Netcomm Hs1100 Users Manual
HS1100 to the manual d625cbb5-4088-41f0-ae59-7b5d1a2f3dff
2015-02-02
: Netcomm Netcomm-Hs1100-Users-Manual-439024 netcomm-hs1100-users-manual-439024 netcomm pdf
Open the PDF directly: View PDF .
Page Count: 212
Download | |
Open PDF In Browser | View PDF |
Wireless Hotspot (AG400-Optional extra) User Guide HS1100 Wireless Hotspot Gateway User Manual Table of Contents 1. Before You Start.............................................................................................................................3 Preface .................................................................................................................................................................3 Document Conventions........................................................................................................................................3 2. System Overview ...........................................................................................................................4 Introduction of HS1100 .......................................................................................................................................4 System Concept ...................................................................................................................................................4 3. Installation ......................................................................................................................................5 Hardware Installation...........................................................................................................................................5 System Requirements..................................................................................................................................................5 Package Contents ........................................................................................................................................................5 Panel Function Descriptions........................................................................................................................................6 Installation Steps .........................................................................................................................................................7 Quick Software Configuration .............................................................................................................................8 4. Web Interface Configuration .................................................................................................17 System Configuration ........................................................................................................................................19 Configuration Wizard................................................................................................................................................20 System Information ...................................................................................................................................................21 WAN Configuration ..................................................................................................................................................25 LAN1 & LAN2 Configuration ..................................................................................................................................27 LAN3 & LAN4 Configuration ..................................................................................................................................31 Wireless Configuration..............................................................................................................................................34 User Authentication ...........................................................................................................................................41 Authentication Configuration....................................................................................................................................42 Black List Configuration...........................................................................................................................................78 Policy Configuration .................................................................................................................................................80 Guest User Configuration..........................................................................................................................................83 Additional Configuration ..........................................................................................................................................84 Network Configuration ....................................................................................................................................106 Network Address Translation ..................................................................................................................................107 Privilege List ...........................................................................................................................................................109 Monitor IP List ........................................................................................................................................................110 Walled Garden List..................................................................................................................................................112 Walled Garden Ad List ............................................................................................................................................113 Proxy Server Properties...........................................................................................................................................115 Dynamic DNS .........................................................................................................................................................116 i HS1100 Wireless Hotspot Gateway User Manual Utilities.............................................................................................................................................................117 Network Utilities .....................................................................................................................................................118 Change Password ....................................................................................................................................................119 Backup/Restore Settings .........................................................................................................................................120 Firmware Upgrade ..................................................................................................................................................121 Restart .....................................................................................................................................................................122 Status................................................................................................................................................................123 System Status ..........................................................................................................................................................124 Interface Status........................................................................................................................................................126 Current Users ..........................................................................................................................................................128 Traffic History.........................................................................................................................................................129 Notify Configuration ...............................................................................................................................................132 Session Log .............................................................................................................................................................134 Help..................................................................................................................................................................136 Appendix A. Appendix B. Appendix C. Appendix D. Appendix E. Appendix F. Console Interface .................................................................................................137 Accepting Payment via Authorize.Net........................................................140 Accepting Payment via PayPal ......................................................................149 Accepting Payment via SecurePay ..............................................................159 RADIUS Accounting ............................................................................................170 Proxy Setting..........................................................................................................177 1. Proxy Setting for Hotspot.................................................................................................................177 2. Proxy Setting for Enterprise............................................................................................................180 Appendix G. Network Configuration & External Network Access............................185 1. Network Configuration on PC .........................................................................................................185 2. External Network Access / User Login .........................................................................................198 Appendix H. Session Limit and Session Log.......................................................................201 Appendix I: NetComm AG400 Thermal Ticket Printer Quick Start Guide ...............203 1. Package Contents .........................................................................................................................................203 2. Product Overview ........................................................................................................................................204 3. Installation ...................................................................................................................................................206 Appendix J: Legal & Regulatory Information ...................................................................203 ii HS1100 Wireless Hotspot Gateway User Manual 1. Before You Start Preface This manual is for Hotspot owners or network administrators to set up a network environment using the HS1100 system. It contains step-by-step procedures and graphic examples to guide MIS staff or individuals with slight network system knowledge to complete the installation. It also contains a Quick Start Guide for the NetComm AG400 Thermal Ticket Printer. Document Conventions Represents essential steps, actions, or messages that should not be ignored. Note: Contains related information that corresponds to a topic. Indicates that clicking this button will return to the homepage of this section. Indicates that clicking this button will return to the previous page. Indicates that clicking this button will apply all of your settings. Indicates that clicking this button will clear what you have set before these settings are applied. 3 HS1100 Wireless Hotspot Gateway User Manual 2. System Overview Introduction of HS1100 HS1100 is an all-in-one product specially designed for small wireless/wired network environments. It integrates “secure access control”, “visitor account provisioning”, and “high-speed secure wireless connection” into one system to fulfill the needs in Hotspot locations. HS1100 supports 802.11b and 802.11g dual wireless transmission modes, and at the same time, incorporates convenience, efficiency, and friendliness for network services. System Concept HS1100 is specially designed for user authentication, authorization and accounting management. The user account information is stored in the local database or a specified external databases server. The user authentication is processed via the SSL encrypted web interface. This interface is compatible to most desktop devices and palm computers. HS1100 manages network services for both wired and wireless network users. The users located at the managed network will be unable to access network resources without permission. When a user attempts to connect to the Internet by opening a web browser on his computer, HS1100 will redirect the browser to the user login webpage of HS1100. The user must enter a username and password for authentication. After the identity is authenticated successfully, the user will gain proper access right defined on HS1100. 4 HS1100 Wireless Hotspot Gateway User Manual 3. Installation Hardware Installation System Requirements y Standard 10/100BaseT including five network cables with RJ-45 connectors y All PCs need to install the TCP/IP network protocol Package Contents The standard package of HS1100 includes: y HS1100 x 1 y CD-ROM x 1 y Power Adaptor (DC 12V) x 1 y Ethernet Cable x 1 y Console Cable x 1 y 2dbi Omni-antenna x 2 It is highly recommended to use all the supplies in the package instead of substituting any components by other suppliers to guarantee best performance. 5 HS1100 Wireless Hotspot Gateway User Manual Panel Function Descriptions Front Panel Rear Panel y DC IN: The power adaptor plugs here. y RESET: Press this button to restart/reboot the system (NOT reset back to factory default). y WAN: The WAN port is used to connect to a network which is not managed by HS1100, and this port can be used to connect an xDSL/cable modem, or a switch/hub on a LAN of a company/organization. y LAN1/LAN2: These two default authentication-demanding Public LAN ports are connected to the managed network or WLAN. They may be configured as authentication-demanding Public LAN or authentication-free Private LAN ports. y LAN3/LAN4: These two default authentication-free Private LAN ports are connected to a trustful network, where the users can always access network resources without authentication. These ports may be connected to an external server such as a File Server or Database Server. y Console: The system can be configured via HyperTerminal. For example, if you need to set the Administrator’s Password, you can connect a PC to this port as a Console Serial Port via a terminal connection program (such as the super terminal with the parameters of 9600, 8, N, 1, None flow control) to change the Administrator’s Password. 6 HS1100 Wireless Hotspot Gateway User Manual Installation Steps Please follow the steps below to install HS1100: 1. Connect the power adapter to the power socket on the rear panel. If the power supply and connection are normal, the Power LED will light up. 2. Connect an Ethernet cable to the WAN Port on the rear panel. Connect the other end of the Ethernet cable to an xDSL/cable modem, or a switch/hub on the LAN of a company/organization. The LED of this port should be on to indicate a proper connection. 3. Connect an Ethernet cable to the LAN1/LAN2 Port on the rear panel. Per your needs, connect the other end of the Ethernet cable to an AP for extending wireless coverage, a switch for connecting more wired clients, or a PC. The LED of LAN1/LAN2 should be on to indicate a proper connection. Authentication is required for the clients to access the network via LAN1/LAN2 Port. The LAN port with authentication function is referred to as Public LAN. 4. Connect an Ethernet cable to the LAN3/LAN4 Port on the rear panel. Connect the other end of the Ethernet cable to a PC for configuring the HS1100 system. The LED of LAN3/LAN4 should be on to indicate a proper connection. Authentication is NOT required for the clients to access the network via the LAN3/LAN4 Port. The LAN port WITHOUT authentication function is referred to as Private LAN. Note: HS1100 supports Auto Sensing MDI/MDIX. You may use either a straight-through or a cross-over Ethernet cable to connect the Ethernet port. After the hardware of HS1100 properly installed, follow the steps below to set up the HS1100 system. 7 HS1100 Wireless Hotspot Gateway User Manual Quick Software Configuration There are two ways to configure the HS1100 system: using the online Configuration Wizard or changing the settings by commands manually. The Configuration Wizard comprises of seven basic steps as follows. Follow the instructions of Configuration Wizard to enter the required information step by step, save your settings, and restart HS1100. The seven steps of Configuration Wizard are listed below: Step 1. Change Admin’s Password Step 2. Choose System’s Time Zone Step 3. Set System Information Step 4. Select the Connection Type for WAN Port Step 5. Set Authentication Methods Step 6. Set Wireless – Access Point Connection Step 7. Save and Restart HS1100 Please follow the following steps to complete the quick configuration: 1. Use the network cable of the 10/100BaseT to connect a PC to the LAN3/LAN4 port, and then start a browser (such as Microsoft IE). Next, enter the gateway address for that port, the default is http://192.168.111.1. In the opened webpage, a login screen will appear. Enter “admin”, the default username, and “admin”, the default password, in the User Name and Password fields. Click Enter to log in. If you cannot get the login screen, your PC may have been set in DHCP to obtain an IP address automatically from another existing authentication LAN port, or the IP address used does not have the same subnet as the default URL of HS1100. Please use default IP address such as 192.168.111.xxx (xxx: 2~254) in your network and then try it again. You can log in as admin, manager or operator. The default usernames and passwords show as follows: 8 HS1100 Wireless Hotspot Gateway User Manual Admin: The administrator can access all configuration pages of HS1100. User Name: admin Password: admin Manager: The manager can only access the configuration pages under User Authentication to manage the user accounts, but without the permission to change the settings of the profiles of Firewall, Specific Route and Schedule. User Name: manager Password: manager Operator: The operator can only access the configuration page of Create On-demand User to create new on-demand user accounts and print out the on-demand user account receipts. User Name: operator Password: operator 2. After successfully logging into HS1100, a web management interface with a welcome message will appear. There is a Logout button on the upper right corner to log out the system when finished. 3. To quickly configure HS1100 by using the Configuration Wizard, click System Configuration to go to the System Configuration homepage. 9 HS1100 Wireless Hotspot Gateway User Manual 4. Then, select Configuration Wizard and click the Run Wizard button to start the wizard. 10 HS1100 Wireless Hotspot Gateway User Manual 5. Configuration Wizard A welcome screen that briefly introduces the 7 steps will appear. Click Next to begin. 