This user’s guide and the software described in it are copyrighted with all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without the written permission of Browan Communications.
None.. The availability of some specific channels and/or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destination. The firmware setting is not accessible by the end user. BROWAN Page...
Prerequisite Skills and Knowledge...................... 7 Conventions Used in this Document ....................7 Help Us to Improve this Document! ....................7 Browan Communications Technical Support ..................7 CHAPTER 1 – INTRODUCTION ......................8 Product Overview ..........................8 Management Options .......................... 8 The BW1330 Features ........................
Page 7
Built-in AAA | Configuration | Language ..................126 Built-in AAA | Configuration | Backup and restore...............126 Built-in AAA | pre-paid | WEP key and SSID ................126 Built-in AAA | Configuration | title....................126 APPENDIX ............................128 A) Access Controller Specification ....................128 Technical Data ..........................128 BROWAN Page...
Page 8
B) Regulatory Domain/Channels.....................130 C) CLI Commands and Parameters....................131 Network Commands ........................131 User Commands ..........................135 System Commands ........................137 Status Commands ........................140 Connection Commands .......................140 D) Location ID and ISO Country Codes ..................141 E) User Pages Templates Syntax ....................145 GLOSSARY ............................150 BROWAN Page...
This document provides information and procedures on hardware installation, setup, configuration, and management of the Browan Communications high performance hotspot access point model BW1330. The BW1330 is a highly integrated Access Controller with built-in AAA systems for public access hotspot. We will call it AC later in the manual.
BW1330 are compliant with the recommendations of the Wi-Fi Alliance WISP roaming group. Remote Control The BW1330 is placed at the edge of a broadband access network and allows operators to provide cost effective public Wi-Fi services, by managing per user access control, device configuration, and radio performance centrally from the operations centre.
User’s Guide Version 1.0 The BW1330 Features WLAN 802.11b+g compliant, 1-54Mbps with auto-fallback Wi-Fi compliant Support Multiple BSSID up to 16 "Virtual AP" Concurrent 802.11b and 802.11g access WDS support (concurrent bridge and AP mode) WPA/WPA2 (Wi-Fi Protected Access) support...
Version 1.0 Chapter 2 – Installation This chapter provides installation instructions for the hardware and software components of the Access Controller BW1330. It also includes the procedures for the following tasks: Hardware Introduction (LEDs, Connectors) Connecting the Access Controller First Configuration...
User’s Guide Version 1.0 Hardware Introduction General Overview Figure 1 –BW1330 Access Controller General View The front panel of the Access Controller contains: A series of indicator lights (LEDs) that help describe the state of various networking and connection operations.
User’s Guide Version 1.0 Back Panel Figure 2 – Back Panel of the BW1330 The back panel of the Access Controller contains: Model and device name (see item 1 in figure above). The official device name is High Performance Hopspot Access Point, model BW1330.
For Internet connection and PoE input For enterprise applications use this port to connect your company LAN, Intranet or to hotspot access points RS232 Console port Antenna The MAIN antenna Antenna The AUX antenna BROWAN Page...
5 – release stand figure 6 – insert stand Wall Mount BW1330 is also designed for wall mounting.Refer to the step 1 and step 2 to fix the stand on the wall and lock the BW1330 on it. figure 7 - wall mount...
User’s Guide Version 1.0 Connecting the Access Controller Use the following procedure to prepare your network connection to your BW1330. Use the enclosed power adapter for power supply of your BW1330. Step 1 Place the Access Controller on a flat work surface.
For other management methods: SNMP and command line interface (CLI) please refer to their respective chapters. Access Your BW1330 After connecting the BW1330 device to network, try to access the BW1330 via one of the method: Follow these instructions to access your BW1330 using the Web browser: Step 1 Access your device via LAN connected by RJ-45 cat.5 cable or wirelessly connect to...
CD. Step 1 Install the KickStart utility from the Installation CD. Click Start > Programs > BROWAN > KickStart to launch the application. If the BW1330 device is connected to your network, the utility will automatically find your AC: BROWAN...
