Page 1 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro AMG-2102 Gigabit Access and AP Management Gateway Pro User’s Manual V1.0...
Page 2: Table Of Contents
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Table of Contents Before You Start................ 1 Preface ....................1 Document Conventions ................1 Package Checklist................... 2 System Overview and Getting Start........... 3 Introduction of AMG-2102 ............... 3 2.1.1 Key Features ....................3 2.1.2...
Page 3 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro AP Security..................86 Change managed AP settings..............87 AP Operations from AP List ..............90 5.7.1 Reboot, Enable, Disable and Delete the AP........... 90 5.7.2 Apply Template..................91 5.7.3 Change Service Zone ................92 5.7.4...
Page 4 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.10 Network Utility ..................149 9.10.1 Wake-on-LAN ..................150 9.10.2 Ping .......................150 9.10.3 Trace Route.....................150 9.10.4 Show ARP Table..................150 9.11 Monitor IP Link..................151 9.12 Console Interface ................152 System Status and Reports ........... 157 10.1...
Page 5 If you would like a copy of the GPL or other open source code in this software on a physical CD medium, LevelOne (Digital Data Communications) offers to mail this CD to you upon request, for a price of US$9.99 plus the cost of shipping.
Page 6: Before You Start
MIS staff or individuals with basic network system knowledge to complete the installation. Besides this document, there is a “Quick Installation Guide” (QIG), which serves well to start AMG-2102 quickly. It is recommended to start with the QIG first, and then refer to this manual for further details.
Page 7: Package Checklist
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 1.3 Package Checklist The standard package of AMG-2102 includes: AMG-2102 x 1 CD-ROM (with User’s Manual and QIG) x 1 Quick Installation Guide (QIG) x 1 Console Cable x 1...
Page 8: System Overview And Getting Start
AP management interface. 2.1.1 Key Features Like other AMG Series products, AMG-2102 is designed to be a multi-service network access controller for enterprise or campus environment; it is also deployed as a hotspot subscriber gateway often. It is a pre-integrated multi-function network appliance, providing the following key features: Standard based user authentications, including Web-based login and 802.1x (RADIUS)
Page 9: Who Uses Amg-2102
IT departments will find AMG-2102 is a money and time saver, sparing them from forced to integrate multiple applications and multiple equipments on their own in order to manage and secure the internet/network access for both wired and wireless clients.
Page 10: System Concept
WAN/DNS address changes for simple deployments. Gateway is a network node where a small network attaches to a bigger network. AMG-2102 is a kind of gateway in a network environment; hence it has those features a typical gateway has, such as NAT, DHCP, DMZ, Firewall and etc.
Page 11 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro must remove it. A local database can be used as an external RADIUS database to another WLAN Controller product for account roaming.
Page 12 Service Zone is a logic partition of AMG-2102’s LAN network. The concept of Service Zone is similar to the concept of virtual LAN (VLAN), which can be used to group the network traffic or network services for clients on the same VLAN segment, regardless of the clients’...
Page 13 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro A Service Zone may or may not require client authentication, depending on how the administrator sets it up. If a Service Zone requires user authentication, the client will be prompted for the login in first before using the network services, no matter the client is connecting to its SSID wirelessly or a switch port via wired line.
Page 14 Imagine the network administrator may wish to set different privileges and bandwidth limits for staff, students, and guests; he could use several Service Zones of AMG-2102 – one for staff, one for students, and one for the guests. He also uses one zone for some shared servers in the diagram.
Page 15: Hardware Description
ADSL Router from your ISP (Internet Service Provider). LAN5/ LAN6 (SFP): Client machines connect to AMG-2102 via these LAN ports (SFP). LED Indicators: There are four kinds of LED, WAN1, WAN2, LAN5, and LAN6, to indicate the traffic status of the SFP ports.
Page 16: Real Panel
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2.3.2 Real Panel Power Supply Socket: Connecting the power cord to the built-in open-frame power supply (Input: 100~240 VAC, 50/60 Hz ). Press once to Power-On or Power-Off. Power Switch:...
Page 17: Preparation Before The Installation
4) Prepare a PC with Web browser for accessing the Web Management Interface. 5) Identify an upstream device to plug in AMG-2102 in your network, such as ADSL, CABLE modem or other edge devices. Collect the DNS server address provided by your ISP.
Page 18: Hardware Installation
4) Connect an Ethernet cable to the Mgmt Port on the front panel. Connect the other end of the Ethernet cable to an administrator PC for configuring the AMG-2102 system. Connect an Ethernet any one of the LAN Ports cable to on the front panel.
Page 19 Figure 3 below is a simple network diagram for the initial installation and configuration. Start with this simple network topology to set up AMG-2102 for the first time; it helps to plan a more sophisticated network topology to suits your specific application needs later.
Page 20: Accessing Web Management Interface
LAN Port is“https://192.168.1.254” (“https” is used for a secured connection). For the first time, if AMG-2102 is not using a trusted SSL certificate, there will be a “Certificate Error”, because the browser treats AMG-2102 as an illegal website. Please press “Continue to this...
Page 21 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro The administrator login page will appear. Enter “admin”, the default username, and “admin”, the default password, in the UserName and Password fields. Click LOGIN to log in. Caution: If your PC is connecting to the Mgmt port, and you can’t get the Administrator’s login screen, the reasons may be: (1) The PC is set incorrectly so that the PC can’t obtain the IP address automatically from the Mgmt...
Page 22: Placing Amg-2102 In A Network Environment
Environment 3.1 Network Requirement Typically, in a network environment, AMG-2102 plays the role of a gateway. On a gateway device, a network port leading upstream to the Internet or the backbone network is called a ‘WAN port’ or an uplink port, while a network port used for branching out to the service the clients downstream is referred as ‘LAN port’.
Page 23: Static Ip
When the ISP assigns you static IP address, or for other reason, your network requires you to use a fixed IP address, then you (as the administrator of AMG-2102) will manually enter the fixed IP address as AMG-2102’s WAN address.
Page 24: Dhcp (Dynamic Ip)
3.2.2 DHCP (Dynamic IP) When the ISP issues dynamic IP addresses or there is a DHCP server upstream for issuing dynamic IP addresses, then you (as the administrator of AMG-2102) can configure AMG-2102 to receive an IP address dynamically as AMG-2102’s WAN1 address.
Page 25: Pppoe
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.2.3 PPPoE If the ISP requires you use PPPoE Dialup connection, then the ISP will issue you an account with a password. You would need to enter the account credential in the WAN configuration page for dialing up to the ISP.
Page 26: Pptp
Although not a popular method, PPTP protocol for dialup connections is adapted by some ISPs (in European Countries). AMG-2102 offers the PPTP dialup feature for the rare cases. Your PPTP ISP will issue you an account with a password as well as the PPTP server address.
Page 27 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 28: Configuring Wan2 Port (Optional)
AMG-2102 Gigabit Access and AP Management Gateway Pro 3.3 Configuring WAN2 Port (optional) AMG-2102 also supports a second WAN port, called WAN2. The second port is for connecting to a second feeding pipe upstream. When WAN1 is connected to an ISP and WAN2 is connected to another ISP, the network is referred as ‘dual ISP homing’, or ‘having dual homed Internet feed’.
Page 29 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 30 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Static: Manually specifying the IP address of the WAN port. The red asterisks indicate required fields to be filled in. IP Address: the IP address of the WAN2 port. Subnet Mask: the subnet mask of the network WAN2 port connects to.
Page 31 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro PPPoE: When selecting PPPoE to connect to the network, please set the “User Name”, “Password”. MTU: Short for Maximum Transmission Unit of a PPPoE frame. The PPPoE protocol allows an Ethernet frame’s size to be up to 1492 bytes, but some ISP’s network equipments may support...
Page 32: Other Wan Traffic Settings
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.4 Other WAN Traffic Settings It is a good idea to have two Internet feeds to the system, especial from two different ISP; it adds the service reliability to your clients by turning on WAN-Failover feature. When one feed is out-of-service, the other feed automatically picks up the responsibly of serving the clients under the feed that goes outage.
Page 33: Wan Failover
Configure WAN Failover: Go to: System >> WAN Traffic. Enable WAN Failover: Normally AMG-2102 uses WAN1 as it primary WAN interface. When WAN Failover is enabled and WAN2 is available, WAN1's traffic will be routed to WAN2 when WAN1 connection is down. On the other hand, a Service Zone’s policy could also use WAN2 as its interface;...