11 HS1100 Wireless Hotspot Gateway User Manual y Step 1. Change Admin’s Password Enter a new password for the admin account and retype it in the verify password field (maximum number of characters up to 20 and no spaces allowed). Click Next to continue. y Step 2. Choose System’s Time Zone Select a proper time zone from the drop-down list box. Click Next to continue. y Step 3. Set System Information ¾ Home Page: Enter the URL to where the users should be directed when they are successfully authenticated. ¾ NTP Server: Enter the URL of the external time server for HS1100 time synchronization or use the default setting. Click Next to continue. 12 HS1100 Wireless Hotspot Gateway User Manual y Step 4. Select the Connection Type for WAN Port Three are three types of WAN port to select from: Static IP Address, Dynamic IP Address and PPPoE Client. Select a proper Internet connection type and click Next to continue. ¾ Dynamic IP Address If this option is selected, an appropriate IP address and related information will automatically be assigned. Click Next to continue. ¾ Static IP Address: Set WAN Port’s Static IP Address Enter the “IP Address”, “Subnet Mask”, “Default Gateway” and “DNS Server” provided by your Internet Service Provider. Click Next to continue. ¾ PPPoE Client: Set PPPoE Client’s Information Enter the “Username” and “Password” provided by your ISP. Click Next to continue. 13 HS1100 Wireless Hotspot Gateway User Manual y Step 5. Set Authentication Methods ¾ Set the user’s information in advance. Enter an easily identified name as the postfix name in the “Postfix” field (e.g. test@Postfix1), select a “Policy” (or use the default value), and choose one authentication method from the 5 options appearing in this window. Click Next to continue. ¾ Local User: Add User A new user can be added to the local user data base. To add a user here, enter the “Username” (e.g. test), “Password” (e.g. test), “MAC” (optional) and assign it a policy (or use the default). Upon completing adding a user, more users can be added to this authentication method by clicking the ADD button. Click Next to continue. ¾ POP3 User: POP3 Enter POP3 Server’s “Domain Name/IP” and “Server Port”, and then choose “Enable SSL” or not. Click Next to continue. 14 HS1100 Wireless Hotspot Gateway User Manual ¾ RADIUS User: RADIUS Enter RADIUS Server’s “Domain Name/IP”, “Accounting Port” and “Secret Key”. Then choose to enable or disable “Accounting Service”, and select the desired “Authentication Method”. Click Next to continue. ¾ LDAP User: LDAP Add a new user to the LDAP user data base if desired. Enter the LDAP Server’s “Domain Name/IP”, “Server Port”, and “Base DN”. Click Next to continue. ¾ NT Domain User: NT Domain When NT Domain User is selected, enter the information for “Server IP Address”, and choose to enable/disable “Transparent Login”. If “Transparent Login” is enabled, users are logged in HS1100’s NT Domain active directory and authenticated automatically when they log into their Windows OS domain. Click Next to continue. 15 HS1100 Wireless Hotspot Gateway User Manual y Step 6. Set Wireless – Access Point Connection ¾ Band: HS1100 supports two transmission modes, Disabled, 802.11b, 802.11g and 802.11 (b+g). Select the appropriate transmission mode to work with the wireless clients in the network. ¾ Channel: If the default channel has been used by many other access points, it is necessary to select another channel from the drop-down list box for a better performance. ¾ ESSID: Enter a SSID (up to 32 characters) for the system. The default is HS1100. ESSID is a unique identifier used for the wireless users’ devices to associate with HS1100. Click Next to continue. Note: y Available channels depend upon the region you are located. For instance, Channel 1~11 is available in North America, and Channel 1-13 in Europe. Step 7. Save and Restart HS1100 Click Restart to save current settings and restart HS1100. The Setup Wizard is now completed. y Setup Wizard. During HS1100 restart, a “Restarting now. Please wait for a while.” message will appear on the screen. Please do not interrupt HS1100 restarting process until the message has disappeared. This indicates that the entire restart process has been completed successfully. 16 HS1100 Wireless Hotspot Gateway User Manual During every step of the wizard, if you wish to go back to modify the settings, please click the Back button to go back to the previous step. 4. Web Interface Configuration This chapter will guide you through further detailed settings. The following table shows all the functions of HS1100. OPTION FUNCTION System User Network Configuration Authentication Configuration Configuration Authentication Network Address Wizard Configuration Translation System Black List Information Configuration WAN Policy Configuration Configuration LAN1 & LAN2 Guest User Walled Garden Firmware Configuration Configuration List Upgrade LAN3 & LAN4 Additional Walled Garden Configuration Configuration AD List Privilege List Monitor IP List 17 Utilities Status Network Utilities System Status Change Password Backup/Restore Settings Restart Interface Status Current Users Traffic History Notify Configuration HS1100 Wireless Hotspot Gateway User Manual Wireless Proxy Server Configuration Properties Dynamic DNS After finishing the configuration of the settings, please click Apply and pay attention to see if a RESTART message appears on the screen. If such message appears, the system must be restarted to allow the new settings to take effect. All on-line users will be disconnected during restart. 18 HS1100 Wireless Hotspot Gateway User Manual System Configuration This section includes the following functions: Configuration Wizard, System Information, WAN Configuration, LAN1 & LAN2 Configuration, LAN3 & LAN4 Configuration and Wireless Configuration. 19 HS1100 Wireless Hotspot Gateway User Manual Configuration Wizard There are two ways to configure the HS1100 system: using the online Configuration Wizard or changing the settings by commands manually. The Configuration Wizard comprises of seven basic steps, providing a simple and easy way to go through the basic setups of HS1100 and is served as Quick Configuration. 20 HS1100 Wireless Hotspot Gateway User Manual System Information Main information about HS1100 is shown as follows: y System Name: Set the system’s name or use the default. y Administrator Info: Enter the administrator’s information here, such as the administrator’s name, telephone 21 HS1100 Wireless Hotspot Gateway User Manual number, e-mail address, etc. If a user encounters problems while connecting to HS1100’s WAN and can’t get online, this information will appear on the user’s login screen. y Home Page: Enter the URL of a Web server as the homepage. Once logged in successfully, the users will be directed to this homepage, such as http://www.netcomm.com.au, regardless of the original homepage set in their computers. ¾ Homepage Redirect is the system’s special feature that would redirect client to your configured homepage right after the successful login. Your homepage appears after a successful login no matter what their browser’s homepages are. y Access History IP: Specify an IP address of the administrator’s computer or a billing system to get billing history information of HS1100. An example is provided as follows (“10.2.3.213” is the WAN IP of HS1100). Traffic History:https://10.2.3.213/status/history/2005-02-17 On-demand History:https://10.2.3.213/status/ondemand_history/2005-02-17 22 HS1100 Wireless Hotspot Gateway User Manual 23 y HS1100 Wireless Hotspot Gateway User Manual Remote Manage IP: Set the IP range where the web management interface of HS1100 can be connected via the authenticated port (WAN or Public LAN). For example, 10.2.3.0/24 means that as long as you are within the IP range of 10.2.3.0/24, you can reach the management interface. y SNMP: HS1100 supports SNMPv2. If this function is enabled, the administrator can assign the Manager IP address and the SNMP community name used to access the Management Information Base (MIB) of the system. y User logon SSL: Enable to activate https (encryption) or disable to activate http (non encryption) login page. y Time: HS1100 supports NTP (Network Time Protocol) communication protocol to synchronize the network time. Please specify the IP address of a NTP server to adjust the time automatically (Universal Time is Greenwich Mean Time, GMT). The time can also be set manually by selecting “Set Device Date and Time” and then entering the date and time in these fields. 24 HS1100 Wireless Hotspot Gateway User Manual WAN Configuration There are 4 methods of obtaining IP address for the WAN Port: Static IP Address, Dynamic IP Address, PPPoE and PPTP Client. y Static IP Address: Manually specifying the IP address of the WAN Port is applicable for the network environment where the DHCP server is unavailable. The fields with red asterisks are required to be filled in. IP Address: The IP address of the WAN port. Subnet Mask: The subnet mask of the WAN port. Default Gateway: The gateway of the WAN port. Preferred DNS Server: The primary DNS Server of the WAN port. Alternate DNS Server: The substitute DNS Server of the WAN port. This is not required. y Dynamic IP Address: It is only applicable for the network environment where the DHCP server is available on the network. Click the Renew button to get an IP address automatically. y PPPoE Client: When selecting PPPoE to connect to the network, please set the “User Name”, “Password”, “MTU” and “CLAMPMSS”. There is a Dial on demand function under PPPoE. If this function is enabled, a Maximum Idle Time can be set. When the idle time is reached, the system will automatically disconnect itself. 25 HS1100 Wireless Hotspot Gateway User Manual y PPTP Client: Select STATIC to specify the IP address of the PPTP Client manually or select DHCP to get the IP address automatically. The fields with red asterisks are required to be filled in. There is a Dial on demand function under PPPoE. If this function is enabled, a Maximum Idle Time can be set. When the idle time is reached, the system will automatically disconnect itself. 26 HS1100 Wireless Hotspot Gateway User Manual LAN1 & LAN2 Configuration In this section, set the configuration for LAN1/LAN2 port and DHCP server. User authentication for LAN1/LAN2 port can be enabled or disabled. 27 HS1100 Wireless Hotspot Gateway User Manual y LAN1 & LAN2 Port IP PNP: Choose to enable or disable this function. If “IP PnP” is enabled, no matter what the IP address of the client device is – static or dynamic IP, users can access the network without changing the client IP address after being authenticated by HS1100. User Authentication: Choose to enable or disable this function. If “User Authentication” is disabled, users can access the Internet without being authenticated. Operation Mode: Choose one of the two modes, NAT mode and Router mode, by the requirements. IP Address: Enter the desired IP address for the LAN1 & LAN2 port. Subnet Mask: Enter the desired subnet mask for the LAN1 & LAN2 port. y DHCP Server Configuration There are three methods to set the DHCP Server: Disable DHCP Server, Enable DHCP Server and Enable DHCP Relay. 1. Disable DHCP Server: Disable DHCP Server function. 2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for the DHCP server. The fields with red asterisks are required to be filled in. 28 HS1100 Wireless Hotspot Gateway User Manual 29 HS1100 Wireless Hotspot Gateway User Manual DHCP Scope: Enter the “Start IP Address” and the “End IP Address” of this DHCP block. These fields define the IP address range that will be assigned to the Public LAN clients. Preferred DNS Server: The primary DNS server for the DHCP. Alternate DNS Server: The substitute DNS server for the DHCP. Domain Name: Enter the domain name. WINS IP Address: Enter the IP address of WINS. Lease Time: Choose the time interval to update DHCP IP addresses automatically. Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following figure will appear. Enter the related “Reserved IP Address”, “MAC”, and Description (not mandatory). Click Apply to save the settings. 3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be specified. See the following figure. 30 HS1100 Wireless Hotspot Gateway User Manual LAN3 & LAN4 Configuration In this section, set the configuration for LAN3/LAN4 port and DHCP server. y LAN3 & LAN4 Port Operation Mode: Choose one of the two modes, NAT mode and Router mode, by the requirements. IP Address: Enter the desired IP address for the LAN3 & LAN4 port. Subnet Mask: Enter the desired subnet mask for the LAN3 & LAN4 port. 31 HS1100 Wireless Hotspot Gateway User Manual y DHCP Server Configuration There are three methods to set the DHCP server: Disable DHCP Server, Enable DHCP Server and Enable DHCP Relay. 1. Disable DHCP Server: Disable DHCP Server function. 2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for the DHCP server. The fields with red asterisks are required to be filled in. DHCP Scope: Enter the “Start IP Address” and the “End IP Address” of this DHCP block. These fields define the IP address range that will be assigned to the Private LAN clients. Preferred DNS Server: The primary DNS server for the DHCP. Alternate DNS Server: The substitute DNS server for the DHCP. Domain Name: Enter the domain name. WINS IP Address: Enter the IP address of WINS. Lease Time: Choose the time interval to update DHCP IP addresses automatically. Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following figure will appear. Enter the related “Reserved IP Address”, “MAC”, and Description (not mandatory). Click Apply to save the settings. 32 HS1100 Wireless Hotspot Gateway User Manual 3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be specified. See the following figure. 33 HS1100 Wireless Hotspot Gateway User Manual Wireless Configuration In this section, set the configuration for the wireless port. y Wireless Configuration Band: There are 4 modes to select from, 802.11b (2.4G, 1~11Mbps) and 802.11 (b+g) (2.4G, 1~11Mbps and 2.4G, 54Mbps). 34 HS1100 Wireless Hotspot Gateway User Manual Channel: Select the appropriate channel from the list to correspond to the network settings; for example, Channel 1~11 is available in the North America area. All access points on the same wireless network must use the same channel to ensure correct connection. Max Transmit Rate: The default value is Auto. The range is from 1 to 54Mbps. The rate of data transmission should be set depending on the speed of this particular wireless network. ESSID: The SSID is a unique name shared among all devices in a wireless network. The SSID must be the same for all devices in the wireless network. The SSID must not exceed 32 characters and may be any character on the keyboard. The administrator can give a new name in this field or use the default name. ¾ Security: Configure wireless encryption methods. For security settings in detail, please click the hyperlink of Security to go into the Security page. Choose Security to configure the settings. WEP Type 802.1X Type 35 HS1100 Wireless Hotspot Gateway User Manual WPA-PSK Type WPA-RADIUS Type 1. Security Type: There are disabled and 4 other security types to choose from, WEP (Wired Equivalent Privacy), 802.1X, WPA-PSK and WPA-RADIUS. 2. Detail Settings o 802.11 Authentication: Choose either Open System or encryption with static Shared Key. o WEP Key Length/Format/Index: This is a data privacy mechanism based on a 64 bit or 128 bits shared key algorithm. There are types of encryption, HEX or ASCII. ¾ o Re-keying Period: The default is 300 seconds. o Cipher Suite: Choose among WPA, WPA2 or Mixed. o Pass-phrase: Type the pass phrase for administrators. o Group Key Update Period: The default is 600 seconds. Time for updated period. Advanced: Configure wireless transmission data packet format (for advanced users only, default recommended). Please click the hyperlink Advanced to go into the Advanced configuration page. 36 HS1100 Wireless Hotspot Gateway User Manual o Super G: Choose Enable or Disable this function. o Short Preamble: Choose Enable or Disable this function. o Transmit Power: The default value is Auto. Select a range of transmission speeds or use the default setting, Auto, to allow the access point to automatically use the fastest possible data rate. o Beacon Interval: The default value is 100 milliseconds. The specified value represents the amount of time between access point beacon signal transmissions. o RTS Threshold: Ready To Send threshold. The range is from 256 to 2346 and the default is OFF. The administrator can set the value which is the amount of time between packet transmissions. It is recommended that the value remains in the range of 256 to 2346. o Fragment Threshold: The range is from 256 to 2346 and the default is OFF. The value specifies the maximum size of a packet allowed before data is fragmented into multiple packets. It should be remained in the range of 256 to 2346. A smaller value results in smaller packets but allows a larger number of packets in transmission. o Broadcast SSID: Enable or disable SSID broadcast. When disabled, clients cannot detect Access Point by its SSID broadcast, they must manually connect to Access Point by entering SSID on their devices. o Station Isolation: When enabled, wireless client stations are isolated from each other. In other words, one PC on the wireless network is not able to see other PCs on the same wireless network. o WMM: WMM (Wi-Fi Multimedia) provides basic Quality of service (QoS) features to Wi-Fi networks. When enabled, it prioritizes traffic according to four Access Categories (AC) - voice, video, best effort, and background. However, it does not provide guaranteed throughput. o IAPP: IAPP (Inter-Access Point Protocol) is to support smooth users’ hand-over (roaming) from one access point to another. When enabled, it provides a better capability for wireless client stations to roam among APs with the same SSID. 37 HS1100 Wireless Hotspot Gateway User Manual ¾ WDS Settings: Choose WDS Setting to configure the settings. This function can extend the range of accessing the network. When this function is enabled, please enter the MAC address of the repeater in the blank and choose Security Type. y Wireless Configuration IP PNP: Choose to enable or disable this function. If “IP PnP” is enabled, no matter what the IP address of the client device is – static or dynamic IP, users can access the network without changing the client IP address after being authenticated by HS1100. User Authentication: If “User Authentication” is disabled, “Specific Route Profile” needs to be specified for users to access the Internet. Operation Mode: Select one from the two modes, NAT mode and Router mode, by the requirements. IP Address: Enter desired IP address for the wireless port. Subnet Mask: Enter desired subnet mask for the wireless port. 38 HS1100 Wireless Hotspot Gateway User Manual y DHCP Server configuration There are three methods to set the DHCP server: Disable DHCP Server, Enable DHCP Server and Enable DHCP Relay. 1. Disable DHCP Server: Disable the DHCP Server function. 2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for the DHCP server. The fields with red asterisks are required to be filled in. DHCP Scope: Enter “Start IP Address” and “End IP Address” of this DHCP block. These fields define the IP address range that will be assigned to the Wireless LAN clients. Preferred DNS Server: The primary DNS server for the DHCP. Alternate DNS Server: The substitute DNS server for the DHCP. Domain Name: Enter the domain name. WINS IP Address: Enter the IP address of WINS. Lease Time: Choose the time interval to update DHCP IP addresses automatically. Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following figure will appear. Enter the related “Reserved IP Address”, “MAC”, and Description (not mandatory). Click Apply to save the settings. 39 HS1100 Wireless Hotspot Gateway User Manual 3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be specified. See the following figure. 40 HS1100 Wireless Hotspot Gateway User Manual User Authentication This section includes the following functions: Authentication Configuration, Black List Configuration, Policy Configuration, Guest User Configuration and Additional Configuration. 41 HS1100 Wireless Hotspot Gateway User Manual Authentication Configuration In this section, set the configuration for authentication servers, and on-demand user authentication. The On-demand User authentication is designed to create on-demand user accounts to provide temporary users with free or paid wireless Internet access. y Authentication Server Configuration HS1100 provides three authentication servers and one on-demand server that the administrator can apply with different policy. Click on the server name to set the configuration for that particular server. After completing and clicking Apply to save the settings, go back to the previous page to select a server to be the default server and enable or disable any server on the list. Users can log into the default server without the postfix to allow faster login process. Server 1~3: There are 5 authentication methods, Local User, POP3, RADIUS, LDAP and NTDomain, to select from. 42 HS1100 Wireless Hotspot Gateway User Manual Server Name: Set a name for the server using numbers (0 to 9), alphabets (a to z or A to Z), dash (-), underline (_) and dot (.) with a maximum of 40 characters, all other letters are not allowed. Sever Status: The status shows that the server is enabled or disabled. Postfix: Set a postfix that is easy to distinguish (e.g. Local) for the server using numbers (0 to 9), alphabets (a to z or A to Z), dash (-), underline (_) and dot (.) with a maximum of 40 characters, all other letters are not allowed. The Policy Name cannot contain these words: MAC and IP. Black List: There are 5 sets of the black lists. Select from one of them or choose “None”. Please refer to 4.2.2 Black List Configuration Authentication Methods: There are 5 authentication methods, Local, POP3, RADIUS, LDAP and NT Domain to select from for further configuration. Select the desired method and click the link besides the pull-down menu for the advanced configuration. For more details, please refer to 4.2.1.1~6 Authentication Method. Enabling two or more servers of the same authentication method is NOT allowed. Policy: Select one from the 3 policies and apply it to this server. 43 HS1100 Wireless Hotspot Gateway User Manual Authentication Method – Local User Setting Choose “Local User” from the Authentication Method field, the hyperlink besides the pull-down menu will become “Local User Setting”. A. Local User Setting Click the hyperlink of Local User Setting for further configuration. Ø 44 HS1100 Wireless Hotspot Gateway User Manual 45 y HS1100 Wireless Hotspot Gateway User Manual Edit Local User List: Click this to enter the “Local User List” screen. Add User: Click the hyperlink of Add User to enter the Add User interface. Fill in the necessary information such as “Username”, “Password”, “MAC” (optional) and “Remark” (optional). Then, select a desired Policy and click Apply to complete adding the user(s). Add the user(s) and enter the necessary information. 46 HS1100 Wireless Hotspot Gateway User Manual After adding the user(s) and all necessary information, click Apply. Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text file for the user account upload. Then click Submit to complete the upload process. The uploading file should be a text file and the format of each line is "ID, Password, MAC, Policy, Remark" without the quotes. There must be no spaces between the fields and commas. The MAC field could be omitted but the trailing comma must be retained. When adding user accounts by uploading a file, the existing accounts in the embedded database will not be replaced by new ones. 47 HS1100 Wireless Hotspot Gateway User Manual 48 HS1100 Wireless Hotspot Gateway User Manual Download User: Click this to enter the Users List page and the system will show a list of all created user accounts. Click Download to create a .txt file and then save it on disk. Refresh: Click Refresh to renew the user list. 49 HS1100 Wireless Hotspot Gateway User Manual 50 HS1100 Wireless Hotspot Gateway User Manual Search: Enter a keyword of a username to be searched in the text field and click the Search button to perform the search. All usernames matching the keyword will be listed. Del All: This will delete all the users at once. Delete: This will delete the user(s) one by one. Edit User: If editing the content of any individual user account is desired, click the username of that desired user account to enter its Edit User Interface, and then modify or add any desired information such as “Username”, “Password”, “MAC” (optional) and “Remark” (optional). Then, click Apply to complete the modification. B. Radius Client Setting Click the hyperlink of Radius Client Setting for further configuration. 51 HS1100 Wireless Hotspot Gateway User Manual Ø 802.1X Authentication: Enable this function and the hyperlink of Radius Client List will appear. Click the hyperlink of Radius Client List to get into the RADIUS Client Configuration list for further configuration. In the Radius Client Configuration table, depending on the Type to be selected (either Roaming Out or 802.1x), the client’s IP address will be either another NAC’s IP address (Roaming Out) or wireless AP/802.1x switch’s IP addess (802.1x). The system will handle the authentication request from these clients accordingly. Authentication Method – POP3 Choose “POP3” from the Authentication Method field, the hyperlink beside the pull-down menu will become “POP3 Setting”. Click the hyperlink of POP3 Setting for further configuration. Enter the information for the primary server and/or the secondary server (the secondary server is not required). The fields with red asterisk are necessary information. 52 HS1100 Wireless Hotspot Gateway User Manual These settings will become effective immediately after clicking the Apply button. y Server IP: Enter the IP address/domain name given by your ISP. y Port: Enter the Port. The default value is 100. y Enable SSL Connection: If this option is enabled, the POP3 protocol will perform the authentication. 53 HS1100 Wireless Hotspot Gateway User Manual Authentication Method – RADIUS Choose “RADIUS” from the Authentication Method field, the hyperlink beside the pull-down menu will become “Radius Setting”. Click the hyperlink of Radius Setting for further configuration. The RADIUS server sets the external authentication for user accounts. Enter the information for the primary server and/or the secondary server (the secondary server is not required). The fields with red asterisk are necessary information. These settings will become effective immediately after clicking the Apply button. 54 y HS1100 Wireless Hotspot Gateway User Manual 802.1X Authentication: Enable this function and the hyperlink of Radius Client List will appear. Click the hyperlink of Radius Client List to get into the RADIUS Client Configuration list for further configuration. In the Radius Client Configuration table, depending on the Type to be selected (either Roaming Out or 802.1x), the client’s IP address will be either another NAC’s IP address (Roaming Out) or wireless AP/802.1x switch’s IP addess (802.1x). The system will handle the authentication request from these clients accordingly. y Trans Full Name: When enabled, the ID and postfix will be transferred to the RADIUS server for authentication. When disabled, only the ID will be transferred to the RADIUS server for authentication. y NASID: Enter the NASID of HS1100 for the external RADIUS authentication server. y Server IP: Enter the IP address/domain name of the RADIUS server. y Authentication Port: Enter the authentication port for the RADIUS server and the default value is 1812. y Accounting Port: Enter the accounting port for the RADIUS server and the default value is 1813. y Secret Key: Enter the key for encryption and decryption. y Accounting Service: Select this to enable or disable the “Accounting Service” for accounting capabilities. y Authentication Protocol: There are two methods, CHAP and PAP for selection. 55 HS1100 Wireless Hotspot Gateway User Manual Authentication Method – LDAP Choose “LDAP” from the Authentication Method field, the hyperlink beside the pull-down menu will become “LDAP Setting”. Click the hyperlink of LDAP Setting for further configuration. Enter the information for the primary server and/or the secondary server (the secondary server is not required). The blanks with red asterisk are necessary information which should be filled in. These settings will become effective immediately after clicking the Apply button. y Server IP: Enter the IP address or domain name of the LDAP server. y Port: Enter the Port for the LDAP server, and the default value is 389. y Base DN: Enter the distinguished name for the LDAP server. y Account Attribute: Enter the account attribute of the LDAP server. 56 HS1100 Wireless Hotspot Gateway User Manual Authentication Method – NTDomain Choose “NTDomain” from the Authentication Method field, the hyperlink beside the pull-down menu will become “NT Domain Setting”. Click the hyperlink of NT Domain Setting for further configuration. Enter the server IP address and enable/disable the transparent login function. These settings will become effective immediately after clicking the Apply button. y Server IP address: Enter the server IP address of the domain controller. y Transparent Login: If the function is enabled, users will log into HS1100 automatically when they log into the Windows domain. 57 HS1100 Wireless Hotspot Gateway User Manual Authentication Method – On-demand User On-demand User Server Configuration: The administrator can enable and configure this authentication method to create on-demand user accounts. This function is designed for hotspot owners to provide temporary users with free or paid wireless Internet access in the hotspot environment. Major functions include accounts creation, users monitoring list, billing plan, billing report statistics, and external payment gateway support. y Server Status: The status shows that the server is enabled or disabled. y Postfix: Set a postfix that is easy to distinguish (e.g. Local) for the server using numbers (0 to 9), alphabets (a to z or A to Z), dash (-), underline (_) and dot (.) with a maximum of 40 characters, all other letters are not allowed. y Receipt Header 1~3: Enter the receipt header message or use the default. When the administrator creates an On-demand User account, he/she can print out a receipt containing this On-demand User’s information such as Username and Password. y Receipt Footer 1~3: Enter the receipt footer message or use the default. y Serial Port Baud Rate: Select the desired transmission baud rate. The default value is 9600. y Monetary Unit: Select the desired monetary unit. y WLAN ESSID: Enter the ESSID of the access point. The administrator can supply a new name or use the 58 HS1100 Wireless Hotspot Gateway User Manual default y Wireless Key: Enter the Wireless key of the access point such as WEP or WPA. y Remark: Enter any additional information that will appear at the bottom of the receipt. y Billing Notice Interval: While the on-demand user is still logged in, the system will update the billing notice of the login successful page by the time interval defined here. y Twin Ticket: Enable this function to print duplicate receipts. y Terminal Server Terminal Configuration is a list of serial devices that communicate with the system only; never get online and no need to go through authentication. For customers making purchase at the front desk in a hotel, a receptionist uses an account generator (192.168.111.2) to create a guest account and print out receipts with account information. A client in the other floor can print the same receipt without going to the front desk on the lobby by using the second floor account generator (192.168.111.3). Both account generators work for the system on LAN side. ¾ Server IP: IP address of serial or converter devices. ¾ Server Port: ¾ Location: It will be displayed in on-demand users’ log. ¾ Remark: it will be shown only here. Port number of serial or converter devices. 59 y HS1100 Wireless Hotspot Gateway User Manual Users List: Click to enter the On-demand Users List page. In the On-demand Users List, detailed information will be documented here. By default, the on-demand user database is empty. ¾ Search: Enter a keyword of a username which needs to be searched in the text field and click the Search button to perform the search. All usernames matching the keyword will be listed. ¾ Username: The login name of the on-demand user. ¾ Password: The login password of the on-demand user. ¾ Remaining Time/Volume: The total time/volume that the user can use currently. ¾ Status: The status of the account. “Normal” indicates that the account is not in-use and not overdue. “Online” indicates that the account is in-use and not overdue. “Expire” indicates that the account is overdue and cannot be used. ¾ Expiration Time: The expiration time of the account. ¾ Del All: Delete all the users at once. ¾ Delete: Delete the users one by one. 60 HS1100 Wireless Hotspot Gateway User Manual ¾ Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text file for the user account upload. Then click Submit to complete the upload process. The uploading file should be a text file and the format of each line is " ID (USERNAME), PASSWORD, Type, Status, Available Data Transfer or Session Length, Activation Deadline (Date), Expired Date, Validity Duration, Plan, Price, Total Data Transfer or Session Length when bought, Generated Date, First Login Date, Last Logout Date, Logout Cause” without the quotes. The separator between two columns in a line is a comma. When uploading a file, any format error or duplicated username will terminate the uploading process and no account will be uploaded. Please correct the format in the uploading file or delete the duplicated user account in the database, and then, try again. The unit of data transfer is byte. The unit of session length is second. ID (Username) and Password must be given in upper case. >> Example 1: For Session Length type Type must be written as “TIME,” and Status must be set as “0”. Set Session Length in seconds. Activation Deadline must be in the format of “yyyy/mm/dd hh:mm:ss”. Set Validity Duration as “1”, and give a Plan that’s already been generated and enabled from Billing Configuration page. Provide a price in any monetary unit defined in On-demand User Server Configuration page. Finally, set Session Length when bought the same as Session Length. Leave other fields blank. >> Example 2: For Total Data Transfer type Type must be written as “DATA,” and Status must be set as “0”. Set Total Data Transfer in bytes. Activation Deadline must be in the format of “yyyy/mm/dd hh:mm:ss”. Set Validity Duration as “1”, and give a Plan that’s already been generated and enabled from Billing Configuration page. Provide a price in any monetary unit defined in On-demand User Server Configuration page. Finally, set Total Data Transfer when bought the same as Session Length. Leave other fields blank. 61 HS1100 Wireless Hotspot Gateway User Manual ¾ Download User: Click this to create a .txt file and then save it on disk. y Billing Configuration: The administrator can configure up to 10 billing plans. ¾ Status: Select to enable or disable this billing plan. ¾ Type: Set the billing plan by “Data” (the maximum volume allowed is 9,999,999 Mbyte) or “Time” (the maximum days allowed is 999 days). ¾ Expiration time: This is the duration of time that the account must be activated after generating the account. After this duration, the account will self-expire ¾ Valid Duration: This is the duration of time that the user can use the Internet after activating the account. After this duration, the account will self-expire. ¾ Policy Name: Select policy to be applied upon login when user purchases this billing plan. ¾ Price: The price charged for this billing plan. 62 HS1100 Wireless Hotspot Gateway User Manual 63 y HS1100 Wireless Hotspot Gateway User Manual Create On-demand User: The administrator can create on-demand user accounts. Click the Create button for the desired plan, an On-demand User account will be created. Then, click Printout to print a receipt containing this On-demand User’s information. 64 HS1100 Wireless Hotspot Gateway User Manual 65 y HS1100 Wireless Hotspot Gateway User Manual Billing Report: The administrator can get a complete report or a report for a particular period. ¾ Report All: Click to get a complete report including all the on-demand records. This report shows the total income as well as the individual accounting record of each plan for all plans available. ¾ Search: Select a time period to get a period report. This report shows the total income as well as the individual accounting record of each plan for all plans available for that period of time. 66 y HS1100 Wireless Hotspot Gateway User Manual Payment: This section is for hotspot owners to set up an external payment gateway to accept payments when providing wireless access service to end customers who wish to pay for the service on-line. Three payment selections include Authorize.Net, PayPal, Secure Pay and Disable. The default is Disable. 67 HS1100 Wireless Hotspot Gateway User Manual Authorize.Net Before setting up “Authorize.Net”, it is required that hotspot owners have a valid Authorize.Net account. Please see Appendix B. Accepting Payments via Authorize.Net for more information about opening an Authorize.Net account and its related maintenance functions. ¾ External Payment Gateway / Authorize.Net Payment Page Configuration Merchant ID: The “Login ID” that comes with the Authorize.Net account Merchant Transaction Key: The merchant transaction key is similar to a password and is used by Authorize.Net to authenticate transactions. Payment Gateway URL: The default website address to post all transaction data. Verify SSL Certificate: This is to help protect the system from accessing a website other than Authorize.Net. y Trusted CA Management: Select the version of Trusted Certificate for the system. Test Mode: In this mode, hotspot owners can post test transactions for free to check if the payment function works properly. MD5 Hash: If transaction responses need to be encrypted by the Payment Gateway, enter and confirm a MD5 Hash value and select a reactive mode. The MD5 Hash security feature enables merchants to verify that the results of a transaction or transaction response received by their server were actually sent from the Authorize.Net. 68 HS1100 Wireless Hotspot Gateway User Manual ¾ Service Disclaimer Content / Credit Card Payment Page /Client’s Purchasing Record Service Disclaimer Content: View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. Credit Card Payment Page Billing Configuration: These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled. Client’s Purchasing Record: Invoice Number: An invoice number may be provided as additional information against a transaction. This is a reference field that may contain any kind of information. Description: Enter the product/service description (e.g. wireless access service). Email Header: Enter the information that will appear in the header of the invoice. 