Profile : The Specif ic Def ault Route is use to co ntrol cli ents to access som e specific I P segm ent by the spec ified gateway .
105 7.1.3. Schedule Schedule Pr ofile: Click Setting of Schedul e Profile to enter t he confi guration page. Select Enable t o show the Permitted Login Hours list. This f unction is used t o lim it the time when clients can l og in. C heck the desired tim e slots check box and c lick Apply to save the set tings.
106 7.1.4. Session Limit T o pr event ill - be haved c lients or m alicious soft ware from us ing up the s ystem’s connec tion reso urces , the adminis trator can res tric t the num ber of concurr ent sessions that a us er can establ ish.
107 7.2. User Access Control W HG Controller su pports u ser acc ess c ontrol per ser vice zone, for the entire s ystem , or per authe nticati on ser ver .
108 There ar e multipl e Black List pr ofiles a vailable. Adm inistrator can selec t one a nd enfor ce this b lack list on the desired aut henticat ion s erver .
109 Privilege IP Privilege IP/IPv6 Address List If there are work stations ins ide the m anag ed network that n eed to ac cess t he networ k without authent ication , enter the IP address es of t hese wor ks tations in the “ Grant ed Access by IP A ddres s” .
110 Privilege M AC Privilege M A C A ddre ss List In additio n to the IP address , the MAC address of the work stations that need t o acc ess the net work without authent ication c an als o be set in t he “G ranted Acces s by M AC Address” . Cont roller a llows s pecif ic privi lege MA C addresses at m ost.
111 7.3. Session Limit & Session Log Session Limit T o pr event ill - be haved c lients or m alicious soft ware from us ing up system ’s connect ion resour ces, adminis trators will have t o res trict the num ber of concur rent sess ions that a user c an esta blish.
112 The following tab le shows an exam ple of th e sess ion log d ata. Jul 20 1 2:35: 05 2009 [Ne w]user1 @loc al TCP MAC=00: 09:6b :cd:83: 8c S IP=10.1. 1.37 S Port=16 26 D IP=203. 125.1 64.132 D Port= 80 Jul 20 1 2:35: 05 2009 [Ne w]user1 @loc al TCP MAC=00: 09:6b :cd:83: 8c S IP=10.
113 8. Users’ Login and Logout 8.1. Before User Login 8.1.1. Login w ith SSL C onfigure HTTP S ; go to: System >> G eneral . HTT PS (HTTP over SSL or HTT P Secure) by means of Secure Sock et L.
114 8.1.2. Inter nal Domain Name wit h Certifi cate C onfigure Internal Dom ain Nam e ; go to: Syst em >> G eneral >> Intern al Domain Name . Internal D om ain Name is the dom ain nam e of the W HG CONT ROLLER as seen on client m achines connec ted under ser vice zone.
115 Click “ Continue t o this website” to acc ess the user logi n page. T o Use Default Certifi cate: Click Use Defau lt Certi ficate to use th e defau lt certif icate and k ey .
116 8.1.3. W alled Gar den C onfigure Walled Garden ; go to : Network >> W alled G arden . This f unction pro vides cer tain fr ee servic es for us ers to ac cess the websites listed here bef ore login and authent ication. Spec ific address es or dom ain nam es of the w ebsites c an be d efined in this list.
117 8.1.4. W alled G arden A D List C onfigure Walled Garden AD List ; go t o: N etwork >> Walled Gard en AD List . This f unction pro vides a dvertis ement web pages f or us ers to acc ess f ree advertis em ent websites l isted befor e login and authent ication.
118.
119 8.1.5. Mail Message C onfigure Mail Mes sage, g o to: Syst em >> Servi ce Zones . W hen enabled, th e system will a utomatic ally send an em ail to users if the y attem pt to send/r eceive the ir em ails using POP 3 em ail program (for ex ample, Micros oft Out look ) before the y are authen ticated.
120 8.2. After User Lo gin 8.2.1. P ortal Home Page C onfigure Hom e Page Redi rect ; go t o: S ystem >> General . Portal URL functio n allows the net work adm inistr ator to s pecif y whether to red irect a user ’ s web browser to a specif ic webpage or not.
121 8.2.2. Idle Time r C onfigure Idle T i mer ; go to: Use rs >> Addi tional Con trol . If a user has idled with no net work ac tivities, the s yste m will aut omat ically kic k out the us er . The logout tim er can be set between 1~14 40 minut es, and the defau lt idle tim e is 10 m inutes.
122 8.2.3. Multi ple Login C onfigure Idle Ti m er , go to : User s >> Addi tional Con trol . W hen enabled, a user can log in f rom different com puters with t he sam e account. (T his func tion doesn’t su pport On - demand us ers and RADIUS authentic ation.
123 8.2.4. Change Passw ord Privil ege C onfigure Local Us ers cha nge pas sword pr ivilege ; go to: U ser s >> Group >> Privilege . P rivilege P rofile: o Change Pass word Privilege: .
124 8.2.5. P roxy Server C onfigure Prox y Server ; go to: N etwork >> Pro xy Ser ver . The s ystem provides a Bu ild - in Prox y Server and Exter nal Proxy Server func tion. Af ter succes sful authent ication, the clien ts’ will be r edirec ted back to the des ired prox y servers.
125 Using Extran et Proxy Serv er The second s cenario is th at a prox y server is placed in t he Extranet ( such as D MZ), whic h all us ers fr om the Intranet or the Inter net are able to a cces s. For ex ample, the f ollowing d iagram s hows that a pr oxy ser ver of a n organizat ion in the DMZ will be used.
126 9. Local Are a AP M anagement All of the supp orted APs under m anagem ent of the s ystem will b e shown in t his ta ble and listed b y different A P type.
127 9.1. Multi ple Type of A P Besides l etting users bei ng connec ted to t he W HG Controll er via wir ed Ether net ca ble, you c an conn ect A P to the W HG Controller t o extent t he net work acc ess b y wireles s.
128 9.2. Confi gure A P Templa te Configure AP T em plate; go to: Access Points >> Enter Local Area AP Managem ent >> Templates . The s ystem suppor ts up to three t em plates whic h include c onfig urations of APs.
129 General: In th is sectio n, revise the Sub net M ask and Default Gatew ay here if desir ed. Conf igure the N T P Serve rs and Time Zone . In additi on, adm inistrator c an enable SY SLOG serv er to rec eive the l og from AP and enable SNM P read /write ab ility .
130 throughou t a ESS ( Extend ed Ser vice Set) and f or secure ex change of stati on’s securi ty cont ext between cur rent ac cess po int (A P) and ne w AP during handoff per iod. Wireless Clien t Isol ation : T he default value is Di sabl ed .