Page 34: Load Balance
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.4.2 Load Balance Configure Load Balance Go to: System >> WAN Traffic. Enable Load Balancing: Outbound load balancing is supported by the system. When enabled, the system will allocate traffic between WAN1 and WAN2 dynamically according to designed algorithms based on the weight ratio.
Page 35: Internet Connection Detection
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.4.3 Internet Connection Detection The system will periodically check to see if the Internet (uplink) connection is down by seeing if it can get responses from three target sites. The administrator can specify the three target sites: Go to: System >>...
Page 36: Wan Bandwidth Control
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.4.4 WAN Bandwidth Control The section is for administrators to configure the control over the entire system’s traffic though the WAN interface (WAN1 and WAN2 ports). To configure WAN Bandwidth Limit Go to: System >>...
Page 37: Lan Partition -- Service Zone
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.5 LAN Partition -- Service Zone Configure Service Zone, go to: System >> Service Zones. A Service Zone is a logical network area to cover certain wired and wireless networks in an organization such as SMB or branch offices.
Page 38 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Tag-Base Service Zone Name: Mnemonic name of the Service Zone. LAN Port Mapping (Port Base only): Choose which port is mapped to which Service Zone. VLAN Tag (Tag Base only): The VLAN tag number that is mapped to the Service Zone.
Page 39: Planning Your Internal Network
In Port-Based mode, each LAN port can only serve traffic from one Service Zone. An example of network application diagram is shown as below: one Service Zone for Employees and one for Guests. Caution: The switches deployed under AMG-2102 in Port-Based mode must be Layer 2 switches only.
Page 40 Service Zone. So you need a VLAN switch or VLAN AP to take care the VLAN tags carried within the message frames. An example of network application diagram is shown as below: more than two Service Zones for different departments. Caution: The switch deployed under AMG-2102 in Tag-Based mode must be a VLAN switch only.
Page 41: Configure Service Zone Network
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.5.2 Configure Service Zone network Configure Service Zone, go to: System >> Service Zones. Service Zone Status: Each service zone can be enabled or disabled except for the default service zone.
Page 42 Note: please change the Management IP Address List accordingly (at System Configuration>> System Information >> Management IP Address List) to permit the administrator to access the AMG-2102 admin page after the default IP address of the network interface is changed.
Page 43: Tag Base And Port Base
Configure Tag Base or Port Base, go to: System >> LAN Port Mapping. AMG-2102 supports multiple Service Zones in either of the two VLAN modes, Port-Based or Tag-Based, but not concurrently. In Port-Base mode, each LAN port can only serve traffic from one Service Zone as each Service Zone is identified by physical LAN ports.
Page 44 Select Service Zone Mode: Select a VLAN mode, either Port-Based or Tag-Based. Caution: The switches deployed under AMG-2102 in Port-Based mode must be Layer2 Switches only. The switch deployed under AMG-2102 in Tag-Based mode must be a VLAN switch only.
Page 45 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Port-Based: When Port-Based mode is selected; traffic from different virtual Service Zones will be distinguished by physical LAN ports. Each LAN port can be mapped to one Service Zone in the form of a many-to-one mapping between ports and Service Zones.
Page 46 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 47: User Authentication And Grouping
NTDOMAIN). In addition, there are two optional servers, On-demand User and SIP, which also can be selected by the system. Auth Option: There are several authentication options supported by AMG-2102: Server 1 to Server 4, On-demand User, and SIP. Click the hyperlink of the respective Server Name to configure the authentication server.
Page 48 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Authentication Option Configuration Click on the server name to set the configuration for that particular server. After completing and clicking Apply to save the settings, go back to the previous page to select a server to be the default server and enable or disable any server in each service zone.
Page 49: Local
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.1 Local Choose “Local” from the Authentication Database field. Click the button Configure for further configuration. Local User List: It let the administrator to view, add or delete local user account. The Upload User button is for importing a list of user account from a text file.
Page 50 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Add User: Click this button to enter into the Adding User(s) to the List interface. Fill in the necessary information such as “Username”, “Password”, “MAC Address”, and “Remark”. Select a desired Group to classify local users. Check to enable Local VPN in the Enable Local VPN column.
Page 51 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Edit User: If editing the content of individual user account is needed, click the username of the desired user account to enter the User Profile Interface for that particular user, and then modify or add any desired information such as Username, Password, MAC Address (optional), Applied Group (optional), Enable Local VPN (optional) and Remark (optional).
Page 52: Pop3
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.2 POP3 Choose “POP3” from the Authentication Database field. Except Local authentication, the Local VPN option in other authentication option only can be enabled or disabled for the entire Authentication Database.
Page 53: Radius
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.3 RADIUS Choose “RADIUS” from the Authentication Database field. Except Local authentication, the Local VPN option in other authentication option only can be enabled or disabled for the entire Authentication Database.
Page 54: Ldap
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.4 LDAP Choose “LDAP” from the Authentication Database field. Except Local authentication, the Local VPN option in other authentication option only can be enabled or disabled for the entire Authentication Database.
Page 55 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Click the button Configure for further configuration. Enter the information for the primary server and/or the secondary server (the secondary server is not required). The blanks with red asterisk are necessary information which should be filled in.
Page 56 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Server: The IP address of the external LDAP server. Port: The authentication port of the external LDAP server. Service Protocol: The transferring type of service protocol for LDAP authentication with 3 types available: LDAP, LDAPS, and LDAP+StartTLS.
Page 57: Nt Domain
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.5 NT Domain Choose “NT Domain” from the Authentication Database field. Except Local authentication, the Local VPN option in other authentication option only can be enabled or disabled for the entire Authentication Database.
Page 58: On-Demand Users
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.1.6 On-Demand Users On-demand User Server Configuration: The administrator can enable and configure this authentication method to create on-demand user accounts. This function is designed for hotspot owners to provide temporary users with free or paid wireless Internet access in the hotspot environment.
Page 59 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro reminding message will not show up if the Remaining Reminder time is configured longer than the quota of billing plans. Expired Accounts Remain Days: It will delete the expired accounts after the certain days.
Page 60 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Billing Plans Administrators can configure several billing plans. Click Edit button to enter the page of Editing Billing Plan. Click Apply to save the plan. Go back to the screen of Billing Plans, check the Enable checkbox or click Select all button, and then click Apply, the plan(s) will be activated.
Page 61 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Price is the unit price of this plan. Cut-off: Cut-off Time is the time of day at which the on-demand account is cut off (made expired) by the system on that day. Unit is the day periods of this Cut-off billing plan. Please...
Page 62 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Volume: Volume is the maximum Mbytes at which the on-demand account could be used by the system. Quota is the total Mbytes (1~2000), during which On-demand users are allowed to access the network.
Page 63 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Duration-time with Absolute Expiration Time: The scenario of this type is that a client goes to an exhibition and purchases an on-demand account. The exhibition is from 09:00 02/Jun/2009 ~ 18:00 07/Jun/2009. This account will be activated since 09:00 02/Jun/2009 and ok to use during the exhibition period, and will be expired after a configured time such as 18:00 07/Jun/2009.
Page 64 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro On-demand Account Creation After at least one plan is enabled, the administrator can generate single on-demand user accounts here. Click this to enter the On-demand Account Creation page. Click on the Create button of the desired enabled plan to create an on-demand account.
