4IPNET HSG320 User Manual - 2.4  System Requirement

Other manuals for HSG320: Quick Installation Manual
Manual is about: Wireless Hotspot Gateway

Summary of HSG320

  • Page 1

    V1.20 hsg series wireless hotspot gateway.

  • Page 2: Copyright & Disclaimer

    User’s manual hsg wireless hotspot gateway english i copyright & disclaimer copyright the contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, me...

  • Page 3: Table of Contents

    User’s manual hsg wireless hotspot gateway english ii table of contents 1 before you start ............................................................................................................ 1 1.1 preface .........................................................................................

  • Page 4

    User’s manual hsg wireless hotspot gateway english iii 5.2 user login ............................................................................................................................................. 57 5.2.1 default authentication ...........................................................

  • Page 5

    User’s manual hsg wireless hotspot gateway english iv 10.6 change admin passwords ................................................................................................................... 97 10.7 backup / restore and reset to the factory default ...............................................

  • Page 6: Before You Start

    User’s manual hsg wireless hotspot gateway english 1 1 before you start 1.1 preface this manual is for wlan service providers or network administrators to set up a network environment using the hsg hotspot gateway series. It contains step-by-step procedures and graphic examples to guide mis staff or...

  • Page 7: 1.3  Package Checklist

    User’s manual hsg wireless hotspot gateway english 2 1.3 package checklist the standard package of hotspot gateway series hsg includes: hsg260 / hsg320 / hsg327 x 1 cd- rom (with user’s manual and qig) x 1 quick installation guide (qig) x 1 ethernet cable x 1 console cable x 1 (not included for hsg3...

  • Page 8: 2.2  System Concept

    User’s manual hsg wireless hotspot gateway english 3 2 system overview and getting started 2.1 introduction of the hotspot gateway hsg series the hsg gateway series is the most economical and feature-rich wireless hotspot gateway, targeting mini-size stores that want to provide small, single-point w...

  • Page 9: Hsg260

    User’s manual hsg wireless hotspot gateway english 4 2.3 the hsg series hardware overview hsg260 rear panel 1 antenna connector reverse sma connectors for attaching antenna as shown in above figure. 2 wan for attaching an ethernet cable to an uplink service. 3 lan 1- 4 ports attach ethernet cables h...

  • Page 10

    User’s manual hsg wireless hotspot gateway english 5 front panel 1 quick button press this button to quick-print an account generated from billing plan 1. 2 wes button press and hold over 5 seconds to initiate master mode for the wes process. Press and release to initiate slave mode for the wes proc...

  • Page 11: Hsg320

    User’s manual hsg wireless hotspot gateway english 6 hsg320 1 2 3 4 5 6 7 4 rear panel 1 12v 2a power jack socket for the power adaptor. 2 restart / reset press once to restart the system; press and hold for more than 5 seconds to reset to factory default. 3 wes button (a / b) wds easy setup. Press ...

  • Page 12: Hsg327

    User’s manual hsg wireless hotspot gateway english 7 hsg327 1 2 3 4 5 6 rear panel 1 12v 2a power jack socket for the power adaptor. 2 restart / reset press once to restart the system; press and hold for more than 5 seconds to reset to factory default. 3 wes button wds easy setup. Press the button t...

  • Page 13: 2.4  System Requirement

    User’s manual hsg wireless hotspot gateway english 8 2.4 system requirement  gigabit ethernet network cables with rj-45 connectors.  all pcs need to install the tcp/ip network protocol. 2.5 installation steps please follow the steps mentioned below to install the hardware of the hsg gateway: 1. Pl...

  • Page 14

    User’s manual hsg wireless hotspot gateway english 9 2.6 access web management interface the hsg gateway supports web management interface (wmi) configuration. Upon the completion of hardware installation, the hsg gateway can be configured via web browsers with javascript enabled such as internet ex...

  • Page 15

    User’s manual hsg wireless hotspot gateway english 10 after a successful login, a “home” page with four main buttons will appear on the screen. Caution: if you can’t get to the login screen, the reasons may be: (1) the pc is set incorrectly so that the pc can’t obtain the ip address automatically fr...

  • Page 16: 3.1  Network Requirement

    User’s manual hsg wireless hotspot gateway english 11 3 incorporate hsg gateway to the network 3.1 network requirement in the general network environment, the main role of the hsg gateway is to manage all the network access from internal network to internet. Thus, the first step is to prepare an int...

  • Page 17

    User’s manual hsg wireless hotspot gateway english 12 3.2.1 static ip static: manually specifying the ip address of the wan port. The fields with red asterisks are mandatory. Ip address: the ip address of the wan port. Subnet mask: the subnet mask of the wan port. Default gateway: the gateway of the...

  • Page 18

    User’s manual hsg wireless hotspot gateway english 13 3.2.3 pppoe pppoe: when selecting pppoe to connect to the network, please set the “username”, “password”, “mtu” and “clamp mss”. There is a dial on demand function under pppoe. If this function is enabled, a maximum idle time slot will be availab...

  • Page 19

    User’s manual hsg wireless hotspot gateway english 14 3.2.3 pptp pptp: although not a popular method, pptp protocol for dialup connections is adapted by some isps (in european countries). Your pptp isp will issue you an account with a password as well as the pptp server address..

  • Page 20

    User’s manual hsg wireless hotspot gateway english 15 3.3 internet connection detection to configure internet connection detection, go to: system >> wan traffic.  internet connection detection: when this function is enabled, system will try to access these ip/domain addresses, if system can reach t...

  • Page 21

    User’s manual hsg wireless hotspot gateway english 16 3.4 wan bandwidth control to configure wan bandwidth control, go to: system >> wan traffic. The feature gives adm inistrators control over the entire system’s traffic on the wan interface. These parameters set here should not exceed the real band...

  • Page 22

    User’s manual hsg wireless hotspot gateway english 17 3.5 what is a service zone to configure a zone, go to: system >> service zones. A zone is a logical network area that covers wired or wireless networks, or both of them. By associating it with a unique essid of a zone, wireless network is divided...

