LevelOne WHG-1000 Bedienungsanleitung

i LevelO ne WHG- 1000 300Mbps Wireless PoE Hotspot Gateway User Manual V2 .0 0[...]

ii T abl e of Conte nts 1 Before You St art .......................................................................................................... 1 1.1 Prefa ce .................................................................................................................................................. 1 1.2 Document Conv ention s ........[...]

iii 6.2 MAC Address Co ntrol .................................................................................................................... 59 6.3 Po l ic y ................................................................................................................................................... 60 6.3.1 Fi rewall ....................[...]

iv 10.1 0.3 T race R oute .......................................................................................................................................... 99 10.10.4 Show ARP T abl e .................................................................................................................................. 99 10.11 M onit or IP L in[...]

User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 1 1 Before You Start 1.1 Preface Thi s man ual i s for WLAN servi ce pr ovid ers or n etw ork ad mini strators to s et up a netwo rk envi ronm ent using the WHG - 1000 syst em. It conta ins step - by - ste p procedures and graphic exa mples to guide MIS staff or i nd ividuals with sl[...]

User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 2 1.3 Pa ckage C hecklist The sta ndard package of WHG - 1000 i ncl udes:  WHG - 1000 x 1  CD - ROM (with User’ s Manual and QIG ) x 1  Qu ick In sta llat ion Guid e (QI G) x 1  Cons ole Cab le x 1  Ethern et Ca bl e x 1  P ower Adapter (DC 12 V) x 1  Rubber An[...]

User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 3 2 System Overview and Getting Start ed 2.1 Introduct ion of WHG -1000 The WHG -1000 i s th e most econ omi cal and fea ture ri ch W ireles s PoE Hotspot Gateway , targeting mi ni - siz e stores that w ant to provide s mall, single - poin t wi rel ess Intern et acces s servi ce . WH[...]

User’s Manua l WHG - 1000 Wi re les s Hot spot Ga teway ENGLISH 4 【 Exam ple : A typical Hotspot network 】[...]

5 2.3 Hardware Descriptions Front Pa nel 1 USB F or fut ure us age o nly . 2 WES Press t o start run ning W ES (WD S Easy Setup) process . 3 Console Attach t he RS - 232 console cabl e her e, for managem ent use o nly . 4 LAN1 /LAN 2 (Po E) Attach Et hernet cabl e s here fo r con necti ng to the wired l ocal n etwor k. LAN1 maps t o Pri vate Z one [...]

6 Rear Pan el Antenna Connector At tach ante nnas here . WHG - 1000 support s 1 RF interfa ce wi th 2 S MA con necto rs.[...]

7 Top LED Pa nel 1 LED ON indica tes power o n; OFF ind icates power o ff . 2 LED ON i ndicate s WAN connecti on; OFF i ndica tes no connect ion; BLINK IN G indica tes t r an smitt ing data . 3 LED ON i ndicate s LAN1 /LAN2 co nnect ion; OFF i ndicat es no connect ion; BLINK IN G indica tes trans mitting da ta. 4 LED ON indi cates wi reless r eady [...]

8 7 F or fut ure us age o nly .[...]

9 2.4 System Requirement  Standard 10/100Base T i ncluding n etwor k cables with RJ - 4 5 conn ectors  All PCs nee d to install the TCP /IP network protocol 2.5 Installation S teps Ple as e fo llo w th e s teps be low to in sta ll WHG - 1000 : Plea se fol low the step s m enti oned b elow to i nstall th e hardwar e of WHG - 1000 : 1. Place th[...]

10 Caut ion: Pleas e onl y use t he p ower adap ter supplie d with the WHG - 1000 packa ge. U sin g a di fferen t po wer adapter may damage this system. Caut ion: To doub le ve rify th e wir ed conn ect ion bet ween WHG - 1000 and your switch/router/hub, ple ase check the LED status indication of these ne twork devices.[...]

11 2.6 Access W eb Management Int erface WHG - 1000 supports W eb Ma nagement Interface (WMI) configurat ion . U pon th e compl eti on of hardware installation, WHG - 1000 can be conf igured vi a web brow ser s wi th JavaScri pt enabl ed su ch a s Intern et Ex plor er ve rsio n 6.0 and ab o ve or Firef ox . Defaul t LA N in terfac e IP addre ss: LA[...]

12 For the fi rst ti me, i f WHG - 1000 is not using a tru sted SSL ce rtificate , there wil l b e a “Certific ate Error” , becaus e the browser treats WHG - 1000 as an ill egal w ebsit e. Pleas e pres s “Cont inue t o thi s websit e” to co nti nue. Caut ion: If you can’t ge t the login screen, the reasons may be: (1) The PC is set incorr[...]

13 2.7 Setup Wizard WHG - 1000 provides a Setup Wizard for quick c onfigurat ion. T o quickly conf igure WHG - 1000 by using the Setup W izard, click on the Setup Wizard butto n to start the configur ation proce ss.[...]

14 Step 1. General • Enter a ne w administrato r’s password in the New P assword f ield, and re - ent er it agai n in t he V e r if y Password fiel d (a maxim um of 20 ch aracter s an d no spa ces a ll owed i n betw een). • Sel ect an appr opri ate ti me z one from the Tim e Zone drop - down li st bo x and enter the URL of a valid NTP se rver[...]

15 Step 2. W AN and Wireless Interf aces For setti ng u p both wi red WAN and Wi reless LA N in terfac es: • Sel ect a p roper type of Inte rnet conn ecti on fo r WAN in terfac e from the fol lowi ng t hree avail able connect ions: Static , Dynam ic , o r PPPoE . Y our ISP or network administr ator can adv ise on the connec tion type av ailable t[...]

16 wi th ESS ID “ Level One 1” and “ Le velOn e 2” r espec ti vely by defaul t. Th e ES SID f or VAP u nder Pri vate will not be broa dcasted. Detailed c onfigurations f or these two V AP can be perfor med under Ma in Menu >> System >> Zone Conf igu ratio n.[...]

17 Step 3. Authenticatio n Settings for Public Zone • Fo r public zone (by default, a uthentication is enabled), authe ntication can be enab led or disabled. Cl ient s sh all lo g in in t he syst em b efore u sin g ne twork servi ce i f Auth R equire d is en abl ed. Wh en authe ntication is e nabled, a d efault authe ntication s erver s hall be c[...]

18[...]

19 Step 4. Conf irm and Restart • Cli ck Finish to sav e current settings and r estart the system. • A c onf irm at ion d ialo g b ox wil l th en a pp ear . Clic k OK to continue.[...]

20 • A Con firm and Rest art mess age w ill app ear on th e screen du rin g the r esta rti ng proc ess. Plea se d o not interrupt the system until the Administra tor Login P age appears. Note: The sy stem is try in g to loca te a DN S s erver at th is st age. Th eref ore, a long er sta rtup t im e is requi red if the configure d DNS cannot be fou[...]

21 < Use r Login > T o ver ify whet her the configur ation of the new loc al user acco unt(s) create d via the Setup Wizard has b een c ompl eted su cc essful l y: 1. Conn ect a cl i ent d evice (e.g. l apt op, PC) wit h wirel ess i nt erface t o sca n t he con fig ured ESS ID of WHG - 1000 (e.g. “ Leve lOne 2 ”) and get associated with t[...]