131 9.3. AP Disco ver y Configure Disco very AP; go to: Acce ss Points >> En ter Local Area AP Management >> D iscove ry . After AP tem plate conf igurat ion is com plete, us e this f unction to detect and sc an for all of the A Ps conn ected u nder the managed n etwork .
132 Discov ery Resu lts: The n ewly disc overed A Ps will be liste d here. W hen the s ystem ’s Service Zon e is set to Ta g - bas ed mode, s ervice z ones als o can be assign ed here.
133 9.3.1. AP Background Di scover y Configure AP Back ground Dis cover y; go to: AP Management >> Enter Local Area AP Management >> Discovery . Backgrou nd AP Dis cover y: Click Configure to enter Backgrou nd AP Dis cover y interf ace and pr oceed with relat ed conf iguratio n.
134 9.4. Manuall y add AP Add an A P Manuall y; go to: Acce ss Points >> Enter Lo cal Ar ea AP Management >> Adding . The adm inistrator can add supporte d APs into the Li st tab le m anuall y here.
135 9.5. AP w ith Se rv ice Zone Configure AP with Servic e Zone; go to: System >> Se rvic e Zones >> Service Zone Configuration . Service Zone Settings – Assigned IP Ad dress range .
136 Serv ic e Zone Setting s – A ccess Co ntrol for Service Zone All m anaged APs ( V AP) t hat be long to this ser vice zon e have sam e AC L ta ble.
137 9.6. AP Se curity Configure AP Securit y; go to: System >> Ser vice Zones . Security: F or each s ervice zone, a dministr ators can s et up t he wirel ess sec urity pr ofile, inc luding A uthentication and Encryption . A uthenti cation: Including Open S ystem , Share Ke y , W PA , W PA2 or WP A /WP A 2 Mixed .
138 9.7. Change ma nag ed A P setti ngs Configure AP settings in AP List; go to: Access Points >> Enter Local Area AP Man agement >> List .
139 General S etting: Click the link t o enter th e General Setting interface. Firm ware inform ation als o can be observed h ere. LAN Setti ng: Click the link to enter the L AN S etting in terf ace. Adm inistrator c an rev ise the AP’s LAN IP settings including IP addre ss , Subnet Mask and Defa ult Gatew ay o f A P.
140 AP Status Sum mar y includes AP N a m e , A P Ty p e , L AN Interf ace M AC address , Wireless Interfac e M AC address , Report Time , SSID , an d Number of A ssociated Clients . AP S tat us D etails inc lude S ystem Statu s , LAN S tatus , Wireless L AN Stat us , A ssociated Client Status and Local Log Status.
141 9.8. AP O perati ons from AP Li st Configure AP List; go to: Acces s Points >> Enter Local Area AP Manage ment >> List . 9.8.1. Reboot, Ena ble, Disabl e and Delete the A P Select an y.
142 9.8.2. Appl y T empla te Select an y AP by check the chec kbox and then cl ick Apply T emplate ; selec t one tem plate to appl y to the AP ..
143 9.8.3. Apply Service Zon e (T ag - Based Onl y) Select an y AP by the check the check box and then c lic k Apply Ser vice Zone to select which S ervice Zones this AP associates to. For exam ple, if SZ 3 and SZ5 ar e selecte d for t his AP , then thes e tw o Service Zones will be a vailable under this AP .
144 9.9. Firm w are man ageme nt and upgr ade Configure Firm ware m anagem ent; go to: Acc ess Points >> Enter Local Area AP Management >> Firmwa re . The s ystem suppor ts the f irm ware managem ent of APs to up load ne w firm ware, delet e the exist ing f irmware, and download th e firm ware to managed A Ps.
145 9.10. WDS Management Configure WD S managem ent; go to: Access Points >> E nter Local Area AP Managemen t >> WD S Managem ent . WDS Man agement (W ir eless Distribut ion S ystem) is a func tion used t o connec t AP s (Acce ss Point s) wirel essly .
146 9.11. Rogue AP Dete ction Configure Rough A P Detection; go to: Acce ss Points >> Enter Local Area AP Manag ement >> Rogue AP Detection . It is des igned t o detect the no n - m anaged or possibl y malicio us AP in t he dep lo yed environm ent.
147 Basicall y , all of the m anaged A P can becom e a Rogue AP sensor , but som e earlier version AP will not sup port this function, they will list in the Sensor L ist , b ut the y are not ava ilable for s election , so th e Sen sor L ist will list all of the managed A P .
148 9.12. AP Load Balanci ng Configure AP Load Ba lanci ng; go to: Ac cess Points >> Enter Local Area AP Ma nagement >> AP Load Balancing .
149 1. Setup the Interval Configure Interva l; go to: A ccess Points >>A P L oad Balancing . Go to: Access Points >>A P Load Balancing >> Configuration . Input an Interval , if you input “ 0”, it m eans “ Disabled ”, and s ystem will not enable the AP Load Balancing func tion.
150 Before set up the AP Load Bal ancing, you m ust disc overy the APs and appl y template f irst. Note: For m ore detail of AP Managem ent, ple ase refer to the section of M anaging Wirel ess Net work . All of the managed AP can join to a ny of the Load B alanc ing Gro up, so the Device List will lis t all of th e managed AP .
151 10. Wide Area A P M anagement The W HG Control ler suppo rts the p lanning a nd m onitoring of Acces s Points de plo yed over c omplicat ed net work structur es such as the int ernet.
152 10.1. AP Discovery Discover c onnect ed APs ; go to: Acc ess Points >> Ente r Wid e A rea AP Manag emen t >> Discove ry . W ith the Discover y feature, adm inistrator can scan f or APs regardl ess of their ph ysical l ocation as long as their I P address c an be reac hed.
153 10.2. Manually add AP Add an in dividua l Acces s Points t o the m anaged list; g o to: Access Points >> Enter Wid e Area AP Manage ment >> A dding .
154 10.3. Manage AP Lists Manage A P lists; go to: A ccess Points >> E nter Wid e Area AP Man agement >> List . W hen an EAP - 200 is dis covered or added to the A P list, it can b e logica lly deplo yed into t he W HG Contr oller ’s managed ne twork regardle ss of its physica l location by t unnel s .
155 AP’s tunnel set tings c an be c heck ed at “ Syst em >> M anagemen t ” page. On the W HG C ontroller side, the A P’s T unn el status will show gr een light indicat ing an act ive tunne l has been set up between W HG Controller a nd A P .
156 10.4. Manage Third P arty AP Add a third party AP; go to: Access Points >> Enter Wid e Area AP Management >> List . Add thir d part y A P by s electing THIR DAP from Device T y pe. Add to AP List m anuall y by specif ying third p art y A P’s IP address, Nam e, and VLAN ID.