  • Page 23

    User’s manual hsg wireless hotspot gateway english 18 configured from the lan port mapping tab (refer to 3.5.1).  status: shows the private/public zone mappings to the physical lan ports.  details: configurable, detailed settings for each zone. Click the configure button to configure each zone: ba...

  • Page 24

    User’s manual hsg wireless hotspot gateway english 19 tag-based service zone tag-based operation mode operates under the principle that different service zones are identified by vlan id. This means that tag-based operation allows each physical lan port to accept traffic for any enabled service zones...

  • Page 25

    User’s manual hsg wireless hotspot gateway english 20 3.5.2 planning your internet network hsg gateway supports four zones, private, public, service zone 2 and service zone 3. In the private zone, authentication is not required to access the internet (disabled by default) via wired and wireless. In ...

  • Page 26

    User’s manual hsg wireless hotspot gateway english 21 3.5.3 configure zone network to configure zone network; go to: system >> service zone. Click the button configure for private zone for further configuration. The parameter descriptions of basic settings for all four zones are the same. The wirele...

  • Page 27

    User’s manual hsg wireless hotspot gateway english 22 configure the dhcp server, click the button configure. Please note that when “enable dhcp relay” is enabled, the ip address of clients will be assigned by an external dhcp server. The system will only relay dhcp information from the external dhcp...

  • Page 28

    User’s manual hsg wireless hotspot gateway english 23 4 let your network be a wireless network 4.1 system wireless general settings to configure system’s wireless general settings, go to: system >> service zones. Click the button configure for private zone for further configuration. Wireless general...

  • Page 29

    User’s manual hsg wireless hotspot gateway english 24 transmission speed or keep the default setting, auto, to make the access point automatically use the fastest rate possible. Transmit power: keep the default setting, or select from range to make the access point use different transmit power as yo...

  • Page 30

    User’s manual hsg wireless hotspot gateway english 25 4.2 zone wireless settings each zone has its own vap and corresponds to one ssid. In private zone, it’s vap1 and the ssid is hidden by default, so public users cannot scan this ssid in the air, for privilege users who already know this ssid, they...

  • Page 31

    User’s manual hsg wireless hotspot gateway english 26 fragment threshold: enter a value between 256 and 2346. The default value is 2346. Packet size larger than this threshold, will be fragmented (sent with several pieces instead of one chunk) before transmission. A smaller value results in smaller ...

  • Page 32

    User’s manual hsg wireless hotspot gateway english 27 unauthorized wireless association if necessary. The encryption standards supported are wep and wpa-psk. Advanced: the parameters in advanced are wireless settings that allow customization of data transmission, enhanced security and wireless roami...

  • Page 33

    User’s manual hsg wireless hotspot gateway english 28 4.3 zone wireless security to configure zone wireless security, go to: system >> service zones, click configure for the respective service zones. After the above configurations are finished, setting up the wireless security is very important to p...

  • Page 34

    User’s manual hsg wireless hotspot gateway english 29 o wep keys: provide the pre-defined wep key value; the system supports up to 4 sets of wep keys. 802.1x: o dynamic wep: dynamic wep is always enabled when the 802.1x option is selected to automatically generate wep keys for encryption. O wep key ...

  • Page 35

    User’s manual hsg wireless hotspot gateway english 30 4.4 wireless layer 2 firewall go to system >> layer 2 firewall the system provides an additional security feature, layer2 firewall, in addition to the standard wireless security. Layer2 firewall offers a firewall function that is tailored specifi...

  • Page 36

    User’s manual hsg wireless hotspot gateway english 31 4.4.1 generic firewall rules you can choose to enable or disable the wireless generic firewall. This section provides an overview of firewall rules for the system’s wireless interface; 6 default rules with up to a total 10 firewall rules are avai...

  • Page 37

    User’s manual hsg wireless hotspot gateway english 32 from the overview table, each rule is designated with the following field; no.: the numbering will decide the priority of which the system will carry out the available firewall rules in the tables. Active: checking this field will mark the rule a...

  • Page 38

    User’s manual hsg wireless hotspot gateway english 33 drop-down list. Dsap/ssap (when ethertype is ieee 802.3): the value can be further specified for the fields in 802.2 llc frame header. Snap type (when ethertype is ieee802.3): the field can be used to indicate the type of encapsulated traffics. O...

  • Page 39

    User’s manual hsg wireless hotspot gateway english 34 please make sure all the desired rules are checked as active and click the apply button below on the overview page..

  • Page 40

    User’s manual hsg wireless hotspot gateway english 35 4.4.2 predefined and custom service protocols the administrator can add or delete firewall service protocols here; the services on this list will become available drop-down options to choose from in firewall rule (when ethertype is ipv4). The fir...

  • Page 41

    User’s manual hsg wireless hotspot gateway english 36 4.4.3 advanced advanced firewall settings can be enabled to supplement the firewall rules, providing extra security enhancement against dhcp and arp traffics traversing the available interfaces of the system. Dhcp snooping: when enabled, dhcp pac...

  • Page 42: 5.1

    User’s manual hsg wireless hotspot gateway english 37 5 who can access the network 5.1 type of users to configure users, go to: users >> authentication. This section is for administrators to pre-configure authentication servers for the entire system. Concurrently up to three servers can be selected ...

  • Page 43

    User’s manual hsg wireless hotspot gateway english 38 5.1.1 local click the button configure for local for further configuration.  local user list: it allows the administrator to view, add or delete local user accounts. The upload user button is for importing a list of user accounts from a text fil...

  • Page 44

    User’s manual hsg wireless hotspot gateway english 39  search: enter a keyword of a username or remark to be searched in the text file and click this button to perform the search. All usernames matching the keyword will be listed.  del all: click this button to delete all the users at once or clic...

  • Page 45

    User’s manual hsg wireless hotspot gateway english 40 date can be selected. Click apply to complete the modification..

  • Page 46

    User’s manual hsg wireless hotspot gateway english 41 5.1.2 radius there are two radius authentication databases for configuration. Click configure for any one of radius servers for further configuration. The radius server sets the external authentication for user accounts. Enter the information con...

  • Page 47

    User’s manual hsg wireless hotspot gateway english 42.

