4IPNET HSG260 User Manual
  1. Manuals
  2. Brands
  3. 4IPNET Manuals
  4. Wireless Router
  5. HSG260
  6. User manual

4IPNET HSG260 User Manual

Wireless hotspot gateway
Hide thumbs
Table of Contents

Advertisement

Quick Links

V1.20
HSG Series
Wireless Hotspot Gateway

Advertisement

Table of Contents
loading

Related Manuals for 4IPNET HSG260

Summary of Contents for 4IPNET HSG260

  • Page 1 V1.20 HSG Series Wireless Hotspot Gateway...
  • Page 2 4IPNET, INC. Disclaimer 4IPNET, INC. does not assume any liability arising out the application or use of any products, or software described herein. Neither does it convey any license under its parent rights not the parent rights of others.

  • Page 3: Table Of Contents

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Table of Contents Before You Start ......................1 Preface ..............................1 Document Conventions ......................... 1 Package Checklist ........................... 2 System Overview and Getting Started ..............3 Introduction of the Hotspot Gateway HSG Series ................3 System Concept ............................
  • Page 4 User’s Manual HSG Wireless Hotspot Gateway ENGLISH User Login ............................. 57 5.2.1 Default Authentication ..........................57 5.2.2 Login with Postfix ............................ 57 5.2.3 An Example of User Login ........................57 Restrain the Users ........................60 Black List ............................... 60 Group ..............................62 Policy ..............................
  • Page 5 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.6 Change Admin Passwords ........................97 10.7 Backup / Restore and Reset to the Factory Default ................. 98 10.8 Firmware Upgrade ..........................99 10.9 Restart ..............................100 10.10 Network Utility ............................ 101 10.10.1 Wake-on-LAN............................102 10.10.2 Ping .................................

  • Page 6: Before You Start

    HSG Hotspot Gateway Series. It contains step-by-step procedures and graphic examples to guide MIS staff or individuals with slight network system knowledge to complete the installation. Corresponding Software Versions for each Model HSG260 Up to software version 2.40 HSG320 Up to software version 1.20 HSG327 Up to software version 1.20...

  • Page 7: Package Checklist

     Power Adapter (DC 12V) x1 (HSG320)  Detachable antenna (x 2 for HSG260 and x 4 for HSG320) Caution: It is highly recommended to use all the supplies in the package instead of substituting any components with other suppliers to guarantee best performance.

  • Page 8: System Overview And Getting Started

    IP sharing and etc. The HSG gateway also brings in an extra advantage - the wall-mountable IP50 dust-proof (HSG260 / HSG320) or ceiling mountable (HSG327) housing. 2.2 System Concept The HSG gateway is capable of managing user authentication, authorization and accounting.

  • Page 9: The Hsg Series Hardware Overview

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 2.3 The HSG Series Hardware Overview HSG260 Rear Panel Reverse SMA connectors for attaching antenna as shown in above figure. Antenna connector For attaching an Ethernet cable to an uplink service. LAN 1- 4 ports Attach Ethernet cables here for connecting to the wired local network.

  • Page 10: Front Panel

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Front Panel Press this button to quick-print an account generated from billing plan 1. Quick button WES button Press and hold over 5 seconds to initiate Master Mode for the WES process. Press and release to initiate Slave Mode for the WES process. On indicates power on.

  • Page 11: Rear Panel

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH HSG320 1 2 3 Rear Panel Power Jack Socket for the power adaptor. Restart / Reset Press once to restart the system; Press and hold for more than 5 seconds to reset to factory default. WES Button (A / B) WDS Easy Setup.
  • Page 12 User’s Manual HSG Wireless Hotspot Gateway ENGLISH HSG327 Rear Panel Power Jack Socket for the power adaptor. Restart / Reset Press once to restart the system; Press and hold for more than 5 seconds to reset to factory default. WES Button WDS Easy Setup.

  • Page 13: System Requirement

    The HSG gateway has two virtual Private and Public zones that are mapped to LAN1, LAN2 (192.168.1.254) and LAN3, LAN4 (192.168.11.254) respectively on the HSG260. The HSG gateway has two virtual Private and Public zones that are mapped to LAN1 (192.168.1.254) and LAN2 (192.168.11.254) respectively on the HSG320/HSG327.

  • Page 14: Access Web Management Interface

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 2.6 Access Web Management Interface The HSG gateway supports Web Management Interface (WMI) configuration. Upon the completion of hardware installation, the HSG gateway can be configured via web browsers with JavaScript enabled such as Internet Explorer version 6.0 and above or Firefox.
  • Page 15 User’s Manual HSG Wireless Hotspot Gateway ENGLISH After a successful login, a “Home” page with four main buttons will appear on the screen. Caution: If you can’t get to the login screen, the reasons may be: (1) The PC is set incorrectly so that the PC can’t obtain the IP address automatically from the LAN port;...

  • Page 16: Incorporate Hsg Gateway To The Network

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Incorporate HSG gateway to the Network Network Requirement In the general network environment, the main role of the HSG gateway is to manage all the network access from internal network to Internet. Thus, the first step is to prepare an Internet connection from your ISP (Internet Service Provider) and connect it to the WAN port of the HSG gateway.

  • Page 17: Static Ip

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3.2.1 Static IP Static: Manually specifying the IP address of the WAN Port. The fields with red asterisks are mandatory.  IP Address: The IP address of the WAN port.  Subnet Mask: The subnet mask of the WAN port. ...

  • Page 18: Pppoe

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3.2.3 PPPoE PPPoE: When selecting PPPoE to connect to the network, please set the “Username”, “Password”, “MTU” and “Clamp MSS”. There is a Dial on demand function under PPPoE. If this function is enabled, a Maximum Idle Time slot will be available for inputting a value.

  • Page 19: Pptp

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3.2.3 PPTP PPTP: Although not a popular method, PPTP protocol for dialup connections is adapted by some ISPs (in European Countries). Your PPTP ISP will issue you an account with a password as well as the PPTP server address.

  • Page 20: Internet Connection Detection

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Internet Connection Detection To configure Internet Connection Detection, go to: System >> WAN Traffic.  Internet Connection Detection: When this function is enabled, system will try to access these IP/Domain addresses, if system can reach these IP/Domain addresses, it means that the outbound Internet connection is in normal state.

  • Page 21: Wan Bandwidth Control

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH WAN Bandwidth Control To configure WAN Bandwidth Control, go to: System >> WAN Traffic. The feature gives administrators control over the entire system’s traffic on the WAN interface. These parameters set here should not exceed the real bandwidth provided by your ISP. For example, if your xDSL is 8Mbs/640kbs, you may input values equal to or less than the speed here.