157 10.5. Map Configure m aps; go to: Acc ess Points >> Enter Wi de Area AP Management >> Ma p . The Map ta b page is imple m ented with Goog le Map API vers ion2 whic h allo ws adm inistr ators to vie w at a gl ance the whereabou ts of all of the A P’s under W ide Area A P Managem ent.
158 10.5.1. Regist er key from Google Before conf iguring your m aps, you will ne ed to reg ister the W HG C ontroller ’s IP addres s at Goo gle Maps and get a ke y from Google . Go to ht tp://code. googl e.com/int l/en/apis /maps/doc umentat ion/ja vascr ipt/v2/ or search for “G oogle Map API”, to enter the Google code page.
159 10.5.2. Create a Map Now , retur n to th e Map tab page in W HG Control ler ’s W MI and Scrol l down to t he bott om of the page, c lick on the Add a New M ap button.
160 10.5.3. Marki ng A P s on your Map If y ou hav e severa l APs d eplo yed and listed in List un der W ide Area AP Ma nage m ent, their geogr aphic al loc ation can be m ark ed on a particu lar m ap. Firstly , g o t o the List tab pa ge and cl ick on the Ed it but ton of th e AP’s that you wish t o mark in the m ap.
161 The selec ted APs will sho w up as m ark er im ages on the m ap at the physica l coordinat es conf igured, as sho wn below . Y ou c an click on the A P icon to se e the dial ogue b ox for add ition al inform ation or links that you ha ve conf igured.
162 AP status , Client L ist and WDS Li st inf ormation listed are collec ted fr om t he remote AP via SN MP ..
163 10.5.4. Opera tions fr om Map page Goto Map: W hen you have c onfigured m ultipl e map pr ofiles, th is func tion allo ws switchi ng bet ween different m aps. Goto A P: This f unction is f or adm inistrator t o sel ect an AP on the list, an d the m ap will s hift to s how th e selected AP in the cent er of the m ap.
164 10.6. AP Oper ations f rom A P List Perform operations on m anaged APs; go to : Acces s Points >> E nte r Wid e Area AP Man agement >> List . After add ing APs to the m anaged L ist, the L ist page provides s ome oper ations for m anaging t he listed AP’ s.
165 chosen AP ’s configurat ion setti ngs usi ng a .db file stor e loca lly in adm inis trator PC or in t he W HG Controll er ’s mem ory . Upgrade: Click ing this bu tton will open a popu p wi.
166 10.7. WDS L ist View the W DS link inf orm ation establish ed bet ween APs in W ide Area A P Managem ent; go to Acc ess Points >> Enter Wid e Area AP Manag ement >> WDS List .
167 10.8. Backup Config View previous ly saved backup f iles for W ide Area APs; go to: Ac cess Points >> Enter Wid e Area AP Managem ent >> Backup Config .
168 10.9. Firm w are m anagem ent a nd upgrad e Upload or view the det ails o f previous ly upload ed firm ware for upgrading APs; go to: Acc ess Poin ts >> Enter Wid e Area AP Manage ment >> F irmwar e . The W HG Contr oller can store AP’s fir m ware in its’ built - in m emor y .
169 10.10. C AP W AP Enable CP A W AP auto - dis cover y feature f or supporte d AP’s; go t o: Acces s Points >> Enter Wi de A re a AP Managem ent >> CAPW AP . CAPWAP is a standard int eropera ble prot ocol that enables a W HG Contr oller to manage a c ollect ion of w ireless access points.
170 11. Networking Feature s of a Gateway 11.1. DMZ C onfigure DMZ ; go t o: Network >> N AT >> D MZ (Demilit arized Zone) . The s ystem suppor ts spec ific sets of Interna l IP address (LAN) to External I P address (WAN) m apping in the Static Assignm ents.
171 11.2. Virtual Server C onfigure Virtual Server ; go to: Network >> N AT >> Pub lic Acc essible Serv er . This f unction allo ws the adm inistrator to s et virtual servers , so that c lient de vices outsid e the m anaged net work can access these ser vers with in the m anaged n etwork .
172 11.3. Clie nt Mob ility C onfigure IP Plug and Play ; go to: Network >> Client Mobility . W HG CON T ROLLE R supports IP PNP function : u s er s c an login an d acces s netw ork with an y IP address setting. At the user end, a s tatic I P address can be used to co nnect to th e system .
173 11.4. DNS Cache C onfigure DNS Cac he ; go t o: Network >> DNS Cache . The adm inistrator could st aticall y assign D omain Nam e to I P mappings f or all cl ients c onnected t o the W HG Controll er ’s LAN net work . This feature ca n be used to redir ect clie nts to preferr ed IP address f or cert ain Dom ain Nam es.
174 11.5. Dynamic Domain Name Serv ice C onfigure Dynam ic Dom ain Nam e Service ; g o to: Net wo rk >> DDNS . Before act ivating th is f unction, you m ust have your Dynam ic DNS hos tnam e regis tered with a D ynamic D NS provider .
175 11.6. Port and IP Forw ard ing C onfigure Port an d IP Redirec t ; go to: Network >> N AT >> Port and IP Forwar ding . This f unction allo ws the adm inistrator to s et spec if ic sets of the I P addresses at m ost for r edirection pur pose.
176 11.7. Dynamic Route Configure Dynam ic Route; go to : Network >> Dynam ic Route . The f unction sup port s thre e d ynamic r outing prot ocol s : RIP , O SPF an d IS - IS. RIP Confi guration : It is a dynam ic r outing protoco l used i n local and wide area n etwork s.
177 routing inf orm ation. T im eout T imer : Routes are onl y kept in th e routin g tabl e for a lim ited am ount of ti m e. A s pecial Timeout tim er is s tarted wh enever a r oute is installe d in the routing t able.
178 a group of ph ysically con nected c omputer s or sim ilar devic es. Y ou c an conf igure e ach inter face Circ uit T ype to Level 1 or L evel 2. Net ID: It is the I SO addr ess Network Entity T itle (N ET ). The NET is us ed just l ike an I P address to uniqu ely ident ify a rout er on the inter - netwo rk.
179 12. System M anagement and Uti lities 12.1. System T ime C onfigure Sy ste m T ime ; go to: Syst em >> Gen eral . 12.1.1. NTP NTP (Network Ti me Protocol) com munic ation prot ocol can be used to s ynchronize the s ystem tim e with rem ote tim e server .
180 12.1.2. Manual S ettings The tim e can also b e m anually conf igured b y selec ting Manually s et up and then entering t he dat e and tim e in these fie lds.