22 Note : 1. WHG - 1000 s upports multiple authent ication op tions includi ng built - in l ocal user database and external authent ication database (e.g. RADIUS). The syste m wi ll automatica lly identify which aut henti cati on opti on i s used from the full usern ame enter ed. 2. The for mat of a full (valid) userna me i s user id@postfix , wh e[...]

23 3 Combine WHG - 1000 to t he Network 3.1 N etwork Requirement I n the general networ k envi ronmen t, t he mai n rol e of WHG - 1000 i s a gateway that manages all the netwo rk ac cess f rom intern al n etwo rk to Intern et. Thus, t he fi rst st ep i s to p repa re an Inte rnet conne cti on from your I SP ( Int ernet S ervi ce P r ovider) and c [...]

24 3.2.1 Static IP Static: Manually spec ifying the IP address of the W AN Port. The f ields with red asterisks are mandatory .  IP Addre ss: The IP address of the WAN port.  Subn et M ask: Th e su bnet mask of th e WAN po rt.  Defau lt G atew ay: The gateway of the W AN port.  Preferr ed DNS Serv er: Th e p rim ary DNS Server of th e s[...]

25[...]

26 3.3 Inte rnet Co nn ection Dete ctio n Configure I nternet Connection De tection, go to: System >> WAN Tr affic .  Internet Connection Detection: Wh en en abl ed, sy stem wi ll try t o acc ess th ese IP/Dom ai n address es, if sy s tem can reach these IP/Domain address, it mea ns that the o utbound I ntern et connection is in nor mal st[...]

27 3.4 WAN Bandwidth Control Configure W AN Bandwidth Contr ol, go to: Syste m >> WAN T raffic . The fea tur e gi ves administrator s control ov er the entire system’ s tr affic though the W AN interf ace. Thes e paramet ers s et h ere s hould not ex cee d the real bandwidth comi ng from you r ISP . For exam ple, if your xDSL is 8Mbs/640kbs[...]

28 3.5 What is Zone Confi gure Zone, g o to: System >> Zone Conf iguration . A Zone i s a l ogi cal net work a rea th at covers wi red or wi rel ess net work s, o r b oth of them. By as soc iat ing to a uniq ue ES SI D of a Z on e, w ire les s ne two rk is div ide d in to dif fe re nt lo gic al z one s. Clients attempting to access the resour[...]

29 3.5.1 Port Role A ssignment WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acc ess t he n etwork vi a wi red and wirel ess . In th e Pub li c Zo ne , by default, Authent ication r e qu ired is enabl ed by default, so c li ents ar e required to get a uthenticated succ essful ly b ef[...]

30 3.5. 2 P lanning Y our I nternet N etw ork WHG - 1000 supports two zones , Private and Public. In the Priv ate Z one, authenticat ion is not requi red t o acce ss t he n etwork vi a wi red and wirel ess. In Public Z one, by default Authe nticat ion r equi red i s enabl ed, so cli ent s are req ui red to get au thent ica ted su ccess full y befo [...]

31 3.5. 3 Configure Zone N etw ork Confi gure Zone net wor k; go t o: Syst em >> Zone Configurat ion . Click the butto n Confi gure of Priv ate zone for fur ther configur atio n. The pa ram eter d escri pti ons of Basi c Sett in gs for P rivate Zone and P ubli c Zone are t he sa me. Th e wi rel ess set tin gs un der each zon e wi ll be covere[...]

32 o Altern ate DNS Serv er: Th e substitute DNS ser ver that is used by this Zone . o Domain Name: En ter the domain name fo r this zone . o WINS Se rve r: T he IP ad dress of t he W INS ( Win dows Inte rnet Nami ng S ervi ce) s erver if W IN S se rv er is ap plic ab le to th is zo ne . o Lease Tim e: Thi s i s the t ime p eriod that the IP a dd r[...]

33 4 Let Your Network to Be a Wirel ess Network 4.1 System Wireless Genera l Settings Confi gu re Syst em ’s Wirel ess G eneral S etti ngs, go to: System >> Zone Configur ation . Wirele ss Gen eral S ett ing s:  Band: There are 4 mod es t o select , 802.11b (2. 4G, 1~11Mbps) , 802.11g (2.4G, 54Mbps) , 802.11b+g , and 80 2.11g+n .  Sho[...]

34[...]

35 4.2 Zone Wireless Settings E ach zo ne has its o wn VAP a nd c orrespon d s t o on e SSID. In P rivate zon e, it ’ s VAP1 and the SS ID is hidden, so publi c user s cannot s can this SSID in the air , for pri vil ege users who al re ady kn ow th i s SS ID, they can manuall y associate to the SSID of Private zone . On the o ther hand, the S SID[...]

36 Fragment Th reshold: Enter a value betwee n 256 and 2346. The defaul t is 2346. A packet siz e larg er than th is t hreshol d wi ll be fragment ed (s ent wi th several pi eces instead of one chunk) before tr an smi ssion . A sma ller value r esults i n small er frames but allows a large r number of fr ames in transmissio n. A lower Fr agment Thr[...]

37 will be sen t from th e VA P . RTS Thre shold : Enter a v alue between 1 and 2346. RTS (Req uest to Send) Thresh old determines the packet size at w hich the system issues a request to send (R TS) befo re sending the fr ame to preve nt the hidden node problem. The RTS mec hani sm will be acti vated i f the da ta si ze exceeds t he valu e provi d[...]

38 4.3 Zone Wireless Security Confi gu re Zone Wirel ess Secu rit y , g o to: Syste m >> Zo ne Co nfigura tion , cl ick Co nfigure of Private z one o r cli ck Co nfigure of Public zone. After th e ab ove confi gurati ons a re fini sh, set up th e wi reless s ecuri ty i s very im portan t to p rotect your wi reless n etwo rk. Security: For eac[...]

39  802.1X :  Dynamic WEP: For 80 2.1X s ecuri ty ty pe, Dyn am ic WEP is al ways ena bl ed to automatical ly gener ate WEP keys for encry ption.  WEP Key Le ngth: Sel ect fr om 64- b it or 128- bit key len gt h.  Re - keying Pe riod: The time interv al for the dynamic WEP key to be updated; the time unit is in second.  WPA -PSK: [...]

40 5 Who Can Access the Network 5.1 Type of Users Confi gure U sers, go t o: Us ers >> Authe ntic ation . Thi s section i s for admi nist rators to p re - c onfi gure au then tic ati on ser vers for th e en ti re syst em. Concurr ently up to three server s can b e select ed and p re - conf igured for static user authentication, one se rver us[...]

41 5.1.1 L ocal Click the button Configure of Local for f urther configur ation.  Local User List: It let the administr ator to view, add or dele te local user accoun t. Th e Upload User button is for importing a list of user a ccount from a text file. The Download User button is f or ex port ing a ll loc al us er acc ou nts into a te xt f ile .[...]

42  Search : Ent er a keywor d of a u se rname or rema rk to b e sea rch ed i n the t ext fil ed and cli ck thi s but ton to p erform th e sea rch. A ll usern ames mat chi ng the k eyword will be l isted .  Del A ll : Click on this button to delete a ll th e users a t on ce or cli ck on Delete hyperli nk to del ete a speci fic the user ind iv[...]