  • Page 22: What Is A Service Zone

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH What is a Service Zone To configure a Zone, go to: System >> Service Zones. A Zone is a logical network area that covers wired or wireless networks, or both of them. By associating it with a unique ESSID of a Zone, wireless network is divided into different logical zones.

  • Page 23: Port Role Assignment

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH configured from the LAN Port Mapping tab (refer to 3.5.1).  Status: Shows the Private/Public Zone mappings to the physical LAN ports.  Details: Configurable, detailed settings for each Zone. Click the Configure button to configure each Zone: Basic Settings, Authentication Settings, Wireless Settings, and WDS Settings (Public Zone only).
  • Page 24 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Tag-Based Service Zone Tag-Based operation mode operates under the principle that different Service Zones are identified by VLAN ID. This means that Tag-Based operation allows each physical LAN port to accept traffic for any enabled Service Zones Traffic handling will be processed internally according to the VLAN ID traffic packets carry.

  • Page 25: Planning Your Internet Network

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3.5.2 Planning Your Internet Network HSG gateway supports four zones, Private, Public, Service Zone 2 and Service Zone 3. In the Private Zone, authentication is not required to access the internet (disabled by default) via wired and wireless. In the Public Zones, by default the “Authentication Required for Zone”...

  • Page 26: Configure Zone Network

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3.5.3 Configure Zone Network To configure Zone network; go to: System >> Service Zone. Click the button Configure for Private zone for further configuration. The parameter descriptions of Basic Settings for all four Zones are the same. The wireless settings under each zone will be covered in the next section.
  • Page 27 User’s Manual HSG Wireless Hotspot Gateway ENGLISH configure the DHCP Server, click the button Configure. Please note that when “Enable DHCP Relay” is enabled, the IP address of clients will be assigned by an external DHCP server. The system will only relay DHCP information from the external DHCP server to downstream clients of this zone.

  • Page 28: Let Your Network Be A Wireless Network

    Band: There are 4 modes to select, 802.11b (2.4G, 1~11Mbps), 802.11g (2.4G, 54Mbps), 802.11b+g, and 802.11g+n for the HSG260 and additional 802.11a (5G, 54Mbps) and 802.11a+n for the HSG320 / HSG327. Otherwise the administrator could enable the ‘Pure 11n’ to only utilize the 11n band.
  • Page 29 User’s Manual HSG Wireless Hotspot Gateway ENGLISH transmission speed or keep the default setting, Auto, to make the Access Point automatically use the fastest rate possible.  Transmit Power: Keep the default setting, or select from range to make the Access Point use different transmit power as you wish.

  • Page 30: Zone Wireless Settings

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Zone Wireless Settings Each zone has its own VAP and corresponds to one SSID. In Private zone, it’s VAP1 and the SSID is hidden by default, so public users cannot scan this SSID in the air, for privilege users who already know this SSID, they can manually associate to the SSID of Private zone.
  • Page 31 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Fragment Threshold: Enter a value between 256 and 2346. The default value is 2346. Packet size larger than this threshold, will be fragmented (sent with several pieces instead of one chunk) before transmission. A smaller value results in smaller frames but allows a larger number of frames in transmission.
  • Page 32 User’s Manual HSG Wireless Hotspot Gateway ENGLISH unauthorized wireless association if necessary. The encryption standards supported are WEP and WPA-PSK. Advanced: The parameters in Advanced are wireless settings that allow customization of data  transmission, enhanced security and wireless roaming. Beacon Interval: The entered amount of time indicates how often the beacon signal will be sent from the VAP.

  • Page 33: Zone Wireless Security

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Zone Wireless Security To configure Zone Wireless Security, go to: System >> Service Zones, click Configure for the respective Service Zones. After the above configurations are finished, setting up the wireless security is very important to protect your wireless network.
  • Page 34 User’s Manual HSG Wireless Hotspot Gateway ENGLISH WEP Keys: Provide the pre-defined WEP key value; the system supports up to 4 sets of WEP keys.  802.1X: Dynamic WEP: Dynamic WEP is always enabled when the 802.1X option is selected to automatically generate WEP keys for encryption.

  • Page 35: Wireless Layer 2 Firewall

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Wireless Layer 2 firewall Go to System >> Layer 2 Firewall The system provides an additional security feature, Layer2 Firewall, in addition to the standard wireless security. Layer2 Firewall offers a firewall function that is tailored specifically for Layer2 traffic, providing another choice of shield against possible security threats coming from/going to WLAN (AP interfaces);...

  • Page 36: Generic Firewall Rules

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 4.4.1 Generic Firewall Rules You can choose to enable or disable the wireless Generic Firewall. This section provides an overview of firewall rules for the system’s wireless interface; 6 default rules with up to a total 10 firewall rules are available for configuration.
  • Page 37 User’s Manual HSG Wireless Hotspot Gateway ENGLISH From the overview table, each rule is designated with the following field;  No.: The numbering will decide the priority of which the system will carry out the available firewall rules in the tables. ...
  • Page 38 User’s Manual HSG Wireless Hotspot Gateway ENGLISH drop-down list.  DSAP/SSAP (when EtherType is IEEE 802.3): The value can be further specified for the fields in 802.2 LLC frame header.  SNAP Type (when EtherType is IEEE802.3): The field can be used to indicate the type of encapsulated traffics.
  • Page 39 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Please make sure all the desired rules are checked as Active and click the Apply button below on the overview page.

  • Page 40: Predefined And Custom Service Protocols

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 4.4.2 Predefined and Custom Service Protocols The administrator can add or delete firewall service protocols here; the services on this list will become available drop-down options to choose from in firewall rule (when EtherType is IPv4). The first 27 entries are default services and the administrator can add any extra desired services.

  • Page 41: Advanced

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 4.4.3 Advanced Advanced Firewall Settings can be enabled to supplement the firewall rules, providing extra security enhancement against DHCP and ARP traffics traversing the available interfaces of the system.  DHCP Snooping: When enabled, DHCP packets will be validated against possible threats like DHCP starvation attack.

  • Page 42: Who Can Access The Network

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Who Can Access the Network Type of Users To configure Users, go to: Users >> Authentication. This section is for administrators to pre-configure authentication servers for the entire system. Concurrently up to three servers can be selected and pre-configured for static user authentication. One server uses built-in LOCAL database while the other two servers use external RADIUS database.

  • Page 43: Local

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 5.1.1 Local Click the button Configure for Local for further configuration.  Local User List: It allows the administrator to view, add or delete local user accounts. The Upload User button is for importing a list of user accounts from a text file. The Download User button is for exporting all local user accounts into a text file.
  • Page 44 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Search: Enter a keyword of a username or remark to be searched in the text file and click this button to perform the search. All usernames matching the keyword will be listed. ...
  • Page 45 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Date can be selected. Click Apply to complete the modification.

