IC Intracom GuestGate MK II manual

G UEST G ATE ™ MK II Wireless 300N Hotspot Gateway USER MANUAL MODEL 524827 INT-524827-UM-0710-01[...]

- 2 - SAFETY AND REGULA T OR Y NOTICES This equipment has been tested and found to comply with the limits for a Class B computing device pursuant to Subpart B of Part 15 of FCC rules, which are designed to provide reas onable protection against such interference when operated in a commercial environm ent. Operation of this equipment in a residentia[...]

- 3 - T ABLE OF CONTENTS SAFETY AND REGULA TORY NOTICES .................................................................................................. ........... 2 TABLE OF CO NTENTS ............................................................................................................. ........................... 3 INTRODUCTION .........[...]

- 4 - INTRODUCTION Congratulations on your purchase of the INTELLINET NETWORK SOLUTIONS GuestGate ™ MK II Hotspot Gateway. GuestGate c onnects guests to your network, allowing them to access only the Inter net (Web, Email, C hat and other applications). GuestGate protects your existing network from unauthorized access and, if required, even shiel[...]

- 5 - Bandwidth Control GuestGate controls how much of your Inte rnet connection speed is dedicated to the guest network. Upload and download bandwidth can be configured individually. Layer 3 Client Isolation Function In a public location with a public Wireless A ccess Point there are often concerns about security. GuestGate not only protects the H[...]

- 6 - Installation Examples GuestGate in a SOHO Network Environment This is a typical setup in which the Internet connection is established through an NAT router with an integrated firewall. LAN / Host Network GuestGate MK II Wireless Guest Network Wired Guest Network Modem / Route r[...]

- 7 - GuestGate in an SMB Environment In larger networks GuestGate connects to any available switch port behind the Firewall/Gateway/Router. GuestGate MK II Wireless Guest Network Wired Guest Network LAN / Host Network Firewall / Gatewa y LAN Switches[...]

- 8 - GuestGate Function Basics Ports GuestGate features a total of five 10/100 RJ45 ports. One por t is for the connection of GuestGate to the host network (Host Port), f our ports are available for guest connections (guest ports). The guest ports can be connected to hubs, switches, wireless access points, PCs or notebooks. Host Port By default Gu[...]

- 9 - INST ALLA TION Recommended Setup This setup method assumes that a DHCP Server su ch as a router is pr esent in your network. 1. Connection to the Host Network Connect standard RJ45 network cable to GuestGate’s Host Port and to a RJ45 port on your existing network (Ethernet switch port, router switch port, etc.). Turn on GuestGate and verify[...]

- 10 - 3. Testing Internet Access Start a PC or notebook which is connected to one of the guest ports. Launch a Web browser and open an Internet Web site such as http://www.intellinet-network.com. You will then see GuestGate’s welcome page. Click “continue” and you will then be forwarded to the Web page you originally entered in the Web brows[...]

- 11 - 4. Accessing the Administrator Web Interface from the Host Network A. Connect to the router (DHCP server) in yo ur network and open the DHC P client log of the router. Connect GuestGate’s host port to one of the router’s LAN ports and power on GuestGate. Wait about 30 seconds, and then refres h the DHCP client log in the router. The last[...]

- 12 - 5. Changing Administrator Password For security reasons it is recommended to c hange the administrator pa ssword of GuestGate. Follow the steps below to change the password. Click on “Device Settings.” Enter the old password: 1234. Enter a new password (up to 20 characters long). Retype the new password. Click “Change.” Click on “E[...]

- 13 - Check “Save settings.” Check “Reboot device.” The reboot takes about 25 seconds, after which you will be redirected to GuestGate’s login page when the reboot is completed. NOTE : The interface is designed to let you make changes on all configur ation screens without saving each change individually. Once you ar e done programming Gu[...]

- 14 - Advanced Setup The standard installation of GuestGate is bas ed on the assumption that a DHCP Server is present in your network. If this is not the case, you can still config ure GuestGate manually. To do this you need to turn GuestGate on while it is disconnected from the network. If no DHCP Server can be found after 3 minutes, GuestGate wi[...]