43  Edit Use r: If ed iting the c ontent of individual use r acco unt is need ed, click t he userna me of the desi red u ser a ccoun t in Local User L ist to enter the User P rof i le Interfac e for that particular user , and then modify or add any desire d informa tion such as Us ername , P assw ord , MAC Address (optional), Appl ied Policy (op[...]

44 5.1.2 RADIUS There a re t wo RADIUS authentication database for configura tion. Click the butto n Confi gure of any one of RADI US s erver s for furth er confi gurati on. The RAD IUS s erver set s the extern al a uth enti cati on for us er acc oun ts. En ter the i nform ati on for t he pri mary s erver and /or t h e secon dary serv er (th e seco[...]

45  NAS Port Type: In dic ates t he typ e of phy sic al port t he net wo rk acc ess se rver is u sin g to authent icate the user . Sys tem will send th is va lue to the exter nal RADIUS server , if the extern al RADIUS ser ver need s th is.  Class - P olicy Mapping: This funct ion is t o assign a Pol i c y to a RAD IUS class attrib ute sent f[...]

46 5.1.3 On - Dem and Users On - demand U ser Ser ver Config uration: The administr ator can configure th is authentication method to create on - demand use r acco unts. This funct ion is de signed fo r hotspo t owners to pro vi d e tempora ry us ers wi th free or p ai d wi reless Inter net a ccess in the hot spo t envi ronmen t. Ma jor functions i[...]

47  Receipt He ader: There are 3 re ceip t head ers s upp orted by th e syst em . Th e ent ered c onten t will be printed on the receipt. Thes e heade rs ar e opt ion al.  Receipt Foot er: Ther e are 3 rec eipt footer s supported by the system. Th e ente red c onten t will be printed o n the receipt. Th ese foot er s are opt iona l.  Remar[...]

48  Plan: The number of the spec ific plan.  Type: This is the ty pe of the plan, based on which it defines how the acco unt can be use d including U sage - time, Volume, H otel Cut - off a nd Duration - tim e .  Quot a: Th e li mit on how On - deman d us ers a re al lowed to a ccess the n etwo rk.  Price: The un it pri ce cha rge d for[...]

49 6) On - demand Account Creation After at l east one billing pl an i s enabl ed, th e ad mi nistrat or can gen erat e sin gle on - dem and u ser acco unts here. Click this to enter the O n - dema nd Acco unt Creation page. Click on the Creat e button of the desi red pl an t o create an on - demand account. The username and pass word of to be crea[...]

50 network. F or Time users, it is the total time. F or V olume user s, it i s the total amo unt of traffic.  Price: For e ach pl an, thi s is the uni t price c harged fo r an account .  Status: Show the status in enabled o r disabled.  Functio n: Press Cre ate button f or the desire d pl an; an Creati ng an On - demand Acco unt will appea[...]

51  Plan: The nu mb er of a speci fi c pla n.  Account Ty pe: Show a ccount type of t he plan in Usage - time, Dur ation - ti me or H otel Cut - o f f.  Quota : Th e tota l t ime a mount , in ter v al o r t ra ffic vo lum e on h ow On - dem and users a re a ll owed to acce ss the n etwor k.  Price: For each pl an, thi s is th e unit pri[...]

52  Status : The s tatus of the a ccount. o Norma l: the acco unt is not curre ntly in use and has not exceed the quota limit. o Online: the ac count is curre ntly in use . o Expired : the account is not v alid any more, eve n i f there is re maining quota left . o Out of Quota: th e account has exceeded the quota limit. o Redeemed : the account[...]

53 Note: The maximum quota is 365dys 23hrs 59mins 59se cs” even after redeem . If th e red eem am oun t exceed s th is n umber , th e syst em wi ll autom atic all y reject the redee m pro cess. Note: Du ra ti o n - ti m e and Hotel Cut - off type do not sup port red eem funct ion .[...]

54 5.2 User Login 5.2.1 De fault Authenticati on T here are diffe rent types of authe ntication database (LOCAL, RADIUS and ONDEMAND) that are supported by the system. Only Publ ic Zo ne can se t authenticat ion. A pos tfix is used to inform the sy stem which authe ntication o ption to be us ed for a uthenticating an acco unt (e.g. B ob @ l ocal or[...]

55 5.2.3 An E xample of User L ogin Norma ll y , u sers wi ll be au then ticat ed bef ore they get n etw ork a cces s th rou gh WHG - 1000 . This se ction presen ts th e basi c au then ti cation flow f or en d users . Pl ease m ake sure that the WHG - 1000 is confi gured prop erly and n etwork rel ated setti ngs a re d one. 1. Open an Inter net bro[...]

56 3. Successfu l! The Login S uccess Page m ean s you a re conn ected to the n etw ork and Int ernet now![...]

57 6 Restrain the Users 6.1 Black List Configure B lack List, go to: Users >> Black Li st . The administr ator can add, de lete, or edit the black li st fo r user access contro l. Users’ accounts that appear in the black li st will be denied of network a ccess. Th e admi nist rator can us e the pul l - d own menu to selec t the desired blac[...]

58 After ente rin g the u sernames i n t he “Use rn ame” fie ld and the rela ted i nforma tion in the “Rema rk” blank (not required), cli ck Apply to add the users . If rem ovin g a us er from th e bl ack l ist is d esired , sel ect t he u ser ’ s “ Delete” check box and then click t he Dele te button to remove that user from the blac[...]

59 6.2 MAC Address Control Configure M AC Address Control, go to: Users >> Ad dition al C ontro l . MAC AC L: With this funct ion, only the users with t heir MAC ad dresses in th is list can log in to WHG - 1000 . Th ere a re 40 users max imum all owed in this MAC address list. User authentication is still requi red f or th ese u sers. Cli ck[...]

60 6.3 Poli cy Confi gure Poli cy , g o to: Users >> P olicy . WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy . Globa l Poli cy is the system’ s univers al policy and applied to all clients unless the y are bound ed by anot her pol i cy . I n divid ua l P ol icy can be def ine d and [...]

61  Select Po licy: S elect th e desi red pol i cy profi le t o confi gu re .  Firew all P rofile : Eac h P o licy has a f ire wa ll se rv ice lis t and a s et of f irew al l pr of ile c on sis ting of firewal l rules.  Specific Rout e Profile: Th e default gatew ay of a des ired IP address can be def ined in a policy . When Sp e cifi c Ro[...]

62 6.3.1 Fire wall Firew all P rofil e: Click Se tting f or Fi rewall Profi le . The Fir ew all C on figu r at ion w ill a ppe ar . Cl ick Predefined and Custo m Serv ice Prot ocols t o edit the pro tocol list. C lick Fir ewall Ru les to edit the rul es. 1) Predefined Prot ocols Predefined and Cu stom Se rvice P rotocols: There a re pr edefi ned se[...]

63 If t he Protoco l Type is ICM P , i t wil l n eed to d efin e Type and Cod e . If t he Protoco l Type is IP , i t will n eed to defi ne Protoco l Number . 2) Firew all Rul es After the cus tom protocol i s def ined or just use the Predefin ed Serv ice Protoc ols , you wil l n eed to enabl e th e Fire wall R ule to apply these protocols. o Firew [...]