  • Page 48

    User’s manual hsg wireless hotspot gateway english 43 external radius related settings 802.1x authentication: enable /disable 802.1x authentication for users authenticated through this server. Username format: select the format of the user login information required to be sent to the external radius...

  • Page 49

    User’s manual hsg wireless hotspot gateway english 44 primary / secondary radius server authentication server: enter the domain name or ip address of your radius server. Authentication port: enter the port number used for authentication. Accounting port: enter the port number used for accounting. Au...

  • Page 50

    User’s manual hsg wireless hotspot gateway english 45 5.1.3 on-demand user on-demand user server configuration: the administrator can configure this authentication method to create on-demand user accounts. This function is designed for hotspot owners to provide temporary users with free or paid wire...

  • Page 51

    User’s manual hsg wireless hotspot gateway english 46  postfix: the string of characters needed to be entered with the username during login.  remaining volume sync interval: select a desired interval for on-demand user quota update. The quota information, i.E. Remaining time or remaining quota di...

  • Page 52

    User’s manual hsg wireless hotspot gateway english 47  currency: select the desired currency unit for charged internet access.  wlan essid: the entered name will be the essid of the public zone.  wireless key: the wireless key configured in public zone settings will be shown.  receipt header(opt...

  • Page 53

    User’s manual hsg wireless hotspot gateway english 48  width: the ticket width. Select 2 ” when used with prt100 and select 3” when used with prt200.  font size: large fonts may be selected when ticket width is set to 3”.  languages: the hsg supports multi-language ticket templates, including fre...

  • Page 54

    User’s manual hsg wireless hotspot gateway english 49 4) billing plans administrators can configure several billing plans. Click the edit button to enter the page of editing billing plan. Configure billing plans with desired account type, expiration date, price, etc. Click apply to save the plan. Go...

  • Page 55

    User’s manual hsg wireless hotspot gateway english 50 6) sms gateway the hsg supports integration with clickatell sms gateway to send sms messages during account generation. This function may be enabled for either paid services (such as paypal) or for free account generation..

  • Page 56

    User’s manual hsg wireless hotspot gateway english 51 with a set of clickatell account username/password, the sms gateway can be configured to send sms messages upon on-demand account creation. The sms service can be used for free access, paid access with payment gateway integration, or both. Define...

  • Page 57

    User’s manual hsg wireless hotspot gateway english 52  account type: show account type of the plan in usage-time. Duration-time or hotel cut-off.  quota: the total amount of time, interval or traffic volume for on-demand users to access the network. For time users, it is the total time. For volume...

  • Page 58

    User’s manual hsg wireless hotspot gateway english 53  account type: show account type of the plan in usage-time, duration-time or hotel cut-off.  quota: the total amount of time, interval or traffic volume for on-demand users to access the network.  numbers: the desired number of accounts to be ...

  • Page 59

    User’s manual hsg wireless hotspot gateway english 54 9) on-demand account creation by quick button (available on hsg260) the quick button located on the front panel of hsg260 is a quick on-demand account generation button. This button is designed to create on-demand accounts without the need to ent...

  • Page 60

    User’s manual hsg wireless hotspot gateway english 55 o redeemed: the account has been applied for account renewal.  external id: this is an additional information field combined with a unique account, for example the customer’s name or social security number etc.  reference: any other additional ...

  • Page 61

    User’s manual hsg wireless hotspot gateway english 56 5.1.4 free authentication when the free authentication option is enabled, users will have an option of logging in with an email address without authentication. This can be activated under service zone settings configurations. The constraints can ...

  • Page 62: 5.2  User Login

    User’s manual hsg wireless hotspot gateway english 57 5.2 user login 5.2.1 default authentication there are different types of authentication databases (local, radius and ondemand) that are supported by the system. But authentication can only be set in the public zone. A postfix is used to inform th...

  • Page 63

    User’s manual hsg wireless hotspot gateway english 58 website (in this example, we try to connect to www.Google.Com). A) the default user login page will appear in the browser. 2. Enter the username and password (for example, we use a local user account: test@local here) and then click login. If the...

  • Page 64

    User’s manual hsg wireless hotspot gateway english 59.

  • Page 65: 6.1  Black List

    User’s manual hsg wireless hotspot gateway english 60 6 restrain the users 6.1 black list to configure black list, go to: users >> black list. The administrator can add, delete, or edit the black list for user access control. User accounts that appear on the black list will be denied of network acce...

  • Page 66

    User’s manual hsg wireless hotspot gateway english 61 after entering the usernames in the “username” field and the related information in the “remark” blank (not required), click apply to add the users. If a user needs to be removed from the black list, click the user’s “delete” button and or use cl...

  • Page 67: 6.2  Group

    User’s manual hsg wireless hotspot gateway english 62 6.2 group to configure group, go to: users >> group. Users on the hsg can be classified into different groups, which can be assigned different policies and schedules. The hsg supports up to 5 user groups. When the type of authentication database ...

  • Page 68

    User’s manual hsg wireless hotspot gateway english 63  select policy: select a desired policy profile to configure.  firewall profile: global policy and policy 1 ~ 5 all have a firewall service list and a set of firewall profiles which is composed of firewall rules.  specific route profile: when ...

  • Page 69

    User’s manual hsg wireless hotspot gateway english 64 6.3.1 schedule  schedule profile: click user >> schedule to enter the configuration page and shows the permitted login hours list. This function is used to limit the time when clients can log in. Check the desired time-slot checkboxes and click ...

  • Page 70

    User’s manual hsg wireless hotspot gateway english 65 6.3.2 firewall firewall profile: click user >> firewall and the firewall configuration will appear. Click predefined and custom service protocols to edit the protocol list. Click firewall rules to edit the rules. Up to 5 profiles can be configure...

  • Page 71

    User’s manual hsg wireless hotspot gateway english 66 if the protocol type is icmp, the type and code needs to be defined. If the protocol type is ip, the protocol number needs to be defined. 2) user firewall rules after the custom protocol is defined(or just use the predefined service protocols), y...

  • Page 72

    User’s manual hsg wireless hotspot gateway english 67 selecting the filter rule number 1 as an example: o rule number: this is the rule selected “1”. Rule no. 1 has the highest priority; rule no. 2 has the second priority, and so on. O rule name: the rule name can be changed here. O source/destinati...