  • Page 46: Radius

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 5.1.2 RADIUS There are two RADIUS authentication databases for configuration. Click Configure for any one of RADIUS servers for further configuration. The RADIUS server sets the external authentication for user accounts. Enter the information concerning the primary server and/or the secondary server (the secondary server is not mandatory).
  • Page 47 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...
  • Page 48 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  External RADIUS Related Settings  802.1X Authentication: Enable /Disable 802.1X authentication for users authenticated through this Server.  Username Format: Select the format of the user login information required to be sent to the external RADIUS Server.
  • Page 49 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Primary / Secondary RADIUS Server  Authentication Server: Enter the domain name or IP address of your RADIUS Server.  Authentication Port: Enter the Port number used for authentication.  Accounting Port: Enter the Port number used for accounting. ...

  • Page 50: On-Demand User

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 5.1.3 On-Demand User On-demand User Server Configuration: The administrator can configure this authentication method to create on-demand user accounts. This function is designed for hotspot owners to provide temporary users with free or paid wireless Internet access in the hotspot environment.
  • Page 51 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Postfix: The string of characters needed to be entered with the username during login.  Remaining Volume Sync Interval: Select a desired interval for on-demand user quota update. The quota information, i.e. remaining time or remaining quota displayed on the on-demand user login success page will be refreshed according to the time interval configured here.
  • Page 52 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Currency: Select the desired currency unit for charged internet access.  WLAN ESSID: The entered name will be the ESSID of the Public Zone.  Wireless Key: The wireless key configured in Public Zone Settings will be shown. ...
  • Page 53 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Width: The ticket width. Select 2” when used with PRT100 and select 3” when used with PRT200.  Font Size: Large fonts may be selected when ticket width is set to 3”. ...
  • Page 54 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Billing Plans Administrators can configure several billing plans. Click the Edit button to enter the page of Editing Billing Plan. Configure billing plans with desired account type, expiration date, price, etc. Click Apply to save the plan. Go back to the screen of Billing Plans, check the Enable checkbox or click Select all, and then click Apply, the plan(s) will be activated.
  • Page 55 User’s Manual HSG Wireless Hotspot Gateway ENGLISH SMS Gateway The HSG supports integration with Clickatell SMS Gateway to send SMS messages during account generation. This function may be enabled for either paid services (such as Paypal) or for Free account generation.
  • Page 56 User’s Manual HSG Wireless Hotspot Gateway ENGLISH With a set of Clickatell account Username/Password, the SMS Gateway can be configured to send SMS messages upon On-Demand account creation. The SMS service can be used for free access, paid access with payment gateway integration, or both. Define an API ID and activate the desired billing plans. Multiple Billing Plans may be activated if needed.
  • Page 57 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Account Type: Show account type of the plan in Usage-time. Duration-time or Hotel Cut-off.  Quota: The total amount of time, interval or traffic volume for On-demand users to access the network. For Time users, it is the total time.
  • Page 58 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Account Type: Show account type of the plan in Usage-time, Duration-time or Hotel Cut-off.  Quota: The total amount of time, interval or traffic volume for On-demand users to access the network. ...
  • Page 59 On-demand Account Creation by Quick Button (Available on HSG260) The Quick Button located on the front panel of HSG260 is a quick On-demand account generation button. This button is designed to create On-demand accounts without the need to enter WMI. There should be a serial POS printer such as the PRT100 which is directly connected to the console port of HSG260.
  • Page 60 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Redeemed: the account has been applied for account renewal.  External ID: This is an additional information field combined with a unique account, for example the customer’s name or social security number etc. ...

  • Page 61: Free Authentication

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 5.1.4 Free Authentication When the Free Authentication option is Enabled, users will have an option of logging in with an email address without authentication. This can be activated under Service Zone Settings configurations. The constraints can be set specifically with the mapped Group profile.

  • Page 62: User Login

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 5.2 User Login 5.2.1 Default Authentication There are different types of authentication databases (LOCAL, RADIUS and ONDEMAND) that are supported by the system. But authentication can only be set in the Public Zone. A postfix is used to inform the system which authentication option is to be used for authenticating an account (e.g.
  • Page 63 User’s Manual HSG Wireless Hotspot Gateway ENGLISH website (in this example, we try to connect to www.google.com). The default user login page will appear in the browser. 2. Enter the username and password (for example, we use a local user account: test@local here) and then click Login.
  • Page 64 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...

  • Page 65: Restrain The Users

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Restrain the Users Black List To configure Black List, go to: Users >> Black List. The administrator can add, delete, or edit the black list for user access control. User accounts that appear on the black list will be denied of network access.
  • Page 66 User’s Manual HSG Wireless Hotspot Gateway ENGLISH After entering the usernames in the “Username” field and the related information in the “Remark” blank (not required), click Apply to add the users. If a user needs to be removed from the black list, click the user’s “Delete” button and or use click Del All button to remove all users from the black list.

  • Page 67: Group

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Group To configure Group, go to: Users >> Group. Users on the HSG can be classified into different groups, which can be assigned different Policies and Schedules. The HSG supports up to 5 user Groups. When the type of authentication database is RADIUS, the Class-Group Mapping function will be available to allow the administrator to assign a Group for a RADIUS class attribute;...
  • Page 68 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Select Policy: Select a desired policy profile to configure.  Firewall Profile: Global policy and policy 1 ~ 5 all have a firewall service list and a set of firewall profiles which is composed of firewall rules.

  • Page 69: Schedule

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 6.3.1 Schedule  Schedule Profile: Click User >> Schedule to enter the configuration page and shows the Permitted Login Hours list. This function is used to limit the time when clients can log in. Check the desired time-slot checkboxes and click Apply to save the settings.

  • Page 70: Firewall

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 6.3.2 Firewall Firewall Profile: Click User >> Firewall and the Firewall Configuration will appear. Click Predefined and Custom Service Protocols to edit the protocol list. Click Firewall Rules to edit the rules. Up to 5 profiles can be configured.
  • Page 71 User’s Manual HSG Wireless Hotspot Gateway ENGLISH If the Protocol Type is ICMP, the Type and Code needs to be defined. If the Protocol Type is IP, the Protocol Number needs to be defined. 2) User Firewall Rules After the custom protocol is defined(or just use the Predefined Service Protocols), you will need to enable the Firewall Rule to apply these protocols.
  • Page 72 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Selecting the Filter Rule Number 1 as an example: Rule Number: This is the rule selected “1”. Rule No. 1 has the highest priority; rule No. 2 has the second priority, and so on. Rule Name: The rule name can be changed here.

  • Page 73: Qos Profile

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 6.3.3 QoS Profile Up to 5 QoS profiles can be configured for certain applications or users that need stable bandwidth or traffic priority. Bandwidth Control can only be Enabled when Bandwidth limits on WAN has been Enabled. ...