64 Sel ecti ng th e Filt er Rul e Numbe r 1 a s an exa mp le: o Rule Num ber: Thi s is th e rul e select ed “1” . Rul e No. 1 h as t he h ig hest pri ori ty; ru le No. 2 has the second prior ity , and so on. o Rule Nam e: T he rul e name c an b e cha nged h ere . o Source /D estin ation – Inter face/ Zon e: There are choice s of AL L, W AN , [...]

65 6.3.2 R outing  Specific Route Prof ile: Click the butto n of Settin g for Sp ecific Route Prof ile , t he Sp ecifi c Route Pro fil e lis t will appea r . 1) Specific Rout e  Speci fic Rout e Prof ile: Th e Speci fi c Defaul t R oute i s use t o cont rol cl ients to acce ss some speci fic I P segm ent by t he sp ecifi ed ga teway . o Des t[...]

66 2) Defau lt G atew ay  Defa ult G atew ay: The defaul t g ateway of a d esi red IP addr ess can b e defi ned in each Poli cy except Glob al Policy . When Specific Default R oute is enabled, all clients applied with this P olicy will access the Internet through this defa ul t gatew ay . o Enab le: Ch eck E nabl e box to activ ate this function[...]

67 6.3.3 Sc hedule  Sched ule Pr ofile : Clic k Setting of Schedule Profile to enter the configuration pag e. Select Enab le to sh ow the Permitted Login Hours lis t. T his fun ctio n is us e d to lim it the t ime wh en clien ts can l og in . Check the d esi red ti me sl ots checkbox a nd cl ick App ly to sav e the settings. Thes e setti ng s wi[...]

68 6.3.4 QoS P rofile Fo r certain applications or users that need stable bandwidth o r t r aff ic p rio rity , P olic y 1 to 5 a llow s defi nin g the QoS pro fil e for th e use rs govern ed by th is Poli cy .  Traff ic Cl ass: A T raffi c Class can be cho sen for a Group of us ers . The re are four traffi c cl asses: Voice , Video , Best - Eff[...]

69 6.3.5 Se ssion Limit T o p revent ill - behaved cli ents or mal ici ous soft ware fr om t akin g up the s ystem’ s conne ction resou rces, the ad mi ni strator can rest rict the n umb er of concurre nt sessions tha t a user c an establ ish .  The maximum num ber of concurrent se ssions includi ng T CP and UDP for ea ch use r can be specifie[...]

70 7 Access Network without Authenti cation 7.1 DMZ Confi gure DMZ , g o to: Network > > Netwo rk Address T ransl atio n >> DMZ (Dem ilit arize d Zone ) . There a re 2 0 sets of st ati c Interna l IP Addr ess an d Ext ernal IP Add ress avail able. En ter Inter nal and Externa l IP Ad dress as a set. A fter th e setup, acce ssin g the Ex[...]

71 7.2 Virtu al Se rve r Confi gu re Virt ual Server , go to: Netw ork >> Network Add ress T ran slation >> Public Accessi ble S erver . This function a llows the administr ator to set 20 virtua l servers at most, so that cl ient devices o utsi de the m anaged net work can access thes e se rvers wi thin t he man aged n etw ork. Di ffere[...]

72 7.3 Priv ilege List Configure Pr ivilege List, go to : Network >> Pri vilege Setup the Privile ge IP Add ress L ist and Privile ge MAC Add ress Li st . The cl ient s accessi ng the int ernet vi a IP addresses and/o r net wor kin g devi ces in the list can a ccess the ne twork without a ny authent ication .[...]

73 7.3.1 Privilege IP Privile ge IP Add ress List Confi gu re Pri vil ege IP A ddres s Li st, go t o: Net work Con figur atio n >> Priv ileg e >> IP Add ress List . If t here a re w orkst ati ons i nsi de th e mana ged net work t hat n eed t o ac cess t he n etwo rk wi thou t authentication, e nter the IP addresses of these workstations[...]

74 7.3.2 Privilege MAC Privile ge M AC Ad dre ss L ist In addition to the Privil ege IP List , MAC addre ss List allows the MAC address of the workstations that need to access the network without aut henticati on to be s et in t he “G ranted Acc ess by M AC Addres s” . WHG - 1000 all ows 100 privilege MA C addresses at most. W hen manually crea[...]

75 7.4 Disable Authenticati on in Public Zone Con figure Disab le Authent ication in Pub lic Zo ne, go to: System >> Zo nes Config uration, click Configure in Public Zo ne .  Authentication Required For the Zon e: When it is disabled, us ers will not need to authenticate before they get access to the network with in Public Z o ne.[...]

76 8 User Login and Logo ut 8.1 Before User Login 8.1.1 Login with SSL Confi gure H T TPS, g o to: System >> Gener al . HT TPS (HTTP over SSL or HTTP Secu re) i s the use of Secu re So cket L ayer (SSL) or T ransp ort Layer Secur ity (TLS) as a sub - l ayer under regular HT T P applicat ion layer ing. HT TPS encrypts and decrypts user p age r[...]

77 8.1.2 Interna l Domain Name with Certifi cate Configur e Interna l Domain Name, go to: Syste m >> G enera l . Inter nal Domain Name is the doma in name of the WHG - 1000 as seen on cli ent m achi nes conne cted under zo ne. It must conform to FQDN (Fully - Qualified Domain Name ) standard . A user on client machine c an use t his domain na[...]

78 Click “Cont inue to th is web site” to access the user login p age. Us e Defau lt Cer tifi cate: Click Us e Defa ult Cer ti ficat e t o use the d efau lt certi fica te and key . Cl ick restart to v ali date the changes.[...]

79 8.1.3 Walled Garden Confi gu re W all ed Gard en , go to: Net work >> Wal led G arde n . Thi s fun ction provid es cert ai n free servi ces f or users t o ac cess th e w ebsi tes l ist ed here b efor e log in and authentication. Up to 20 addresses or do ma in names of the websites can be defined in this list. Users wi thou t the n etwo rk [...]

80 8.1.4 Walled Garden AD List Configure W alled Garden AD List, go to: Netwo rk >> W alled Gar den AD L ist . This func tion pro vi des ad verti sement lin ks to w eb pages f or us ers to acc ess fre e of cha rge before login and a uth entic ation . Adverti semen t hyperl in ks are di spl ayed on the us er ’s login pag e. Clien ts who cl i[...]

81 8.2 After User Login 8.2.1 Portal URL after suc cessful login Confi gu re Portal U RL aft er a su cc essful user l ogi n , go t o: Sy stem >> General . When this f unction is ena bl e d, enter the UR L of a W eb s erver a s the Portal page. Once logged in succ essful ly , use rs wi ll be di rected to th is URL , such a s http://www.google.[...]

82 8.2.2 Idle Timer Configure I dle Timer , go to: Users >> Additi onal Cont rol . If a use r has idled with no network a ctivities, the system will automatica lly kick out the user . The logout timer ca n be set between 1~1440 minutes, and the default idle time is 10 minutes.[...]