181 12.2. Management IP C onfigure Managem ent IP ; go to: Syst em >> Gene ral . Only PCs within t his IP range o n the l ist are al lowed t o acces s the s ystem's web m anagem ent interface . For exam ple, 10.2.3. 0/24 m eans that as long as an adm inistrat or is using a com puter with the I P addres s range of 10.
182 12.3. Access History IP C onfigure Access History IP ; go to: Syst em >> Gene ral . Specif y an IP address of th e administr ator ’ s com puter or a billi ng syst em to get b illing h istory inf orm ation of W HG CONTROLLER with the pr edef ined UR Ls.
183 12.4. S NMP C onfigure SNMP ; go to: Syst em >> Genera l . If this f unction is enabled, the S NMP Managem ent IP and the C omm unity can be assigne d to acc ess the S N M P Configura tion List of the syst em.
184 12.5. Change Pass wo rd C onfigure Change Pass word ; go to: U tilities >> Pas sw ord Change . There ar e three le vels of authorit ies: admi n , man ager or operator . The def ault usernam es and pas swords are as follo ws: A dmin: The a dm inistrator can ac cess all config uration pages of W HG CONTROLLER .
185 12.6. Backup / Restore and Reset to Factory Defaul t C onfigure Back up / Restor e and Reset to Fact ory Def ault ; go to: Utilities >> Back up & Restore . This f unction is use d to bac k up/restor e the W HG CONTROLLER setti ngs. Also, W HG CON T ROLLE R can be restored to the f actor y default set tings here.
186 12.7. Firm w are U pgrade C onfigure Firm ware Upgra de ; go to : Ut ilities >> System Upgrade . The adm inistrator can do wnload t he latest f irm ware from website an d upgrad e the s ystem her e. Click Brow se to search f or the f irmware file and cl ick Apply f or the f irmware upgr ade.
187 12.8. Restart C onfigure Restart ; go to: Ut ilities >> Rest art . This f unction allo ws the adm inistrator to s afel y restart W HG CON T ROLLE R , and the pr ocess m ight tak e approxim atel y three m inutes . Click YE S to rest art W HG CONT ROLLER ; clic k NO to go back to th e previous sc reen.
188 12.9. Ne t w ork U tility C onfigure Network Utilit y ; go to: Ut ilities >> Network Utilit ies . The s ystem provides som e network utilities to he lp adm inistrator s manage t he ne twork easily .
189 Item Descripti on W ake - on - L AN It allows t he s ystem to r emotely boot up a p ower - do wn com puter with Wake - On - LAN featur e enabled i n its BIO S and it is c onnect to an y servic e zone. Enter the MAC Addr ess of the desired de vice an d click Wake Up button t o execut e this f unction.
190 12.10. Certificate C onfigure Certif icat e Ut ilit y ; go to: Utility >> Certificat e . AC can is sue cert ificates to APs t hat it m anages in its pr ivate net work . Adm inistrator can s ign certif icates issues b y the syst em’s root CA a nd load th ese cer tificat es to m anaged APs .
191 Create System’s Root C A Administr ator can create a root C A f or pri vate use. The created r oot C A c ertif icate can be downlo aded a nd used to sign certif icates generat ed by the s ystem . The cr eated root C A will b e displa yed in the table belo w .
192 The generated certificat e will be listed in the My Issue Certificat e table. C ertificat e and k ey can b e do wnload ed with Get Cert , G et key butt on.
193 12.11. Adm inist rator Acc ount Configure operator accou nts; go to: U tilities >> Administra tor Account . W HG C ontroller has thre e k inds of perm anent m anagem ent acc ount: admin , ma nager or operator .
194 Create A dmin Account Different oper ator accou nts and their pas sword c an be specif ied here. Group her e are au thorizati on profi les that will be applie d to this operator acc ount, each G roup prof ile can s pec ify whic h SZ this account c an acc ess and t he Maps that this o perator can acce ss.
195 Configure operator Group profile Group all owed SZ and Ma p can be configur ed her e. In this c onfigur ation page, adm inistrator c an spec ify wh ich S ervice Z one an d Ma p are a llowed to be access ed b y the operator that belongs to th is Gr oup.
196 12.12. Monitor IP Configure Monitor ing 3 rd Part y IP; go to: Network >> Monitor IP . W HG CON T ROLLE R will send o ut a pac ket period icall y to monitor t he con nection status of the IP addresses on the list.
197 12.13. Console Interf ace Via this port to enter the c o nsole int erface f or the adminis trator to ha ndle th e probl ems and situatio ns occurr ed during operatio n. 1. In order t o connect to the c onsole por t of W HG CONTROLLER , a co nsole, m odem cable and a term inal simulatio n progr am , such as the H yper T erm inal are nee de d.
198 Utilities f or ne tw ork debuggi ng The cons ole inter face pr ovides s everal utilities t o assis t the A dminist rator to ch eck the s ystem conditions and to debu g an y problem s.
199 The user nam e is “adm in” and the d efault password is also “adm in”, which is the sam e as f or the web managem ent interf ace. Pas sword ca n also b e change d here.
200 13. System Sta tus and Re ports 13.1. View the S t atu s This s ection inclu des System Status , Interface S tatus , Hardw are , Routing T able , Online User s , Ses sion List , User Log s , Logs , DHC P Lease , and E- m ail & S yslog to pr ovide s ystem status inform ation and onl ine user status.
201 13.1.1. System Status V iew S ystem Status ; go to: Status >> Sy stem . This s ection provi des an o vervie w of the s ystem for the adm inistr ator .
202 The desc ription of the ab ove - m entioned tab le is as follo ws: Item Descripti on Firmware V ersion The prese nt firmw are versio n of W HG CONTROLLER Build The current build number . Sy stem Name The system name. The default is W HG CONTROLLER Portal URL The page t he users ar e directe d to after initial login success.
203 13.1.2. Interface Status V iew Interfac e Status ; go to : Status >> Interface . This s ection provi des an o vervie w of the i nterfac e for the a dm inistrator i ncluding WA N 1 , WAN 2 , SZ Default, SZ1 ~ SZ8 .
204 The desc ription of the ab ove - m entioned tab le is as f ollo ws: Item Descripti on Select Int erface From the dro p - down me nu, admini s trators c an selec t which interface s tatus to display . WA N 1 Mode Operating mode of th is interface. MAC Add re ss The MA C address of t he WAN 2 port.
205 13.1.3. HW V iew Hardwar e Status ; go to: Status >> HW . This tab pa ge disp la y s the system ’s hardware us age inf ormation..