69 HS1100 Wireless Hotspot Gateway User Manual ¾ Credit Card Payment Page Fields Configuration / Credit Card Page Remark Content Item: Check the box for the items that will show on the customer’s online payment interface. Displayed Text: Enter what needs to be shown in this field. Required: Check the box for the items that will show as required fields. Credit Card Number: Credit card number of the customer. The Payment Gateway will only accept card numbers that correspond to the listed card types. Credit Card Expiration Date: Expired date of the credit card. This should be entered in the format of MMYY (month & year). For example, if it is expired on July 2005, it should be entered as 0705. First Name: The first name of a customer associated with the billing or shipping address of a transaction. In the case when John Doe places an order, enter John in the First Name field indicating this customer’s first name. Last Name: The last name of a customer associated with the billing or shipping address of a transaction. In the case when John Doe places an order, enter Doe in the Last Name field indicating this customer’s last name. 70 HS1100 Wireless Hotspot Gateway User Manual Card Type: This value indicates the level of match between the Card Code entered on a transaction and the value that is on file with a customer’s credit card company. A code and narrative description are provided indicating the results returned by the processor. Card Code: The three- or four-digit code assigned to a customer’s credit card number (found either on the front of the card at the end of the credit card number or on the back of the card). E-mail: An email address may be provided along with the billing information of a transaction. This is the customer’s email address and should contain an “@” symbol. Customer ID: This is an internal identifier for a customer that may be associated with the billing information of a transaction. This field may contain any kind of information. Company: The name of the company associated with the billing or shipping information entered on a given transaction. Address: The address entered either in the billing or shipping information of a given transaction. City: The city is associated with either the billing address or shipping address of a transaction. State: A state is associated with both the billing and shipping address of a transaction. This may be entered as either a two-character abbreviation or the full text name of the state. Zip: The ZIP code represents the five or nine digit postal code associated with the billing or shipping address of a transaction. This may be entered as five digits, nine digits, or five digits - four digits. Country: The country is associated with both the billing and shipping address of a transaction. This may be entered as either an abbreviation or full value. Phone: A phone number is associated with both a billing and shipping address of a transaction. Phone number information may be entered as all numbers or it may include parentheses ( ) or dashes (-) to separate the area code and number. Fax: A fax number may be associated with the billing information of a transaction. This number may be entered as all numbers or contain parentheses ( ) and dashes (-) to separate the area code and number. Credit Card Payment Page Remark Content Enter additional details for the transaction such as Tax, Freight and Duty Amounts, Tax Exempt status, and a Purchase Order Number, if applicable. 71 HS1100 Wireless Hotspot Gateway User Manual PayPal Before setting up “PayPal”, it is required that the hotspot owners have a valid PayPal “Business Account”. Please see Appendix C. Accepting Payments via PayPal for more information about setting up a PayPal Business Account, relevant maintenance functions, and an example for clients. After opening a PayPal Business Account, the hotspot owners should find the “Identity Token” of this PayPal account to continue “PayPal Payment Page Configuration”. ¾ External Payment Gateway / PayPal Payment Page Configuration Business Account: The “Login ID” (an email address) that is associated with the PayPal Business Account. Payment Gateway URL: The default website address to post all transaction data. Identity Token: This is the key used by PayPal to validate all the transactions. Verify SSL Certificate: This is to help protect the system from accessing a website other than PayPal Currency: The currency to be used for the payment transactions. 72 HS1100 Wireless Hotspot Gateway User Manual ¾ Service Disclaimer Content / Billing Configuration for Payment Page Service Disclaimer Content: View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. Billing Configuration for Payment Page: These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled. 73 HS1100 Wireless Hotspot Gateway User Manual ¾ Client’s Purchasing Record / PayPal Payment Page Remark Content Client’s Purchasing Record: Invoice Number: An invoice number may be provided as additional information against a transaction. This is a reference field that may contain any kind of information. Description: Enter the product/service description (e.g. wireless access service). Title for Message to Seller: Enter the information that will appear in the header of the PayPal payment page. PayPal Payment Page Remark Content: The message content will be displayed as a special notice to end customers in the page of “Rate Plan”. For example, it can describe the cautions for making a payment via PayPal. 74 HS1100 Wireless Hotspot Gateway User Manual SecurePay Before setting up “SecurePay”, it is required that the hotspot owners have a valid SecurePay “Merchant Account” from its official website. Please see Appendix D. Accepting Payments via SecurePay for more information about setting up a SecurePay Account, relevant maintenance functions, and an example for clients. 75 HS1100 Wireless Hotspot Gateway User Manual 76 HS1100 Wireless Hotspot Gateway User Manual ¾ Payment Page Configuration Merchant ID: The ID that is associated with the Business Account. Password: This is the key used by Secure Pay to validate all the transactions. Payment Gateway URL: The default website address to post all transaction data. Verify SSL Certificate: This is to help protect the system from accessing a website other than Secure Pay. Currency: The currency to be used for the payment transactions. ¾ Service Disclaimer Content View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here. ¾ SecurePay Payment Page Billing Configuration These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled. ¾ SecurePay Payment Page Remark Content The message content will be displayed as a special notice to end customers. 77 HS1100 Wireless Hotspot Gateway User Manual Black List Configuration The administrator can add, delete, or edit the black list for user access control. Each black list can include 40 users at most. If a user in the black list wants to log into the system, the user’s access will be denied. The administrator can use the pull-down menu to select the desired black list. y Select Black List: There are 5 lists to select from for the desired black list. y Name: Set the black list name and it will show on the pull-down menu above. y Add User to List: Click the hyperlink of “Add User to List” to add users to the selected black list. 78 HS1100 Wireless Hotspot Gateway User Manual After entering the usernames in the “Username” fields and other information in the “Remark” field (not required). Click Apply to add these users. To remove a user from the black list, select the user’s “Delete” check box and then click the Delete button to remove that user from the black list. 79 HS1100 Wireless Hotspot Gateway User Manual Policy Configuration Every Policy has three profiles, Firewall Profile, Specific Route Profile, and Schedule Profile as well as one Bandwidth setting for that policy. y Firewall Profile Click the hyperlink of Setting for Firewall Profile, the Firewall Profiles list will appear. Click the numbers of Filter Rule Item to edit individual rules and click Apply to save the settings. The rule status will show on the list. Check Active to enable that rule. 80 HS1100 Wireless Hotspot Gateway User Manual Rule Item: The rule selected. Rule Name: The rule name can be changed here. Enable this Rule: After checking this function, the rule will be enabled. Action: There are two options, Block and Pass. Block. “Block” is to prevent packets from passing. “Pass” is to permit packets passing. Protocol: There are three protocols to select from, TCP, UDP and ICMP. Or choose ALL to use all three protocols. Source MAC Address: The MAC address of the source IP address. This is for specific MAC address filter. Source/Destination Interface: There are five interfaces to choose from, ALL, WAN, Wireless, Public LAN (LAN1/LAN2 by default) and Private LAN (LAN3/LAN4 by default). Source/Destination IP: Enter the source and destination IP addresses. Source/Destination Subnet Mask: Enter the source and destination subnet masks. Source/Destination Start/End Port: Enter the range of source and destination ports. y Specific Route Profile Click the hyperlink of Setting for Specific Route Profile, the Specific Route Profile list will appear. Profile Name: The profile name can be changed here. IP Address: The destination IP address of the host or the network. Subnet Netmask: Select a destination subnet netmask of the host or the network. IP Address: The IP address of the next router to the destination. Default: Check this option to apply the default value. 81 HS1100 Wireless Hotspot Gateway User Manual y Schedule Profile Click the hyperlink of Setting for Schedule Profile to enter the Schedule Profile list. Select “Enable” to show the list. This function is used to restrict the time that the users can log in. Please enable/disable the desired time slot(s) and click Apply to save the settings. These settings will become effective immediately after clicking the Apply button. y Total Bandwidth Choose one bandwidth limit for that particular policy. y Individual Maximum Bandwidth Choose one maximum bandwidth for that particular policy. y Individual Request Bandwidth Choose one individual bandwidth limit for that policy, from none to 54Mbps. y Maximum Concurrent Sessions The concurrent sessions for each user, it can be restricted by administrator. 82 HS1100 Wireless Hotspot Gateway User Manual Guest User Configuration This function can permit guests to log into the system. Select “Enable Guest User” and click Apply to save the settings. y Guest User List: HS1100 allows 10 guest users to log in. To activate a guest user, just enter the password in the corresponding “Password” field for that guest account. Guest accounts with blank password will not be activated. y Policy: Select one policy to apply to. y Session Length: This restricts the connection time of the guest users. The default session length is 6 hours and the available session time ranges from 1 to 12 hours or unlimited. y Idle Timer: If a guest user has been idled with no network activities at all, the system will automatically kick out the user. The Idle timer can be set in the range of 1~1440 minutes, and the default idle timer is 10 minutes. 83 HS1100 Wireless Hotspot Gateway User Manual Additional Configuration y User Control: Functions under this section applies for all general users. ¾ Idle Timer: If a user has been idled with no network activities at all, the system will automatically kick out the user. The Idle timer can be set in the range of 1~1440 minutes, and the default idle timer is 10 minutes. ¾ Multiple Login: When enabled, a user can log in from different computers with the same account. (This function doesn’t support On-demand users and RADIUS authentication method.) y y Roaming Out Timer ¾ Session Timeout: Maximum session timeout. ¾ Idle Timeout: Maximum idle timeout. ¾ Interim Update: Constant records update time interval. Internet Connection Detection: Enter a specific URL or IP address to which HS1100 will send packets for detecting network connection status. If there is a problem in the connection in the WAN port of HS1100, and the URL or IP address specified cannot be reached, there will be a message appearing on users’ login screen 84 HS1100 Wireless Hotspot Gateway User Manual showing the Administrator Info, which can be set in 4.1.2 System Information section. 85 HS1100 Wireless Hotspot Gateway User Manual y Upload File ¾ Certificate: The administrator can upload new private key and customer certification. Click the Browse button to select the file for the certificate upload. Then click Apply to complete the upload process; otherwise click Use Default Certificate to use the default one. Click Use Default Certificate to use the default certificate and key. 1. Certification Pass Verification It helps to verify validity of the entire 2. Alert Message y Administrators’ alert message is shown when any invalid certificate in the chain found. y Users’ alert message is shown when any invalid certificate in the chain found. 86 HS1100 Wireless Hotspot Gateway User Manual 3. How to avoid Alert Message y For Clients, to install Root and Intermediate Certificates: 1. Obtain ALL certificate files Offline and save them on your desktop. 2. Click to Install Root CA and Intermediate certificates. y For Administrators, to install Website Certificate: 1. Go to “Additional Configuration >> Upload Files>> Certificate” 2. Upload “Private Key” and “Customer Certificate” to HS1100 ¾ Login Page: The administrator can use the default login page or get the customized login page by setting the template page, uploading an edited page, or downloading a specific page from the designated website. After finishing the setting, click Preview to see the login page. a. Choose Default Page to use the default login page. 87 HS1100 Wireless Hotspot Gateway User Manual 88 HS1100 Wireless Hotspot Gateway User Manual b. Choose Template Page to make a customized login page here. Click Select to pick a color and then fill in all of the blanks. Click Preview to see the result. 9 Logo Image File: Customized logo can be edited with this function. The area circled in red in the following image is the position of Logo. 89 HS1100 Wireless Hotspot Gateway User Manual 90 HS1100 Wireless Hotspot Gateway User Manual Click on Preview and Edit the Image File to enter the editing interface as below. Click on Browse to locate the desired image, and press Upload File to upload the file (the Logo file size limit is 10 Kbytes and 120x60). A warning message will appear. Click OK to complete the upload process. 9 Background and Image File: Click on Preview and Edit the Image File to enter the editing interface. Repeat the steps of uploading logo image to upload the desired background image. After the logo and background image upload process is completed, the new login Template Page can be previewed by clicking Preview button at the bottom. The built-in login Template Page is shown as below. 91 HS1100 Wireless Hotspot Gateway User Manual c. Choose Uploaded Page to upload a new/edited login page. Click the Browse button to select the file for uploading. Then, click Submit to complete the upload process. After the upload process is completed, the new login page can be previewed by clicking Preview button at the bottom. The admin-defined login page must include the following HTML codes to provide the necessary fields for username and password. If the admin-defined login page includes an image file, the image file path in the HTML codes must be the filename of the image file to be uploaded. Then, enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload Images Files” page and then click Submit. The system will show the used space and the maximum size of the image file of 512K. If the administrator wishes to restore the factory default of the login page, click the Use Default Page button to restore it to default. 92 HS1100 Wireless Hotspot Gateway User Manual After the image file is uploaded, the file name will show on the “Existing Image Files” field. The administrator can check the file and click Delete to delete that file. >> How to edit “Terms of Use” or “Service Disclaimer” page: In HS1100, the client first gets a login page when he/she opens a web browser right after associating with an access point. However, in some situations, the hotspot owners or MIS staff may want to display “terms of use” or announcement information before the login page. Hotspot owners or MIS staff can design a new disclaimer/announcement page and save the page in their local server. After the agreement shown on the page is read, users are asked whether they agree or disagree with the disclaimer. By clicking “I agree”, users are able to log in. If users choose to decline, they will get a popup window saying they are unable to log in. The basic design is to have the disclaimer and login function in the same page but with the login function hidden until users agree with the disclaimer. If the disclaimer page is successfully uploaded, an upload success page will show up. Click “Preview” to see the uploaded page. 93 HS1100 Wireless Hotspot Gateway User Manual If the user checks “I agree” and clicks Next, then he/she is prompted to fill in Login Name and Password. If the user checks “I disagree” and clicks Next, a window shown as below will pop up to tell the user that he/she cannot log in. 94 HS1100 Wireless Hotspot Gateway User Manual d. Choose External Page and get the login page from the designated website. Enter the website address in the “External Page Setting” field and then click Apply. The External Page prepared to be downloaded here must have the following HTML codes to ensure the system can work properly After applying the setting, the new login page can be previewed by clicking Preview button at the bottom of this page. ¾ Logout Page: The administrator can apply a new/edited logout page here. The process is similar to that of Login Page. 95 HS1100 Wireless Hotspot Gateway User Manual The different part is the HTML codes of the admin-defined logout page must include the following HTML codes to allow users to enter the username and password. After the upload is completed, the admin-defined logout page can be previewed by clicking Preview at the bottom of this page. If the administrator wants to restore the factory default setting of the logout interface, click the “Use Default Page” button. ¾ Login Success Page: The administrator can use the default login success page or get the customized login success page by setting the template page, uploading an edited page or downloading a specific page from the designated website. After finishing the setting, click Preview to see the login success page. a. Choose Default Page to use the default login success page. 96 HS1100 Wireless Hotspot Gateway User Manual b. Choose Template Page to make a customized login success page here. Click Select to pick a color and then fill in all of the blanks. Click Preview to see the result first. 