83 8.2.3 Multiple Login Co nfig ur e M ult iple Lo gin , go to: Users >> Addi tion al Con trol . When e nabled, a user can log in fro m different co mputers with the same acco unt. (This func tion doesn’t support On - demand use rs and RADI US authentication. )[...]

84 9 Networking Features of a Gateway 9.1 IP Plug and Play Conf i gure I P Plug and Play , go to: Net work >> Client Mob ility . WHG - 1000 supp orts IP PNP func tion. User can login and acc ess ne twork with any IP address setting. Th is f unc tion is disa ble d in de fa ult s et tin gs. When IP P NP is en abl ed, a t the user end, a static [...]

85 9.2 Dynamic Domain Na me Service (DDNS) Confi gu re Dynam ic D oma in Name Se rvice, g o t o: Netwo rk >> DDNS . Before activ ating this f unction, you mus t have your Dynamic DNS hostname registere d with a Dynami c DNS provider . WHG - 1000 supports DNS function to alias the dynamic IP address for the W AN port to a static do main name, [...]

86 9.3 Port and IP R edire ct Configure P ort a nd IP Redirec t, go to: Network > > NAT >> Port and IP Red ire ct . This function a llows the administrato r to set 4 0 sets o f the IP ad dres ses a t mos t for redi recti on purpose. When the user attempts to conne ct to a destination IP addre ss li sted he re, the connection packet wil [...]

87 10 System Management and Utiliti es 10.1 System T ime Confi gu re System Tim e, go t o: Sy stem >> G eneral . NTP (Network Time Protoco l) communication pr otocol c an be used to synchronize the syste m time wi th remot e ti me ser ver . Pleas e sp ecify t he l ocal tim e zone an d the IP a ddres s of at l east on e NTP server for a djust [...]

88 10.2 Ma nagement IP Confi gu re Manag eme nt IP , go to: System > > Gener al . Only PCs within the M anag ement IP range on th e l ist are al lowed to acc ess t he syst em' s web mana gement in terfac e . For example, 10.2.3. 0/24 means that as long as an administr ator is using a computer w ith the IP address r an ge o f 10.2 .3.0 /2[...]

89 10.3 User Log Access IP Address Confi gu re User Log Ac cess IP History , go to: Sy stem >> Ge nera l . Specify an IP address of the a dministrator’ s computer or a billing system to get billing histo ry in formati on of W HG - 1000 wi th t he prede fin ed UR Ls. Th e fil e nam e for mat i s “yyy y - mm - dd” . An ex am ple is pr ov [...]

90 10.4 SNM P Confi gu re SNMP , g o to: Syst em >> General . WHG - 1000 supports SNMP v1/v2c. If this f unction is e nabled, the SNMP Mana gement IP and the Community st ring can be ass igned for SNMP a ccess to the sy stem .[...]

91 10.5 Thr ee - Level Administration WHG - 1000 supports three kinds of account interface. Y ou can log i n as admin , m anag er or oper ator . The defau lt usernam es and p assword s show a s fol lows: Admin : The admin istrat or can access all configuration pages of WHG - 1000 . User n am e: ad min Password: ad min After a succ essful l ogin to [...]

92 Manag er: The manager can only access the configurat ion pages under User Aut hentic ation t o manage the user acc ounts . User Na me: manager Password: m anage r Oper ator : The oper ator ca n only access the co nfigur at ion page of Crea te On - dema nd User to creat e new on - demand user acc ounts and print out the on - de mand user account [...]

93 10.6 Cha nge Password Configure C hange Passwor d, go to: Uti litie s >> P asswo rd Chang e . There a re t hree levels of aut hori ti es: adm in , m anag er or operator . The default user names and passw ords are a s fol lows: Admin : The admin istrat o r can access all config uration pa ges of WHG - 1000 . User Na me: adm in Password: adm[...]

94 Caut ion: If the admi nistrator’s passwor d is lost, the administr ator’s passwor d still can be change d through the text m ode mana gemen t in terfac e via the serial console port.[...]

95 10.7 Bac kup / Re store and Reset to Factory Configure B ackup / Res tore and Reset to F actory Default, go to: Uti liti es >> Bac kup & Rest ore . This function is use d to backup/restore the WHG - 1000 settings. Also , WHG - 1000 can be resto red t o the fac tory default settings here .  Backup System Settin gs: Clic k Backu p t o[...]

96 10.8 Fir mware Upgrade Confi gu re Firm ware Upg rade, g o to: Util ities >> System Upgrade . The administrator can dow nloa d the l atest firm ware from w ebsi te and up grade the syst em h ere. Sel ect the l at est firm ware a nd Br owse button, then click A p ply , the sy stem wi ll u pload the fi le and resta rt t o perf orm the upgrad[...]

97 10.9 Resta rt To p erform syst em r estart, go to: Utilit ies >> Rest art . This function a llows the administrato r to safe ly restart WHG - 1000 , and the process tak e s approxi ma tely three mi nu tes. Cl ick YES to rest art W HG - 1000 ; cli ck NO to go back to the previous screen. D o NOT pow er o ff th e p ow er du ring system resta[...]

98 10.10 Network Utility Confi gu re Netwo rk U tili ty , go to: Ut ilitie s >> Network Uti lities . Sys tem provide some network utilities to allow administr ators to use . Wake - on - LAN is for waking up re mote devices that supports W a ke - on - LAN featu re by ente rin g th e MAC address of the target device and the n press W ake Up but[...]

99 10.10.3 Trace Route It allows administr ator to find out the re al path of packets from the gatewa y to a destina tion us ing IP addre ss or H ost d omain name. 10.10.4 Sho w ARP Table It allows administr ator to v iew the IP - to - Physical addres s tra nsl ation tables used by address resolution pro tocol (ARP).[...]

100 10.11 Moni tor IP Link Configure Mo nitor IP Link, go to: Network >> M onit o r IP . WHG - 1000 will send out a packe t periodically to monitor the connec tion status of the IP addresses on the list. On e ach monitore d item with a WEB server running , administr ato rs may a dd a link for the easy ac cess by ent ering the IP , s elect the[...]

101 10.12 Cons ole Inte rfa ce Via th e consol e port , ad mini strators can enter t he c onsol e in terfa ce for han dl ing prob lem s and situations oc curred during oper ation. 1. In ord er to conn ect t o the c onsol e port of W HG - 1000 , a console, modem cabl e and a terminal sim ula tio n prog ram, suc h as the Hy per T ermi na l are n eede[...]

102  Dis p lay interf ace settings: I t displays the infor mati on of each network interface setting including the MAC address, IP address, and Ne tmask.  Displa y the routing table : The internal routing table of the system is display ed, which may he lp to confirm the Static R oute settings.  Displa y ARP table: The inter nal ARP table o[...]

103 Caut ion: Alt hough it d oes not req ui re a us ernam e an d pas swo rd fo r the conn ecti on vi a th e se rial p ort, the same mana gemen t int erfac e ca n be ac cess ed via SSH . The refor e, we recom men d you t o imm edi ately change the WHG - 100 0 A dmin userna me and passw ord af ter l oggi ng in t he syste m fo r the fir st t ime.  [...]