206 13.1.4. Routing T abl e V iew Routin g T able ; go to: Status >> Routing Ta b l e >> IPv4/IP v6 Ta b l e . All th e Pol icy Rout e rules and Glob al Policy Ro ute rules will be l isted her e. Also it will s how th e System Route rules spec ified b y each i nterf ace.
207 13.1.5. Onli ne Users V iew Online Users, go to: Status >> Online U sers . In this pa ge, all on line us ers’ i nform ation is d ispla yed.
208 13.1.6. Non - Login User s V iew Non - Logi n Users ; go to: Status >> Non - Login Users . This page s hows us ers that have acq uired a n IP address from the s ystem ’s DHCP server but h ave not yet be en authent icated. This f eature is des igned for adminis trators to keep trac k of s y stem s resour ces f rom being exha usted.
209 13.1.7. Sessi on List V iew Session List ; go to: Status >> Session List . This page a llows th e adm inistrator to insp ect ses sions c urrentl y establis hed betwe en a c lient and t he s ystem. Eac h result dis plays t he IP and Port values of the So urce an d Destinat ion.
210 13.1.8. User Logs V iew Traffic History , go t o: Status >> Use rs Log . This page is us ed to chec k the tr affic histor y of W HG CONT ROLLER . The h istory of each da y will b e saved separate ly in the D RAM f or at least 3 da ys (72 full h ours ).
211 On - demand User Log As sho wn in th e fol lowing f igure, each l ine is a on - demand user log recor d consis ting of 13 fields , Date , Syste m Name , Ty p e , Name , IP , M AC , P kts In , B ytes In , Pkts Out, Bytes Out, 1st L ogin Expiration T ime , Account V alid Through and Re mark , of user acti vit ies.
212 13.1.9. Local Us er Monthly Netw ork Usage V iew Local Us er Month l y Network Usage ; go to: Status >> User Logs . Monthly Network Us age of Local User The s ystem k eeps a cum ulated recor d of the traffic dat a generat ed b y each Local user in the lat est 2 ca lendar months .
213 13.1.10. Logs V iew Logs ; pl ease go to : St atus >> Logs . This page d ispla ys the s ystem ’s local log infor m ation since s ystem boot up.
214 13.1.11. DHCP L ease V iew DHCP Lease ; go to: Status >> DHCP L ease . The DHC P IP lease st atisti cs c an be viewed after c licking on Show Statist ics List in this p age. Statistics of offe red list V alid lease coun ts of the Last 10 Minutes, Hour s and D a ys are show n here.
215 13.2. No tificatio n C onfigure Notif ication ; g o to: Status >> Repor t & Notification . W HG CON T ROLLE R can autom aticall y send vari ous k inds of us er and/or system related r eports t o conf igured E- mail addres ses, SYSLO G Servers , or FT P Server .
216 13.2.1. SM TP Settings Receiv er E - ma il A ddress (1 ~ 5): U p to 5 E- mail addr esses can be set up here to rec eive not ificatio ns. Send er E - mai l Address: The e - m ail addres s of the ad m inistrator in char ge of the m onitoring.
217 13.2.2. SYSLOG Setting s SYSLOG Destinations: Up to two ext ernal S YSLOG servers m ay be configur ed, pleas e enter t he IP address an d port num ber of the ex ternal SYSLOG s erver . System Log: This contro ls the enab ling/dis abling of the S YSLOG logging f eature.
218 13.2.3. FTP Settings FTP Des tination: Specify the I P address and p ort n um ber of your FT P server . If your FT P needs authent ication, ent er the Usernam e and Pas sword. The “Send T est Log” r adio but ton can be us ed to send a test log f or testin g your cur rent FT P destination s etti ngs.
219 13.2.4. Notifi cation S ettings This c onfiguratio n page al lows the s electi on of log t ype s to send, either t o preconf igured E - m ail, SYSLOG Servers or FT P Server b ased on t he c hosen tim e Interv al.
220 Detail: C licking th is rad io button al lows the c onf iguration of the E - mail s ubject f or the corr espondi ng log. Send: Click ing th is radi o button s ends a tes t log to the s elected E - m ail addres s.
221 Sending Logs to FTP The f ollowing log types can be sen t to exter nal FT P ser vers conf igured in “ FTP Settings ”: Users Log, On - demand Us ers Log, Sess ion Log, HT TP W eb Log, DHC P Lease Log, and S ystem Report. Clic k the des ired log type a nd selec t the tim e int erval for sending log.
222 13.2.5. S y stem Repor t The f unction provi des the g raphica l statistic s inf ormation of CPU Lo ading, C PU T em perature, Mem or y Usage and etc. This page d ispla ys system s tatus and resour ce us ages in a plotted gr aph. I t can sho w the tot al DHC P Lease number of all Serv ice Zo ne and eac h Serv ice Zone.
223 14. Virtual Private Ne twork ( VP N) 14.1. Local VPN The s ystem is equippe d wi th IPSec VPN f eature. T o ut ilize IPSec VPN s upporte d by M icrosof t W indows X P SP2 (with patc h) an d W indo.
224 tunnels b etween t hem . If the conn ection is down, the A ctiveX com ponent will det ect the br oken l ink and decom pose the IPS ec tun nel. Once the IPSec VPN tunnel was bui lt, all sent pack ets will be encr ypted.
225 This patc h also f ixes the problem of suppor ting act ive m ode FTP inside IP Sec VP N tunnel of W indows XP SP2. Please U P D AT E clients ’ W indows XP SP2 with this pat ch. • The T ermination of A c tiveX The Acti veX com ponent for IPSec VPN is runnin g in par allel with t he web p age of “Login Success ”.
226 • FAQ (1) Ho w to clean I PSec c lient? ANS: Open a c omm and prompt w indow and t ype th e comm ands as f ollows. C: > cd %windir% syst em32 C: > Clean _IPSEC.
227 14.2. Re mote VPN C onfigure Rem ote VPN ; go to: N etwork >> VPN >> R emote VPN . W HG CON T ROLLE R support R emote VPN f or user login to s ystem from remote area.
228 14.3. Site - to - Site VP N C onfigure Site - to - Site V PN ; go to: Network >> VPN >> Site - to - Site VPN . W HG CON T ROLLE R support Si te - to - Sit e VPN f or m ore than 2 W HG CONTRO LLE R crea te VPN tun nel to each other ov er the WAN net work .
229 Such as “1 92.168. 1 1.0/ 24” of WHG CONT ROLLER _ A >> “192. 168.1 1 1. 0/24” of WHG CONT ROLLER _B, afte r the tunnel is created, the users with in these two subnet s can r each eac h oth er .