97 HS1100 Wireless Hotspot Gateway User Manual c. Choose Uploaded Page and upload a new/edited login success page. Click the Browse button to select the file for uploading. Then, click Submit to complete the upload process. After the upload process is completed, the new login success page can be previewed by clicking Preview button at the bottom. Enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload Images Files” page and then click Submit. The system will show the used space and the maximum size of the image file of 512K. If the administrator wishes to restore the factory default of the login success page, click the Use Default Page button to restore it to default. After the image file is uploaded, the file name will show on the “Existing Image Files” field. The administrator can check the file and click Delete to delete the file. 98 HS1100 Wireless Hotspot Gateway User Manual d. Choose External Page and down a specific login success page from the designated website. Enter the website address in the “External Page Setting” field and then click Apply. After applying the setting, the new login success page can be previewed by clicking Preview button at the bottom of this page. ¾ Login Success Page for On-Demand: The administrator can use the default login success page for on-demand users or get the customized login success page by setting the template page, uploading an edited page or downloading a specific page from the designated website. After finishing the setting, click Preview to see the login success page for on-demand users. a. Choose Default Page to use the default login success page for on-demand users. 99 HS1100 Wireless Hotspot Gateway User Manual b. Choose Template Page to make a customized login success page for on-demand users here. Click Select to pick a color and then fill in all of the blanks. Click Preview to see the result first. 100 HS1100 Wireless Hotspot Gateway User Manual c. Choose Uploaded Page and click the Browse button to select the file for uploading. Then, click Submit to complete the upload process. After the upload process is completed, the new login success page for on-demand users can be previewed by clicking Preview button at the bottom. If the admin-defined login success page for on-demand users includes an image file, the image file path in the HTML codes must be the image file to be uploaded. Enter or browse the filename of the images to upload in the Upload Images field on the Upload Images Files page and then click Submit. The system will show the used space and the maximum size of the image file of 512K. If the administrator wishes to restore the factory default of the login success page for on-demand users, click the Use Default Page button to restore it to default. After the image file is uploaded, the file name will show on the “Existing Image Files” field. Check the file and click Delete to delete the file. 101 HS1100 Wireless Hotspot Gateway User Manual d. Choose the External Page selection and get the login success page for on-demand users from a specific website. Enter the website address in the “External Page Setting” field and then click Apply. After applying the setting, the new login success page for on-demand users can be previewed by clicking Preview button at the bottom of this page. ¾ Logout Success Page: The administrator can use the default logout success page or get the customized login success page by setting the template page, uploading the page or downloading from a specific website. After finishing the setting, click Preview to see the logout success page. a. Choose Default Page to use the default logout success page. b. Choose Template Page to make a customized logout success page here. Click Select to pick up a color and then fill in all of the blanks. Click Preview to see the result first. 102 HS1100 Wireless Hotspot Gateway User Manual c. Choose Uploaded Page and click the Browse button to select the file for the logout success page upload. Then click Submit to complete the upload process. After the upload process is completed, the new logout success page can be previewed by clicking Preview button at the bottom. If the user-defined logout success page includes an image file, the image file path in the HTML code must be the filename of the image file to be uploaded. Enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload Images Files” page and then click Submit. The system will show the used space and the maximum size of the image file of 512K. If the administrator wishes to restore the factory default of the logout success page, click the Use Default Page button to restore it to default. After the image file is uploaded, the file name will show on the “Existing Image Files” field. The administrator can check the file and click Delete to delete it. 103 HS1100 Wireless Hotspot Gateway User Manual d. Choose External Page and get a specific logout success page from the designated website. Enter the website address in the “External Page Setting” field and then click Apply. After applying the setting, the new logout success page can be previewed by clicking Preview button at the bottom of this page. y Credit Reminder: The administrator can enable this function to remind the on-demand users before their credit runs out. There are two kinds of reminder, Volume and Time. The default reminding trigger level for Volume is 1Mbyte and the level for Time is 5 minutes. y POP3 Message: Before users log into the network with their usernames and passwords, users will receive a welcome mail from HS1100. To edit the content, click the hyperlink of Edit Mail Message to enter the text edit page. 104 y HS1100 Wireless Hotspot Gateway User Manual Enhance User Authentication: If enabled, only the users with their MAC addresses in this list can log into HS1100. However, user authentication is still required for these users. To specify the MAC addresses, click the hyperlink of Permit MAC Address List to enter the “MAC Address Control” page and fill in the MAC addresses. Select Enable and then click Apply. The format of the MAC address is: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx. y SMTP Redirect: If enabled, please configure IP address of SMTP server and the port number of the SMTP server here. 105 HS1100 Wireless Hotspot Gateway User Manual Network Configuration This section includes the following functions: Network Address Translation, Privilege List, Monitor IP List, Walled Garden List, Walled Garden AD List, Proxy Server Properties and Dynamic DNS. 106 HS1100 Wireless Hotspot Gateway User Manual Network Address Translation Set the configuration for Static Assignments, Public Accessible Server and Port and Redirect. y Static Assignments The administrator can define mandatory external to internal IP mapping, so that a client on HS1100’s WAN can access the managed machine (e.g. a PC, a system) on HS1100’s LAN by accessing the external IP. There are 40 sets of static Internal IP Address and External IP Address available. Enter Internal and External IP Addresses as a set. After the setup, accessing the WAN will be mapped to access the Internal IP Address. These settings will become effective immediately after clicking the Apply button. y Public Accessible Server This function allows the administrator to set 40 virtual servers at most, so that client devices outside the managed network can access these servers within the managed network. Different virtual servers can be configured for different sets of physical services, such as TCP and UDP services in general. Enter the “External Service Port”, “Local Server IP Address” and “Local Server Port”. Select “TCP” or “UDP” for the service’s type. In the Enable column, check the desired server to enable. These settings will become effective immediately after clicking the Apply button. 107 HS1100 Wireless Hotspot Gateway User Manual y Port and IP Redirect This function allows the administrator to set 40 sets of the IP addresses at most for redirection purpose. When the user attempts to connect to a destination IP address listed here, the connection packet will be converted and redirected to the corresponding destination. Please enter the “IP Address” and “Port” of Destination, and the “IP Address” and “Port” of Translated to Destination. Select “TCP” or “UDP” for the service’s type. These settings will become effective immediately after clicking Apply. 108 HS1100 Wireless Hotspot Gateway User Manual Privilege List Set the configuration for Privilege IP Address List and Privilege MAC Address List. y Privilege IP Address List If there are workstations inside the managed network that need to access the network without authentication, enter the IP addresses of these workstations in the “Privilege IP Address List”. The “Remark” field is not necessary but is useful to keep track. HS1100 allows 100 privilege IP addresses at most. These settings will become effective immediately after clicking Apply. Permitting specific IP addresses to have network access rights without going through standard authentication process at the Public LAN (LAN1/LAN2 by default) may cause security problems. y Privilege MAC Address List In addition to the IP address, the MAC address of the workstations that need to access the network without authentication can also be set in the “Privilege MAC Address List”. HS1100 allows 100 privilege MAC addresses at most. When manually creating the list, enter the MAC address (the format is xx:xx:xx:xx:xx:xx) as well as the remark (not necessary). These settings will become effective immediately after clicking Apply. Permitting specific MAC addresses to have network access rights without going through standard authentication process at the Public LAN (LAN1/LAN2 by default) may cause security problems. 109 HS1100 Wireless Hotspot Gateway User Manual Monitor IP List HS1100 will send out a packet periodically to monitor the connection status of the IP addresses on the list. If the monitored IP address does not respond, the system will send an e-mail to notify the administrator that such destination is not reachable. After entering the necessary information, click Apply to save the settings. Click Monitor to check the current status of all the monitored IP. The system supports monitoring on 40 IP addresses listed in the “Monitor IP List”. 110 y HS1100 Wireless Hotspot Gateway User Manual Send From: The e-mail address of the administrator in charge of the monitoring. This will show up as the sender’s e-mail. y Send To: The e-mail address of the person to which the monitoring result is sent. This will be the receiver’s e-mail. y Interval: The time interval to send the e-mail report. y SMTP Server: The IP address of the SMTP server. y Auth Method: The system provides four authentication methods, Plain, Login, CRAM-MD5 and NTLMv1, or “None” to use none of the above. Select one authentication method and enter the Account Name, Password and Domain. y Send Test Email: To test if the settings are correct or not. y Monitor IP Address: The IP addresses under monitoring. 111 HS1100 Wireless Hotspot Gateway User Manual Walled Garden List This function provides certain free services for users to access the websites listed here before login and authentication. Up to 20 addresses or domain names of the websites can be defined in this list. Users without the network access right can still have a chance to experience the actual network service free of charge. Enter the website IP Address or Domain Name in the list and click Apply to save the settings. 112 HS1100 Wireless Hotspot Gateway User Manual Walled Garden Ad List This function provides advertisement web pages for users to access free advertisement websites listed before login and authentication. Advertisement hyperlinks are displayed on the user’s login page. Clients who click on it will be redirected to the listed advertisement websites. y Edit: Click Edit to add a new item or make changes. Click Apply, the items will be added and shown in the list. y Display: Choose Display to display advertisement hyperlinks on the login pages Ø 113 HS1100 Wireless Hotspot Gateway User Manual 114 HS1100 Wireless Hotspot Gateway User Manual Proxy Server Properties HS1100 supports Internal Proxy Server and External Proxy Server functions. Please select an Access Gateway and then set the necessary configurations. y External Proxy Server: Under the security management of HS1100, the system will match the External Proxy Server list to the clients’ proxy settings. If there is not a match, the clients will not be able to reach the login page and thus unable to access the network. If there is a match, the clients will be directed to the system for authentication. After a successful authentication, the clients will be redirected back to the desired proxy servers depending on different situations. y Internal Proxy Server: HS1100 has a built-in proxy server. If this function is enabled, the clients will be forced to treat HS1100 as the proxy server regardless of their original proxy settings. For more details about how to set up the proxy servers, please refer to Appendix F. Proxy Setting. 115 HS1100 Wireless Hotspot Gateway User Manual Dynamic DNS Before activating this function, you must have your Dynamic DNS hostname registered with a Dynamic DNS provider. HS1100 supports DNS function to alias the dynamic IP address for the WAN port to a static domain name, allowing the administrator to easily access HS1100’s WAN. If the dynamic DHCP is activated at the WAN port, it will update the IP address of the DNS server periodically. These settings will become effective immediately after clicking Apply. y DDNS: Enable or disable this function. y Provider: Select the DNS provider. y Host name: The IP address/domain name of the WAN port. y Username/E-mail: The register ID (username or e-mail) for the DNS provider. y Password/Key: The register password for the DNS provider. Note: To apply for free Dynamic DNS service, you may go to http://www.dyndns.com/services/dns/dyndns/howto.html 116 HS1100 Wireless Hotspot Gateway User Manual Utilities This section provides four utilities to customize and maintain the system including Network Utilities, Change Password, Backup/Restore Setting, Firmware Upgrade and Restart. 117 HS1100 Wireless Hotspot Gateway User Manual Network Utilities The system provides network diagnostic tools like “PING”, “Trace Route”, and “ARP Table”. 118 HS1100 Wireless Hotspot Gateway User Manual Change Password There are three levels of authorities: admin, manager or operator. The default usernames and passwords are as follows: Admin: The administrator can access all configuration pages of HS1100. User Name: admin Password: admin Manager: The manager can only access the configuration pages under User Authentication to manage the user accounts, but without permission to change the settings of the profiles of Firewall, Specific Route and Schedule. User Name: manager Password: manager Operator: The operator can only access the configuration page of Create On-demand User to create new on-demand user accounts and print out the on-demand user account receipts. User Name: operator Password: operator The administrator can change the passwords here. Please enter the current password and then enter the new password twice to verify. Click Apply to activate this new password. If the administrator’s password is lost, the administrator’s password still can be changed through the text mode management interface at the serial console port. 119 HS1100 Wireless Hotspot Gateway User Manual Backup/Restore Settings This function is used to backup/restore the HS1100 settings. Also, HS1100 can be restored to the factory default settings here. y Backup current system settings: Click Backup to create a .db database backup file and save it on disk. y Restore system settings: Click Browse to search for a .db database backup file created by HS1100 and click Restore to restore to the same settings at the time when the backup file was saved. y Reset to the factory-default settings: Click Reset to load the factory default settings of HS1100. 120 HS1100 Wireless Hotspot Gateway User Manual Firmware Upgrade The administrator can download the latest firmware from website and upgrade the system here. Click Browse to search for the firmware file and click Apply for the firmware upgrade. It might take a few minutes before the upgrade process completes and the system needs to be restarted afterwards to activate the new firmware. 1. Firmware upgrade may cause the loss of some data. Please refer to the release notes for the limitation before upgrading. 2. Please restart the system after upgrading the firmware. Do not power on/off the system during the upgrade or restart process. It may damage the system and cause malfunction. 121 HS1100 Wireless Hotspot Gateway User Manual Restart This function allows the administrator to safely restart HS1100, and the process might take approximately three minutes. Click YES to restart HS1100; click NO to go back to the previous screen. If the power needs to be turned off, it is highly recommended to restart HS1100 first and then turn off the power after completing the restart process. The connection of all online users of the system will be disconnected when system is in the process of restarting. 122 HS1100 Wireless Hotspot Gateway User Manual Status This section includes System Status, Interface Status, Current Users, Traffic History, Notification Configuration, and Session Log to provide system status information and online user status. 123 HS1100 Wireless Hotspot Gateway User Manual System Status This section provides an overview of the system for the administrator. The description of the above-mentioned table is as follows: 124 HS1100 Wireless Hotspot Gateway User Manual Description Item Current Firmware Version The present firmware version of HS1100 System Name The system name. The default is HS1100 The information to be shown on the login window when a user Admin Info has a connection problem. Home Page The page to which the users are directed after successful login. Syslog server-Traffic History Syslog server-On demand User log Proxy Server The IP address and port number of the external Syslog Server. N/A means that it is not configured. The IP address and port number of the external Syslog Server. N/A means that it is not configured. Enabled/disabled stands for that the system is currently using the proxy server or not. Enabled/disabled stands for the setting of hiding/displaying an Friendly Logout extra confirmation window when users close the login succeed page. Enabled/Disabled stands for the connection at WAN is normal or Internet Connection Detection abnormal (Internet Connection Detection) and all online users are allowed/disallowed to log in the network. Remote Management IP Management SNMP Retained Days History Traffic log Email To The IP(s) that is allowed for accessing the management interface. Enabled/disabled stands for the current status of the SNMP management function. The maximum number of days for the system to retain the users’ information. The email address to which that the traffic history information will be sent. On-demand log Email The email address to which the history information about To NTP Server on-demand users is sent. The network time server that the system is set to align with. Time Date Time(GMT+0:00) The system time is shown as the local time. Idle Timer User Multiple Login Guest Account The number of minutes before the system disconnects inactive users. Enabled/disabled stands for the current setting to allow/disallow multiple logins form the same account. Enabled/disabled stands for the current status of allowing/disallowing Guest Accounts to log in. Preferred DNS Server IP address of the preferred DNS Server. DNS Alternate DNS Server IP address of the alternate DNS Server. 