Page 65 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Note: If no Billing plan is enabled, accounts cannot be created by clicking Create button. Please goes back to Billing Plans to active at least one Billing plan by clicking Edit button and Apply the setting to activate the plan.
Page 66 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 67 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro On-demand Account Batch Creation After at least one plan is enabled, the administrator can generate multiple on-demand user accounts once by batch creation. Click this to enter the On-demand Account Batch Creation. Enter the desired number of accounts of enabled plans to create a batch of on-demand accounts together.
Page 68 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro On-demand Account List All created On-demand accounts are listed and related information on is also provided. Search: Enter a keyword of a username, External ID, or reference, to be searched in the text filed and click this button to perform the search.
Page 69 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Redeem On-demand Accounts For Usage-time accounts, when the remaining quota is insufficient or if they are almost out of quota, they can use redeem function to extend their quota. After the user has got, or bought, a new account, they just need to click the Redeem button in the login success page to enter Redeem Page, input the new account Username and Password and then click Submit.
Page 70: Users Group
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.2 Users Group Configure Users Group, go to: Users >> Group. There are multiple groups for divide users. A Group which can be allowed to access a Service Zone or not;...
Page 71: Assign Users To A Group
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.2.1 Assign users to a Group Configure users to a Group, go to: Users >> Authentication. This section shows how to group users, how to rule each grouped user with different policy as he moves...
Page 72 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro In this example, Group 1 users are allowed to access the internet in 5 places; Service Zone 0,1,4,6, and 8. They must follow policy 1 at Service Zone 1, 6 and 8. They are ruled by Policy 3 at Service Zone 1 and by Policy 8 at Service Zone 4.
Page 73: Permission In Service Zone
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.2.2 Permission in Service Zone Configure Permission in Service Zone, go to: Users >> Group. A Group can be allowed to access one Service Zone or multiple Service Zones. Moreover, a Group can be applied different Policies within different Service Zones.
Page 74 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Click the hyperlink in the To Group Permission Configuration column to enter the Group Configuration interface, which is based on the role of Service Zone, to configure the relation between Group and Service Zone.
Page 75 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro At Service Zone 1, Group 1 user is ruled by Policy 3. Group 2 is by Policy 9 and Group 3 is by Policy 11. Other Groups are not enabled to access Service Zone 1.
Page 76: User Login
1. Open an Internet browser and try to connect to any website (in this example, we try to connect to www.google.com). For the first time, if the AMG-2102 is not using a trusted SSL certificate (for more information, please see 4.2.5 Additional Configuration), there will be a “Certificate Error”, because the browser treats AMG-2102 as an illegal website.
Page 77 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2. Enter the username and password (for example, we use a local user account: test@local here) and then click Submit button. If the Remember Me check box is checked, the browser will remember this user’s name and password so that he/she can just click Submit next time he/she wants to login.
Page 78: Default Authentication
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.3.1 Default Authentication In each Service Zone, there are different types of authentication database (LOCAL, POP3, RADIUS, LDAP, NTDOMAIN, ONDEMAND, and SIP) that are supported by the entire system. There are up to six authentication options can be enabled, and one of them can be set as the Default Authentication–...
Page 79: Disable Authentication In Service Zone
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.3.3 Disable Authentication in Service Zone Configure Authentication in Service Zone, go to: System >> Service Zones. Authentication Required For the Zone: When it is disabled, users will not need to...
Page 80: Managing Wireless Network
5.1 AMG-2102 with Multiple Type of AP Beside the LAN ports in AMG-2102, you can connect AP to AMG-2102 to extent the network access by wireless. AMG-2102 can manage multiple types of AP, such as WAB-3003 (108M 11g Outdoor PoE AP), WAP-3101 (108M 11g PoE Wireless Access Point), WAP-6022 (150M N Wireless Access Point), WAP-6011 (300M N_Max Wireless Access Point).
Page 81 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro template to all or a log of APs by a simple way. Or when you are adding (discovery) APs to your network with same configurations, and then you also can apply this template to the discovered APs very easily.
Page 82: Configure Ap Template
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.2 Configure AP Template Configure AP Template, go to: Access Points >> Templates. Template is a model that can be copied to every AP and not necessary to configure the AP individually.
Page 83 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Template Configuration The administrator can set the template configuration manually. Click Configure button to have detailed configurations. General Setting: In this section, revise the Subnet Mask and Default Gateway here if desired.
Page 84 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Wireless: SSID Broadcast: Select this option to enable the SSID to broadcast in your network. When configuring the network, it is suggested to enable this function but disable it when the configuration is complete. With this enabled, someone could easily obtain the SSID information with the site survey software and get unauthorized access to a private network.
Page 85: Discovery Ap
After AP template configuration is finish, use this function to detect and manage all of the APs in the network segments. Note that AMG-2102 can only manage APs that are connected to its LAN ports. Therefore, the AP discovery function is for adding locally connected APs to its management list. The administrator must know the local IP addresses of the APs he/she wishes to discover.
Page 86 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro of the IP addresses intended is used, a warning message will show up. In this case, please change the IP range and then click Scan Now again.
Page 87 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Discovery Results: The discovered new APs will be listed here. When the system’s Service Zone is set to Tag-based mode, service zones also can be assigned here. After clicking Add, the current management page is directed to AP List, where the newly added APs will show up with a status of “configuring”.
Page 88 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 89: Ap With Service Zone
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.4 AP with Service Zone Configure AP with Service Zone, go to: System >> Service Zones. Service Zone Settings – Assigned IP Address for AP Management Under port-based service zone, each service zone can designate an IP segment for IP address assignment to the managed AP when the newly discovered AP is added into the service zone.
Page 90 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Service Zone Settings – Access Control for Service Zone All managed APs (VAP) that belong to this service zone have same ACL table. When the status is Allowed, only these clients whose MAC addresses are listed in this list can be allowed to connect to the AP;...
Page 91: Ap Security
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.5 AP Security Configure AP Security, go to: System >> Service Zones. Security: For each service zone, administrators can set up the wireless security profile, including Authentication and Encryption. Authentication: Including Open System, Share Key, WPA, WPA2 or WPA/WPA2 Mixed.
Page 92: Change Managed Ap Settings
Configure AP settings in AP List, go to: Access Points >> List. All of the APs under the management of AMG-2102 will be shown in the list. The AP can be edited by clicking the hyperlink of AP Name and the AP status can be got by clicking the hyperlink of Status.
Page 93 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro General Setting: Click the link to enter the General Setting interface. Firmware information also can be observed here. LAN Setting: Click the link to enter the LAN Setting interface. Input the data of LAN including IP address, Subnet Mask and Default Gateway of AP.
Page 94 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Status After clicking the hyperlink in the Status column, there are two areas of information shown: AP Status Summary and AP Status Details. AP Status Summary includes AP Name, AP Type, LAN Interface MAC address, Wireless Interface MAC address, Report Time, SSID, and Number of Associated Clients.
Page 95: Ap Operations From Ap List
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7 AP Operations from AP List Configure AP List, go to: Access Points >> List. 5.7.1 Reboot, Enable, Disable and Delete the AP Select any AP by the check the checkbox and then click the button below to Reboot, Enable, Disable...
Page 96: Apply Template
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7.2 Apply Template Select any AP by check the checkbox and then click Apply Template; select one template to apply to the AP.