Page 20
User’s Guide Version 1.0 figure 10 kick start utility Step 2 Select your controller and right click. Select Open WEB item to launch the web management interface through the secure https connection: figure 11 kick start utility BROWAN Page...
Press the reset button for more than 10 seconds. Now you are enabled to perform the initial controller configuration. Follow the next section for step-by- step setup instruction to configure the device according to your needs. BROWAN Page...
In the network interface | RADIUS settings menu you can first define the local settings of the integrated RADIUS client of the Access Controller. For example you can modify timeouts and the NAS server ID (name of the RADIUS client): BROWAN Page...
(default = Internal) - the page with online help information for log-on. unauthorized page (default = Internal) - the page which appears if web login method is disabled. The default user login page looks like the picture below: BROWAN Page...
Users connected to the LAN port of the Access Controller can type in any URL in their browser and they will be redirected to your defined welcome (if enabled) and login pages. Administrators can monitor connected users via the connection | users menu. BROWAN Page...
UAT Principle BW1330 acts as an ARP proxy to each client who has a fixed IP which not belong to the subnet of LAN interface. As below figure descript, BW1330 will automatic reply a client’s ARP Request if its IP doesn’t belong to its LAN subnet to pretend as if BW1330 is its Gateway;...
Page 26
User’s Guide Version 1.0 figure 19 UAT Limitation Figure 20 – another subnet under BW1330 BROWAN Page...
The subscriber gets to the login page after clicking the link on the welcome page. The login page is loaded from the Access Controller. To get access to the network, the user should enter his authentication settings: login name and password and click the login button: Figure 22 – Simple Login Page BROWAN Page...
User’s Guide Version 1.0 The login name and password can be obtained from your Hotspot Operator. Login format available for BW1330: username@WISPdomain WISPdomain/username The login page also displays subscriber’s logical and physical network addresses (IP and MAC). Once authenticated, a start page appears. In addition, a smaller logout window (page) pops up.
Figure 25 – Unauthorized Page The Hotspot operator can change the unauthorized page according to its needs. See more details in section: Changing User Pages. BROWAN Page...
Under the user interface | configuration | pages menu select the user page you want to change (e.g. login) figure 26 configure external pages Step 3 Choose the external option under the use column: figure 27 configure external pages BROWAN Page...
29 configure external pages Step 6 Check for new uploaded user page (e.g. login): figure 30 new login page If at anytime you wish to restore factory default user pages, click the reset button under the system | reset menu. BROWAN Page...
Specify the location for the additional files of new user page templates: images and a cascading style sheet file (css) by clicking the browse button or enter the location manually: figure 33 upload template files BROWAN Page...
Page 33
Go to the link: https://<device-IP-address>/ to get to the new user welcome page: figure 34 customize welcome page Click the here link or enter the link directly: https://<device-IP-address>/login.user to get to the new user login page: BROWAN Page...
User’s Guide Version 1.0 figure 35 customize login page If at anytime you wish to restore the factory default user pages, click the reset button under the system | reset menu. BROWAN Page...
POST data not back to the AC, but to the Web Application Server (5). Thereafter the client communicates directly with the Web Application Server. Find more details on how to prepare the .XSL templates to renter the HTML in Appendix: E) User Pages Templates Syntax. BROWAN Page...
To define such redirection URL use the user interface | configuration | pages menu. Enable welcome page, set the redirect setting and specify the redirect location for such authentication process (also see: User Interface | Configuration | Pages). BROWAN Page...
IP address of user to be logged on. username Username of the user to be logged on. password Password of the user to be logged on. All parameters are required. Script call example: https://BW1330/pplogon.user?secret=sharedSecret&ip=<user_IP_address>&userna me=userName&password=UserPassword Script produces XML output: <logon> <status>Ok</status> <error>0</error> <description>User logged on.</description>...
If supplied only IP, user is checked and logged off by username and IP. If IP and MAC addresses are supplied, then user is checked and logged off by username, IP and MAC addresses. Script call example: https://BW1330/pplogoff.user?secret=sharedSecret&username=UserName&ip=<user _IP_address> Script produces XML output: <logoff>...