125 HS1100 Wireless Hotspot Gateway User Manual Interface Status This section provides an overview of the interface for the administrator including WAN, LAN1 & LAN2, LAN3 & LAN4, and Wireless Port. 126 HS1100 Wireless Hotspot Gateway User Manual The description of the above-mentioned table is as follows: Item Description MAC Address WAN IP Address Subnet Mask Operation Mode MAC Address IP Address Wireless Subnet Mask ESSID Channel Security Type Wireless DHCP Server The MAC address of the WAN port. The IP address of the WAN port. The Subnet Mask of the WAN port. The mode of the wireless port. The MAC address of the wireless port. The IP address of the wireless port. The subnet mask of the wireless port. The ESSID of the wireless port. The assigned Channel of the wireless port. The security type of the wireless port. Status Enable/disable stands for status of the DHCP server on the wireless port. WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured. Start IP Address The start IP address of the DHCP IP range. End IP address The end IP address of the DHCP IP range. Lease Time Mode MAC Address The number of minutes of the lease time of the IP address. The mode of the LAN1 & LAN2 port. The MAC address of the LAN1 & LAN2. LAN1 & LAN2 IP Address Subnet Mask LAN1 & LAN2 DHCP Server The IP address of the LAN1 & LAN2. The subnet mask of the LAN1 & LAN2. Status Enable/disable stands for status of the DHCP server on the LAN1 & LAN2. WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured. Start IP Address The start IP address of the DHCP IP range. End IP address The end IP address of the DHCP IP range. Lease Time Mode MAC Address The number of minutes of the lease time of the IP address. The mode of the LAN3 & LAN4. The MAC address of the LAN3 & LAN4. LAN3 & LAN4 IP Address Subnet Mask Status LAN3 & LAN4 DHCP Server The IP address of the LAN3 & LAN4. The subnet mask of the LAN3 & LAN4. Enable/disable stands for status of the DHCP server on the LAN3 & LAN4 port WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured. Start IP Address The start IP address of the DHCP IP range. End IP address The end IP Address of the DHCP IP range. Lease Time The number of minutes of the lease time of the IP address. 127 HS1100 Wireless Hotspot Gateway User Manual Current Users In this function, each online user’s information can be obtained, including Username, IP Address, MAC Address, Pkts In, Bytes In, Pkts Out, Bytes Out, Idle and Kick Out. From the “Current Users List”, the administrator can force a specific online user to log out. Click the hyperlink of Logout next to the online user’s name to logout that particular user. Click Refresh to renew the Current Users List. 128 HS1100 Wireless Hotspot Gateway User Manual Traffic History This function is used to check the traffic history of HS1100. The history of each day will be saved separately in the DRAM for at least 3 days (72 full hours). The system also keeps a cumulated record of the traffic data generated by each user in the latest 2 calendar months. Since the history is saved in the DRAM, if you need to restart the system, and at the same time, keep the history, please manually copy and save the traffic history information before restarting. If the History Email has been entered under the Notify Configuration page, the system will automatically send out the history information to that specified email address. y Traffic History All activities occur on the system within the nearest 72 hours are recorded; in date and time order. As shown in the following figure, each line is a traffic history record consisting of 9 fields, Date, Type, Name, IP, MAC, Pkts In, Bytes In, Pkts Out and Bytes Out of the user activities. 129 HS1100 Wireless Hotspot Gateway User Manual y On-demand User Log All activities occur on the system within the nearest 72 hours are recorded; in date and time order. As shown in the following figure, each line is an on-demand user log record consisting of 13 fields, Date, System Name, Type, Name, IP, MAC, Pkts In, Bytes In, Pkts Out, Bytes Out, Expiretime, Validtime and Remark of user activities. y Monthly Network Usage of Local User The system keeps a cumulated record of the traffic data generated by each user in the latest 2 calendar months. As shown in the following figure, each line in a monthly network usage of local user record consists of 6 fields, System Name, Connection Time Usage, Packets In, Bytes In, Packets Out and Bytes Out of user activities. ¾ Download Monthly Network Usage of Local User: Click on the Download button for outputting the report manually to a local database. A warning message will then appear. Click Save to download the record into .txt format. 130 HS1100 Wireless Hotspot Gateway User Manual 131 HS1100 Wireless Hotspot Gateway User Manual Notify Configuration HS1100 will save the traffic history into the internal DRAM. If the administrator wants the system to automatically send the history to a particular email address, enter the information shown as below. y Send From: The e-mail address of the administrator in charge of the monitoring. This will show up as the sender’s e-mail. y Send To: The e-mail address of the person to which the history email is sent to. This will be the receiver’s e-mail. y Interval: The time interval for sending the e-mail report of the traffic history. y SMTP Server: The IP address of the SMTP server. y Auth Method: The system provides four authentication methods, PLAIN, LOGIN, CRAM-MD5 and NTLMv1, or “NONE” to use none of the above. Select one authentication method and enter the Account Name, Password and Domain. 132 HS1100 Wireless Hotspot Gateway User Manual ¾ NTLMv1 is not currently available for general use. ¾ PLAIN and CRAM-MD5 are standard authentication mechanisms while LOGIN and NTLMv1 are Microsoft proprietary mechanisms. ¾ Only PLAIN and LOGIN can use the UNIX login password. ¾ Netscape uses PLAIN. ¾ Outlook and Outlook express use LOGIN as default, although they can be set to use NTLMv1. ¾ Pegasus uses CRAM-MD5 or LOGIN but the administrator cannot configure which method to be used. y Send Test Email: To test the settings correct or not. y Syslog Server: It specifies the IP and Port of the Syslog server. 133 HS1100 Wireless Hotspot Gateway User Manual Session Log Every connection created and activity executed on the Internet by users can be tracked if the Session Log function is enabled; the system will automatically report the connection details to a specified Syslog Server. Log files can also be sent out to an Email Box or uploaded to a particular FTP Server periodically when this function is enabled. • Send Log to Syslog Server Select Enable, and enter IP Address of the Syslog Server to be used. Select Facility and Severity from the drop-down list box. Enter a Tag description which will be included in session logs sent to the specified Syslog server. Click Apply to save the setting. • Send Log (to Email & FTP) every: Select a time interval from the drop-down list box for sending session logs to an email box and/or FTP server. Click Apply to save the setting. Note: The “Send Log (to Email & FTP) every” is applied only to “Send Log to Email Box”, and “Send Log to FTP Server” functions, but does not have any effect on “Send Log to Syslog Server” function. 134 HS1100 Wireless Hotspot Gateway User Manual • Send Log to Email Box Select Enable, and enter Sender’s and Receiver’s Email Address. Enter the domain name or IP address of the SMTP Server, and select an appropriate SMTP Authentication Method from the drop-down list box. Before applying the setting, you can send a test log to preview the setting by click Send Test Log button. Click Apply to save the setting. • Send Log to FTP Server: Enter IP Address of the FTP Server to be used. When selecting Anonymous, specify the Username and Password for accessing the FTP Server. Before applying the setting, you can send a test log to preview the setting by click Send Test Log button.. Click Apply to save the setting. 135 HS1100 Wireless Hotspot Gateway User Manual Help On the screen, the Help button is on the upper right corner. Click Help to the Online Help window and then click the hyperlink of the items for further information. 136 HS1100 Wireless Hotspot Gateway User Manual Appendix A. Console Interface Via this port to enter the console interface for the administrator to handle the problems and situations occurred during operation. 1. In order to connect to the console port of HS1100, a console, modem cable and a terminal simulation program, such as the Hyper Terminal are needed. 2. If a Hyper Terminal is used, please set the parameters as 9600,8,n,1. The main console is a menu-driven text interface with dialog boxes. Please use arrow keys on the keyboard to browse the menu and press the Enter key to make selection or confirm what you enter. 3. Once the console port of HS1100 is connected properly, the console main screen will appear automatically. If the screen does not appear in the terminal simulation program automatically, please try to press the arrow keys, so that the terminal simulation program will send some messages to the system, where the welcome screen or main menu should appear. If the welcome screen or main menu of the console still does not pop up, please check the connection of the cables and the settings of the terminal simulation program. 137 HS1100 Wireless Hotspot Gateway User Manual y Utilities for network debugging The console interface provides several utilities to assist the Administrator to check the system conditions and to debug any problems. The utilities are described as follows: ¾ Ping host (IP): By sending ICMP echo request to a specified host and wait for the response to test the network status. ¾ Trace routing path: Trace and inquire the routing path to a specific target. ¾ Display interface settings: It displays the information of each network interface setting including the MAC address, IP address, and netmask. ¾ Display the routing table: The internal routing table of the system is displayed, which may help to confirm the Static Route settings. ¾ Display ARP table: The internal ARP table of the system is displayed. ¾ Display system up time: The system live time (time for system being turn on) is displayed. ¾ Check service status: Check and display the status of the system. ¾ Set device into “safe mode”: If the administrator is unable to use Web Management Interface via browser for the system failed inexplicitly. The administrator can choose this utility and set it into safe mode, which enables him to manage this device with browser again. ¾ Synchronize clock with NTP server: Immediately synchronize the clock through the NTP protocol and the specified network time server. Since this interface does not support manual setup for its internal clock, therefore we must reset the internal clock through the NTP. ¾ Print the kernel ring buffer: It is used to examine or control the kernel ring buffer. The program helps users to print out their boot-up messages instead of copying the messages by hand. ¾ Main menu: Go back to the main menu. 138 HS1100 Wireless Hotspot Gateway User Manual y Change admin password Besides supporting the use of console management interface through the connection of null modem, the system also supports the SSH online connection for the setup. When using a null modem to connect to the system console, we do not need to enter administrator’s password to enter the console management interface. But connecting the system by SSH, we have to enter the username and password. The username is “admin” and the default password is also “admin”, which is the same as for the web management interface. Password can also be changed here. If administrators forget the password and are unable to log in the management interface from the web or the remote end of the SSH, they can still use the null modem to connect the console management interface and set the administrator’s password again. Although it does not require a username and password for the connection via the serial port, the same management interface can be accessed via SSH. Therefore, we recommend you to immediately change the HS1100 Admin username and password after logging in the system for the first time. y Reload factory default Choosing this option will reset the system configuration to the factory defaults. y Restart HS1100 Choosing this option will restart HS1100. 139 HS1100 Wireless Hotspot Gateway User Manual Appendix B. Accepting Payment via Authorize.Net This section is to show independent Hotspot owners how to configure related settings in order to accept credit card payments via Authorize.Net, making the Hotspot an e-commerce environment for clients to pay for and obtain Internet access using their credit cards. 140 HS1100 Wireless Hotspot Gateway User Manual 141 HS1100 Wireless Hotspot Gateway User Manual 1. Setting Up 1.1 Open Accounts To set up HS1100 to process credit card billing, the merchant owner will need two accounts (Internet Merchant account and Authorize.Net account). If you are looking for a merchant account or Internet payment gateway to process transactions, you can fill out the Inquiry Form on http://www.authorize.net/solutions/merchantsolutions/merchantinquiryform/. 1.2 Configure HS1100 using an Authorize.Net account Please log in HS1100. User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Click Payment >> Payment Configuration >> External Payment Gateway >> Select Authorize.Net 142 HS1100 Wireless Hotspot Gateway User Manual Some major fields are required: Setting Merchant Login ID Merchant Transaction Key Payment Gateway URL MD5 Hash Note: Description This is the “Login ID” that comes with the Authorize.Net account. To get a new key, please log in Authorize.Net >> Click Settings and Profile >> Go to the “Security” section >> Click Obtain Transaction Key >> Enter “Secret Answer” >> Click Submit. https://secure.authorize.net/gateway/transact.dll (default gateway address) To enhance the transaction security, merchant owner can choose to enable this function and enter a value in the text box: “MD5 Hash Value”. For detailed description, please see 4.2.1.6 Authentication Method >> On-demand User >> Payment 1.3 Configure the Authorize.Net Merchant Account to Match the Configuration of HS1100 Settings of the merchant account on Authorize.Net should be matched with the configuration of HS1100: Setting Description MD5 Hash To configure “MD5 Hash Value”, please log in Authorize.Net >> Click Settings and Profile >> Go to the “Security” section >> Click MD5 Hash >> Enter “New Hash Value” & “Confirm Hash Value” >> Click Submit. Required Card Code If the “Card Code” is set up as a required field, please log in Authorize.Net >> Click Settings and Profile >> Go to the “Security” section >> Click Card Code Verification >> Check the Does NOT Match (N) box >> Click Submit. Required Address Fields After setting up the required address fields on the “Credit Card Payment Page Billing Configuration” section of HS1100, the same requirements must be set on Authorize.Net. To do so, please log in Authorize.Net >> Click Settings and Profile >> Go to the “Security” section >> Click Address Verification System (AVS) >> Check the boxes accordingly >> Click Submit. 1.4 Test The Credit Card Payment via Authorize.Net To test the connection between HS1100 and Authorize.Net, please log in HS1100. >> User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Payment >> Payment Configuration >> Select Authorize.Net >> Go to “Authorize.Net Payment Page Configuration” section >> Enable the “Test Mode” >> Click Try Test and follow the instructions 143 HS1100 Wireless Hotspot Gateway User Manual 2. Basic Maintenance In order to maintain the operation, merchant owners will have to manage the accounts and transactions via Authorize.Net as well as HS1100. 2.1 Void A Transaction and Remove the On-demand Account Generated on HS1100 Sometimes, a transaction (as well as the related user account on HS1100) may have to be canceled before it has been settled with the bank. a. To void an unsettled transaction, please log in Authorize.Net. Click Unsettled Transactions >> Locate the specific transaction record on the “List of Unsettled Transactions” >> Click the Trans ID number >> Confirm and click Void. Note: To find the on-demand account name, click Show Itemized Order Information on the “Order Information” page >> Username can be found in the “Item Description”. b. To remove the specific account from HS1100, please log in HS1100. >> User Authentication >> Authentication Configuration >> Click the server On-demand >> Users List >> Click Delete on the record with the account name. Click Delete All to delete all users at once. 2.2 Refund A Settled Transaction and Remove the On-demand Account Generated on HS1100 a. To refund a credit card payment, please log in Authorize.Net. Click Virtual Terminal >> Select a Payment Method >> Click Refund a Credit Card >> Payment/Authorization Information >> Type information in at least three fields: Card Number, Expiration Date, and Amount >> Confirm and click Submit. b. To remove the specific account from HS1100, please log in HS1100. >> User Authentication >> 144 HS1100 Wireless Hotspot Gateway User Manual Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Users List >> Click Delete on the record with the account name. 2.3 Find the Username and Password for A Specific Customer Please log in Authorize.Net. Click Unsettled Transactions >> Try to locate the specific transaction record on the “List of Unsettled Transactions” >> Click the Trans ID number >> Click Show Itemized Order Information in the “Order Information” section >> Username and Password can be found in the “Item Description”. 2.4 Send An Email Receipt to A Customer If a valid email address is provided, an email receipt with payment details for each successful transaction will be automatically sent to the customer via Authorize.Net. To change the information on the receipt for customer, please log in HS1100. >> User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Payment >> Payment Configuration >> External Payment Gateway >> Select Authorize.NET >> Scroll down to Client's Purchasing Record section of the page >> Type in information in the text boxes: “Description” and “E-mail Header” >> Confirm and click Apply. 2.5 Send an Email Receipt for Each Transaction to the Merchant Owner A copy of email receipt with payment details for each successful transaction will also be automatically sent to the merchant owner/administrator via Authorize.Net. To configure the contact person who will receive a receipt for each transaction, please log in Authorize.Net. Click Settings and Profile >> Go to the “General” section >> Click Manage Contacts >> Click Add New Contact to >> Enter necessary contact information on this page >> Check the “Transaction Receipt” box >> Click Submit. 