230 15. C ustomiza tion of Portal Pages 15.1. Customizable Pages C onfigure Custom izable Pa ges; go t o: S ystem >> Se rvice Zones . There ar e several users’ login and logout pa ges for each s ervice zo ne that ca n be custom ized b y administr ators .
231 15.2. Loading a Cus tom ized Lo gin Page Custom Pa ges >> Login Page The adm inistrator can use the def ault logi n page or get the custom ized log in page b y setting the tem plat e page, uploading the pa ge or do wnloading f rom a designated websit e.
232 Custom Pa ges >> Login Page > > Uploaded P age Choose Uploa ded Page an d upload a login page t o the bu ilt - in HT TP server ..
233 The user - defined login pag e m ust include the follow ing HT ML c odes to pro vide t he necess ary fi elds for us er name and p asswor d. And if the user - def ined logi n page inc ludes a n image f ile, the im age file path in the H TML code must be the image f ile to be up loaded.
234 15.3. Using an Exte rnal Login Pa ge Custom Pa ges >> Login Pages >> External Page Choose the Exte rnal Pag e s election and get the login page from a design ated website. In t he Ext ernal Pag e Setting, en ter the U RL of the externa l login page and t hen cl ick Apply .
235 15.4. Load a Cust omi zed Logout P age Custom Pages >> Logout Page The adm inistrator can app ly their o wn log out pag e in the m enu. As the proc ess is sim ilar to that of the Lo gin Page, ple ase ref er to the “ Login P age >> U ploaded Page” ins truct ions for m ore detai ls.
236 15.5. How Exter nal Page Operates Choose Ext ernal Pag e if you des ire to use an ext ernal web page f or your cus tom pages. S impl y enter the U RL of your externa l webpage, clic k Preview button to check if it is r eachabl e, take a look at h ow your externa l webp age will b e dis pla yed, t hen c lick Apply button.
237 The URL parameters sent b y the Gate way to th e exter nal login page ar e as fo ll ow s: Field Va l u e Descripti on loginurl String (UR L encoded) The URL which sha ll be subm itted when user login. rem ainingurl String (UR L encoded) The URL which sha ll be subm itted when user want to get rem aining quot a.
238 <FORM ac tion="" m ethod= "post" nam e="form "> <script lan guage ="Javasc ript"> form .action = getV arFr omURL(w indow .
239 U RL V ariables fr om Gat eway This s ection displ ays all the URL parameter s that are s ent fr om the G atewa y to the various exter nal pages . • Exter nal Login Page: V a riables : Field Va l u e Descripti on loginurl String (UR L encoded) The URL which sha ll be subm itted when user login .
240 Change_ pass wd_url String (UR L encoded) The URL which sha ll be subm itted when user want to change password. (Onl y available f or LOCAL user) ondemand_c reatio n_url String (UR L encoded) The URL which sha ll be subm itted when user want to create on - dem and user .
241 (Only av ailable for RADIU S user ) W ISPR - BILLING - TIME String, f orm at: HH:MM W ISPr Bill ing - Time attribute ( Only availab le for RAD IUS user ) sessio n Strin g Encrypted s ession inform ation • Extern al Erro r Page: V a riables: Field Va l u e Descripti on msg String, inclu des: The s ystem is bus y .
242 because it is cur rentl y not the service h our for your accou nt. Y ou ha ve a lready log ged in. Sorry , t here is a s y stem problem check ing the inf orm ation of your account (X XX) .<BR>Pleas e contact your net work administrator . I nvalid user nam e or password.
243 • Exter nal Logout Successful Page: V ariabl es: Field Va l u e Descripti on Uid Strin g User ID ( postfix is includ ed) Vlani d Integer ( 1~409 4) VLAN ID Gwip IP format Gatewa y activate d IP .
244 • Exter nal Logout Fail Page: V a riables: Field Va l u e Descripti on Uid Strin g User ID Gwip IP format Gat eway act ivated WAN IP address Vlani d Integer ( 1~409 4) VLAN ID.
245 1. URL V ariabl es to G ateway This s ection pres ents the par ameter s that need to b e sent back to the G atewa y for the vario us exter nal p ages. Pat h : is the URL destinat ion; Input : the p aram eters requir ed to sen d back ; Output : the feedback from system .
246 Field Required Va l u e Descripti on myusernam e Required Strin g User nam e mypassw ord Required Strin g Password ret_url Optional String (UR L encoded) Returned UR L, def ault is pop_rem inder .
247 - 2: Out of quota. - 3: Expir ed. - 4: Redeem ed. Unam e Strin g User name Typ e String, inclu des: TIME: Time t y pe DA T A: V olum e type CUTOFF: Cut - off type On - demand us er billin g t ype • Change password (Loc al User): Path: (LAN IP addres s or Intern al Dom ain Nam e) /log inpages /user_chang e_pass word.
248 Input: Field Required Va l u e Descripti on Uid Optional Strin g Current user ID (If not presente d, user nam e stored in c ookie is t he default valu e) upass word Optional Strin g Current user p.
249 Redeem user logi n alread y . Had been redeem ed befor e. User run ou t of quo ta. Maxim um allowabl e tim e is exceeded . Maxim um allowabl e m emory space is ex ceeded.
250 price, duration, serial num ber number is account s /n..
251 15.6. Disclaimer Page Configure Discl aimer Page; go to: Syst em >> Se rvic e Zone >> Service Zone Configur ation >> Disclaime r Page .
252.
253 16. Payment Gateway s 16.1. Payments vi a Authorize. Net C onfigure Payments v ia Au thorize.N et ; go to: User >> Authe ntication >> On - demand User >> External P ayment Gateway >> Autho rize.Net . Before set ting up “ Author ize.
254 Service Di sclaimer Content/ Choos e Billing P lan for A uthorize.Net Payme nt Page/Client’ s Purchasing Record o Serv ice Dis claimer Conte nt o View s ervice agreem ents a nd fees f or the s tand ard pa yment gatewa y services her e as wel l as adding ne w or edit ing ser vices dis claimer .
255 A uthorize.Net Payment Page Fie lds Configura tion/ Authorize.Net Pay ment Page Remark Content A uthorize.Net Payment Page Fi elds Configur ation o Item: Check the box to sho w this item on the custom er ’s payment interf ace. o Displayed T ext: Enter what nee ds to be s hown f or this field.
256 inform ation of a tr ansact ion. This field m ay con tain an y form at of inform ation. o First Nam e: T he first nam e of a c ustom er assoc iated with the bill ing or shi pping addr ess of a transactio n. In the case when John D oe plac es an ord er , enter John i n the Firs t Nam e field in dicating this custom er ’s name.