- 15 - Right-click the “Local Area Conn ection” icon and select “Proper ties” from the context menu. In the “Local Area Connection Properties” window, highlight “Internet Protocol (TCP/IP)” and click on “Properties.” When the “Internet Protocol (TCP/IP) Pr operties” window opens, you need to make the changes as shown below.[...]

- 16 - Click “OK” when done. Close the previous Windows by clicking “OK” as well. The TCP/IP settings of your system are now compatible to GuestGate.[...]

- 17 - 2. Connecting to Guest Gate via a Web Browser Start your Web browser and open t he address http://192.168.2.1. The Administrator Web Inte rface Login Screen then appears. Enter the password 1234 and click “login.” NOTE: It is recommended that you change t he administrator password as described in the previous section. 3. Host Configurati[...]

- 18 - Configuration Host: With the Configuration Host window displayed, specify the devic e IP address, IP netmask, IP gateway (Internet connection gateway, router) and DNS server. Device IP address: A free IP address in your network. This is the IP address you assign to GuestGate. IP Netmask: Enter the same netmask (or subnet mask) you use in you[...]

- 19 - CONFIGURA TION OPTIONS Status Screen 1. Network Information: Basic information about the host network interface. 2. Device Information : Display of the current firmware ve rsion, the system’s uptime and the system time. 3. Device Status Displays the status of the password-protected Internet access (“disabled” = no password required) an[...]

- 20 - Guest Configuration Screen This page shows the configur ation options for the con nected guest computers. 1. Configuration Guest Option “separate network for each client (automatic)” If this option is activated, GuestGate r andomly assigns different networks to each connected guest computer. This option should be activated if you want to[...]

- 21 - 2. Access Control: Wireless LAN Wireless LAN Allows activating or deactivating the WLAN function of GuestGate. SSID Define the name of the Wireless network, e.g ., “free wifi,” “guest wireless,” “hotelwifi,” etc. Operational Mode Here you can select which wir eless modes are supported by GuestGate. The standard mode is 802.11 B/G[...]

- 22 - Bandwidth Upload Limit Bandwidth control for the uploa d speed (sending files to the Internet), with options the same as above. Trusted Ethernet Addresses If you wish to permanently authenticate a guest computer, you can add its MAC address to GuestGate’s configuration. Gues tGate will not show the welcome page to any computer that has bee[...]

- 23 - 4. Access Control: Welcome Screen Welcome Screen Enable or disable the welcome page for gues ts. (Default = enabled.) If this parameter is set to “disabled,” all guest users can acce ss the Internet freely. No welcome page is displayed, even if a guest password is defined below. Global Guest Password If you require your guests to enter a[...]

- 24 - Host Configuration Screen 1. Configuration Host Option “dhcp” GuestGate automatically receives the IP address, netmask, gateway and DNS server information from the DHCP server in your network, typically a router. Option “static” In larger networks, a manual configuration of the IP settings may be necessary. Select “static” and en[...]

- 25 - 2. Packet filter Blocked Addresses If you wish to block certain IP addresses, domain names or an entire network, you can enter this here. “Add Host Address” is used to enter domain names such as guestgate.com or inte llinet-network.com. Enter the domain name and click “Add Host.” Repeat the steps to block additional domains. “Add N[...]

- 26 - Walled Garden Addresses You can grant an unauthenticated user limited access to Web sites, both external and internal, using the Walled Garden function. You can define external and internal addresses to which every user, logged in or not, has access. This area is called the Walled Garden. As soon as the user tries to connect to a Web page th[...]

- 27 - Using Walled Garden in combination wit h a custom welcome screen (see next section), you can allow guests access to We b sites of your choos ing without providing a password. The welcome page could look like this: You need to enter the URLs and IP addre sses your guests can access without providing a password in the Walled Garden configurati[...]

- 28 - Welcome Screen Configuration 1. Redirect first request to URL: When a guest connects to GuestGate for the first time, GuestGate can redirect the guest to a Web page you want them to see, e.g., a page displaying special offers or advertising. 2. Mode to customize welcome page: There are two values to choose from: “sim ple” and “advanced[...]

- 29 - 4. Welcome Text You can overwrite the default text with your own custom text. GuestGate supports HTML tags to format your text. Below is a small selection: <strong> bold text </st rong> <font color = red > red text </font> <font color = #00ff00”> green text </font> <u>underline d text </u> &l[...]