  • Page 74: Routing

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 6.3.4 Routing Specific Route Profile: Click User >> Specific Route for the Specific Route Profile, the ‘Specific Route Profile’ list will appear. 1) Specific Route  Specific Route Profile: The Specific Default Route is used to control clients to access some specific IP segment by the specified gateway.
  • Page 75 User’s Manual HSG Wireless Hotspot Gateway ENGLISH combination of Network/IP Address and Subnet Mask that have just been entered and applied. Destination / Subnet Netmask: The subnet mask of the destination network. Select 255.255.255.255(/32) if the destination is a single host. Gateway / IP Address: The IP address of the gateway or next router to the destination.
  • Page 76 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 2) Default Gateway  Default Gateway: The default gateway of a desired IP address can be defined in each Policy except Global Policy. When Specific Default Route is enabled, all clients applied with this Policy will access the Internet through this default gateway.

  • Page 77: User Privilege

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 6.3.5 User Privilege Administrator can choose to allow users to change their Password. And to prevent ill-behaved clients or malicious software from taking up the system’s connection resources, the administrator can restrict the number of concurrent sessions that a user can establish.

  • Page 78: Access Network Without Authentication

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Access Network without Authentication 7.1 DMZ To configure DMZ, go to: Network >> Network Address Translation >> DMZ (Demilitarized Zone). There are 40 sets of static Internal IP Address and External IP Address available. Enter Internal and External IP Address as a set.
  • Page 79 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...

  • Page 80: Virtual Server

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Virtual Server To configure Virtual Server, go to: Network >> Network Address Translation >> Public Accessible Server. This function allows the administrator to set 40 virtual servers at most, so that client devices outside the managed network can access these servers within the managed network.

  • Page 81: Privilege List

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Privilege List To configure the Privilege List, go to: Network >> Privilege Setup the Privilege IP Address List, Privilege MAC Address List and the Privilege IPv6 Address List. The clients accessing the internet via IP addresses and/or networking devices on the list can access the network without any authentication.

  • Page 82: Privilege Ip

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 7.3.1 Privilege IP Privilege IP Address List To configure Privilege IP Address List, go to: Network >> Privilege >> IP Address List. If there are workstations inside the managed network that need to access the network without authentication, enter the IP addresses of these workstations in “Granted Access by IP Address”.

  • Page 83: Privilege Mac

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 7.3.2 Privilege MAC Privilege MAC Address List In addition to the Privilege IP List, MAC address List allows the MAC address of the workstations that need to access the network without authentication to be set in “Granted Access by MAC Address”. The HSG allows 200 privilege MAC addresses at most.

  • Page 84: Disable Authentication In Public Zone

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Disable Authentication in Public Zone To disable Authentication in Public Zone, go to: System >> Service Zones, click Configure in Public Zone. Authentication Required For the Zone: When it is disabled, users will not need to authenticate before they ...

  • Page 85: User Login And Logout

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH User Login and Logout Before Login 8.1.1 Login with SSL To configure HTTPS, go to: System >> General. HTTPS (HTTP over SSL or HTTP Secure) is the use of Secure Socket Layer (SSL) or Transport Layer Security (TLS) as a sub-layer under regular HTTP application layering.

  • Page 86: Internal Domain Name With Certificate

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 8.1.2 Internal Domain Name with Certificate To configure Internal Domain Name, go to: System >> General. Internal Domain Name is the domain name of the HSG seen on client machines connected under zone. It must conform to FQDN (Fully-Qualified Domain Name) standard.
  • Page 87 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Without a valid certificate, users may encounter the following warning when trying to open the login page. Click “Continue to this website” to access the user login page.

  • Page 88: Walled Garden

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 8.1.3 Walled Garden To configure Walled Garden, go to: Network >> Walled Garden. This function provides certain free services for users to access the websites listed here before login and authentication. Up to 20 addresses or domain names of the websites can be defined on this list. Users without the network access right can still have a chance to experience the actual network service free of charge.

  • Page 89: Walled Garden Ad

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 8.1.4 Walled Garden AD To configure Walled Garden AD List, go to: Network >> Walled Garden AD. This function provides advertisement links to web pages for users to access free of charge before login and authentication.

  • Page 90: After Login

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH After Login 8.2.1 Start Page URL after Successful Login To configure the Start Page URL after a successful user login, go to: System >> General. When this function is enabled, the administrator can choose to set the URL of an opened browser after users’ initial login.

  • Page 91: Idle Timer

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 8.2.2 Idle Timer To configure Idle Timer, go to: Users >> Additional Control. If a user has idled with no network activities, the system will automatically kick the user out. The logout timer can be set between 1~1440 minutes, and the default idle time is 10 minutes.

  • Page 92: Multiple Login

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 8.2.3 Multiple Login To configure Multiple Login, go to: Users >> Additional Control. When enabled, a user can log in from different computers with the same account. (This function doesn’t support On-demand users.)

  • Page 93: Networking Features Of A Gateway

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Networking Features of a Gateway 9.1 Dynamic Domain Name Service (DDNS) To configure Dynamic Domain Name Service, go to: Network >> DDNS. Before activating this function, you must have your Dynamic DNS hostname registered with a Dynamic DNS provider.

  • Page 94: Port And Ip Forwarding

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 9.2 Port and IP Forwarding To configure Port and IP Forwarding, go to: Network >> NAT >> Port and IP Forwarding. This function allows the administrator to set at most 40 sets of IP addresses for redirection purposes. When the user attempts to connect to a destination IP address listed here, the connection packet will be converted and redirected to the corresponding destination.

  • Page 95: System Management And Utilities

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10 System Management and Utilities 10.1 System Time To configure System Time, go to: System >> General. NTP (Network Time Protocol) communication protocol can be used to synchronize the system time with remote time server.

  • Page 96: Management Ip Address List

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.2 Management IP Address List To configure the Management IP Address List, go to: System >> General. Only PCs within the Management IP range on the list are allowed to access the system's web management interface.

  • Page 97: Ip Address For Accessing User Log

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH The default value is “0.0.0.0/0.0.0.0”. It means that the WMI can be accessed by any IP address, for security consideration; please change this value before the system provides service. 10.3 IP Address for Accessing User Log To configure User Log Access IP History, go to: System >>...

  • Page 98: Snmp

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.4 SNMP To configure SNMP, go to: System >> General. The HSG supports SNMP v1/v2c. If this function is enabled, the SNMP Management IP and the Community string can be assigned for SNMP management applications to access the system.