104 11 System Status and Reports 11.1 View the Status Thi s section i nclu des Sy stem , Int erfac e , Routi ng Ta ble , Onl ine User s , User Log and E- m ail & SYSLOG to provide system s tatus in for mation and online user status. 11 .1.1 System Status View Syste m Status , go to: Stat us >> S y stem . Thi s secti on pr ovides a n overv[...]

105 The d escri pti on of t he ab ove - men tion ed tab le is as fo llow s: Item Descr iption Firmware Ve rsion The presen t firmw are vers ion of WHG - 1000 System N ame The sy stem name. Th e def ault is WHG - 1000 Portal URL The page th e users are direc ted to after init ial login succ ess. Primary S YSLOG server The I P address and port number[...]

106 11 .1.2 Interface Status Vi ew Interf ace Status, go to : Stat us >> Int erf ace . Thi s secti on pr ovides a n overvi ew of th e in terfac e for the ad min ist rator inc lu ding WAN , Zo ne Wirele ss Ge nera l Sett ing s , Zon e - Private and Zone - Public .[...]

107 The d escri pti on of t he ab ove - men ti oned t able is a s fo llow s: Item Description WAN MAC Address The MAC address of the W AN port. IP Addres s The IP addr ess of the W AN port. Subne t Mask T he Subnet M ask of th e WAN port. Packets Out/In The tota l accum ulated pac kets in/out th rough th is W AN port s ince the gatew ay boots u p. [...]

108 11 .1.3 Routing T able View Sys tem Status, go to: Status >> Ro uting Ta ble . All the Policy Rou te ru les an d Global Pol icy Route rul es wi ll be list ed her e. Als o it w ill show t he System Route ru les spec ified by ea ch i nterfac e.  Pol icy 1 ~5: Shows the info rmation o f the individua l Po licy fro m 1 to 5.  Global Po [...]

109 11 .1.4 Current Use rs Vi ew Curr ent Us ers , g o t o: Status >> Onlin e Users . In this pa ge, each online user’s info rmation inc luding Usern ame , IP A ddress , MAC Addr ess , Pkts In , Bytes In , Pkts O ut , Bytes Out , Idle and Kick Out will be shown . Administr ators can force out a s pec ific on lin e us er by clic kin g th e h[...]

110 11 .1.5 Us er Log Vi ew User L og , g o to: Status >> Use r Log . Thi s page is u sed to ch eck th e traffi c hist ory of WHG - 1000 . Th e hi story of ea ch d ay wil l be sa ved separ ately in the DRAM fo r at least 3 days (72 full ho urs) . Th e system a lso keep s a cu mul ated rec ord of the tr affic data gene rated by eac h user in t[...]

111 Expir ation Time , an d Rema rk , of on - demand user act ivi ties.  Roaming Out U ser Lo g E ac h line is a roa ming out t r af fic hist or y rec or d con sis ting of 1 4 fie lds , Date , Ty pe, Na me , NSID , NASIP , NASPo rt , U serMAC , Sess ionID , Ses sionT ime , Bytes in , Bytes O u t , Pkt s In , Pkt s Out and Me ssage , of u ser act[...]

112 11 .1.6 Local U ser Monthly Network Vie w L oc al Us er M on thly Ne two rk Us age , go to: Status > > User Log .  Monthly Net work Usage o f Local User The system kee ps a cum ulated re cord of the traffic data gener ated by ea ch Local user in the late st 2 calend ar months. E ac h li ne i n a mon thl y netw ork u sage o f loc al u s[...]

113 11.2 Notific atio n Confi gu re No tific at io n , go to : S tatu s > > E- mai l & S YSLOG . WHG - 1000 can automatically se nd the notification of Monitor IP R eport , Use rs Log and Ses sion Log to up to 3 particular e - ma il a ddr es ses . A tria l ema il is pr o vid ed by th e s yst em fo r v a lidat io n. Secon dl y , the system[...]

114 11 .2.1 E- Mail Confi gu re Noti fica tion, g o to: St atus >> E - mai l & SYSLO G .  Notific atio n E - m ail Se ttings :  Receiv er Email Addre ss (es): Up to 3 e - ma il addres s can be s et up t o r ecei ve the n oti fica tion. Thes e are t he re ceiver ’s e - mai l a ddress es. Th ere a re fou r ki nds of noti ficat ion t[...]

115 11 .2.2 SYSLOG  SYSLOG Server S ettin gs: There are 4 types of SYSL OG supported: System Log , On -dem and User L og , Session Log , and HTTP We b Log . E nter one or tw o of the Syslog s erver IP address and P ort num ber to speci fy wh ich and from whe re th e rep ort sh oul d be sen t t o. Note: When th e numb er of a u ser ’s session ([...]

116 11.2.3 FTP  FTP Server S ettings:  FTP Server S ettings FTP Destination: Ses sion Log wi ll be sent to th e F TP s erver a utoma ti call y duri ng every d efi ned int er v al in Se ssio n Lo g ema il no tif ica t ion. Th e max imum log file siz e is 12 8K. In a ddit ion, th e lo g f ile also will be se nt to the F TP se rver onc e th e fi[...]

117 11.2.4 Event Log Event Log: T he Event Lo g pro vides the system activities records. The administrato r can monitor the system st atus by checki ng t his l og. In the log , normally , e ach line repres ents an eve nt recor d which includ es th ese fields:  Date/Time: The time & date when the ev ent happened  Hostna me: Indicate whi ch[...]

118 12 Advanced Applicatio ns 12.1 Upload/ Download Local Users Accounts To Upload / Download Local Users Acco unts, go to: Use rs >> A uthent ication, cli ck C onfi gure button of Local . Or cl ick Q uick Link s >> Loc al Use r M anage ment from system Home page.  Upload User: Clic k Upload Use r to enter the Upload User from File i[...]

119 then sav e it on disk.[...]

120 12.2 RADI US Advanced Settings Confi gu re RADIUS Adv anced Settings, go to : U sers >> Authent icati on . Clic k C onfi gure of RADIUS .  Complete vs. On ly ID F or RADIUS a uthenticat ion, ther e is an option to se nd the complete username with postfix o r userna me onl y . Usern ame Form at : When Complet e option is check ed, both [...]

121 12.3 R oam i ng O ut Confi gu re local user Roam ing Out , go to: User s >> Aut hent icat ion, click confi gure of Local . Under certain conf igurat ions , WHG - 1000 can act as a RAD IUS server for R oaming Ou t l ocal u ser logged from othe r system. The Loca l User database will act as the RAD IUS user dat abase.  Account Roami ng O[...]

122 12.4 Cust omizable Pages Configur e Cu s t om Pa g e s , go to: Syst em >> Zo ne Conf igur ation , click C onfigure in Pub lic z one . There a re several use r login and logout page s that can be custom iz ed by the administr ator . Y ou can sel ect Te mpl ate P age o r External Page .  Template Page: T o utilize the te mplate user pag[...]

123 Page for cl i ent to l ogi n wi th u sername a n d pa ss word.  External Pag e: Choose the Ext ernal Page option if y ou wish to us e user pages loca ted o n a designated websi te. Click the button o f Confi gure fo r each cu stom pages and enter the URL of its ’ cor respon din g external login page and then click Apply . After applying th[...]