- 30 - Time / Scheduler Configuration 1. Time Setup (Time Zone and Update Interval) Select the time zone in which you are located. The update interval parameter defines how often GuestGate re-synchronizes the internal time with the Internet time.[...]

- 31 - 2. Reboot Device With this parameter, you can set up Gues tGate to perform a scheduled restart once per day at a time of your choosing. If y ou have a lot of users connected to GuestGate, this feature will improve overa ll system stability. Furthermore , you can use this feature to force all users to re-authenticate at a defined time if you [...]

- 32 - Device Settings Configuration This page allows changing the administra tor password, saving and restoring the configuration as well as upgrading the firmware. 1. Admin Password To change the administrator password, y ou need to enter the old password and the new password. You also must confirm the new password by retyping it. Click “Change[...]

- 33 - Select “Save File.” Specify the location and rename the file fr om “config.cgi” to “l og.txt.” Click “Save.” Start MS Excel and open the file log.txt. You’ ll then be presented with the Excel’s text import wizard. Select “Delimited” and click “Next >.”[...]

- 34 - Select “Tab” and click “Next >.” On the next screen, you can assign different formats to the i ndividual columns. Recommended values for the “login date” and “logout date” column are “Date YDM.” Click “Finish” and MS Exce l will open the log file. 3. Configuration You can create a backup of the configuration by cli[...]

- 35 - Firmware Upgrade Process Where to obtain a new firmware There are two ways to find out if a new firmware is available. a) Check GuestGate's Status Page GuestGate checks if a new firmwar e is available when you log in to the Administrator menu. If a new version is found, a text message appears on the status screen. See example below: Cli[...]

- 36 - Exit Screen This page lets you save the new configuration. [x] Save Settings All changes you made to the co nfiguration will only be remem bered if you save the changes by activating this check box. If you made changes in some of the configurati on screens and fail to perform this step before closing the Web browser, all changes will be lost[...]

- 37 - QUESTIONS & ANSWERS 1. Q: What is the default IP address of GuestGate? A: The default IP address is: 192.168.2.1 2. Q: What is the default administ rator password of GuestGate? A: The default password is: 1234 3. Q: How do I reset GuestGate to the factory default state? A: Power on GuestGate, wait 5 seconds and then press the reset butto[...]

- 38 - 9. Q: Can I use HTML code in my custom welcome page? A: Yes. GuestGate does not limit you in any way. If you are an HTML Web developer you can create an enhanced welcome page simply by pasting the HTML code into the welcome page configuration field. In advanced mode, you have access to the complete HTML source code. 10. Q: I have made edits [...]

- 39 - 12. Q: Does GuestGate support PHP, ASP or Perl? A: No. GuestGate does not suppor t server-side scripting. 13. Q: How often does a guest need to authenticate on the welcome page? A: Only once. As long as GuestGate is not restarted and the guest remains connected to GuestGate, the guest will never again be prompted to enter the password and ag[...]

- 40 - 19. Q: Some of my guests wish to play a network game, or share files and folders. But that does not work. How come the connec ted guest computers cannot communicate with each other? A: That is because Layer 3 Client Isolati on is activated by default. You need to disable it to allow network communicati on between the connected guest computer[...]

- 41 - APPENDIX Below you can find a list of common TCP/IP se rvice ports. These ports can be entered in the host configuration of GuestGate to block access to certain services. Port Number Service Name / Description 21 FTP 22 SSH (Secure Shell) 23 Telnet 25 SMTP (Outgoing Mail, Sendmail Server Port) 69 TFTP (Trivial File Transfer Protocol) 70 Goph[...]

- 42 - W ARRANTY INFORMA TION Deutsch Garantieinformationen finden Sie hier unter www.intellinet-network.com/warranty. English For warranty information, go to www.intellinet-network.com/warranty. Español Si desea obtener información so bre la garantía, visite www.intellinet-network.com/warranty. Français Pour consulter les informations sur la g[...]

- 43 -[...]

- 44 - INTELLINET NETWORK SOLUTIONS™ offers a compl ete line of active and passive networking produ cts. Ask your local computer dealer for more information or v isit www.intellinet-network.com Copyright © INTE LLINET NET WORK SOLUTIONS All products m entioned are tradem arks or registered trademarks of their respective owners.[...]