  • Page 99: Administration

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.5 Administration The HSG supports customizable administration account types, namely Super Group, Manager, On-Demand Manager or Operator. The default predetermined group of the Administrator is Super group, and the username and password are as follows: Admin: The administrator can access all configuration pages of the HSG.
  • Page 100 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Password Safety Settings: Password rules and requirements can be configured here to facilitate additional security. The following parameters can be configured: Password Complexity, Admin Login Retry Times, Password Expire, and Admin Login Reuse Times. There are three other default Administrative Account groups with predetermined permission settings, and these permission settings can be customized.
  • Page 101 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Manager: The manager can only access the configuration pages under User Authentication to manage the user accounts. Operator: The operator can only access the configuration page of Create On-demand User to create new on-demand user accounts and print out the on-demand user account receipts.

  • Page 102: Change Admin Passwords

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.6 Change Admin Passwords To configure Admin passwords, go to: Utilities >> Administrator Account. There are four predetermined levels of authority: Super Group, Manager, Operator, and On-Demand Manager. The usernames and passwords can be configured at: Utilities >> Administrator Account. Clicking on the hyperlink of the Name allows the administrator to change passwords.

  • Page 103: Backup / Restore And Reset To The Factory Default

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.7 Backup / Restore and Reset to the Factory Default To configure Backup / Restore and Reset to Factory Default, go to: Utilities >> Backup & Restore. This function is used to backup/restore the HSG settings. Also, the HSG can be restored to the factory default settings here.

  • Page 104: Firmware Upgrade

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.8 Firmware Upgrade To configure Firmware Upgrade, go to: Utilities >> System Upgrade. The administrator can download the latest firmware from the website and upgrade the system here. Select the latest firmware with Browse button, then click Apply, the system will upload the file and restart to perform the upgrade process.

  • Page 105: Restart

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.9 Restart To perform system restart, go to: Utilities >> Restart. This function allows the administrator to safely restart the HSG, and the process takes approximately three minutes. Reason for restarting the system can be entered for record purposes. Click YES to restart the HSG; click NO to go back to the previous screen.

  • Page 106: Network Utility

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.10 Network Utility To configure Network Utility, go to: Utilities >> Network Utilities. System provides some network utilities for administrators. Both IPv4 and IPv6 are supported. Wake-on-LAN is for waking up remote devices that supports Wake-on-LAN feature by entering the MAC address of the target device and then press Wake Up button.

  • Page 107: Wake-On-Lan

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.10.1 Wake-on-LAN This allows the system to remotely boot up a power-down computer connected to a LAN port with Wake-On-LAN feature enabled in its BIOS. Enter the MAC Address of the desired device and click Wake Up to execute this function.

  • Page 108: Monitor Ip Link

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.11 Monitor IP Link To configure Monitor IP Link, go to: Network >> Monitor IP. The HSG will send out a packet periodically to monitor the connection status of the IP addresses on the list. On each monitored item with a WEB server running, administrators may add a link for easy access by entering the IP, selecting the Protocol to http or https and then clicking Create.

  • Page 109: Console Interface

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 10.12 Console Interface Via the console port, administrators can enter the console interface to handle problems and situations occurred during operation. 1. In order to connect to the console port of the HSG, a console, modem cable, and a terminal simulation program, such as the Hyper Terminal are needed.
  • Page 110 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Ping host (IP): By sending ICMP echo request to a specified host and waiting for the response to test the network status.  Trace routing path: Trace and inquire the routing path to a specific target. ...
  • Page 111 User’s Manual HSG Wireless Hotspot Gateway ENGLISH SSH. The username is “admin” and the default password is also “admin”, which is the same as for the web management interface. Password can also be changed here. If administrators forget their password and are unable to log in to the management interface from the web or the remote end of the SSH, they can still use the null modem to connect to the console management interface and set the administrator’s password again.

  • Page 112: System Status And Reports

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH System Status and Reports 11.1 Viewing the Status This section includes System, Interface, Routing Table, Current Users, Session List, User Logs, Logs, DHCP Lease and Report & Notification to provide system status information and online user status. 11.1.1 System Status To view System Status, go to: Status >>...
  • Page 113 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The description of the above-mentioned table is as follows: Description Item The total time system has operated Up Time The present firmware version of the HSG Firmware Version The present build number of the firmware Build The country code for WiFi standards Site...

  • Page 114: Interface Status

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.2 Interface Status To view Interface Status, go to: Status >> Interface. This section provides an overview of the interface for the administrator including WAN, Zone - Private and Zone - Public.
  • Page 115 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...
  • Page 116 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The description of the above-mentioned table is as follows: Description Item Shows WAN interface settings: Static, Dynamic, PPPoE or PPTP Mode The MAC address of the WAN port MAC Address The IP address of the WAN port IP Address The Subnet Mask of the WAN port Subnet Mask...

  • Page 117: Routing Table

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.3 Routing Table To view System Status, go to: Status >> Routing Table. All the Policy Routing rules and Global Policy Routing rules for both IPv4 and IPv6 will be listed here. It will also show the System Routing rules specified by each interface.

  • Page 118: Current Users

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.4 Current Users To view Current Users, go to: Status >> Current Users. On this page, each online user’s information including Username, IP Address, MAC Address, IPv6 Address, Pkts In, Bytes In, Pkts Out, Bytes Out, Service Zone/VLAN, Group/Policy, Authentication Method/Authentication Database, Online/Idle and Kick Out will be shown.

  • Page 119: Session List

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.5 Session List This page allows the administrator to inspect sessions currently established between a client and the system. Each result displays the IP and Port values of the Source and Destination. You may define the filter conditions and display only the results you desire.
  • Page 120 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Caution: Since the history is saved in the RAM memory, if you need to restart the system at the same time, please keep the history, manually by copying and saving the traffic history information before restarting.
  • Page 121 User’s Manual HSG Wireless Hotspot Gateway ENGLISH If the Receiver E-mail Address(es) has been entered under the Notification Settings page, the system will automatically send out these history information to that specified email address.  Users Log All user activities on the system within 72 hours excluding other user logs such as On-demand user log are recorded;...

  • Page 122: Local User Monthly Network Usage Report

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.7 Local User Monthly Network Usage Report To view Local User Monthly Network Usage, go to: Status >> User Log.  Monthly Network Usage of Local User The system keeps a cumulated record of the traffic data generated by each Local user in the last 2 calendar months.

  • Page 123: System Related Logs

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.1.8 System Related Logs To configure System related logs, go to: Status >> Logs. This page displays the system’s local log information since system boot up. Administrators can examine the log entries of various events. However, since all these information are stored on volatile memory, they will be lost during a restart/reboot operation.
  • Page 124 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The DHCP IP lease statistics can be viewed after clicking on Show Statistics List in this page.  Statistics of offered list Valid lease counts of the Last 10 Minutes, Hours and Days are shown here. The header 1 ~ 10 are the unit multipliers.