Page 97: Change Service Zone
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7.3 Change Service Zone Select any AP by the check the checkbox and then click Apply Service Zone to select which Service Zones this AP associates to. For example, if SZ3 and SZ5 are selected for this AP, then these two Service Zones will be available under this AP.
Page 98: Ap Background Discovery
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7.4 AP Background Discovery Configure AP Background Discovery, go to: AP Management >> Discovery. Background AP Discovery: Click Configure to enter Background AP Discovery interface and go on related configuration.
Page 99: Manually Add Ap
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7.5 Manually add AP Configure AP Adding manually, go to: Access Points >> Adding. The AP also can be added manually even though when it is offline. Input the related data of the AP and select a Template.
Page 100: Firmware Management And Upgrade
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.7.6 Firmware management and upgrade Configure Firmware management, go to: Access Points >> Firmware. Firmware Upload displays the current version of the AP’s firmware. New firmware can be uploaded here to update the current firmware. To upload, click Browse to select the file and then click Upload.
Page 101: Policies And Access Control
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6. Policies and Access Control 6.1 Black List Configure Black List, go to: Users >> Black List. The administrator can add, delete, or edit the black list for user access control. Each black list can include lots of users.
Page 102 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro After the Black List is setup completed. You can select the Black List in each Authentication Server to let it to become effective.
Page 103: Mac Address Control
Configure MAC Address Control, go to: Users >> Additional Control >> MAC ACL. MAC ACL: With this function, only the users with their MAC addresses in this list can login to AMG-2102. There are maximum users allowed in this MAC address list. User authentication is still required for these users.
Page 104: Policy
6.3 Policy Configure Policy, go to: Users >> Policy. AMG-2102 supports multiple Policies, including one Global Policy and other individual Policy. Each Policy consists of access control profiles that can be configured respectively and applied to a certain Group of users. Global Policy is the system’s universal policy and applied to all clients, while other individual Policy can be selected and defined to be applied to any Service Zone.
Page 105 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Select Policy: Select Global to set the Firewall Profile, Specific Route Profile and Maximum Concurrent Session. Firewall Profile: Global policy and each policy have a firewall service list and a set of firewall profile which is composed of firewall rules.
Page 106: Firewall
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6.3.1 Firewall Firewall Profile: Click Setting for Firewall Profile. The Firewall Configuration will appear. Click Predefined and Custom Service Protocols to edit the protocol list. Click Firewall Rules to edit the rules.
Page 107 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro protocols (TCP/UDP/ICMP/IP); and then define the Source Port (range) and Destination Port (range); click Apply to save this protocol . If the Protocol Type is ICMP, it will need to define Type and Code.
Page 108 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Selecting the Filter Rule Number 1 as an example: Rule Number: This is the rule selected “1”. Rule No. 1 has the highest priority; rule No. 2 has the second priority, and so on.
Page 109 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro and One Time. Recurring is set with the hours within a week. Action for Matched Packets: There are two options, Block and Pass. Block is to prevent packets from passing and Pass is to permit packets passing.
Page 110: Routing
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6.3.2 Routing Specific Route Profile: Click the button of Setting for Specific Route Profile, the Specific Route Profile list will appear. 1. Specific Route Specific Route Profile: The Specific Route is use to control clients to access some specific IP segment by the specified gateway.
Page 111: Default Gateway
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2. Default Gateway Default Gateway: The default gateway of WAN1, WAN2, or a desired IP address can be defined in each Policy except Global Policy. When Specific Default Route is enabled, all clients applied with this Policy will access the Internet through this default gateway.
Page 112: Schedule
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6.3.3 Schedule Schedule Profile: Click Setting of Schedule Profile to enter the configuration page. Select Enable to show the Permitted Login Hours list. This function is used to limit the time when clients can log in.
Page 113: Sessions Limit
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6.3.4 Sessions Limit To prevent ill-behaved clients or malicious software from using up the system’s connection resources, the administrator can restrict the number of concurrent sessions that a user can establish.
Page 114: Qos Traffic Class And Bandwidth Control
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6.4 QoS Traffic Class and Bandwidth Control Configure QoS, go to: Users >> Group. QoS Profile: Set parameters for traffic classification. Traffic Class: A Traffic Class can be chosen for a Group of users. There are four traffic classes: Voice, Video, Best-Effort and Background.
Page 115: Users' Login And Logout
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7. Users’ Login and Logout 7.1 Before User Login 7.1.1 Login with SSL Configure HTTPS, go to: System >> General. HTTPS (HTTP over SSL or HTTP Secure) is the use of Secure Socket Layer (SSL) or Transport Layer Security (TLS) as a sublayer under regular HTTP application layering.
Page 116: Internal Domain Name With Certificate
Configure Internal Domain Name, go to: System >> General. Internal Domain Name is the domain name of the AMG-2102 as seen on client machines connected under service zone. It must conform to FQDN (Fully-Qualified Domain Name) standard. A user on client machine can use this domain name to access AMG-2102 instead of its IP address.
Page 117 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Without a valid certificate, users may encounter the following problem in IE7 when they try to open the login page. Click “Continue to this website” to access the user login page.
Page 118: Administrator Contact Information
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.1.3 Administrator Contact Information Configure Administrator Contact Information, go to: System >> General. Administrator Contact Information will appear in the user Login Fail window. When the user login fail with duplicate IP address or MAC address, system will show this contact information to the user by the...
Page 119: Walled Garden
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.1.4 Walled Garden Configure Walled Garden, go to: Network >> Walled Garden. This function provides certain free services for users to access the websites listed here before login and authentication. Multiple addresses or domain names of the websites can be defined in this list. Users without the network access right can still have a chance to experience the actual network service free of charge.
Page 120: Walled Garden Ad List
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.1.5 Walled Garden AD List Configure Walled Garden AD List, go to: Network >> Walled Garden AD List. This function provides advertisement web pages for users to access free advertisement websites listed before login and authentication.
Page 121 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 122: Mail Message
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.1.6 Mail Message Configure Mail Message, go to: System >> Service Zones. When enabled, the system will automatically send an email to users if they attempt to send/receive their emails using POP3 email program (for example, Microsoft Outlook) before they are authenticated.
Page 123: After User Login
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.2 After User Login 7.2.1 Browse which Home Page after login success Configure Portal URL, go to: System >> General. If enable this function, enter the URL of a Web server as the homepage. Once logged in successfully, users will be directed to this homepage, such as http://www.google.com, regardless of the original...
Page 124: Idle Timer
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.2.2 Idle Timer Configure Idle Timer, go to: Users >> Additional Configuration. If a user has idled with no network activities, the system will automatically kick out the user. The...
Page 125: Multiple Login
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.2.3 Multiple Login Configure Multiple Login, go to: Users >> Additional Configuration. When enabled, a user can log in from different computers with the same account. (This function doesn’t support On-demand users and RADIUS authentication.) 7.2.4 DoS Attacker Denial Time...
Page 126: Local Users Change Password Privilege
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.2.5 Local Users Change Password Privilege Configure Local Users Change Password Privilege, go to: Users >> Group. Privilege Profile: Change Password Change Password Privilege: When Change Password Privilege is enabled, the authenticated local users within this Group are allowed to change their password via the Login Success Page.
Page 127: On-Demand Account Creation Privilege