  • Page 73

    User’s manual hsg wireless hotspot gateway english 68 6.3.3 qos profile up to 5 qos profiles can be configured for certain applications or users that need stable bandwidth or traffic priority. Bandwidth control can only be enabled when bandwidth limits on wan has been enabled. Traffic class: traffic...

  • Page 74

    User’s manual hsg wireless hotspot gateway english 69 6.3.4 routing specific route profile: click user >> specific route for the specific route profile, the ‘specific route profile’ list will appear. 1) specific route  specific route profile: the specific default route is used to control clients to...

  • Page 75

    User’s manual hsg wireless hotspot gateway english 70 combination of network/ip address and subnet mask that have just been entered and applied. O destination / subnet netmask: the subnet mask of the destination network. Select 255.255.255.255(/32) if the destination is a single host. O gateway / ip...

  • Page 76

    User’s manual hsg wireless hotspot gateway english 71 2) default gateway  default gateway: the default gateway of a desired ip address can be defined in each policy except global policy. When specific default route is enabled, all clients applied with this policy will access the internet through th...

  • Page 77

    User’s manual hsg wireless hotspot gateway english 72 6.3.5 user privilege administrator can choose to allow users to change their password. And to prevent ill-behaved clients or malicious software from taking up the system’s connection resources, the administrator can restrict the number of concurr...

  • Page 78: 7.1   Dmz

    User’s manual hsg wireless hotspot gateway english 73 7 access network without authentication 7.1 dmz to configure dmz, go to: network >> network address translation >> dmz (demilitarized zone). There are 40 sets of static internal ip address and external ip address available. Enter internal and ext...

  • Page 79

    User’s manual hsg wireless hotspot gateway english 74.

  • Page 80: 7.2  Virtual Server

    User’s manual hsg wireless hotspot gateway english 75 7.2 virtual server to configure virtual server, go to: network >> network address translation >> public accessible server. This function allows the administrator to set 40 virtual servers at most, so that client devices outside the managed networ...

  • Page 81: 7.3  Privilege List

    User’s manual hsg wireless hotspot gateway english 76 7.3 privilege list to configure the privilege list, go to: network >> privilege setup the privilege ip address list, privilege mac address list and the privilege ipv6 address list. The clients accessing the internet via ip addresses and/or networ...

  • Page 82

    User’s manual hsg wireless hotspot gateway english 77 7.3.1 privilege ip privilege ip address list to configure privilege ip address list, go to: network >> privilege >> ip address list. If there are workstations inside the managed network that need to access the network without authentication, ente...

  • Page 83

    User’s manual hsg wireless hotspot gateway english 78 7.3.2 privilege mac privilege mac address list in addition to the privilege ip list, mac address list allows the mac address of the workstations that need to access the network without authentication to be set in “granted access by mac address”. ...

  • Page 84

    User’s manual hsg wireless hotspot gateway english 79 7.4 disable authentication in public zone to disable authentication in public zone, go to: system >> service zones, click configure in public zone. Authentication required for the zone: when it is disabled, users will not need to authenticate bef...

  • Page 85: 8.1  Before Login

    User’s manual hsg wireless hotspot gateway english 80 8 user login and logout 8.1 before login 8.1.1 login with ssl to configure https, go to: system >> general. Https (http over ssl or http secure) is the use of secure socket layer (ssl) or transport layer security (tls) as a sub-layer under regula...

  • Page 86

    User’s manual hsg wireless hotspot gateway english 81 8.1.2 internal domain name with certificate to configure internal domain name, go to: system >> general. Internal domain name is the domain name of the hsg seen on client machines connected under zone. It must conform to fqdn (fully-qualified dom...

  • Page 87

    User’s manual hsg wireless hotspot gateway english 82 without a valid certificate, users may encounter the following warning when trying to open the login page. Click “continue to this website” to access the user login page..

  • Page 88

    User’s manual hsg wireless hotspot gateway english 83 8.1.3 walled garden to configure walled garden, go to: network >> walled garden. This function provides certain free services for users to access the websites listed here before login and authentication. Up to 20 addresses or domain names of the ...

  • Page 89

    User’s manual hsg wireless hotspot gateway english 84 8.1.4 walled garden ad to configure walled garden ad list, go to: network >> walled garden ad. This function provides advertisement links to web pages for users to access free of charge before login and authentication. Advertisement hy perlinks a...

  • Page 90: 8.2  After Login

    User’s manual hsg wireless hotspot gateway english 85 8.2 after login 8.2.1 start page url after successful login to configure the start page url after a successful user login, go to: system >> general. When this function is enabled, the administrator can choose to set the url of an opened browser a...

  • Page 91

    User’s manual hsg wireless hotspot gateway english 86 8.2.2 idle timer to configure idle timer, go to: users >> additional control. If a user has idled with no network activities, the system will automatically kick the user out. The logout timer can be set between 1~1440 minutes, and the default idl...

  • Page 92

    User’s manual hsg wireless hotspot gateway english 87 8.2.3 multiple login to configure multiple login, go to: users >> additional control. When enabled, a user can log in from different computers with the same account. (this function doesn’t support on-demand users.).

  • Page 93

    User’s manual hsg wireless hotspot gateway english 88 9 networking features of a gateway 9.1 dynamic domain name service (ddns) to configure dynamic domain name service, go to: network >> ddns. Before activating this function, you must have your dynamic dns hostname registered with a dynamic dns pro...

  • Page 94

    User’s manual hsg wireless hotspot gateway english 89 9.2 port and ip forwarding to configure port and ip forwarding, go to: network >> nat >> port and ip forwarding. This function allows the administrator to set at most 40 sets of ip addresses for redirection purposes. When the user attempts to con...

  • Page 95: 10.1    System Time

    User’s manual hsg wireless hotspot gateway english 90 10 system management and utilities 10.1 system time to configure system time, go to: system >> general. Ntp (network time protocol) communication protocol can be used to synchronize the system time with remote time server. Please specify the loca...