  • Page 125: Notification

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.2 Notification To configure Notification, go to: Status >> Report & Notification. The HSG can automatically send the notifications of Monitor IP Report, Users Log, On-demand User Log, Roaming Out Users Log, Roaming In Users Log, Firewall Log, Session Log and On-demand User Billing Report to up to 5 particular e-mail addresses.

  • Page 126: E-Mail

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.2.1 E-Mail  SMTP Settings:  Receiver Email Address (es): Up to 5 e-mail addresses can be set up to receive the notification. There are eight kinds of notification for selection -- Monitor IP Report, Users Log, On-demand Users Log, Roaming Out Users Log, Roaming In Users Log, Session Log, Firewall Log, and On-demand Billing Report, check the selection box to choose the type of notification to be sent.

  • Page 127: Syslog

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.2.2 SYSLOG  SYSLOG Server Settings: There are 9 types of SYSLOG supported: Users Log, On-demand Users Log, Roaming Out Users Log, Roaming In Users Log, Session Log, Firewall Log, Local HTTP Web Log, HTTP Web Log and DHCP Server Log.

  • Page 128: Ftp

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 11.2.3 FTP This configuration page allows the setting of FTP Server to send, including the types of Roaming Out Users Log, Roaming In Users Log, On-demand User Billing Report, Session Log, Local HTTP Web Log, HTTP Web Log, WMI Configuration Log, DHCP Lease Log, Traffic Report, User Log or On-demand User Log based on Server Folder and Interval.
  • Page 129 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Server Folder: The folder in the configured FTP Server in which the sent Log will be placed.  Interval: The time interval at which the Log will be sent.  Logged Interface: The check box of Public or Private shall be checked to enable logging the HTTP Web Log of this interface.

  • Page 130: Advanced Applications

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Advanced Applications 12.1 Upload/Download Local User Accounts To Upload / Download Local Users Accounts, go to: Users >> Authentication, click Configure for the Local Authentication Database. Or click Quick Links >> Local User Management from system Home page. Upload User: Click Upload User to enter the Upload User from File interface.
  • Page 131 User’s Manual HSG Wireless Hotspot Gateway ENGLISH When the system uploads a file, any format error or duplicated username will terminate the uploading process and no account will be uploaded. Please correct the format in the uploading file or delete the duplicated user accounts in the database then try again.

  • Page 132: Radius Advanced Settings

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 12.2 RADIUS Advanced Settings To configure RADIUS Advanced Settings, go to: Users >> Authentication. Click Configure for the RADIUS Authentication Database. .  Complete vs. Only ID vs. Leave Unmodified For RADIUS authentication, there is an option to send the complete username with postfix or username only. Username Format: When the Complete option is checked, both the username and postfix will be transferred to the RADIUS server for authentication.

  • Page 133: Roaming Out

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 12.3 Roaming Out To configure local user Roaming Out, go to: Users >> Authentication, click configure for Local. Under certain configurations, the HSG can act as a RADIUS server for Roaming Out local users logged from another system.

  • Page 134: Customizable

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH 12.4 Customizable Pages To configure Custom Pages, go to: System >> Service Zones, click Configure in Public zone. There are several user login and logout pages that can be customized by the administrator. You can select Default Page, Template Page, Uploaded or External Page.
  • Page 135 User’s Manual HSG Wireless Hotspot Gateway ENGLISH External Page:  Choose the External Page option if you wish to use user pages located on a designated website. Click Configure for each custom page and enter the URL of its corresponding external login page and click Apply. After applying the setting, the new login page can be previewed by clicking Preview button.

  • Page 136: Appendix A. Policy Priority

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix A. Policy Priority  Global Policy, Authentication Policy and User Policy The HSG supports multiple Policies, including one Global Policy and 5 individual Policies can be assigned to different Authentication Server. Global Policy is the system’s universal policy and is applied to all clients, while other individual Policies can be selected and defined to be applied to any Authentication Server.

  • Page 137: Appendix B. Wds Management

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix B. WDS Management Each of the Public Zone (Public-1, Public-2, Public-3) of the HSG supports up to 2 WDS links. WDS (Wireless Distribution System) is a function used to connect APs (Access Points) wirelessly to extend wireless coverage. The WDS management function of the system can help administrators to setup two WDS links.
  • Page 138 User’s Manual HSG Wireless Hotspot Gateway ENGLISH HEX. Enter the applicable WEP Key. WPA-PSK: Select the preferred ciphering method, TKIP or AES and enter the PSK / Pass-phrase. ...

  • Page 139: Appendix C. Radius Accounting

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix C. RADIUS Accounting This section will briefly introduce the basic configuration of RADIUS server to work with VSA for controlling the maximum client volume usage (upload; download or upload + download traffic). This VSA will be sent from the RADIUS server to the gateway along with an Access-Accept packet.
  • Page 140 User’s Manual HSG Wireless Hotspot Gateway ENGLISH If the amount of traffic is larger than 4 GB, the attributes of “XXXX-4GB” will be used. For example, if the amount is 5 GB, the following settings should be set: “HSG-Byte-Amount = 1048576” and “HSG-Byte-Amount-4GB = 1”.
  • Page 141 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 3 Click Edit Profile and select the Advanced Tag. Click Add to add a new Vendor-specific attribute.
  • Page 142 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 4 Add a new attribute under Vendor-specific Set “Vendor Code = 21920”. Check Yes to conform to the RADIUS RFC. Click Configure Attribute to proceed. Set “Vendor-assigned attribute number = 10” Select “Attribute format = Hexadecimal” Set “Attribute Value = 1000000”...
  • Page 143 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 6 Follow the same steps to create other Vendor-specific Attributes if needed.
  • Page 144 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3. VSA configuration in RADIUS server (FreeRADIUS) This section will guide you through VSA configuration with FreeRADIUS v1.0.5 running on “Fedora”. Before getting started, open the shell of RADIUS server; for example, use Putty to access the Linux host: Step 1 Confirm the following key elements in the RADIUS server: users, groups ...
  • Page 145 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 4 Edit and save the contents of the file “dictionary.HSG” as follows: Administrator can also add other attributes as the table stated in Section 2 with the same format. Step 5 Edit the file “dictionary” under the folder “freeradius”.
  • Page 146 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 6 To include “dictionary.HSG” in the dictionary of RADIUS server, insert it in an incremental position as follows. Step 7 Open the “radius” database. Step 8 Insert VSA into RADIUS response. In this example, the maximum download and upload traffics in bytes for group03 users is 1MBytes.
  • Page 147 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Step 9 Restart RADIUS daemon to get your settings activated.