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 7.2.6 On-demand Account Creation Privilege Configure On-demand Account Creation Privilege, go to: Users >> Group. Privilege Profile: On-demand Account Creation When On-demand Account Creation Privilege is enabled, the authenticated users within this Group are allowed to create On-demand account via the Login Success Page.
Page 128 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro On-demand user account. Caution: This function is not for On-demand User. On-demand users can not create another On-demand user.
Page 129: Proxy Server
Configure Proxy Server, go to: Network >> Proxy Server. Basically, a proxy server can help clients access the network resources more quickly. This section presents basic examples for configuring the proxy server settings of AMG-2102. Using Internet Proxy Server The first scenario is that a proxy server is placed outside the LAN environment or in the Internet. For example, the following diagram shows that a proxy server of an ISP will be used.
Page 130 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Step 3. Make sure that the proxy server settings match with at least one of the proxy server setting of the system – for example, in this case, 203.125.142.1:3128 matches with blank:3128.
Page 131 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Caution: It is required that the proxy server setting of the clients match with the proxy server setting of the system. Otherwise, users will not be able to get the Login page for authentication via browsers and it will show an error page in the browser.
Page 132 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Using Extranet Proxy Server The second scenario is that a proxy server is placed in the Extranet (such as DMZ), which all users from the Intranet or the Internet are able to access. For example, the following diagram shows that a proxy server of an organization in the DMZ will be used.
Page 133 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro appropriate exceptions if there is any traffic which is not needed to go through proxy server – for example, there is no need to use proxy server for the Default Gateway (192.168.1.254).
Page 134: Networking Features Of A Gateway
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 8. Networking Features of a Gateway 8.1 DMZ Configure DMZ, go to: Network >> NAT >> DMZ (Demilitarized Zone). The system supports Internal IP address (LAN) to External IP address (WAN) mapping in the Static Assignments.
Page 135: Virtual Server
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 8.2 Virtual Server Configure Virtual Server, go to: Network >> NAT >> Public Accessible Server. This function allows the administrator to set virtual servers, so that client devices outside the managed network can access these servers within the managed network.
Page 136: Privilege List
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 8.3 Privilege List Configure Privilege List, go to: Network >> Privilege. Setup the Privilege IP Address List and Privilege MAC Address List. The clients in the list can access the network without any login.
Page 137: Privilege Ip
IP addresses of these workstations in the “Granted Access by IP Address”. The “Remark” field is not necessary but is useful to keep track. AMG-2102 allows privilege IP addresses at most. These settings will become effective immediately after clicking Apply.
Page 138: Privilege Mac
In addition to the IP address, the MAC address of the workstations that need to access the network without authentication can also be set in the “Granted Access by MAC Address”. AMG-2102 allows privilege MAC addresses. When manually creating the list, enter the MAC address (the format is xx:xx:xx:xx:xx:xx) as well as the remark (not necessary).
Page 139: Ip Plug And Play
Configure IP Plug and Play, go to: Network >> Client Mobility AMG-2102 supports IP PNP function. User can login and access network with any IP address setting. At the user end, a static IP address can be used to connect to the system. Regardless of what the IP...
Page 140: Dynamic Domain Name Service
Before activating this function, you must have your Dynamic DNS hostname registered with a Dynamic DNS provider. AMG-2102 supports DNS function to alias the dynamic IP address for the WAN port to a static domain name, allowing the administrator to easily access AMG-2102’s WAN. If the dynamic DHCP is activated at the WAN port, it will update the IP address of the DNS server periodically.
Page 141: Port And Ip Redirect
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 8.6 Port and IP Redirect Configure Port and IP Redirect, go to: Network >> NAT >> Port and IP Forwarding. This function allows the administrator to set the IP addresses for redirection purpose. When the user attempts to connect to a destination IP address listed here, the connection packet will be converted and redirected to the corresponding destination.
Page 142: System Management And Utilities
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9. System Management and Utilities 9.1 System Time Configure System Time, go to: System >> General. 9.1.1 NTP NTP (Network Time Protocol) communication protocol can be used to synchronize the system time with remote time server.
Page 143: Management Ip
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.2 Management IP Configure Management IP, go to: System >> General. Only PCs within this IP range on the list are allowed to access the system's web management interface. For example, 10.2.3.0/24 means that as long as an administrator is using a computer with the IP address range of 10.2.3.0/24, he or she can access the web management page.
Page 144: Access History Ip
Configure Access History IP, go to: System >> General. Specify an IP address of the administrator’s computer or a billing system to get billing history information of AMG-2102 with the predefined URLs. The file name format is “yyyy-mm-dd”. An example is provided as follows: Traffic History：https://10.2.3.213/status/history/2005-02-17...
Page 145: Snmp
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.4 SNMP Configure SNMP, go to: System >> General. If this function is enabled, the SNMP Management IP and the Community can be assigned to access the SNMP Configuration List of the system.
Page 146: Three-Level Administration
AMG-2102 Gigabit Access and AP Management Gateway Pro 9.5 Three-Level Administration AMG-2102 supports three kinds of account interface. You can log in as admin, manager or operator. The default usernames and passwords show as follows: Admin: The administrator can access all configuration pages of AMG-2102.
Page 147 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Operator: The operator can only access the configuration page of Create On-demand User to create new on-demand user accounts and print out the on-demand user account receipts. User Name: operator...
Page 148 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Note: To logout, simply click the Logout icon on the upper right corner of the interface to return to the login screen.
Page 149: Change Password
Configure Change Password, go to: Utilities >> Password Change. There are three levels of authorities: admin, manager or operator. The default usernames and passwords are as follows: Admin: The administrator can access all configuration pages of AMG-2102. User Name: admin Password: admin...
Page 150 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Caution: If the administrator’s password is lost, the administrator’s password still can be changed through the text mode management interface at the serial console port.
Page 151: Backup / Restore And Reset To Factory Default
Backup System Settings: Click Backup to create a .db database backup file and save it on disk. Restore System Settings: Click Browse to search for a .db database backup file created by AMG-2102 and click Restore to restore to the same settings at the time when the backup file was saved.
Page 152: Firmware Upgrade
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.8 Firmware Upgrade Configure Firmware Upgrade, go to: Utilities >> System Upgrade. The administrator can download the latest firmware from website and upgrade the system here. Click Browse to search for the firmware file and click Apply for the firmware upgrade. It might take a few minutes before the upgrade process completes and the system needs to be restarted afterwards to activate the new firmware.
Page 153: Restart
Click YES to restart AMG-2102; click NO to go back to the previous screen. If the power needs to be turned off, it is highly recommended to restart AMG-2102 first and then turn off the power after completing the restart process.
Page 154: Network Utility
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.10 Network Utility Configure Network Utility, go to: Utilities >> Network Utilities. System provide some network utilities to allow administrators to use, the functions including Wake-on-LAN, Ping, Trace Route by entering IP or Domain Name and showing ARP Table.
Page 155: Wake-On-Lan
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 9.10.1 Wake-on-LAN It allows the system to remotely boot up a power-down computer with Wake-On-LAN feature enabled in its BIOS and it is connect to any service zone. Enter the MAC Address of the desired device and click Wake Up button.
Page 156: Monitor Ip Link
Configure Monitor IP Link, go to: Network >> Monitor IP. AMG-2102 will send out a packet periodically to monitor the connection status of the IP addresses on the list. On each monitored item with a WEB server running, administrators may add a link for the easy access by entering the IP, select the Protocol to http or https and then click Create.
Page 157: Console Interface
