Static Port Mapping; Tri-Mode Authentication; Url Filtering; Walled Garden - Nomadix Access Gateways User Manual

A G
CCESS ATEWAY

Static Port Mapping

This feature allows the network administrator to setup a port mapping scheme that forwards
packets received on a specific port to a particular static IP (typically private and
misconfigured) and port number on the subscriber side of the NSE. The advantage for the
network administrator is that free private IP addresses can be used to manage devices (such as
Access Points) on the subscriber side of the NSE without setting them up with Public IP
addresses.

Tri-Mode Authentication

The NSE enables multiple authentication models providing the maximum amount of flexibility
to the end user and to the operator by supporting any type of client entering their network and
any type of business relationship on the back end. For example, in addition to supporting the
secure browser-based Universal Access Method (UAM) via SSL, Nomadix is the only
company to simultaneously support port-based authentication using IEEE 802.1x and
authentication mechanisms used by Smart Clients. MAC-based authentication is also
available.
See also:
"Access Control and Authentication" on page 5

"Smart Client Support" on page 18


URL Filtering

The NSE can restrict access to specified Web sites based on URLs defined by the system
administrator. URL filtering will block access to a list of sites and/or domains entered by the
administrator using the following three methods:
Host IP address (for example, 1.2.3.4).

Host DNS name (for example, www.yahoo.com).

DNS domain name (for example, *.yahoo.com, meaning all sites under the

yahoo.com hierarchy, such as finance.yahoo.com, sports.yahoo.com, etc.).
The system administrator can dynamically add or remove up to 300 specific IP addresses and
domain names to be filtered for each property.

Walled Garden

The NSE provides up to 300 IP passthrough addresses (and/or DNS entries), allowing you to
create a "Walled Garden" within the Internet where unauthenticated users can be granted or
denied access to sites of your choosing.
Introduction 19