  • Page 96

    User’s manual hsg wireless hotspot gateway english 91 10.2 management ip address list to configure the management ip address list, go to: system >> general. Only pcs within the management ip range on the list are allowed to access the system's web management interface. For example, 10.2.3.0/24 means...

  • Page 97

    User’s manual hsg wireless hotspot gateway english 92 the default value is “0.0.0.0/0.0.0.0”. It means that the wmi can be accessed by any ip address, for security consideration; please change this value before the system provides service. 10.3 ip address for accessing user log to configure user log...

  • Page 98: 10.4    Snmp

    User’s manual hsg wireless hotspot gateway english 93 10.4 snmp to configure snmp, go to: system >> general. The hsg supports snmp v1/v2c. If this function is enabled, the snmp management ip and the community string can be assigned for snmp management applications to access the system..

  • Page 99: 10.5    Administration

    User’s manual hsg wireless hotspot gateway english 94 10.5 administration the hsg supports customizable administration account types, namely super group, manager, on-demand manager or operator. The default predetermined group of the administrator is super group, and the username and password are as ...

  • Page 100

    User’s manual hsg wireless hotspot gateway english 95 password safety settings: password rules and requirements can be configured here to facilitate additional security. The following parameters can be configured: password complexity, admin login retry times, password expire, and admin login reuse t...

  • Page 101

    User’s manual hsg wireless hotspot gateway english 96 manager: the manager can only access the configuration pages under user authentication to manage the user accounts. Operator: the operator can only access the configuration page of create on-demand user to create new on-demand user accounts and p...

  • Page 102

    User’s manual hsg wireless hotspot gateway english 97 10.6 change admin passwords to configure admin passwords, go to: utilities >> administrator account. There are four predetermined levels of authority: super group, manager, operator, and on-demand manager. The usernames and passwords can be confi...

  • Page 103

    User’s manual hsg wireless hotspot gateway english 98 10.7 backup / restore and reset to the factory default to configure backup / restore and reset to factory default, go to: utilities >> backup & restore. This function is used to backup/restore the hsg settings. Also, the hsg can be restored to th...

  • Page 104

    User’s manual hsg wireless hotspot gateway english 99 10.8 firmware upgrade to configure firmware upgrade, go to: utilities >> system upgrade. The administrator can download the latest firmware from the website and upgrade the system here. Select the latest firmware with browse button, then click ap...

  • Page 105: 10.9    Restart

    User’s manual hsg wireless hotspot gateway english 100 10.9 restart to perform system restart, go to: utilities >> restart. This function allows the administrator to safely restart the hsg, and the process takes approximately three minutes. Reason for restarting the system can be entered for record ...

  • Page 106: 10.10 Network Utility

    User’s manual hsg wireless hotspot gateway english 101 10.10 network utility to configure network utility, go to: utilities >> network utilities. System provides some network utilities for administrators. Both ipv4 and ipv6 are supported. Wake-on-lan isfor waking up remote devices that supports wake...

  • Page 107

    User’s manual hsg wireless hotspot gateway english 102 10.10.1 wake-on-lan this allows the system to remotely boot up a power-down computer connected to a lan port with wake-on-lan feature enabled in its bios. Enter the mac address of the desired device and click wake up to execute this function. 10...

  • Page 108

    User’s manual hsg wireless hotspot gateway english 103 10.11 monitor ip link to configure monitor ip link, go to: network >> monitor ip. The hsg will send out a packet periodically to monitor the connection status of the ip addresses on the list. On each monitored item with a web server running, adm...

  • Page 109

    User’s manual hsg wireless hotspot gateway english 104 10.12 console interface via the console port, administrators can enter the console interface to handle problems and situations occurred during operation. 1. In order to connect to the console port of the hsg, a console, modem cable, and a termin...

  • Page 110

    User’s manual hsg wireless hotspot gateway english 105 ping host (ip): by sending icmp echo request to a specified host and waiting for the response to test the network status. Trace routing path: trace and inquire the routing path to a specific target. Display interface settings: it displays the in...

  • Page 111

    User’s manual hsg wireless hotspot gateway english 106 ssh. The username is “admin” and the default password is also “admin”, which is the same as for the web management interface. Password can also be changed here. If administrators forget their password and are unable to log in to the management i...

  • Page 112

    User’s manual hsg wireless hotspot gateway english 107 11 system status and reports 11.1 viewing the status this section includes system, interface, routing table, current users, session list, user logs, logs, dhcp lease and report & notification to provide system status information and online user ...

  • Page 113

    User’s manual hsg wireless hotspot gateway english 108 the description of the above-mentioned table is as follows: item description up time the total time system has operated firmware version the present firmware version of the hsg build the present build number of the firmware site the country code...

  • Page 114

    User’s manual hsg wireless hotspot gateway english 109 11.1.2 interface status to view interface status, go to: status >> interface. This section provides an overview of the interface for the administrator including wan, zone - private and zone - public..

  • Page 115

    User’s manual hsg wireless hotspot gateway english 110

  • Page 116

    User’s manual hsg wireless hotspot gateway english 111 the description of the above-mentioned table is as follows: item description wan mode shows wan interface settings: static, dynamic, pppoe or pptp mac address the mac address of the wan port ip address the ip address of the wan port subnet mask ...

  • Page 117

    User’s manual hsg wireless hotspot gateway english 112 11.1.3 routing table to view system status, go to: status >> routing table. All the policy routing rules and global policy routing rules for both ipv4 and ipv6 will be listed here. It will also show the system routing rules specified by each int...

  • Page 118

    User’s manual hsg wireless hotspot gateway english 113 11.1.4 current users to view current users, go to: status >> current users. O n this page, each online user’s information including username, ip address, mac address, ipv6 address, pkts in, bytes in, pkts out, bytes out, service zone/vlan, group...

  • Page 119

    User’s manual hsg wireless hotspot gateway english 114 11.1.5 session list this page allows the administrator to inspect sessions currently established between a client and the system. Each result displays the ip and port values of the source and destination. You may define the filter conditions and...

  • Page 120

    User’s manual hsg wireless hotspot gateway english 115 caution: since the history is saved in the ram memory, if you need to restart the system at the same time, please keep the history, manually by copying and saving the traffic history information before restarting..