257 16.2. Payments vi a PayPal C onfigure Payments via P ayPal ; go t o: User >> Authentication >> On - demand User >> Extern al Paym en t Gateway >> Pa yPal . Before set ting up “ Pa yPal”, it is re quired t hat the hotspot o wners ha ve a val id Pa yPal “Busi ness Ac count”.
258 Service Dis claim er Content / Billing Confi guration for P ayment Page Service Di sclaimer Content: V i ew the ser vice a greem ent and fees for the s tand ard pa y ment gate way services as wel l as add or edit the service d isclaim er content here.
259 16.3. Payments vi a SecurePay C onfigure Payments via S ecurePa y; go to: User >> Authenticati on >> On - demand Users >> Extern al Payment Gateway >> Se curePa y . Before set ting up “Sec ureP ay”, it is r equired that the hots pot owners have a va lid Secure Pay “Merc hant A ccount” from its official websit e.
260 P a y. Curren cy: The curr enc y to be used f or the p ayment tra nsactions . Service Dis claimer Conte nt View the ser vice agr eem ent and f ees for the standard pa y men t gate wa y services as we ll as add or edit the servic e discla im er content her e.
261 16.4. Payments vi a WorldPay C onfigure Payments via Wor ldPa y ; go to: Use r >> Authentica tion >> On - demand Users >> Extern al Payment Gateway >> World Pay . W orldP ay Payment Page Configur ation Install ation ID: The ID of the as socia ted Merc hant Ac count.
262 The m essage content will be disp layed as a s pecia l notic e to en d custom ers. Before set ting up “W orldPay”, it is req uired th at the hot spot o wners ha ve a valid W orldPa y “Mercha nt Accoun t” f rom its official webs ite: R BS WorldPa y: Merchant Services & Pa yment Proc essing, goi ng to rbsworldpay .
263 STEP ⑦ . Select th e Save Ch anges b utton STEP ⑧ . Input Insta llation ID and P ayment G ate way URL in gate way UI. Installat ion ID: 2009test URL : h ttps://select. wp3.rbs wo rldpa y .com /wcc/pur chase Note: The WAN IP of gate way must be rea l IP .
264 17. Additional A pplications 17.1. Upload / Do w nload L ocal Use rs A ccounts C onfigure Upload / Down load Loc al Users Accoun ts ; go to: User >> Authentication >> Option >> Lo cal >> Local User List . Upload Us er: Clic k U pload User to enter t he Upload User from File interfac e.
265 17.2. Backup / Restore and Upload Ne w On - dema nd Users Ac counts C onfigure Back up / Res tore On - dem and Users Account s ; go to: Use r s >> Authentica tion >> On - demand User >> On - demand Acc ount List . Backup Current A ccounts: Use th is funct ion to creat e a .
266 17.3. Account Roami ng Out Configure Notif ication; g o to: Users >> Authentic ation >> Local >> Configure . In som etime, W HG C ontroll er ’ s built in L ocal dat abase can act as a RAD IUS ser ver f or Roam ing Out fr om other system .
267 17.4. Seamless Cross Gate w ay Roami ng Configure Notif ication; g o to: Network >> Client Mobili ty >> Cross G ateway Roaming . W HG Controllers s upports seam less inter - Contro ller roam ing with up to 15 other Controll ers in a star lik e topolo gy .
268.
269 Appendix A. C ertificate Settings fo r IE6 and IE7 Certific ate s etting f or the c ompan y w ith Certificate Authority Backgr oun d infor mation Any webs ite or high - value Web Applications will req uire a clie nt to acc ess their websites via Secur e Sock ets Layer (SS L).
270 trusted m edia to insta ll this c ertificate ( as trust ed CA) in each em plo yee’ s com puter , and in th e m eantime export th is certif icate to t he W HG CONTROLL ER . In som e circum st ance, the compan y without Certif icate Authorit y ma y follow t he s teps state d belo w to a void error m essage.
271 Certific ate s etting f or Inte rnet Explore r 7 For IE7, r egardin g certif icate iss ues cause d b y certifica te publisher not b eing trus ted b y IE7, the f ollowin g steps may be tak en to pr ovide a work around or to bypass th e issue. (1) O pen the I E7 bro wser , a nd you wil l be red irected to th e defau lt lo gin page .
272 For insta lling a trus ted cer tific ate to solv e the IE7 c ertifi cate issue, please f ollow t he instruc tions s tated be low . (1) W hen the User L ogin p age appe ars, c lick “ Certif icate Erro r” at the top. (2) Clic k “ V iew Certific ate” .
273 (4) Selec t root c ertificati on, an d then cl ick “ V iew Certific ate” . (5) Clic k “ Install Certif icate” ..
274 (6) Clic k “ Next” . (7) Selec t “Auto matically s elect t he certif icate st ore b ased on th e type o f certif icate” , an d then c lick “Next” .
275 (8) Clic k “Finish” ..
276 (9) Clic k “ Y es” . (10) Click “OK” . (11) Launch a ne w IE7 bro wser . The cer tificate is now tr usted via IE7 acc ording t o the ke y symbo l shown a t top next to t he addr ess f ield.
277 Certific ate s etting f or Inte rnet Explore r 6 For issues relati ng to IE6 c ertif icate error, the following inform ation pro vides th e step to tak e when the certific ate publisher is not tr usted b y IE6. (1) Open an IE6 browse r , the Secur ity Alert m es sage will b e appear ed if the cer tificate is not truste d.
278 Appen dix B. Networ k Con figura tion on PC & Us er Logi n Network Configurati on on PC After W HG CONT ROLLER is installed, th e follo wing co nfigurations m ust be set up on the PC: Internet Connection Setup and TCP/IP N etwork Setup .
279 3) Choose “ I w ant to set up my Inte rnet connecti on manually , or I w ant to connect through a loc al A rea network (L A N )” , and then click Next .
280 6) Choose “No” and then clic k Next . 7) Fina ll y , clic k Finish to exit t he Internet Connection W izard . No w , t he set up is complete d.
281 2) Choose the Connections tab, and t hen click Setup . 3) W hen the Welco me to the New Connection Wizard window ap pears , click Next . 4) Choose “Connect to the Internet” and then click Next .
282 5) Choose “ Set up my connection m anually ” and then click Next . 6) Choose “ Connect using a broadband connecti on that is always on ” and then c lick Next . 7) Fina ll y , clic k Finish to exit t he Connection Wizard . N ow , the s etup is com pleted.
283 TCP/IP Network Setup If the op erating s ystem of the PC i n use is W indows 95/98/ME /2000/X P , keep the default settings without a ny changes t o directl y start/res tart the s ystem.