Page 39
IP address of user to get status. username Username of the user to get status. All parameters are required. Script call example: https://BW1330/ppstatus.user?secret=sharedSecret&username=UserName&ip=<user _IP_address> Script produces XML output: XML output, when some error occurs: <ppstatus> <status>No user by IP</status>...
Page 40
User name User IP address User MAC address Session time Session ID User idle time Output bytes Input bytes User WISP name Remaining bytes Remaining output bytes Remaining input bytes Bandwidth upstream Bandwidth downstream Remaining session time Authentication method BROWAN Page...
| access | Web auth in chapter 8. Step1. Configure and Upload Customized Login/Logout Page files Login BW1330 as super administrator and go to user interface | configuration | Custom UAM. In order to configure BW1330 using the customized login/logout page, Customize Page status must be set to enable.
Page 42
To start to upload the customized template files, click the upload button. (We will use the coffee bar style template files in the BW1330 CD for this demonstration). After clicking the upload button, an Update Custom UAM Files screen will appear. (See diagram below).
Page 43
Figure 42 – select example files Figure 43 – upload login.html After entering all the template files, press upload button to start the uploading files to BW1330. Only ten Additional files can be uploaded at one time. To upload more additional file, repeat the same upload process in step 2-4, but please be aware of the first two items are only for login.html and logout.html files.
Page 44
User’s Guide Version 1.0 Figure 44 – upload other files Once all files are uploaded successfully, a list of Uploaded File List will show. Figure 45 – files have been uploaded Verify if all files are uploaded successfully BROWAN Page...
Page 45
Figure 47 – set the pixels of logout window Step3. Everything is ready Now, any users that access the internet via the BW1330 will see the new personalized login and logout pages. Let’s look at the new appearance of login and logout page based on the coffee bar template.
Page 46
User’s Guide Version 1.0 Figure 48 – example of coffee bar login page Figure 49 – example of coffee bar logout page BROWAN Page...
3. Question: If I don’t want the logout window to pop-up to users, how could I do? Answer: Please login BW1330 and go to user interface | configuration | Custom UAM to disable “pop logout page.” 4. Question: If I happen close the logout window, how can I logout? Answer: 1.
192.168.2.66 where 192.168.2.66 is the default WAN interface IP. Login to CLI mode and the prompt will be displayed automatically. Enter the administrator login settings (refer to the Login section for details). BROWAN Page...
A serial console port RS-232 on the BW1330 enables a connection to PC or terminal directly. 1. Connect one of the connectors of the RS-232 cable directly to the console port on the BW1330. 2. Connect the other end of the cable to the COM port of the PC or the terminal running the communication software.
To get a list of all available commands in the configure category, type: network ? Figure 53 – Network Commands List To get a list of all-available subcommands for a specific command, type: network <command> ?, (e.g. network radius ?) All available subcommands for radius are displayed: BROWAN Page...
Page 51
-a – RADIUS server IP address used for RADIUS accounting -p – RADIUS server port number used for RADIUS accounting -s – Shared secret key for accounting. Figure 57 – Configure Network (4) BROWAN Page...
Page 52
In some cases, entered commands without parameters display current controller configuration or settings: network <command> <subcommad1> <subcommad2>, (e.g. radius servers accounting), displays available RADIUS servers and its settings list (in this case, the RADIUS accounting server which is already updated): Figure 58 – Configure Network (5) BROWAN Page...
A – action: add URL -u – define URL address -s – define URL description, visible for user: Figure 61 – Configure User Interface (2) If successful, a message regarding the successful completion is displayed; otherwise, an error message is displayed. BROWAN Page...
To get the general device status information, type: status device : Figure 63 – Device Status Here you can find the current firmware version of your AC. This is important information for support requests and for preparing firmware uploads. BROWAN Page...
To reset the controller to factory defaults, type the reset command. The device is restarted and defaults values are set. Please note that even the administrator password will be set back to the factory default. Exit To leave the CLI mode, type the Exit command in the command line. BROWAN Page...