  • Page 148: Appendix D. On-Demand Account Types & Billing Plan

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix D. On-demand Account types & Billing Plan This section explains the parameters as well as the different account types provided when editing billing plans in On-demand authentication. Usage-time with Expiration Time: Users can access internet as long as account is valid with remaining quota (usable time).
  • Page 149 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Usage-time with No Expiration Time: Users can access internet as long as the account has remaining quota (usable time). Users need to activate the purchased account within the given time by logging in. It is ideal for short-term usage.
  • Page 150 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...
  • Page 151 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Hotel Cut-off-time: Hotel Cut-off-time is the clock time (normally check-out time) at which the on-demand account is cut off (made expired) by the system on the following day or many days later. On the account creation UI of this plan, operator can enter a Unit value which is the number of days to Cut-off-time according to customers’...
  • Page 152 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Volume: Users can access internet as long as his/her account has remaining traffic volume quota. The account will expire when Valid Period has been used up or the quota is depleted. This type is ideal for small quantity of applications such as sending/receiving email, transferring a file, etc.
  • Page 153 User’s Manual HSG Wireless Hotspot Gateway ENGLISH...
  • Page 154 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Duration-time with Elapsed Time: Account is activated upon the account creation time. Count down begins immediately after account creation and is continuous regardless of logging in or out. The account will expire once the Elapsed Time is reached. This billing type is ideal for providing internet service immediately after account creation throughout a specific period of time.
  • Page 155 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Duration-time with Cut-off Time: Cut-off Time is the clock time at which the on-demand account is cut off (made expired) by the system on that day. For example if a shopping mall closes at 23:00, operators selling on-demand tickets can use this plan to create a ticket set to be Cut-off on 23:00.
  • Page 156 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Duration-time with Begin-and End Time: This plan defines explicitly the Begin Time and End Time of the account. Count down begins immediately after account activation and expires when the End Time is reached. This plan is ideal for providing internet service throughout a specific period of time; for example during exhibition events or large conventions such as Computex where each registered participant will get an internet account valid from 8:00 AM Jun 1 to 5:00 PM Jun 5.

  • Page 157: Appendix E. External Payment Gateways

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix E. External Payment Gateways This section is to show independent Hotspot owners how to configure related settings in order to accept payments via Authorize.net, PayPal, SecurePay or WorldPay, making the Hotspot an e-commerce environment for end users to pay for and obtain Internet access with credit cards.
  • Page 158 User’s Manual HSG Wireless Hotspot Gateway ENGLISH MD5 Hash Value and select a reactive mode. The MD5 Hash security feature enables merchants to verify that the results of a transaction or transaction response received by their server are actually sent from the Authorize.Net.
  • Page 159 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Authorize.Net Payment Page Fields Configuration/ Authorize.Net Payment Page Remark Content Authorize.Net Payment Page Fields Configuration Item: Check the box to show this item on the customer’s payment interface. Displayed Text: Enter what needs to be shown for this field. Required: Check the box to indicate this item as a required field.
  • Page 160 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Customer ID: This is an internal identifier for customers that may be associated with the billing information for a transaction. This information field may contain any format. First Name: The first name of a customer associated with the billing or shipping address of a transaction.
  • Page 161 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 2. Payments via PayPal To configure Payments via PayPal, go to: User >> Authentication >> On-demand User >> External Payment Gateway >> PayPal. Before setting up “PayPal”, it is required that the hotspot owners have a valid PayPal “Business Account”. After opening a PayPal Business Account, the hotspot owners should find the “Identity Token”...
  • Page 162 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  Service Disclaimer Content / Choose Billing Plan for PayPal Payment Page Service Disclaimer Content: View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. Choose Billing Plan for PayPal Payment Page: These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled.
  • Page 163 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 3. Payments via SecurePay To configure Payments via SecurePay, go to: Users >> Authentication >> On-demand User>> External Payment Gateway >> SecurePay. Before setting up “SecurePay”, it is required that the hotspot owners have a valid SecurePay “Merchant Account”...
  • Page 164 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  SecurePay Page Configuration Merchant ID: The ID that is associated with the Merchant Account. Merchant Password: This is the key used by Secure Pay to validate all the transactions. Payment Gateway URL: The default website address to post all transaction data. Verify SSL Certificate: This is to help protect the system from accessing a website other than Secure Pay.
  • Page 165 User’s Manual HSG Wireless Hotspot Gateway ENGLISH 4. Payments via World Pay To configure Payments via WorldPay, go to: Users >> Authentication >> On-demand User >> External Payment Gateway >> WorldPay.  WorldPay Payment Configuration WorldPayInstallation ID: The ID of the associated Merchant Account. Payment Gateway URL: The default website of posting all transaction data.
  • Page 166 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The message content will be displayed as a special notice to end customers. Before setting up “WorldPay”, it is required that the hotspot owners have a valid WorldPay “Merchant Account” from its official website: RBS WorldPay: Merchant Services & Payment Processing, going to rbsworldpay.com >> support center >>...
  • Page 167 User’s Manual HSG Wireless Hotspot Gateway ENGLISH STEP⑦. Select the Save Changes button STEP⑧. Input Installation ID and Payment Gateway URL in gateway UI.  Installation ID: 2009test  URL : https://select.wp3.rbsworldpay.com/wcc/purchase Note: The WAN IP of gateway must be a real IP.