Enter key to make selection or confirm what you enter. 3. Once the console port of AMG-2102 is connected properly, the console main screen will appear automatically. If the screen does not appear in the terminal simulation program automatically, please try to press the arrow keys, so that the terminal simulation program will send some messages to the system, where the welcome screen or main menu should appear.
Page 158 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 159 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Utilities for network debugging The console interface provides several utilities to assist the Administrator to check the system conditions and to debug any problems. The utilities are described as follows: Ping host (IP): By sending ICMP echo request to a specified host and wait for the response to test the network status.
Page 160 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro program helps users to print out their boot-up messages instead of copying the messages by hand. Main menu: Go back to the main menu.
Page 161 Although it does not require a username and password for the connection via the serial port, the same management interface can be accessed via SSH. Therefore, we recommend you to immediately change the AMG-2102 Admin username and password after logging in the system for the first time. Reload factory default Choosing this option will reset the system configuration to the factory defaults.
Page 162: System Status And Reports
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10. System Status and Reports 10.1 View the status This section includes System, Interface, Hardware, Routing Table, Online Users, User Logs, and E-mail & SYSLOG to provide system status information and online user status.
Page 163: System Status
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.1 System Status View System Status, go to: Status >> System. This section provides an overview of the system for the administrator.
Page 164 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro The description of the above-mentioned table is as follows: Item Description Firmware Version The present firmware version of AMG-2102 Build The current build number. System Name The system name. The default is AMG-2102 Homepage Redirect URL The page the users are directed to after initial login success.
Page 165 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Preferred IP address of the preferred DNS Server. DNS Server Alternate IP address of the alternate DNS Server. DNS Server...
Page 166: Interface Status
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.2 Interface Status View Interface Status, go to: Status >> Interface. This section provides an overview of the interface for the administrator including WAN1, WAN2, SZ Default and SZ1 ~ SZ8.
Page 167 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro The description of the above-mentioned table is as follows: Item Description MAC Address The MAC address of the WAN1 port. WAN1 IP Address The IP address of the WAN1 port.
Page 168: Hardware Information
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.3 Hardware Information View Hardware Information, go to: Status >> Hardware. It will show the current CPU and Memory usage of the system.
Page 169: Routing Table
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.4 Routing Table View Routing Table, go to: Status >> Routing Table. All the Policy Route rules and Global Policy Route rules will be listed here. Also it will show the System Route rules specified by each interface.
Page 170 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Interface: The choice of interface network, including WAN1, WAN2, Default, or the named Service Zones to be applied for the traffic interface.
Page 171: Online Users
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.5 Online Users View Online Users, go to: Status >> Online Users. In this page, each online user’s information including Username, IP Address, MAC Address, Pkts In, Bytes In, Pkts Out, Bytes Out, Idle, Access From and Kick Out will be shown. Administrators can force out a specific online user by clicking the hyperlink of Kick Out and check the user access AP status by clicking the hyperlink of the AP name for Access From.
Page 172: User Logs
View User Logs, go to: Status >> User Logs. This page is used to check the traffic history of AMG-2102. The history of each day will be saved separately in the system memory for at least 3 days (72 full hours). The system also keeps a cumulated record of the traffic data generated by each user in the latest 2 calendar months.
Page 173 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro If the Receiver E-mail Address(es) has been entered under the Notification Configuration page, the system will automatically send out the history information to that specified email address. Users Log All activities occur on the system within the nearest 72 hours are recorded; in date and time order.
Page 174 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Roaming In User Log As shown in the following figure, each line is a roaming in traffic history record consisting of the following fields, Date, Type, Name, NSID, NASIP, NASPort, UserMAC, UserIP, SessionID, SessionTime, Bytes in, Bytes Out, Pkts In, Pkts Out and Message, of user activities.
Page 175: Local User Monthly Network Usage
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.1.7 Local User Monthly Network Usage View Local User Monthly Network Usage, go to: Status >> User Logs. Monthly Network Usage of Local User The system keeps a cumulated record of the traffic data generated by each Local user in the latest 2 calendar months.
Page 176 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 177: Notification
10.2 Notification Configure Notification, go to: Status >> E-mail & SYSLOG. AMG-2102 can automatically send the notification of Monitor IP Report, Users Log, On-demand Users Log, Session Log and AP Status Change to more than one particular e-mail addresses. The notification of AP Status is triggered by the event when a managed AP becomes unreachable while the other types of emails are sent periodically in given intervals such as 1 hour.
Page 178: E-Mail
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.2.1 E-Mail Notification E-mail Settings: Receiver Email Address(es): The e-mail addresses can be set up to receive the notification. These are the receiver’s e-mail addresses. There are different kinds of notification to be selected -- Monitor IP Report, Users Log, On-demand Users Log, Session Log and AP Status Change, and check which type of notification to be sent.
Page 179: Syslog
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 10.2.2 SYSLOG SYSLOG Server Settings: There are multiple types of Syslog supported: System Log, On-demand User Log, Session Log and Hardware Log. Enter the IP address and Port number to specify which and from where the report should be sent to.
Page 180: Virtual Private Network (Vpn)
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 11. Virtual Private Network (VPN) 11.1 Local VPN Configure Local VPN, go to: Users >> Authentication. The system is equipped with IPSec VPN feature. To utilize IPSec VPN supported by Microsoft Windows XP SP2 (with patch) and Windows 2000 operating systems, the system implements IPSec VPN tunneling technology between client’s windows devices and the system itself regardless of wired or...
Page 181 Programs tab and click Manage add-ons button to enter the Manage add-ons dialogue box, where you can see VPNClient.ipsec is enabled. During the first-time login to AMG-2102 with Local VPN, Internet Explorer will ask clients to download an ActiveX component of IPSec VPN. Once this ActiveX component is downloaded, it will run in parallel with the “Login Success Page”...
Page 182 To ensure that the built-in IPSec VPN tunnel is always alive, unless clients decide to close the session and to disconnect from AMG-2102, the following conditions or behaviors, which may cause the Internet Explorer to stop the ActiveX, should be avoided.
Page 183 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro (3) Execution of instructions given by the following Windows messages: Close the Windows Internet Explorer. Click Logout on Login Success page. Click Back or Refresh of the same Internet Explorer browser page.
Page 184 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro • FAQ (1) How to clean IPSec client? ANS: Open a command prompt window and type the commands as follows. C:\> cd %windir%\system32 C:\> Clean_IPSEC.bat C:\> cd %windir%\system32 C:\> ipsec2k.exe stop (2) How to remove ActiveX component in client’s computer?
Page 185: Remote Vpn
AMG-2102 support Remote VPN for user login to system from remote area. After the user is login to system from the outside network of WAN, the user will feel that it is look like login to AMG-2102 under the service zone locally. They also can be applied Policy and are controlled by system to access the network.
Page 186: Site-To-Site Vpn
AMG-2102 support Site-to-Site VPN for more than 2 AMG-2102 create VPN tunnel to each other over the WAN network. For example, if there are 2 AMG-2102, you can create a VPN tunnel to let a subnet of one AMG-2102 to access the subnet of another AMG-2102.
Page 187 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro And then create a Local Site with subnet for mapping to the remote site. Such as “192.168.11.0/24” of AMG-2102_A >> “192.168.111.0/24” of AMG-2102_B, after the tunnel is created, the users within these two subnets can reach each other.
Page 188: Customization Of Portal
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 12. Customization of Portal Pages 12.1 Customizable Pages Configure Customizable Pages, go to: System >> Service Zones. There are several users’ login and logout pages for each service zone that can be customized by administrators.
Page 189: Loading A Customized Login Page