124 Appendix A. Network Configuration on PC & User Login  Network Configurati on on PC After WHG - 1000 is in stalled, the following conf igurations must be set up on the PC: Int ernet Connect ion Set up and TCP/I P Net work Setup .  Internet Connect ion Setup  Windows 9x/ 2000 1) Choose Sta rt >> Co ntrol Pan el >> Interne[...]

125 3) Choose “ I w ant to set up my Int ernet connection m anually, or I want to connect through a local Area netw ork (LAN)” , and then click Next . 4) Choose “ I conn ec t th rough a local area network (LAN) ” and then click Next . 5) D O NOT choo se any op ti on in the following LAN window for Internet conf igurat ion, and just click Ne[...]

126 6) Choose “No” and then cli ck Next . 7) F ina lly , clic k Finish to exit the Internet Conne ction Wiza rd . Now , the set up is complete d.  Windo ws XP 1) Choose Sta rt >> Co ntrol Pan el >> Internet Option .[...]

127 2) Choose th e Conne cti ons tab, and then click S etup . 3) W hen the Welcome to the New Conne ction Wiz a rd window appears , click Next . 4) Choose “Con nect to t he I nternet” and then cl ick Next .[...]

128 5) Choose “Set up m y co nnection manua lly” and then click Next . 6) Choose “ Con nect using a broadb and connec tion th at i s al ways on ” and then c lick Nex t . 7) F ina lly , clic k Finish to exit the Conne ction Wiza rd . Now , the setup is complete d.[...]

129  TCP/IP N etwork S etup If the oper ating system of the PC in use is Windows 95/98/ME/2 000/XP , keep the default se ttings without any c hanges to directly sta rt/restart the s ystem. With the facto ry default settings, d uring the process of starting the syste m, WHG - 1000 with DHCP func tion will auto matically a ssign an appropriate I P[...]

130 3) Using DH CP: If you want to use DHCP, click on the IP Addre ss tab and choo se “Obt ain an IP addr ess au tom atic ally” , and then c lick OK . T his is a ls o t he d ef ault setting of W indows. The n, reb oot th e PC t o make sure an IP address is o btained from WHG - 1000 . 4) Using Specif ic IP Ad dres s: If y ou want to us e a spe c[...]

131 4.2) Cli ck on the Gat eway tab. En ter t he gateway address of WHG - 1000 in the “ New g ate way” field and clic k Add . Then, cli ck OK . 4.3) Cli ck on DNS Co nfigu ratio n t ab. If th e DNS Ser ver fiel d i s empt y , s elect “Enab le D NS” a nd ent er D NS S erve r address . Click Add , and then click OK to complete the configurati[...]

132 2) Rig ht click o n the Loc al Area Con nect ion icon a nd select “Proper ties” . 3) Select “ Inter net Prot ocol (TCP/IP)” and then click Propert ies . Now, you can choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “ Obta in an IP add ress autom atica lly” , an d th en cli ck OK . T hi [...]

133 5) Using Specif ic IP Ad dres s: If y ou want to us e a spe cifi c IP addre ss, acq ui re the f oll owin g in formati on from th e network ad ministrator: the IP Address , Subne t Mask and DNS Serv er address provided by your ISP and the Gateway address of WHG - 1000 . Caut ion: If your PC ha s been s et u p comp let ely, ple ase i nform the n [...]

134 5.4) Enter the ga teway a ddr ess o f WHG - 1000 in the “ Gate way ” fie ld , and then cl ick Ad d . After back to the IP Settings tab, cl ick OK to com plete the conf igurat ion.  Check the TCP/IP Setup o f Windo w XP 1) Select St art >> Control P anel >> Network Connection . 2) Rig ht click on the Local Are a Con nect ion i[...]

135 3) C lick on the Gen eral tab and choose “ Internet Protocol (TCP/IP )” , and then cl ick Prop ert ies . Now, you ca n choose t o use DHCP or a spe cifi c IP address. 4) Using DH CP: If you want to use DHCP, choose “O b tain an IP addres s autom atica lly” and click OK . T h is i s also the def ault setting of Windows. Then, reboot th e[...]

136 5.1) Ch oose “ Use t he fol lowin g IP addres s” and en ter the IP address , Subnet mask . If the DNS Server fiel d i s empty , sel ect “Using the f ollowing DNS serve r addres ses” and ent er th e DNS S erver a dd ress . Th en, cl ick OK . 5.2) C li ck Adv anced to ent er t he Advanced TCP/IP Sett ings w i n d o w. 5.3) Click on the IP[...]

137 Appendix B. Policy Priority  Global P olicy, Authentic ation Polic y and User Policy WHG - 1000 sup por ts mult iple P ol ic ies , inc lud ing o ne Global P olicy and 5 in div idu al Policy can be assign to diffe rent Auth enticati on Server . Global Polic y i s the syst em’s universal poli cy and applied to all clients, while other indivi[...]

138 Appendix C. WDS Management The P ublic Zo ne of WHG - 1000 supports up to 2 WDS links. WDS (Wireles s Distribution Sy stem) is a functi on used to conn ect A Ps (Acce ss Points) wireles sly to e xtend wi rele ss covera ge. Th e WDS manage ment func tion of the sy stem can help ad ministr ators to setup two WDS links. Confi gu re WDS , g o to: S[...]

139 Appendix D. RADIUS Accounting This sec tion will briefly introduc e the basic configur ati on of RADIUS server to work with VSA for the purpose to control the maximum client v olume usage (upload; download or upload + download tr affic). Thi s VSA will be sent from RADIUS server to gatew ay along with an Access - Accept pac ket . I n other word[...]

140 If the amount o f traff ics i s larger than 4 GB, the attributes o f “XXXX - 4G B” wi ll be used . Fo r example, if the amount is 5 GB, the following settings should be set: “ WHG - 1000 - Byte - Amount = 1048576” and “ WHG - 1000 - Byt e - Amount - 4GB = 1” . On the other hand, when the administr ator fills in all attr ibutes, the [...]

141 Step 3 Cli ck Edit P rofile and sel ect th e Adv ance d Ta g . Cli ck Add to add a new Ven dor- spec ific attribute.[...]

142 Step 4 Add a new attribute und er Vend or - sp ecific Set “ Vendor Code = 21920 ”. Check Yes to conform to the RADIUS RFC. Cli ck Configure At t ribut e to pr oceed. Set “V endor - as sign ed a ttri bute numbe r = 10” Sel ect “Attribute form at = Hexadecimal” Set “Att ribute Value = 100000 0” Step 5 Confi rm wh ethe r th e Vendo[...]

143 Step 6 Follow t he sam e step s t o cr eate oth er Vendor- speci fi c At trib ut e i f needed.[...]

144 3. VSA configuration in R ADIUS server (Free RADIUS) This se ction will gu ide you thr ough VS A conf iguration wi th Free RADIUS v1.0. 5 running on “F edor a” . Befor e get tin g sta rted, op en th e sh ell of RAD IUS se rver; for e xamp le, use Putty to access the Linux host: Step 1 Confi rm th e fol lowi ng key elemen ts i n RA DIUS serv[...]

145 Step 4 Edit and sa ve the contents of the fil e “dict ionary . WHG - 1000 ” as f oll ows: Administ rator can also add other a ttributes as the table sta ted in Section 2 with the same format. Step 5 Edi t the fi le “d icti onary” un der the fol der “f reeradi us” .[...]