  • Page 168: Appendix F. Portal Page Customization

    User’s Manual HSG Wireless Hotspot Gateway ENGLISH Appendix F. Portal Page Customization Since every Service Zone have their own configuration profiles and acts like a virtual gateway, administrators can customize or define their own portal pages utilized by users of that Service Zone. The customizable pages of a Service Zone are: Disclaimer Page, Login Page, Logout Page, Login Success Page, Login Fail Page, Logout Success Page, Logout Fail Page, Login Success Page for On-demand User, Port Location Mapping Free Login Page, Port Location Mapping Charge Login Page.
  • Page 169 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Since External Pages needs more attention and care to setup, its html codes also need to include mechanisms for processing the necessary URL parameters in order to work properly with the Access Controller, please refer to further details regarding on external pages in the following sections.
  • Page 170 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The URL parameters sent by the Gateway to the external login page are as follows: Field Value Description loginurl String (URL encoded) The URL which shall be submitted when user login. remainingurl String (URL encoded) The URL which shall be submitted when user want to get remaining quota.
  • Page 171 User’s Manual HSG Wireless Hotspot Gateway ENGLISH <script language="Javascript"> form.action = getVarFromURL(window.location.href, 'loginurl'); </script> <INPUT type="text" name="myusername" size="25"> <INPUT type="password" name="mypassword" size="25"> <INPUT name="button_submit" type="submit" value="Enter"> <INPUT name="button_clear" type="button" value="Clear"> </FORM> The following shows the corresponding self-defined javascript function used to parse the loginurl parameter: function getVarFromURL(url, name) { if(name == ""...
  • Page 172 User’s Manual HSG Wireless Hotspot Gateway ENGLISH URL Variables from Gateway This section shows a list of URL variables of the external pages to be sent from the Gateway with its corresponding HTML coding.  External Login Page: Variables: Field Value Description loginurl...
  • Page 173 User’s Manual HSG Wireless Hotspot Gateway ENGLISH password. (Only available for LOCAL user) ondemand_creation_url String (URL encoded) The URL which shall be submitted when user want to create on-demand user. (Only available for LOCAL user) Vlanid Integer (1~4096) VLAN ID Gwip IP format Gateway activated WAN IP...
  • Page 174 User’s Manual HSG Wireless Hotspot Gateway ENGLISH The system is busy. Please try again later. Cannot find session related information. <BR>Please enable the Cookie in the browser setting or open a website to get a Cookie. Invalid IP address. Please check the IP address and try again.
  • Page 175 User’s Manual HSG Wireless Hotspot Gateway ENGLISH checking the information of your account (XXX).<BR>Please contact your network administrator. Invalid username or password.<BR>Please check your username and password and try again. Cannot identify the policy for your account.<BR>Please contact your network administrator. User of this device (the MAC address) is not allowed to use this account.<BR>Please contact your...
  • Page 176 User’s Manual HSG Wireless Hotspot Gateway ENGLISH String User ID (postfix is included) Utype String (LOCAL, RADIUS, Authentication server name ONDEMAND, POP3, LDAP, SIP, NT Domain) Umac MAC format (separated by ':') Client MAC address sessionlength Integer (Sec.) On-demand user's quota of time type byteamount Integer (byte)
  • Page 177 User’s Manual HSG Wireless Hotspot Gateway ENGLISH (LAN IP address or Internal Domain Name) /loginpages/userlogin.shtml Input: Field Required Value Description myusername Required String User ID mypassword Required String User password Session Optional String Encoded string which contains some information of this session, default is taken from cookie.
  • Page 178 User’s Manual HSG Wireless Hotspot Gateway ENGLISH available quota. Output: If command is set to “getValue”, the output is simply “value”.(secs. or bytes according to user type) If command is not set and there is no ret_url is presented, client would be given the pop_reminder.shtml page, which shows remaining quota in our UI style.
  • Page 179 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Path: (LAN IP address or Internal Domain Name) /loginpages/user_change_password.shtml Input: Field Required Value Description Save Required 1 (have to be 1) Required String Old password Required String New password Npwc Required String Confirmed new password ret_url Required String (URL encoded)
  • Page 180 User’s Manual HSG Wireless Hotspot Gateway ENGLISH pop-up and show the result. If ret_url is presented, client would return to ret_url and gateway would add an additional variable rmsg to indicate redeem procedure result. Field Value Description rmsg String, including: Result and error messages Redeem process completed.
  • Page 181 User’s Manual HSG Wireless Hotspot Gateway ENGLISH  On-demand account creation (Local User) Path: (LAN IP address or Internal Domain Name) /loginpages/UserAuthentication/OnDemandRecept.shtml Input: Field Required Value Description buttonNo Required Integer (1~10) Billing Plan No. random Optional Integer A random number, this number is to prevent quick-click issue in IE 6.0.

  • Page 182: Appendix G. Terminal Server Setup

    POS printer. It is mainly used to have the connected printer fast-print necessary account information extracted from a 4ipnet hotspot gateway for a user who would like to access the Internet or managed networks, making provisioning of wired or wireless connection easier and more user-friendly. What is noteworthy is that, SDS200W supports wireless connectivity to the uplink gateway.
  • Page 183 To print out the information of SDS200W, including (1) its IP address (2) the firmware version and the build number (3) the current listening port (4) uplink connection status (5) the IP address of the uplink 4ipnet gateway (HSG/WHG). FUNC + ENTER To clear what is pressed.
  • Page 184 User’s Manual HSG Wireless Hotspot Gateway ENGLISH short illuminated intervals or long illuminated intervals. LED Panel LED indicators Power When the power adapter is connected, Power will become constantly on; when disconnected, the light turns into constantly off. Always check if Power is on before using SDS200W.
  • Page 185 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Right Side Panel Overview Right Side Panel 1. Kensington Lock Be used to lock the device to a pole. 2. Restart / Reset Press once to reboot the system. Hold for five seconds to make SDS200W set back to factory default settings.
  • Page 186 4. Connect a POS printer to the Console port of SDS200W by a RS-232 cable provided within the POS printer package. 5. Connect SDS200W to your 4ipnet Gateway/Controller via Ethernet port or wirelessly. If you are to do it wirelessly, conduct a site survey in the first place. The wireless coverage is subject to change.
  • Page 187 User’s Manual HSG Wireless Hotspot Gateway ENGLISH IP address: 192.168.1.10 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.1.254 Remember to set the TCP/IP settings of the computer you use with a static IP address that is under the same subnet as SDS200W. For example: 192.168.1.20. The settings of SDS200W are separated into seven categories, which are 1.
  • Page 188 Operators have two ways of printing on-demand account tickets for their customers. One is to go onto the WMI of 4ipnet Gateway/Controller and create one (or more). See the manual of the 4ipnet Gateway/Controller you use; the other is to use SDS200W by the following two shortcut keys.
  • Page 189 TAS refers to an automatic connection mechanism that requires NO previous network settings. Just press the TAS button on SDS200W for three seconds, and it will automatically look for and associate to a suitable 4ipnet gateway that supports this function. The connection building process is as follows: D200W sees if wired connection to the uplink device is available.
  • Page 190 User’s Manual HSG Wireless Hotspot Gateway ENGLISH complete. Whether the connection attempt succeeds or fails, the SDS200W will always have the printer print out if the connection is ‘successful’ or it ‘failed.’ Please make sure beforehand that the Ethernet cable is plugged in and the wireless environment is ok.
  • Page 191 2) The parameter needs to be added by typing in “$qr” on the template, or select “$qr” from the drop-down menu and click Insert Parameters. Only 4ipnet PRT200 thermal printers support the printing of QR code. Installation of a QR Code scanning App on your mobile device is required (such as QuickMark, ...
  • Page 192 4. See the Status indicator on the device panel. If it is short illuminated intervals, the device is then not connected to the controller. Try to establish the connection again. 5. Read through the section ‘SDS200W with 4ipnet controller’ to ensure the settings. Q2. The TAS triggered connection is not working.
  • Page 193 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Connection Status With Indicators...
  • Page 194 User’s Manual HSG Wireless Hotspot Gateway ENGLISH Shortcut Keys P/N: V11020141207...

This manual is also suitable for:

Hsg320Hsg327

Table of Contents