284 3) Using DHCP: If you want t o use DH CP, c lick on the IP Address tab an d choose “ Obtain an IP address au tomatic ally” , and th en click OK . T his is also the defaul t setting of W indows. T hen, reboot the PC to m ake s ure an IP a ddress is obtained f rom W HG CONTROLLER .
285 4.2) Clic k on the G ateway tab . Enter the gat ewa y address of W HG CONTROLLER in the “ New gatew ay” field an d click Ad d . T hen, click OK . 4.3) Clic k on DNS Configurati on tab. If the DNS Server f ield is em pty , s elect “Enab le DNS” and enter DNS Ser ver a ddress .
286 2) Right c lick on th e Local Area Connec tion icon and select “ Properties ” . 3) Select “ Interne t Protocol (TCP/IP)” and then click Prop erties . Now, you c an choose to use DHCP or a s pecif ic IP addr ess . 4) Using DHCP: If you want t o use DH CP, ch oose “Obt ain an IP add ress autom atically” , and then click OK .
287 5) Using Sp ecific IP Addres s: If you want to us e a spec ific IP address , acquir e the f ollowing inf orm ation fr om the net work adm inistr ato r: the I P Address , Subn et Mask and DN S Serv er addres s provid ed b y your ISP and th e Gatew ay addr ess of WHG CONTROLLER .
288 5.4) Enter the gat ewa y address of W HG CONTROLLER in th e “ Gatew ay” f ield , a nd then click Add . Af ter back to the I P S ettings tab, click OK to com plete th e configurat ion. Check the TCP/IP S etup of Win dow XP 1) Select St art >> Control Panel >> Netw ork Connection .
289 Now, you can cho ose to us e DHC P or a s pecific IP addres s. 4) Using DHCP: If you want t o use DH CP, ch oose “Obt ain an IP add ress aut omaticall y” a nd c lick OK . T his is als o the def ault setting of W indows. Then, reboo t the P C to m ake s ure an IP addres s is obtain ed from W HG CONTROLLER .
290 5.3) Click on the IP Settings tab and clic k Add bel ow the “Default gatew ays” colum n and the T C P / I P Gatew ay A ddress windo w will a ppear . 5.4) Enter t he gatewa y address of W HG CONTROLLER in th e “ Gatew ay” f ield , a nd then click Add .
291 Appen dix C. Policy Prior ity Global Policy , S ervice Zone P olicy , A uthe ntication Polic y and User Polic y W HG C ontroll er supports mult iple Po licies, includi ng one Global Policy and multiple ind ividual Policy whic h can be assign ed and boun d to G rou p .
292 Appen dix D. RADIUS A ccoun ting This s ection is tr ying to or ganize the basic c onfigur ation with RADIU S serv er to wor k with VS A. The aim is trying to c ontrol th e m aximum usage (upload; downl oad or u pload + downlo ad tr affic) of clients in each session.
293 2. VSA configuration i n RADIUS server (IAS Server) This section will guid e you thr ough a VS A c onf iguration in your externa l RADIU S server . Bef ore gettin g start, please acc ess your extern al RA DIUS ser ver ’s desk top directl y or rem otel y from other PC.
.
295 Step 5 Confirm the V endor - specif ic Attribut e has been adde d succ ess Step 6 Follow th e sam e steps to c reate oth er V endor - specific A ttribute as you nee d.
296 3. VS A confi gurati on in RADIUS ser ver (Fre eRADIUS) This s ection wil l guide you throug h a V S A c onfigura tion us ing the op erating s ystem “Fedora” F reeRADI US ver sion 1.
297 Administr ator als o can ad d other a ttributes as the t able stated in Section 2 with sa m e format. Step 5 Edit the f ile “dicti onar y” under t he folder “ freer adius”. Step 6 Include “d ictionar y . LevelO ne ” in the dicti onar y of RADI US serv er .
298 Step 8 Insert VS A into RA DIUS re spond. In this ex ample, t he m aximum download and uploa d in b ytes for group03 users is 1MB yt es . Step 9 Restart R ADIUS to get your settings acti vated.
299 Appen dix E. VLAN Por t Loca tion M apping and P MS Mid dlewar e This s ection introd uces the Port Loc ation Map ping f eature. This f eature is design ed for creating m ultiple V LAN divisions (as if the y were separ ate LAN por ts) under a Serv ice Zon e and mappin g these VLANs to different lo cations individual ly .
300 2. Por t Loca tion Mappi ng C onfigure Port Locat ion M apping ; go to: Syst em > >Port Location M apping>> Configure . Administr ator cou ld use Port Loc ation Map ping feat ure to map a loc ation ( such as a hotel ro om ) to a VLAN port of VLAN s witch or a D SLAM dev ice.
301 M ultiple U ser is th e port t ype used f or room s with m any user s for example dorm itor y applicat ions. If the user ope ns a brows er and t ries to ac cess in ternet, a user log in page without billing plan opti ons will be displa yed. The user needs to bu y acc ounts fr om the fr ont dorm office in order to l ogin.
302 Port Loca tion Mapping Setup – Create One From: Set the Ph ysical LA N port o n the gate way to provide Port Locat ion Ma pping Ser vice. Port T ype: The default s tat e of the ro oms , it ma y be: F ree, Block , Singl e User , Multiple User .
303 Connection Se tup: Enter t he Secret, I nterf ace Port, M I ID, AC I D, and L ink T es t Interval for Middle ware connec tion. Sec ret: The secr et ke y between G uest S ervice D evice a nd PM S M iddl eware for c hallenge and response ( MD5 Hash) to te st the auth enticit y of the link .
304 The Searc h field a llows ad m inistrator to sear ch for mapping e ntri es accor ding to VLAN ID, Room Num /Location ID or Service Z one. C lick the VL AN I D link to enter the Port M apping Pr ofile page for that entr y . Y ou can change th e Port T ype or Service Z one of this room .
305 will displ ay the ge nerate d acc ount name and pass word. If you alread y have a user ac count, you can c lick the “ here ” l ink to lo gin with t he user account t hat you posses s.
306 W hen a user tries to ac cess inter net fr om a “ Free ” room , the browser will s how servic e agreem ent page, sim ply by click ing CO NFIRM an d t he user can ac cess th e int ernet. The Service Agreem ent bod y can be c onf igured at the applie d Serv ice Zone ’s Custom Pages sett ings.
307 P/N : V WHG500201 10601.
デバイスLevelOne WHG-707の購入後に（又は購入する前であっても）重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります：
LevelOne WHG-707をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはLevelOne WHG-707の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。LevelOne WHG-707の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。LevelOne WHG-707で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
LevelOne WHG-707を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はLevelOne WHG-707の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、LevelOne WHG-707に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちLevelOne WHG-707デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。