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 12.2 Loading a Customized Login Page The administrator can use the default login page or get the customized login page by setting the template page, uploading the page or downloading from a designated website. After finishing the setting, click Preview to see the login page.
Page 190 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Custom Pages >> Login Page >> Uploaded Page Choose Uploaded Page and upload a login page. The user-defined login page must include the following HTML codes to provide the necessary fields...
Page 191 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro And if the user-defined login page includes an image file, the image file path in the HTML code must be the image file to be uploaded. Remote VPN : <img src=images/xx.jpg”>...
Page 192 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Custom Pages >> Login Pages >> External Page Choose the External Page selection and get the login page from a designated website. In the External Page Setting, enter the URL of the external login page and then click Apply.
Page 193: Load A Customized Logout Page
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 12.3 Load a Customized Logout Page Custom Pages >> Logout Page The administrator can apply their own logout page in the menu. As the process is similar to that of the Login Page, please refer to the “Login Page >>...
Page 194: Payment Gateways
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 13. Payment Gateways 13.1 Payments via Authorize.Net Configure Payments via Authorize.Net, go to: Users >> Authentication >> On-demand>> External Payment Gateway>> Authorize.Net. Before setting up “Authorize.Net”, it is required that the merchant owners have a valid Authorize.Net account.
Page 195 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro confirm a MD5 Hash Value and select a reactive mode. The MD5 Hash security feature enables merchants to verify that the results of a transaction, or transaction response, received by their...
Page 196 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Service Disclaimer Content/ Choose Billing Plan for Authorize.Net Payment Page/Client’s Purchasing Record Service Disclaimer Content View service agreements and fees for the standard payment gateway services here as well as adding new or editing services disclaimer.
Page 197 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Authorize.Net Payment Page Fields Configuration/ Authorize.Net Payment Page Remark Content Authorize.Net Payment Page Fields Configuration Item: Check the box to show this item on the customer’s payment interface. Displayed Text: Enter what needs to be shown for this field.
Page 198 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro transaction and the value that is on file with a customer’s credit card company. A code and narrative description are provided indicating the results returned by the processor. Card Code: The three- or four-digit code assigned to a customer’s credit card number (found either on the front of the card at the end of the credit card number or on the back of the card).
Page 199 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Authorizie.Net Payment Page Remark Content Enter additional details for the transaction such as Tax, Freight and Duty Amounts, Tax Exempt status, and a Purchase Order Number, if applicable.
Page 200: Payments Via Paypal
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 13.2 Payments via PayPal Configure Payments via PayPal, go to: User >> Authentication >> On-demand>> External Payment Gateway>> PayPal. Before setting up “PayPal”, it is required that the hotspot owners have a valid PayPal “Business Account”.
Page 201 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Service Disclaimer Content / Billing Configuration for Payment Page Service Disclaimer Content: View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here.
Page 202 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro transaction. This is a reference field that may contain any kind of information. Description: Enter the product/service description (e.g. wireless access service). Title for Message to Seller: Enter the information that will appear in the header of the PayPal payment page.
Page 203: Payments Via Securepay
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 13.3 Payments via SecurePay Configure Payments via SecurePay, go to: Users >> Authentication >> On-demand>> External Payment Gateway >> SecurePay. Before setting up “SecurePay”, it is required that the hotspot owners have a valid SecurePay...
Page 204 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Payment Page Configuration Merchant ID: The ID that is associated with the Business Account. Password: This is the key used by Secure Pay to validate all the transactions. Payment Gateway URL: The default website address to post all transaction data.
Page 205: Payments Via World Pay
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 13.4 Payments via World Pay Configure Payments via WorldPay, go to: Users >> Authentication >> On-demand User >> External Payment Gateway >> WorldPay. WorldPay Payment Page Configuration Installation ID: The ID of being associated with the Business Account.
Page 206 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. SecurePay Payment Page Billing Configuration These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled.
Page 207 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro STEP ④ . Check the Enable Payment Response checkbox. STEP ⑤ . Enter the Payment Response URL. URL : <wpdisplay item=MC_callback> STEP ⑥ . Check the Enable the Shopper Response.
Page 208 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro STEP ⑦ . Select the Save Changes button STEP ⑧ . Input Installation ID and Payment Gateway URL in gateway UI. Installation ID: 2009test URL : https://select.wp3.rbsworldpay.com/wcc/purchase Note: The WAN IP of gateway must be real IP.
Page 209: Additional Applications
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 14. Additional Applications 14.1 Upload / Download Local Users Accounts Configure Upload / Download Local Users Accounts, go to: Users >> Authentication >> Local-Server1~4 >> Configure >> Local User List.
Page 210 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Download User: Use this function to create a .txt file with all built-in user account information and then save it on disk.
Page 211: Backup And Restore On-Demand Users Accounts
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 14.2 Backup and Restore On-demand Users Accounts Configure Backup / Restore On-demand Users Accounts, go to: Users >> Authentication >> On-demand User >> On-demand Account List. Backup Current Accounts: Use this function to create a .txt file with all current user account information and then save it on disk.
Page 212: Pop3 Login With Complete Name Format
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 14.3 POP3 login with complete name format Configure POP3 login with complete name format, go to: Users >> Authentication >> POP3-Server1~4 >> Configure. For POP3 authentication, there have an option to send the complete username with postfix or username only.
Page 213: Radius Advance Settings
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 14.4 RADIUS Advance settings Configure RADIUS Advance settings, go to: Users >> Authentication >> RADIUS-Server1~4 >> Configure. Complete Name vs. Only ID For RADIUS authentication, there have an option to send the complete username with postfix or username only.
Page 214: Ldap Advance Settings - Attribute-Group Mapping
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 14.5 LDAP Advance settings Attribute-Group Mapping Configure LDAP - Attribute-Group Mapping, go to: Users >> Authentication>> LDAP-Server1~4 >> Configure. This function is to assign a Group to a LDAP attribute sent from the LDAP server. When the clients classified by LDAP attributes log into the system via the LDAP server, each client will be mapped to its assigned Group.
Page 215: Nt Transparent Login
Domain first, and then they will be assigned the access right in this domain. On the other hand, user also need to login to AMG-2102 to get the network access right. So user must login twice for network access right and domain resource access right.
Page 216: Roaming Out
Configure Roaming Out, go to: Users >> Authentication >> Local-Server1~4 >> Configure >> Local User List >> Roaming Out & 802.1X Client Device Settings. In sometime, AMG-2102 can act as a RADIUS server for Roaming Out from other system. The Local User database will act as the RADIUS user database.
Page 217: Sip Proxy
SIP (Session Initiation Protocol) is a protocol for making real-time calls over IP network. Currently, most of the SIP extensions address audio communication. AMG-2102 can act like a SIP Proxy Server, it forwards end point’ requests and responses. In other words, SIP Proxy server needs to log in the trusted registrar to verify identities of 2 clients.
Page 218 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro SIP: SIP authentication supports 4 Trusted SIP Registrar. IP Address: The IP address of the Trusted SIP Registrar. Remark: The administrator can enter extra information in this field for remark.
Page 219: Appendix A. Network Configuration On Pc & User Login
AMG-2102 Gigabit Access and AP Management Gateway Pro Appendix A. Network Configuration on PC & User Login Network Configuration on PC After AMG-2102 is installed, the following configurations must be set up on the PC: Internet Connection Setup and TCP/IP Network Setup. Internet Connection Setup Windows 9x/2000 1) Choose Start >>...
Page 220 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3) Choose “I want to set up my Internet connection manually, or I want to connect through a local Area network (LAN)”, and then click Next. 4) Choose “I connect through a local area network (LAN)”...