  • Page 121

    User’s manual hsg wireless hotspot gateway english 116 if the receiver e-mail address(es) has been entered under the notification settings page, the system will automatically send out these history information to that specified email address.  users log all user activities on the system within 72 h...

  • Page 122

    User’s manual hsg wireless hotspot gateway english 117 11.1.7 local user monthly network usage report to view local user monthly network usage, go to: status >> user log.  monthly network usage of local user the system keeps a cumulated record of the traffic data generated by each local user in the...

  • Page 123

    User’s manual hsg wireless hotspot gateway english 118 11.1.8 system related logs to configure system related logs, go to: status >> logs. This pa ge displays the system’s local log information since system boot up. Administrators can examine the log entries of various events. However, since all the...

  • Page 124

    User’s manual hsg wireless hotspot gateway english 119 the dhcp ip lease statistics can be viewed after clicking on show statistics list in this page.  statistics of offered list valid lease counts of the last 10 minutes, hours and days are shown here. The header 1 ~ 10 are the unit multipliers. Fo...

  • Page 125: 11.2    Notification

    User’s manual hsg wireless hotspot gateway english 120 11.2 notification to configure notification, go to: status >> report & notification. The hsg can automatically send the notifications of monitor ip report, users log, on-demand user log, roaming out users log, roaming in users log, firewall log,...

  • Page 126

    User’s manual hsg wireless hotspot gateway english 121 11.2.1 e-mail smtp settings:  receiver email address (es): up to 5 e-mail addresses can be set up to receive the notification. There are eight kinds of notification for selection -- monitor ip report, users log, on-demand users log, roaming out...

  • Page 127

    User’s manual hsg wireless hotspot gateway english 122 11.2.2 syslog syslog server settings: there are 9 types of syslog supported: users log, on-demand users log, roaming out users log, roaming in users log, session log, firewall log, local http web log, http web log and dhcp server log. Enter the ...

  • Page 128

    User’s manual hsg wireless hotspot gateway english 123 11.2.3 ftp this configuration page allows the setting of ftp server to send, including the types of roaming out users log, roaming in users log, on-demand user billing report, session log, local http web log, http web log, wmi configuration log,...

  • Page 129

    User’s manual hsg wireless hotspot gateway english 124 server folder: the folder in the configured ftp server in which the sent log will be placed. Interval: the time interval at which the log will be sent. Logged interface: the check box of public or private shall be checked to enable logging the h...

  • Page 130

    User’s manual hsg wireless hotspot gateway english 125 12 advanced applications 12.1 upload/download local user accounts to upload / download local users accounts, go to: users >> authentication, click configure forthe local authentication database. Or click quick links >> local user management from...

  • Page 131

    User’s manual hsg wireless hotspot gateway english 126 when the system uploads a file, any format error or duplicated username will terminate the uploading process and no account will be uploaded. Please correct the format in the uploading file or delete the duplicated user accounts in the database ...

  • Page 132

    User’s manual hsg wireless hotspot gateway english 127 12.2 radius advanced settings to configure radius advanced settings, go to: users >> authentication. Click configure for the radius authentication database. . Complete vs. Only id vs. Leave unmodified for radius authentication, there is an optio...

  • Page 133: 12.3    Roaming Out

    User’s manual hsg wireless hotspot gateway english 128 12.3 roaming out to configure local user roaming out, go to: users >> authentication, click configure for local. Under certain configurations, the hsg can act as a radius server for roaming out local users logged from another system. The local u...

  • Page 134

    User’s manual hsg wireless hotspot gateway english 129 12.4 customizable pages to configure custom pages, go to: system >> service zones, click configure in public zone. There are several user login and logout pages that can be customized by the administrator. You can select default page, template p...

  • Page 135

    User’s manual hsg wireless hotspot gateway english 130 external page: choose the external page option if you wish to use user pages located on a designated website. Click configure for each custom page and enter the url of its corresponding external login page and click apply. After applying the set...

  • Page 136

    User’s manual hsg wireless hotspot gateway english 131 appendix a. Policy priority  global policy, authentication policy and user policy the hsg supports multiple policies, including one global policy and 5 individual policies can be assigned to different authentication server. Global policy is the...

  • Page 137

    User’s manual hsg wireless hotspot gateway english 132 appendix b. Wds management each of the public zone (public-1, public-2, public-3) of the hsg supports up to 2 wds links. Wds (wireless distribution system) is a function used to connect aps (access points) wirelessly to extend wireless coverage....

  • Page 138

    User’s manual hsg wireless hotspot gateway english 133 hex. Enter the applicable wep key. Wpa-psk: select the preferred ciphering method, tkip or aes and enter the psk / pass-phrase..

  • Page 139

    User’s manual hsg wireless hotspot gateway english 134 appendix c. Radius accounting this section will briefly introduce the basic configuration of radius server to work with vsa for controlling the maximum client volume usage (upload; download or upload + download traffic). This vsa will be sent fr...

  • Page 140

    User’s manual hsg wireless hotspot gateway english 135 if the amount of traffic is larger than 4 gb, the attributes of “xxxx-4gb” will be used. For example, if the amount is 5 gb, the following settings should be set: “hsg-byte-amount = 1048576” and “hsg-byte-amount-4gb = 1”. On the other hand, when...

  • Page 141

    User’s manual hsg wireless hotspot gateway english 136 step 3 click edit profile and select the advanced tag. Click add to add a new vendor-specific attribute..

  • Page 142

    User’s manual hsg wireless hotspot gateway english 137 step 4 add a new attribute under vendor-specific set “vendor code = 21920”. Check yes to conform to the radius rfc. Click configure attribute to proceed. Set “vendor-assigned attribute number = 10” select “attribute format = hexadecimal” set “at...

  • Page 143

    User’s manual hsg wireless hotspot gateway english 138 step 6 follow the same steps to create other vendor-specific attributes if needed..

  • Page 144

    User’s manual hsg wireless hotspot gateway english 139 3. Vsa configuration in radius server (freeradius) this section will guide you through vsa configuration with freeradius v1.0.5 running on “fedora”. Before getting started, open the shell of radius server; for example, use putty to access the li...