146 Step 6 T o inclu de “dic t iona ry . WHG - 1000 ” in the dic tio na ry of RADI US se rv er , ins ert it in an i n crem ental posi tion as foll ows. Step 7 Open the “r adius” databas e. Step 8 Insert VSA i nto RADIUS respo nse. In this example, the max imum download and upload tr affics in bytes fo r group03 us ers is 1MBytes.[...]

147 Step 9 Re start RADIUS daemon to get your settings activ ated.[...]

148 Appendix E. On - demand Account types & Billi ng Plan This sec tion explains the para meters as well as the differ ent account types pro vided when editing billing plans in On - demand a uthenticat ion. o Usage - t ime with Expi ration Time : Can access inter ne t as long as account v alid with remaining quota (us able time). Ne ed to ac ti[...]

149 o Usage - t ime with No E xpir ation T ime: Can acc ess internet as long as acc ount has remaining quota (us able time). Ne ed to ac tivate the purchased acco unt within a given ti me peri od by l oggi ng in for t he fi rst ti me. Ideal for sh ort t erm us age. For examp le i n coffe e shops , airpor t terminals e tc. Only de ducts quota while [...]

150[...]

151  Hotel C u t- off - t ime : Hot el Cut - off - time i s the cl ock ti me (n ormall y check - out time) at which the o n - demand account is cut off (made expired) by the system on the foll ow ing day or many days late r . On the acco unt creation UI of this plan, oper ator can enter a Unit va lue which is the numbe r of days to Cut - off - t[...]

152 o Volum e: Can access internet as long as account v alid with remaining quota (tr affic vo lume). Accoun t exp ires when V al id Peri od has been used up or quota depleted. I deal for small quantity a pplicat ions suc h as sending/r eceiving ma il, trans ferr ing a file etc . Count down of V alid P eriod is co ntinuous regar dless of logging in[...]

153 o Durat ion - t ime with E laps ed T ime: A ccount activ ated upo n the account creation time. Count down begins imme diately after account c reated and is continuous re gardless of logging in or out. Account exp ires once t he Elapsed Time has b een reac hed. Ideal for[...]

154 provi din g intern et ser vice i mmed iat ely aft er acco unt creati on th rough out a sp ecifi c peri od of ti me.  Begin T ime is the time that the ac count will be activ ated for use. I t i s set t o accoun t creat ion tim e.  Elapse d Tim e is the time interva l for which the account is v ali d for internet access (xx hrs yy mins ). ?[...]

155 plan to cr eate ticke t set to be Cut - off on 23:00. If an account of this kind is crea ted after the Cut - of f Time, the account will automatica lly expire.  Begin T ime is the time that the ac count will be activ ated for use. It is se t to account creat ion tim e.  Cut - off T ime i s the clock t im e when t he ac cou nt w ill expi r[...]

156 peri od of ti me. For exam pl e durin g exhi biti on event s or la rge conven tion s such as Compu tex wher e each regi stered p arti cip ant wi ll g et an i ntern et accou nt valid fro m 8: 00 AM J un 1 to 5:00 PM Jun 5 created in batc h like coupons .  Begin T ime is the time that the ac count will be activ ated for use, defined explicitly[...]

157 Appendix F. External P ayment Gateways This sec tion is to show independent Hotspo t owners how to configu re relat ed set ti ngs i n order to a ccept payments vi a Aut horiz e.net, Pa y Pa l , Secu rePay or W orlPay , making the Ho tspot an e - commerce environ ment for end u sers t o pay for and obt ain Inte rnet a cces s with credit card s. [...]

158  Service D isclaimer Content/ Choose Billing Pl an for Authorize.N et Payme nt Page/C lient’ s Purc hasing Recor d Service D isclaimer Content V iew servi ce ag reem ents an d fee s for the s tand ard paym ent g ate way servi ces he r e as wel l a s addi ng n ew or edi ting services di scl aimer . Choose Bi lling Pla n for Auth orize.Net P[...]

159  Author ize.Net P ayme nt Page Fields Config uration/ Autho rize.N et Payme nt Pag e Remark Cont ent Authorize.Net P ayme nt Page Field s Configurat ion o Item: Ch ec k the box to sho w this item o n the customer’ s pa yment inter face. o Displayed Tex t : Ent er w hat n eeds t o be shown for t his fiel d. o Required: Ch eck th e b ox to i[...]

160 o E- mail: An email address may be provided along with the billing information of a transacti on. Thi s is t he custom er’ s email addre ss and should contain an @ symbo l. o Customer ID : This is a n int er na l ide nt ifie r for a cus to mer that ma y be ass ocia te d wit h th e billing informa tion of a tr ansac tion. This field m ay co nt[...]

161 2. Payments via PayPal Configure P ay ments via Pa yP al, go to: User >> Authe nticati on >> On - dem and User >> Ex te rnal P aym ent Gatew ay > > P ayPal . Before se tting up “Pa yPal” , it is re quired that the ho tspot owners have a valid P ayP al “Business Account ” . Afte r opening a P a yP al Business Acco[...]

162  Service Disclai m er Co ntent / Ch oose Billin g Pl an fo r PayP al P aymen t Pag e o Service Di sclaimer Co ntent: Vi ew t he s ervice agre ement and f ees f or th e stand ard payment gat eway se rvices a s w ell as add or edi t th e ser vice d iscl aim er cont ent h ere. o Choose B illing Plan for P ayPal Payment Page: These 10 pl ans are[...]

163 3. Payments via SecurePay Confi gu re P aym ent s via S ecurePay , go to: User s >> Auth ent icatio n >> On - demand Use r>> External Pay ment Gatew ay >> SecureP ay . Before se tting up “SecureP ay” , it is required that the hotspot owners hav e a valid S ecurePay “Merchan t Ac count ” from i ts offi cial websit[...]

164  SecurePay Pag e Configur ation Merch ant ID: The ID that is a ssoc iated with the Me rchant Acco unt. Merch ant Pa ssword : This is the key use d by Secure Pa y to va li date all the tr ansactions. Paym ent G ateway URL : The defa ult website address to post all trans action data. Verify SSL Certific ate: This i s to hel p p rotect th e sys[...]

165 4. Payments via World Pay Confi gu re P aym ent s via WorldPay , g o to: Users >> Auth entic atio n >> On - de mand User >> Ex ternal Payment Gateway >> WorldP ay .  WorldPay Payme nt Configur ation World Pay Insta llatio n ID: The ID of the associated Merchant Acco unt. Paym ent G ateway URL : The defa ult website of[...]

166 Vi ew the se rvice a gre emen t and fees fo r the st an dard paym ent gatew ay ser vices a s wel l as add or edi t th e servi ce d iscl aimer c onten t he re.  Wo rl dPay Billing Con fig urat ion These 10 plans are the plans in Bi lli ng Con figu rati on , a nd the desired plan(s) can be enabl ed.  WorldPay Note Cont ent The m essag e con[...]

167 STEP ④ . Check the Enabl e Payment Resp onse chec kbox. STEP ⑤ . Enter the P ay ment Response URL .  URL : <wp display item=MC_callback> STEP ⑥ . Check the Enabl e th e Sh opper Resp onse.[...]