Page 221 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 6) Choose “No” and then click Next 7) Finally, click Finish to exit the Internet Connection Wizard. Now, the set up is completed. Windows XP 1) Choose Start >> Control Panel >>...
Page 222 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2) Choose the Connections tab, and then click Setup. 3) When Welcome Connection Wizard window appears, click Next. 4) Choose “Connect to the Internet” and then click Next.
Page 223 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5) Choose “Set connection manually” and then click Next. 6) Choose “Connect using a broadband connection that is always on” and then click Next. 7) Finally, click Finish to exit the Connection...
Page 224 With the factory default settings, during the process of starting the system, AMG-2102 with DHCP function will automatically assign an appropriate IP address and related information for each PC. If the Windows operating system is not a server version, the default settings of the TCP/IP will regard the PC as a DHCP client, and this function is called “Obtain an IP address automatically”.
Page 225 4) Using Specific IP Address: If you want to use a specific IP address, acquire the following information from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your ISP and the Gateway address of AMG-2102. Caution: If your PC has been set up completely, please inform the network administrator before proceeding to the following steps.
Page 226 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4.2) Click on the Gateway tab. Enter the gateway address of AMG-2102 in the “New gateway” field and click Add. Then, click OK. 4.3) Click on DNS Configuration tab. If the DNS Server field is empty, select “Enable...
Page 227 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2) Right click on the Local Area Connection icon and select “Properties”. 3) Select “Internet Protocol (TCP/IP)” and then click Properties. Now, you can choose to use DHCP or a specific IP address.
Page 228 5) Using Specific IP Address: If you want to use a specific IP address, acquire the following information from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your ISP and the Gateway address of AMG-2102. If your PC has been set up completely, please inform the network administrator before proceeding to the following steps.
Page 229 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.4) Enter the gateway address of AMG-2102 in the “Gateway” field, and then click Add. After back to the IP Settings tab, click OK to complete the configuration. Check the TCP/IP Setup of Window XP...
Page 230 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3) Click on the General tab and choose “Internet Protocol (TCP/IP)”, and then click Properties. Now, you can choose to use DHCP or a specific IP address. 4) Using DHCP: If you want to use DHCP, choose “Obtain...
Page 231 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 5.1) Choose “Use the following IP address” and enter the IP address, Subnet mask. If the DNS Server field is empty, select “Using following server addresses” and enter the DNS Server address.
Page 232: Appendix B. Policy Priority (Global Policy, Service Zone Policy, Authentication Policy And User Policy)
Appendix B. Policy Priority (Global Policy, Service Zone Policy, Authentication Policy and User Policy) AMG-2102 supports multiple Policies, including one Global Policy and 24 individual Policy can be assign to different Group. Global Policy is the system’s universal policy and applied to all clients, while other individual Policy can be selected and defined to be applied to any Service Zone.
Page 233 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro user01 login to Service Zone1 will apply the Global Policy. So, the Global Policy has the lowest policy priority; on the other hand, the User Policy will be the highest...
Page 234: Appendix C. Monitoring 3Rd Party Ap
If you are using 3 party AP, you can use Monitor IP function to monitor the AP connection status. Because AMG-2102 can not manage these APs, Monitor IP is a better way to monitor the AP connection status. AMG-2102 will send out a packet periodically to monitor the connection status of the IP addresses on the list.
Page 235 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 236: Appendix D. Radius Accounting
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Appendix D. RADIUS Accounting This section is trying to organize the basic configuration with RADIUS server to work with VSA. The aim is trying to control the maximum usage (upload; download or upload + download traffic) of clients in each session.
Page 237 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro None-MaxByteIn-4GB To be defined by administrator for different user group None-MaxByteOut-4GB To be defined by administrator for different user group If the amount of traffic is larger than 4 GB, then the attribute of “XXXX-4GB” is for the carry. For example, if the amount is 5 GB, you must set “None-Byte-Amount = 1048576”...
Page 238 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2.3. Step 3 Edit Profile Select the Advanced Tag Add a new attribute Add a new Vendor-specific attribute...
Page 239 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2.4. Step 4 Add a new attribute under Vendor-specific Set “Vendor Code = 22426” Set it conforms to the RADIUS RFC Configure Attribute Set “Vendor-assigned attribute number = 10” Set “Attribute format = Hexadecimal”...
Page 240 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 2.5. Step 5 Confirm the Vendor-specific Attribute has been added success 2.6. Step 6 Follow the same steps to create other Vendor-specific Attribute as you need.
Page 241 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3. VSA configuration in RADIUS server (FreeRADIUS) This section will guide you through a VSA configuration using the operating system “Fedora” FreeRADIUS version 1.0.5. Before getting start, open the shell of RADIUS server, for example, use Putty to access the Linux Host: 3.1.
Page 242 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.3. Step 3 Create a file “dictionary.none” under the “freeradius” folder. 3.4. Step 4 Edit and save the content of the file “dictionary.none” as the following: Administrator also can add other attributes as the table stated in Section 2 with same format.
Page 243 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3.7. Step 7 Open the “radius” database. 3.8. Step 8 Insert VSA into RADIUS respond. In this example, the maximum download and upload in bytes for group03 users is 1MBytes.
Page 244 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 245: Appendix E. Net Retriever And Port Mapping
User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Appendix E. Net Retriever and Port Mapping This section is trying to introduce the configuration of Net Retriever with VLAN Port Mapping. Net Retriever is a "middleware" that communicates with the popular High Speed Internet Access (HSIA) hardware and Front Office System (FOS) software to provide a seamless integration of the two.
Page 246 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Secret: The secret key between Guest Service Device and Net Retriever for challenge and response (MD5 Hash) to test the link. It should contain one or more lowercase letters, uppercase letters, numbers and symbols. It also should be between 8 ~ 16 characters.
Page 247 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro If you do not want to provide any internet access right in the rooms, you may change the state of the rooms to Block. If the user opens a browser and tries to access internet, it will pop up a Blocking message to notice the user.
Page 248 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro Service Zone: The service zone of these rooms VLAN ID Start: The first VLAN ID. Number of VLAN: The total number of VLAN. Start Room Number: The start room number.
Page 249 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro VLAN ID: The VLAN ID to be added. Room Number: The room number mapping to this VLAN ID. Room Description: The reference or remark information of this room. Caution: The VLAN Tag used in here, VLAN Port (Room) Mapping, must not be conflict with the...
Page 250 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 3. Check or modify the VLAN Port (Room) Mapping If you want to check the room mapping information or you want to change any setting of the room mapping. Configure Port Location Mapping List, go to: System >>Port Location Mapping.
Page 251 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro...
Page 252 User’s Manual AMG-2102 Gigabit Access and AP Management Gateway Pro 4. View the Event Login After all of the configuration has completed. User may try to login from the “Charge” room. Connect the user’s notebook (laptop) to the Ethernet port of this room. Enable DHCP client in this notebook (laptop).

LevelOne AMG-2102 User Manual

1 Before You Start

2 System Overview and Getting Start

3 Placing AMG-2102 in a Network Environment

4 User Authentication and Grouping

5 Managing Wireless Network

6 Policies and Access Control

7 Users' Login and Logout

8 Networking Features of a Gateway

9 System Management and Utilities

10 System Status and Reports

11 Virtual Private Network (VPN)

12 Customization of Portal

13 Payment Gateways

14 Additional Applications

Appendix A. Network Configuration on PC & User Login

Appendix B. Policy Priority (Global Policy, Service Zone Policy, Authentication Policy and User Policy)

Appendix C. Monitoring 3Rd Party AP

Appendix D. RADIUS Accounting

Appendix E. Net Retriever and Port Mapping

Quick Links

Related Manuals for LevelOne AMG-2102

Summary of Contents for LevelOne AMG-2102