  • Page 145

    User’s manual hsg wireless hotspot gateway english 140 step 4 edit and save the contents of the file “dictionary.Hsg” as follows: administrator can also add other attributes as the table stated in section 2 with the same format. Step 5 edit the file “dictionary” under the folder “freeradius”..

  • Page 146

    User’s manual hsg wireless hotspot gateway english 141 step 6 to include “dictionary.Hsg” in the dictionary of radius server, insert it in an incremental position as follows. Step 7 open the “radius” database. Step 8 insert vsa into radius response. In this example, the maximum download and upload t...

  • Page 147

    User’s manual hsg wireless hotspot gateway english 142 step 9 restart radius daemon to get your settings activated..

  • Page 148

    User’s manual hsg wireless hotspot gateway english 143 appendix d. On-demand account types & billing plan this section explains the parameters as well as the different account types provided when editing billing plans in on-demand authentication. O usage-time with expiration time: users can access i...

  • Page 149

    User’s manual hsg wireless hotspot gateway english 144 o usage-time with no expiration time: users can access internet as long as the account has remaining quota (usable time). Users need to activate the purchased account within the given time by logging in. It is ideal for short-term usage. For exa...

  • Page 150

    User’s manual hsg wireless hotspot gateway english 145.

  • Page 151

    User’s manual hsg wireless hotspot gateway english 146  hotel cut-off-time: hotel cut-off-time is the clock time (normally check-out time) at which the on-demand account is cut off (made expired) by the system on the following day or many days later. On the account creation ui of this plan, operato...

  • Page 152

    User’s manual hsg wireless hotspot gateway english 147 o volume: userscan access internet as long as his/her account has remaining traffic volume quota.The account will expire when valid period has been used up or the quota is depleted. This type is ideal for small quantity of applications such as s...

  • Page 153

    User’s manual hsg wireless hotspot gateway english 148.

  • Page 154

    User’s manual hsg wireless hotspot gateway english 149 o duration-time with elapsed time: account is activated upon the account creation time. Count down begins immediately after account creation and is continuous regardless of logging in or out. The account will expire once the elapsed time is reac...

  • Page 155

    User’s manual hsg wireless hotspot gateway english 150 duration-time with cut-off time: cut-off time is the clock time at which the on-demand account is cut off (made expired) by the system on that day. For example if a shopping mall closes at 23:00, operators selling on-demand tickets can use this ...

  • Page 156

    User’s manual hsg wireless hotspot gateway english 151 o duration-time with begin-and end time: this plan defines explicitly the begin time and end time of the account. Count down begins immediately after account activation and expires when the end time is reached. This plan is ideal for providing i...

  • Page 157

    User’s manual hsg wireless hotspot gateway english 152 appendix e. External payment gateways this section is to show independent hotspot owners how to configure related settings in order to accept payments via authorize.Net, paypal, securepay or worldpay, making the hotspot an e-commerce environment...

  • Page 158

    User’s manual hsg wireless hotspot gateway english 153 md5 hash value and select a reactive mode. The md5 hash security feature enables merchants to verify that the results of a transaction or transaction response received by their server are actually sent from the authorize.Net.  service disclaime...

  • Page 159

    User’s manual hsg wireless hotspot gateway english 154  authorize.Net payment page fields configuration/ authorize.Net payment page remark content authorize.Net payment page fields configuration o item: check the box to show this item on the customer’s payment interface. O displayed text: enter wha...

  • Page 160

    User’s manual hsg wireless hotspot gateway english 155 o customer id: this is an internal identifier for customers that may be associated with the billing information for a transaction. This information field may contain any format. O first name: the first name of a customer associated with the bill...

  • Page 161

    User’s manual hsg wireless hotspot gateway english 156 2. Payments via paypal to configure payments via paypal, go to: user >> authentication >> on-demand user >> external payment gateway >> paypal. Before setting up “paypal”, it is required that the hotspot owners have a valid paypal “business acco...

  • Page 162

    User’s manual hsg wireless hotspot gateway english 157  service disclaimer content / choose billing plan for paypal payment page o service disclaimer content: view the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. O ...

  • Page 163

    User’s manual hsg wireless hotspot gateway english 158 3. Payments via securepay to configure payments via securepay, go to: users >> authentication >> on-demand user>> external payment gateway >> securepay. Before setting up “securepay”, it is required that the hotspot owners have a valid securepay...

  • Page 164

    User’s manual hsg wireless hotspot gateway english 159  securepay page configuration merchant id: the id that is associated with the merchant account. Merchant password: this is the key used by secure pay to validate all the transactions. Payment gateway url: the default website address to post all...

  • Page 165

    User’s manual hsg wireless hotspot gateway english 160 4. Payments via world pay to configure payments via worldpay, go to: users >> authentication >> on-demand user >> external payment gateway >> worldpay.  worldpay payment configuration worldpayinstallation id: the id of the associated merchant a...

  • Page 166

    User’s manual hsg wireless hotspot gateway english 161 the message content will be displayed as a special notice to end customers. Before setting up “worldpay”, it is required that the hotspot owners have a valid worldpay “merchant account” from its official website: rbs worldpay: merchant services ...

  • Page 167

    User’s manual hsg wireless hotspot gateway english 162 step⑦. Select the save changes button step⑧. Input installation id and payment gateway url in gateway ui. Installation id: 2009test url : https://select.Wp3.Rbsworldpay.Com/wcc/purchase note: the wan ip of gateway must be a real ip..

  • Page 168

    User’s manual hsg wireless hotspot gateway english 163 appendix f. Portal page customization since every service zone have their own configuration profiles and acts like a virtual gateway, administrators can customize or define their own portal pages utilized by users of that service zone. The custo...

  • Page 169

    User’s manual hsg wireless hotspot gateway english 164 since external pages needs more attention and care to setup, its html codes also need to include mechanisms for processing the necessary url parameters in order to work properly with the access controller, please refer to further details regardi...

  • Page 170

    User’s manual hsg wireless hotspot gateway english 165 the url parameters sent by the gateway to the external login page are as follows: field value description loginurl string (url encoded) the url which shall be submitted when user login. Remainingurl string (url encoded) the url which shall be su...