3. Reporting During normal operation, the following steps will be necessary to generate transaction reports. 3.1 Transaction Statistics by Credit Card Type during the Period. Please log in Authorize.Net. >> Click Reports >> Check “Statistics by Settlement Date” radio button >> Select “Transaction Type”, “Start Date”, and “End Date” as the criteria >> Click Run Report. 3.2 Transaction Statistics by Different Location a. To deploy more than one HS1100, the way to distinguish transactions from different locations is to make the invoice numbers different. To change the invoice setting, please log in HS1100. >> User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server 145 HS1100 Wireless Hotspot Gateway User Manual Configuration >> Payment >> Payment Configuration >> External Payment Gateway >> Select Authorize.NET >> Scroll down to “Client's Purchasing Record” section of the page >> Check the “Reset” box >> A location-specific ID (for example, Hotspot-A) can be used as the first part of “Invoice Number” >> Confirm and click Apply. b. Please log in Authorize.Net >> Click Search and Download >> Specify the transaction period (or ALL Settled, Unsettled) in “Settlement Date” section >> Go to “Transaction” section >> Enter the first part of invoice number plus an asterisk character (for example, Hotspot-A*) in the “Invoice #” text box >> Click Search >> If transaction records can be found, the number of accounts sold is the number of search results >> Or, click Download To File to download records and then use MS Excel to generate more detailed reports. 3.3 Search for The Transaction Details for A Specific Customer Please log in Authorize.Net. Click Search and Download >> Enter the information for a specific customer as criteria >> Click Search >> Click the Trans ID number to view the transaction details. Note: For more information about Authorize.Net, please see http://www.authorize.net. 4. Examples of Making Payment for Clients Step 1: Click the link below the login window to pay for the service by credit card via Authorize.Net. Step 2: Choose I agree to accept the terms of use and click Next. 146 HS1100 Wireless Hotspot Gateway User Manual Step 3: Please fill out the form and Click Submit to send out this transaction. There will be a confirm dialog box. Step 4: Please confirm the data and the click OK to go on the transaction or click Cancel to revise the data or cancel this transaction. After clicking OK, there will be another dialog box showing up to confirm this transaction again. 147 HS1100 Wireless Hotspot Gateway User Manual Step 5: Click OK to complete the process or click Cancel to revise the data or cancel this transaction. Step 6: Click Start Internet Access to use the Internet access service. Note: The clients must fill in the correct credit card number and expiration date. Card code is the last 3 digits of the security code located on the back of your credit card. If clients choose to enter the e-mail addresses, clients will receive confirmation letters for reference. 148 HS1100 Wireless Hotspot Gateway User Manual Appendix C. Accepting Payment via PayPal This section is to show independent Hotspot owners how to configure related settings in order to accept payments via PayPal, making the Hotspot an e-commerce environment for clients to pay for and obtain Internet access using their PayPal accounts or credit cards. 149 HS1100 Wireless Hotspot Gateway User Manual 1. Setting Up As follows are the basic steps to open and configure a “Business Account” on PayPal. 1.1 Open An Account Step 1: Sign up for a PayPal Business Account and login. Here is a link: https://www.paypal.com/cgi-bin/webscr?cmd=_registration-run Step 2: Edit necessary settings in “Website Payment Preferences” Click Profile >> Click Website Payment Preferences in the Selling Preferences section Administrators should scroll down to edit each setting as shown in the table below. To activate all the changes, please click Save at the end of the page. 150 HS1100 Wireless Hotspot Gateway User Manual Settings Screenshots Auto Return (On) Return URL (Redirect Webpage) Type http://www.www.com or other URL. Payment Data Transfer (On) Block Non-encrypted Website Payment (Off) PayPal Account Optional (Off) Contact Telephone Number (Off) Click Save. 151 HS1100 Wireless Hotspot Gateway User Manual 1.2 Configure HS1100 with a PayPal Business Account Please log in HS1100: User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Click Payment >> Payment Configuration >> External Payment Gateway >> Select PayPal Three fields are required: Setting Business Account ID Description This is the “Login ID” (email address) that is associated with the PayPal Business Account. Payment Gateway URL https://www.paypal.com/cgi-bin/webscr (default URL for PayPal) Identity Token Please log in PayPal after saving the above settings >> Click Profile >> Click Website Payment Preferences in the Selling Preferences section >> Scroll down to the section, Payment Data Transfer (optional). Copy the Identity Token in the above page to the section “PayPal Payment Page Configuration” of HS1100. 152 HS1100 Wireless Hotspot Gateway User Manual 1.3 Requirements for Building a Secure PayPal-based E-Commerce Site To deploy the PayPal function properly, it is required that the merchant register an Internet domain name (for example, www.StoreName.com) for this subscriber gateway device. In addition, it is necessary to sign up for a SSL certificate, licensed from a “Certificate Authority” (for example, VerSign), for this registered Internet domain name. Thus, by meeting these two requirements, it will allow end customers or subscribers to pay for the Internet access in a securer and convenient way. 2. Basic Maintenance In order to maintain the operation, the merchant owner will have to manage the accounts and payment transactions on PayPal website as well as HS1100. 2.1 Refund a completed payment and remove the on-demand account generated on HS1100 (1) To refund a payment, please log in PayPal >> Click History >> Locate the specific payment listing in the activity history log >> Click Details of the payment listing >> Click Refund Payment at the end of the details page >> Type in information: Gross Refund Amount and/or Optional Note to Buyer >> Click Submit >> Confirm the details and click Process Refund (2) To remove the specific account from HS1100, please log in HS1100: User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Users List >> Click Delete on the record with the account ID. Click Delete All to delete all users at once. 153 HS1100 Wireless Hotspot Gateway User Manual 2.2 Find the username and password for a specific customer (1) To find the username, please log in PayPal >> Click History >> Locate the specific payment listing in the activity history log >> Click Details of the payment listing >> Username can be found in the “Item Title” field (2) To find the password associated with a specific username, please log in HS1100: User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Users List. Search for the specific username. Password can be found in the same record Note: As stated by PayPal, you can issue a full or partial refund for any reason and for 60 days after the original payment was sent. To find the on-demand account name for a specific payment, click Details of the payment listing in the activity history log >> Username can be found in the “Item Title” field. 2.3 Send an email receipt to a customer If a valid email address is provided, an email receipt with payment details for each successful transaction will be automatically sent to the customer via PayPal. To change the information on the receipt for customer, please log in HS1100: User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration >> Payment >> Payment Configuration >> External Payment Gateway>> Select PayPal >> Go to “Client's Purchasing Record” section >> Type in information in the text boxes: Invoice Number and Description (Item Name) >> Confirm and click Apply 2.4 Send an email receipt for each transaction to the merchant A copy of email receipt with payment details (including available message note from buyer) for each successful transaction will also be automatically sent to the merchant owner/administrator via PayPal. 154 HS1100 Wireless Hotspot Gateway User Manual 3. Reporting During normal operation, the following steps will be necessary to generate transaction reports. 3.1 Transaction activity during a period (1) Please log in PayPal >> Click History >> Choose activity type from the Show field as the search criteria >> Specify the dates (From and To fields) for the period >> Click Search 3.2 Search for the transaction details for a specific customer Please log in PayPal >> Click History >> Click Advanced Search >> Enter the name for a specific customer as criteria in the Search For field and Choose Last Name or First Name in the In field >> Specify the time period >> Click Submit >> Click Details to view the transaction details Note: For more information about PayPal, please see http://www.paypal.com. 155 HS1100 Wireless Hotspot Gateway User Manual 4. Examples of Making Payment for Clients Step 1: Click the link below the login window to pay for the service via PayPal. Step 2: Choose I agree to accept the terms of use and click Next. Step 3: Please fill out the form and Click Submit to send out this transaction. There will be a confirm dialog box. 156 HS1100 Wireless Hotspot Gateway User Manual Step 4: You will be redirected to PayPal website to complete the payment process. Step 5: Click Start Internet Access to use the Internet access service. 157 HS1100 Wireless Hotspot Gateway User Manual (a) Note: (b) Payment is accepted via PayPal. PayPal enables you to send payments securely online using PayPal account, a credit card or bank account. Clicking on Buy Now button, you will be redirected to PayPal’s site to make payment. Please do not manually close the browser when you reach PayPal’s payment confirmation page. It takes about 30 seconds or more before you are automatically redirected back to our website with a set of Login ID and Password. 158 HS1100 Wireless Hotspot Gateway User Manual Appendix D. Accepting Payment via SecurePay How to use SecurePay SecurePay is another external online payment gateway compatible with HS1100. This section guides you how to get SecurePay working with HS1100 and how to check today’s billing transactions, and teaches your clients how to purchase or renew different network-access plans online using their credit cards. For Administrators to get started Before getting started, administrators need to apply for a “Merchant ID” and “Merchant Password” from the “SecurePay” official website. In this example, merchant account one starting with plan one is SecurePay Merchant ID: ABC0001 SecurePay Merchant Password: abc123 1. Create billing plans: Administrators may come up with many ways to charge their clients. For example: ¾ Plan 2 (charged by Data): Each Plan 2 client has to make their first login within 15 days and 9 hours. He can transfer up to 66 Mbytes and this account is valid for 63 days. He’s being charged 5 dollars for this plan. ¾ Plan 3 (charged by Time): Each Plan 3 client has to make their first login within 3 days and 15 hours. He can access the internet for 12 hour and 40 minutes and this account is valid for 8 days. He’s being charged 3 dollars for this plan. 159 HS1100 Wireless Hotspot Gateway User Manual 2. Payment Configuration: Select “Secure Pay” for your external payment gateway. Enter Merchant ID and Password. And Payment Gateway URL is one fixed URL: https://www.securepay.com.au/xmlapi/payment. Finally, enable whichever plan(s) you’d like to apply to “SecurePay”. 160 HS1100 Wireless Hotspot Gateway User Manual How does your client purchase a plan? 1. Open a browser, it then shows a login page. And click “Click here to purchase by Credit Card online” to get started. 2. Select “I agree” and click “Next”. 161 HS1100 Wireless Hotspot Gateway User Manual 3. Select a billing plan to purchase; enter your credit card information and “Submit”. 4. Double confirm your credit card information. 5. Double confirm with your purchase. And wait for a couple minutes till you get your receipt. 162 HS1100 Wireless Hotspot Gateway User Manual 6. Account has been successfully generated! Click “Login”. And it’s recommended not to close this page at all times in case you might re-login. 7. The login successful box appears. Click “Start Browsing” to get online. 163 HS1100 Wireless Hotspot Gateway User Manual 8. User is now redirected to YOUR homepage that URL you fill in the blank “System Configuration >> Homepage”. 164 HS1100 Wireless Hotspot Gateway User Manual How does your client renew his service after running out of quota? New username and password are needed to renew service. Client can either purchase a new account online (shown in the last section) or at the counter desk. The following example is to enter Web UI, manually generate an account and have your client renewed himself the service. 1. Go to On-demand Users List, the account being generated online (please see the last section) is shown. 2. Create an on-demand user. 165 HS1100 Wireless Hotspot Gateway User Manual 3. Choose a billing plan for this user and click “Create”. 4. Give your client the print-out of this receipt with new account information. 5. Have your client go back to the “Login successful page” and click “Redeem”. And enter new User Name and Password. 166 HS1100 Wireless Hotspot Gateway User Manual 6. Redeem is successful and you can see more quota for internet access. 167 HS1100 Wireless Hotspot Gateway User Manual How does Merchant check billing transactions? 1. Go to SecurePay Merchant Login Page at https://www.securepay.com.au/merchant/ and enter Merchant ID, Login User Name and Password. 2. Click “Search Transactions” and “Today” to check today’s transactions. 168 HS1100 Wireless Hotspot Gateway User Manual 3. Today’s transaction is shown in table. 169 HS1100 Wireless Hotspot Gateway User Manual Appendix E. RADIUS Accounting How to create a user and add it into a group in Active Directory Step 1. Open “Active Directory” Step 2. Go to container “Users” Step 3. Create a new user in this container. Step 4. Enter the first name of this user. Step 5. Enter User logon name which is the login name you will use in your RADIUS server. Step 6. Click “Next” to continue. Step 7. Enter your RADIUS password Step 8. Re-enter your RADIUS password Step 9. Check “Password never expires” so that this password lasts. Step 10. Click Next to continue. 170 HS1100 Wireless Hotspot Gateway User Manual Step 11. Click finish to get done with account creation. Step 12. It shows “user_group3” just created in the container “User”. Step 13. Now let’s make this user “user_group3” a member of “group03”. Right click “user_group3” and scroll down to Properties. 171 HS1100 Wireless Hotspot Gateway User Manual Step 14. Select Dial-in Step 15. Select “Allow access” Step 16. Click OK 172 HS1100 Wireless Hotspot Gateway User Manual Step 17. Select “Member Of” Step 18. Click “Add” Step 19. Click “OK” to select Groups. Step 20. Enter the object names “group03” Step 21. Click “OK” Step 22. Now this user is in “group3” under folder “2k3lab.idv.tw/Users”. Step 23. Click “OK” 173 HS1100 Wireless Hotspot Gateway User Manual RADIUS accounting with VSA VSA stands for Vendor Specific Attributes. This VSA is a “value in bytes” sent by RADIUS server to gateway along with an Access-Accept packet. In other words, when your external RADIUS server accepts HS1100’s request, RADIUS not only replies with an “access-accept” but it also carries a maximum value in bytes that each client is allowed to transfer. This value is the maximum allowable summation of each client’s download plus upload traffic in bytes. Access-Accept packet and VSA are sent back to gateway in one session. The bellowing shows the summary of this VSA format: (The fields are transmitted from left to right.) Vendor Specific Attribute Vendor Code Number Vendor Assigned Attribute Value (the Max allowable Attribute Number download and upload transfer for each client in bytes) By RADIUS Standard By vendor By vendor By local administrator 26 21920 10 0x100000 This section will guide you through a VSA configuration in your external RADIUS server. Before get started, go to or remotely connect to your external RADIUS server’s desktop. Step 1 to 4: Run “Internet Authentication Server”, open “Remote Access Policies” and select a policy. Right click and scroll down to its properties page. 174 HS1100 Wireless Hotspot Gateway User Manual Step 5 to 9: Steps 5 to 9 guides you through adding a “Vendor-Specific” attribute into properties of this selected policy. Step 9 to 18: Step 9 to 18 guides you to add “Vendor Code = 21920”, “Vendor-assigned attribute number = 10”, and “Attribute Value = 100000 in Hexadecimal” into properties of this policy. Step 9 to 18: Step 19 to 21 shows that your Attribute Value has been added. 175 HS1100 Wireless Hotspot Gateway User Manual 176 HS1100 Wireless Hotspot Gateway User Manual Appendix F. Proxy Setting 1. Proxy Setting for Hotspot HotSpot is a place such as a coffee shop, hotel, or a public area where provides Wi-Fi service for mobile and temporary users. HotSpot is usually implemented without complicated network architecture and using some proxy servers provided by Internet Service Providers. In Hotspots, users usually enable their proxy setting of the browsers such as IE and Firefox. Therefore, so we need to set some proxy configuration in the Gateway need to be set. Please follow the steps to complete the proxy configuration: 1. Login Gateway by using “admin”. 2. Click the Network Configuration from top menu and the homepage of the Network Configuration will appear. 177 3. HS1100 Wireless Hotspot Gateway User Manual Click the Proxy Server Properties from left menu and the homepage of the Proxy Server Properties will appear. 4. Add the ISP’s proxy Server IP and Port into External Proxy Server Setting. 178 5. HS1100 Wireless Hotspot Gateway User Manual Enable Built-in Proxy Server in Internal Proxy Server Setting. 6. Click Apply to save the settings. 179 HS1100 Wireless Hotspot Gateway User Manual 2. Proxy Setting for Enterprise Enterprises usually isolate their intranet and internet by using more elaborated network architecture. Many enterprises have their own proxy server which is usually at intranet or DMZ under the firewall protection. In enterprises, network managers or MIS staff may often ask their users to enable their proxy setting of the browsers such as IE and Firefox to reduce the internet access loading. Therefore some proxy configurations in the Gateway need to be set. Some enterprises will automatically redirect packets to proxy server by using core switch or Layer 7 devices. However, the clients do not need to enable the proxy settings of their browsers, and the administrator does not need to set any proxy configuration in the Gateway. 180 HS1100 Wireless Hotspot Gateway User Manual Please follow the steps to complete the proxy configuration: Gateway Setting 1. Login Gateway by using “admin”. 2. Click the Network Configuration from top menu, and the homepage of the Network Configuration will appear. 3. Click the Proxy Server Properties from left menu, and the homepage of the Proxy Server Properties will appear. 