Version 1.0 Chapter 7 – SNMP Management Introduction Another way to configure and monitor the Access Controller (BW1330) via a TCP/IP network is SNMP (Simple Network Management Protocol). SNMP is an application layer protocol that facilitates the exchange of management information between network devices.
(up or down), MAC address tracking, and so forth. The SNMP agent also responds to MIB-related queries sent by the SNMP manager in get-request, get-next- request, and set-request format. P-560 get-request, get-next-reguest, get-bulk, set-request get-response, traps SNMP Agent SNMP Manager figure 66 SNMP Management BROWAN Page...
Version 1.0 BROAN Private MIB In addition to standard SNMP MIBs, BW1330 supports the Browan Communications private MIB. The private MIBs are enterprise specific and serve to extend the functionality of the standard MIBs. The Private MIB identifies manageable objects and their properties that are specific to the managed device.
Tunnels – set tunnels: PPPoE/ GRE for DSL – connect to ISP via the PPPoE or GRE tunnel GRE Client for VPN – set the GRE (Generic Routing Encapsulation) tunnels for the BW1330 Wireless – wireless interface configuration Basic – primary SSID, regulatory domain, network mode, channels selection Advanced –...
Certificate– upload new certificates into the local controller memory Save and restore – save current device configuration for backup Domain Name – Configure BW1330 domain for uniform digital certificate. Share Username - setting user account shared status Access – configure access to your controller: Access Control –...
Interface name cannot be changed because the hardware drivers define it. Status – select the status of interface: [enabled/disabled]. Do not disable the interface through which you are connected to the BW1330. Disabling such interface will lose your connection to the device.
LAN interfaces together to form one bigger (logical) network interface. There are some restrictions for bridge management that shall be taken into account: There is special bridge br1 in BW1330 that cannot be removed. This bridge initially contains two interfaces: wlan1_0 and ixp0.
Page 63
Priority – specify the priority of ports with equal cost. You can use this to control which port gets used when there are redundant paths. If you want to remove interface from bridge click delete button. e.g remove ixp0 from bridge. Click delete button on the ixp0 column. BROWAN Page...
Network Interface | Configuration | Bridge Please note after remove ixp0(LAN) it is DHCP server disabled as default.You will connect BW1330 either via WAN port(fix IP:192.168.2.66) or wlan1_0 wireless connected which DHCP server enabled(ip:192.168.3.x) as default. Other VLAN settings cannot be changed. Click on the disabled link to continue specifying settings for your VLAN.
Figure 84 – Add New Route If you want to set static routes on the interface ixp0 you must separate ixp0 from bridge (br1 interface). Refer to Chapter 8 Network Interface | Configuration | Bridge BROWAN Page...
Type = TCP, local IP address/port = 192.168.2.248:8080 remote IP address/port = 1.2.3.4:8080. With such a rule all traffic coming to port 8080 on the BW1330 interface local address 192.168.2.248 will be forwarded to port 8080 on the server (host) 1.2.3.4.
WAN interface. Administrator can designate an only server’s IP address. Network Interface | Configuration | User ACL User ACL provide high flexibility for administrator to define the rules for BW1330 to filter the packets which will forward or masquerade by it.
IP Address and Netmask – specify the IP address and netmask of the management subnet. IP address will be set on the network interface as an alias, so you can connect to the BW1330 using this address. This IP address should be used on access points as the gateway address.
There is a solution – the administrator can use GRE tunnel(see: Network Interface | Tunnels) to setup a tunnel between the administrator's computer and the BW1330. The only addresses visible on the Internet will be the BW1330 WAN IP address and the administrator's computer (or router) IP address.
Version 1.0 Network Interface | DHCP The BW1330 controller can act as a DHCP server and/or as a DHCP relay gateway. The DHCP (Dynamic Host Configuration Protocol) service is supported on the LAN interfaces [ixp0/vlan[n]]. This service enables clients on the LAN to request configuration information, such as an IP address, from a server.
Need help?
Do you have a question about the BW1330 and is the answer not in the manual?
Questions and answers