  • Page 171

    url == "") { return ...

  • Page 172

    User’s manual hsg wireless hotspot gateway english 167 url variables from gateway this section shows a list of url variables of the external pages to be sent from the gateway with its corresponding html coding. External login page: variables: field value description loginurl string (url encoded) the...

  • Page 173

    User’s manual hsg wireless hotspot gateway english 168 password. (only available for local user) ondemand_creation_url string (url encoded) the url which shall be submitted when user want to create on-demand user. (only available for local user) vlanid integer (1~4096) vlan id gwip ip format gateway...

  • Page 174

    User’s manual hsg wireless hotspot gateway english 169 the system is busy. Please try again later. Cannot find session related information. Please enable the cookie in the browser setting or open a website to get a cookie. Invalid ip address. Please check the ip address and try again. Invalid mac ad...

  • Page 175

    User’s manual hsg wireless hotspot gateway english 170 checking the information of your account (xxx).Please contact your network administrator. Invalid username or password.Please check your username and password and try again. Cannot identify the policy for your account.Please contact your network...

  • Page 176

    User’s manual hsg wireless hotspot gateway english 171 uid string user id (postfix is included) utype string (local, radius, ondemand, pop3, ldap, sip, nt domain) authentication server name umac mac format (separated by ':') client mac address sessionlength integer (sec.) on-demand user's quota of t...

  • Page 177

    User’s manual hsg wireless hotspot gateway english 172 (lan ip address or internal domain name) /loginpages/userlogin.Shtml input: field required value description myusername required string user id mypassword required string user password session optional string encoded string which contains some i...

  • Page 178

    User’s manual hsg wireless hotspot gateway english 173 available quota. Output: if command is set to “getvalue”, the output is simply “value”.(secs. Or bytes according to user type) if command is not set and there is no ret_url is presented, client would be given the pop_reminder.Shtml page, which s...

  • Page 179

    User’s manual hsg wireless hotspot gateway english 174 path: (lan ip address or internal domain name) /loginpages/user_change_password.Shtml input: field required value description save required 1 (have to be 1) opw required string old password npw required string new password npwc required string c...

  • Page 180

    User’s manual hsg wireless hotspot gateway english 175 pop-up and show the result. If ret_url is presented, client would return to ret_url and gateway would add an additional variable rmsg to indicate redeem procedure result. Field value description rmsg string, including: redeem process completed. ...

  • Page 181

    User’s manual hsg wireless hotspot gateway english 176 on-demand account creation (local user) path: (lan ip address or internal domain name) /loginpages/userauthentication/ondemandrecept.Shtml input: field required value description buttonno required integer (1~10) billing plan no. Random optional ...

  • Page 182

    User’s manual hsg wireless hotspot gateway english 177 appendix g. Terminal server setup overview of network ticket generator sds200w is an innovative product 4ipnet offers to facilitate the communication between 4ipnet hotspot gateway and serial pos printer. It is mainly used to have the connected ...

  • Page 183

    User’s manual hsg wireless hotspot gateway english 178 keypad panel overview useful shortcut keys combination function ‘number’ + enter to create and print out an on-demand account of an enabled billing plan of the uplink hotspot gateway mainly for the user who purchased an account. ‘number 1’ + ‘as...

  • Page 184

    User’s manual hsg wireless hotspot gateway english 179 short illuminated intervals or long illuminated intervals. Led panel led indicators power when the power adapter is connected, power will become constantly on; when disconnected, the light turns into constantly off. Always check if power is on b...

  • Page 185

    User’s manual hsg wireless hotspot gateway english 180 right side panel overview right side panel 1. Kensington lock be used to lock the device to a pole. 2. Restart / reset press once to reboot the system. Hold for five seconds to make sds200w set back to factory default settings. 3. Tas terminal a...

  • Page 186

    User’s manual hsg wireless hotspot gateway english 181 including sds200w into your network the following diagram illustrates some deployment examples that show how the sds200w can be connected to the pos printer and 4ipnet gateways/controllers. Hsg 260 sds200w prt-100 hotel help desk 1. Put relevant...

  • Page 187

    User’s manual hsg wireless hotspot gateway english 182 ip address: 192.168.1.10 subnet mask: 255.255.255.0 default gateway: 192.168.1.254 remember to set the tcp/ip settings of the computer you use with a static ip address that is under the same subnet as sds200w. For example: 192.168.1.20. The sett...

  • Page 188

    User’s manual hsg wireless hotspot gateway english 183 printing on-demand tickets for your customers operators have two ways of printing on-demand account tickets for their customers. One is to go onto the wmi of 4ipnet gateway/controller and create one (or more). See the manual of the 4ipnet gatewa...

  • Page 189: 1St

    User’s manual hsg wireless hotspot gateway english 184 the recommended step-by-step setup process is shown as follows. When the settings are done completely on the 4ipnet gateway/c ontroller side, go to sds200w’s wmi and check if every uplink setting matches that on the controller. Terminal auto set...

  • Page 190

    User’s manual hsg wireless hotspot gateway english 185 complete. Whether the connection attempt succeeds or fails, the sds200w will always have the printer print out if the connection is ‘successful’ or it ‘failed.’ please make sure beforehand that the ethernet cable is plugged in and the wireless e...

  • Page 191

    User’s manual hsg wireless hotspot gateway english 186 for the utilized billing plan, the corresponding ticket template needs to be customized to support qr code. 1) the width needs to be changed to 3 ” (default value = 2”) 2) the parameter needs to be added by typing in “$qr” on the template, or se...

  • Page 192

    User’s manual hsg wireless hotspot gateway english 187 troubleshooting sds200w q1. Sds200w can not have the pos printer print out accounts 1. See if the printer is still connected to sds200w. 2. Check if the panel is locked by looking at the status indicator. If it belongs to special flashing, unloc...

  • Page 193

    User’s manual hsg wireless hotspot gateway english 188 connection status with indicators.

  • Page 194

    User’s manual hsg wireless hotspot gateway english 189 shortcut keys p/n: v11020141207.