181 4. HS1100 Wireless Hotspot Gateway User Manual Add your proxy Server IP and Port into External Proxy Server Setting. 5. Disable Built-in Proxy Server in Internal Proxy Server Setting. 6. Click Apply to save the settings. If your proxy server is disabled, it will make the user authentication operation abnormal. When users open the browser, the login page will not appear because the proxy server is down. Please make sure that your proxy server is always available. 182 HS1100 Wireless Hotspot Gateway User Manual Client Setting It is necessary for clients to add default gateway IP address into proxy exception information so the user login successful page can show up normally. 1. Use command “ipconfig” to get Default Gateway IP Address. 2. Open browser to add default gateway IP address (e.g. 192.168.1.254) and logout page IP address “1.1.1.1” into proxy exception information. z For I.E 183 HS1100 Wireless Hotspot Gateway User Manual z For Firefox 184 HS1100 Wireless Hotspot Gateway User Manual Appendix G. Network Configuration & External Network Access 1. Network Configuration on PC After HS1100 is installed, the following configurations must be set up on the PC: Internet Connection Setup and TCP/IP Network Setup. y Internet Connection Setup Windows 9x/2000 1) Choose Start >> Control Panel >> Internet Options. 2) Choose the Connections tab, and then click Setup. 185 HS1100 Wireless Hotspot Gateway User Manual 3) Choose “I want to set up my Internet connection manually, or I want to connect through a local Area network (LAN)”, and then click Next. 4) Choose “I connect through a local area network (LAN)” and then click Next. 5) DO NOT choose any option in the following LAN window for Internet configuration, and just click Next. 186 HS1100 Wireless Hotspot Gateway User Manual 6) Choose “No” and then click Next. 7) Finally, click Finish to exit the Internet Connection Wizard. Now, the set up is completed. Windows XP 1) Choose Start >> Control Panel >> Internet Option. 187 HS1100 Wireless Hotspot Gateway User Manual 2) Choose the Connections tab, and then click Setup. 3) When the Welcome to the New Connection Wizard window appears, click Next. 4) Choose “Connect to the Internet” and then click Next. 188 HS1100 Wireless Hotspot Gateway User Manual 5) Choose “Set up my connection manually” and then click Next. 6) Choose “Connect using a broadband connection that is always on” and then click Next. 7) Finally, click Finish to exit the Connection Wizard. Now, the setup is completed. 189 HS1100 Wireless Hotspot Gateway User Manual y TCP/IP Network Setup If the operating system of the PC in use is Windows 95/98/ME/2000/XP, keep the default settings without any changes to directly start/restart the system. With the factory default settings, during the process of starting the system, HS1100 with DHCP function will automatically assign an appropriate IP address and related information for each PC. If the Windows operating system is not a server version, the default settings of the TCP/IP will regard the PC as a DHCP client, and this function is called “Obtain an IP address automatically”. If checking the TCP/IP setup or using the static IP in the LAN1/LAN2 or LAN3/LAN4 section is desired, please follow these steps: Check the TCP/IP Setup of Window 9x/ME 1) Choose Start >> Control Panel >> Network. 2) Click on the Configuration tab and select “TCP/IP > AMD PCNET Family Ethernet Adapter (PCI-ISA)”, and then click Properties. Now, you can choose to use DHCP or a specific IP address. 190 HS1100 Wireless Hotspot Gateway User Manual 3) Using DHCP: If you want to use DHCP, click on the IP Address tab and choose “Obtain an IP address automatically”, and then click OK. This is also the default setting of Windows. Then, reboot the PC to make sure an IP address is obtained from HS1100. 4) Using Specific IP Address: If you want to use a specific IP address, acquire the following information from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your ISP and the Gateway address of HS1100. If your PC has been set up completely, please inform the network administrator before proceeding to the following steps. 4.1) Click on the IP Address tab and choose “Specify an IP address”. Enter the IP Address, Subnet Mask and then click OK. 191 HS1100 Wireless Hotspot Gateway User Manual 4.2) Click on the Gateway tab. Enter the gateway address of HS1100 in the “New gateway” field and click Add. Then, click OK. 4.3) Click on DNS Configuration tab. If the DNS Server field is empty, select “Enable DNS” and enter DNS Server address. Click Add, and then click OK to complete the configuration. Check the TCP/IP Setup of Window 2000 1) Select Start >> Control Panel >> Network and Dial-up Connections. 192 HS1100 Wireless Hotspot Gateway User Manual 2) Right click on the Local Area Connection icon and select “Properties”. 3) Select “Internet Protocol (TCP/IP)” and then click Properties. Now, you can choose to use DHCP or a specific IP address. 4) Using DHCP: If you want to use DHCP, choose “Obtain an IP address automatically”, and then click OK. This is also the default setting of Windows. Then, reboot the PC to make sure an IP address is obtained from HS1100. 193 HS1100 Wireless Hotspot Gateway User Manual 5) Using Specific IP Address: If you want to use a specific IP address, acquire the following information from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your ISP and the Gateway address of HS1100. If your PC has been set up completely, please inform the network administrator before proceeding to the following steps. 5.1) Choose “Use the following IP address” and enter the IP address, Subnet mask. If the DNS Server field is empty, select “Using the following DNS server addresses” and enter the DNS Server address. Then, click OK. 5.2) Click Advanced to enter the Advanced TCP/IP Settings window. 5.3) Click on the IP Settings tab and click Add below the “Default gateways” column and the TCP/IP Gateway Address window will appear. 5.4) Enter the gateway address of HS1100 in the “Gateway” field, and then click Add. After back to the IP Settings tab, click OK to complete the configuration. 194 HS1100 Wireless Hotspot Gateway User Manual Check the TCP/IP Setup of Window XP 1) Select Start >> Control Panel >> Network Connection. 2) Right click on the Local Area Connection icon and select “Properties”. 3) Click on the General tab and choose “Internet Protocol (TCP/IP)”, and then click Properties. Now, you can choose to use DHCP or a specific IP address. 195 HS1100 Wireless Hotspot Gateway User Manual 4) Using DHCP: If you want to use DHCP, choose “Obtain an IP address automatically” and click OK. This is also the default setting of Windows. Then, reboot the PC to make sure an IP address is obtained from HS1100. 5) Using Specific IP Address: If you want to use a specific IP address, acquire the following information from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your ISP and the Gateway address of HS1100. If your PC has been set up completely, please inform the network administrator before proceeding to the following steps. 5.1) Choose “Use the following IP address” and enter the IP address, Subnet mask. If the DNS Server field is empty, select “Using the following DNS server addresses” and enter the DNS Server address. Then, click OK. 5.2) Click Advanced to enter the Advanced TCP/IP Settings window. 196 HS1100 Wireless Hotspot Gateway User Manual 5.3) Click on the IP Settings tab and click Add below the “Default gateways” column and the TCP/IP Gateway Address window will appear. 5.4) Enter the gateway address of HS1100 in the “Gateway” field, and then click Add. After back to the IP Settings tab, click OK to finish the configuration. 197 HS1100 Wireless Hotspot Gateway User Manual 2. External Network Access / User Login If all the steps are set properly, HS1100 can be further connected to the managed network. Before connecting a client device (e.g. laptop, PC) to HS1100’s Public LAN (LAN1/LAN2 by default), if eliminating the need for client IP configuration is desired, the administrator can enable the “IP PnP” function to support both static and dynamic IP. Otherwise, the client device must be set to use DHCP in TCP/IP to obtain an IP address automatically. 1. Open an Internet browser on a client device and the default User Login Page will be displayed. 2. Enter a username and password previously created in the Local User account database (e.g. “test@postfix1” for Username and “test” for Password). Check the Remember Me box to store the username and password on the current computer in order to automatically login to the system at next login. Then, click the Submit button. 3. The Login Successful page appearing means HS1100 has been installed and configured successfully. Now, you are connected to the network and Internet! 4. The Remaining button on the User Login Page is for on-demand users only, where they can check their Remaining Usage time. The notice shown as below will appear when non-on-demand users click the Remain 198 HS1100 Wireless Hotspot Gateway User Manual button. 5. An on-demand user can enter the username and password in the User Login Page and then click the Remaining button to check the Remaining Usage time. 6. When an on-demand user logs in successfully, the Login Successful page shown as below will appear. The Login Successful page contains Remaining Usage time and a Redeem button. 199 y HS1100 Wireless Hotspot Gateway User Manual Remaining usage: Show the remaining time that the on-demand user can surf Internet. y Redeem: When the remaining time or data size is insufficient, the user has to pay for adding credit at the counter, and then, the user will get a new username and password. After clicking the Redeem button, a login screen will appear. Please enter the new username and password obtained and click Redeem button. The total available use time and data size after adding credit will show up. The system will automatically reject the redeem process when the redeem amount exceeds the maximum time/data volume provided by HS1100. 200 HS1100 Wireless Hotspot Gateway User Manual Appendix H. Session Limit and Session Log Session Limit To prevent ill-behaved clients or malicious software from using up the system’s connection resources, the administrator can restrict the number of concurrent sessions that a user can establish. ¾ The maximum number of concurrent sessions (TCP and UDP) for each user can be specified in the Global policy, which applies to authenticated users, users on a non-authenticated port, privileged users, and clients in DMZ zones. ¾ When the number of a user’s sessions reaches the session limit (a choice of Unlimited, 10, 25, 50, 100, 200, 350 and 500), the user will be implicitly suspended upon receipt of any new connection request. In this case, a record will be logged to a Syslog server. ¾ Since this basic protection mechanism may not be able to protect the system from all malicious DoS attacks, it is strongly recommended to build some immune capabilities (such as IDS or IPS solutions) in network deployment to maintain network operation. Session Log The system can record connection details of each user accessing the Internet. In addition, the log data can be sent out to a specified Syslog Server, Email Box or FTP Server based on pre-defined interval time. ¾ The description of the fields of a session log record is shown as below: Field Date and Time Session Type Username Description The date and time that the session is established [New]: This is a newly established session. [Blocked]: This session is blocked by a Firewall rule. The account name (with postfix) of the user. When it shows “N.A.”, it indicates that the user or device does not need to log in with a username, for example, the user or device is on a non-authenticated port or on the privileged MAC/IP list. Change the account name accordingly, if the name is not identifiable in the record. Note: Only 31 characters are allowed for the combination of Session Type plus Username. Protocol MAC SIP SPort DIP DPort The communication protocol of session: TCP or UDP The MAC address of the user’s computer or device The source IP address of the user’s computer or device The source port number of the user’s computer or device The destination IP address of the user’s computer or device The destination port number of the user’s computer or device 201 HS1100 Wireless Hotspot Gateway User Manual ¾ An example of session log data is shown as below: 31 Aug 12:35:05 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1626 DIP=203.125.164.132 DPort=80 31 Aug 12:35:05 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1627 DIP=203.125.164.132 DPort=80 31 Aug 12:35:06 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1628 DIP=203.125.164.142 DPort=80 31 Aug 12:35:06 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1629 DIP=203.125.164.142 DPort=80 31 Aug 12:35:07 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1630 DIP=67.18.163.154 DPort=80 31 Aug 12:35:09 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1631 DIP=202.43.195.52 DPort=80 31 Aug 12:35:10 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1632 DIP=203.84.196.242 DPort=80 202 HS1100 Wireless Hotspot Gateway User Manual Appendix I: NetComm AG400 Thermal Ticket Printer Quick Start Guide AG400 is a plug and play thermal ticket printer that connects to the NetComm HS1100 wireless hotspot gateway or IAC3000 internet access controller to print out ticket for on-demand user accounts. All billing profile configurations and settings are made in the HS1100 or IAC3000; no configurations are required to be made in the AG400. For detail explanation on how to configure billing profiles, please refer to the HS1100 or IAC3000 product user manual. 1. Package Contents The standard package of the AG400 Thermal Ticket Printer includes: ¾ AG400 Ticket Printer with paper x 1 ¾ Power cable kit x 1 (AC Input: 100~240V / DC Output: 9~12V, 3A power adaptor) ¾ Thermal paper roll x 1 ¾ RJ11 Cable x 1 203 HS1100 Wireless Hotspot Gateway User Manual 2. Product Overview 204 HS1100 Wireless Hotspot Gateway User Manual Please note: DB25 and RJ11 connectors basically have the same function; they are used to connect to different model. The ‘DB25 Connector’ is not used in HS1100 or IAC3000 system. No connection is needed to this DB25 connector. 205 HS1100 Wireless Hotspot Gateway User Manual 3. Installation 206 HS1100 Wireless Hotspot Gateway User Manual 207 HS1100 Wireless Hotspot Gateway User Manual AG400 Thermal Ticket Printer quick installation completed 208 HS1100 Wireless Hotspot Gateway User Manual Appendix J: Legal & Regulatory Information This manual is copyright. Apart from any fair dealing for the purposes of private study, research, criticism or review, as permitted under the Copyright Act, no part may be reproduced, stored in a retrieval system or transmitted in any form, by any means, be it electronic, mechanical, recording or otherwise, without the prior written permission of NetComm Limited. NetComm Limited accepts no liability or responsibility, for consequences arising from the use of this product. NetComm Limited reserves the right to change the specifications and operating details of this product without notice. NetComm is a registered trademark of NetComm Limited. All other trademarks are acknowledged the property of their respective owners. Customer Information ACA (Australian Communications Authority) requires you to be aware of the following information and warnings: (1) This unit shall be connected to the Telecommunication Network through a line cord which meets the requirements of the ACA TS008 Standard. (2) This equipment has been tested and found to comply with the Standards for C-Tick and or A-Tick as set by the ACA . These standards are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio noise and, if not installed and used in accordance with the instructions detailed within this manual, may cause interference to radio communications. However, there is no guarantee that interference will not occur with the installation of this product in your home or office. If this equipment does cause some degree of interference to radio or television reception, which can be determined by turning the equipment off and on, we encourage the user to try to correct the interference by one or more of the following measures: • Change the direction or relocate the receiving antenna. • Increase the separation between this equipment and the receiver. • Connect the equipment to an alternate power outlet on a different power circuit from that to which the receiver/TV is connected. • Consult an experienced radio/TV technician for help. (3) The power supply that is provided with this unit is only intended for use with this product. Do not use this power supply with any other product or do not use any other power supply that is not approved for use with this product by NetComm. Failure to do so may cause damage to this product, fire or result in personal injury. GNU General Public License This product includes software code that is subject to the GNU General Public License (“GPL”) or GNU Lesser General Public License (“LGPL”). This code is subject to the copyrights of one or more authors and is distributed without any warranty. A copy of this software can be obtained by contacting NetComm Limited on +61 2 9424 2059. Product Warranty The warranty is granted on the following conditions: 1. This warranty extends to the original purchaser (you) and is not transferable; 209 HS1100 Wireless Hotspot Gateway User Manual 2. This warranty shall not apply to software programs, batteries, power supplies, cables or other accessories supplied in or with the product; 3. The customer complies with all of the terms of any relevant agreement with NetComm and any other reasonable requirements of NetComm including producing such evidence of purchase as NetComm may require; 4. The cost of transporting product to and from NetComm’s nominated premises is your responsibility; and, 5. NetComm does not have any liability or responsibility under this warranty where any cost, loss, injury or damage of any kind, whether direct, indirect, consequential, incidental or otherwise arises out of events beyond NetComm’s reasonable control. This includes but is not limited to: acts of God, war, riot, embargoes, acts of civil or military authorities, fire, floods, electricity outages, lightning, power surges, or shortages of materials or labour. 6. The customer is responsible for the security of their computer and network at all times. Security features may be disabled within the factory default settings. NetComm recommends that you enable these features to enhance your security. The warranty is automatically voided if: 1. You, or someone else, use the product, or attempts to use it, other than as specified by NetComm; 2. The fault or defect in your product is the result of a voltage surge subjected to the product either by the way of power supply or communication line, whether caused by thunderstorm activity or any other cause(s); 3. The fault is the result of accidental damage or damage in transit, including but not limited to liquid spillage; 4. Your product has been used for any purposes other than that for which it is sold, or in any way other than in strict accordance with the user manual supplied; 5. Your product has been repaired or modified or attempted to be repaired or modified, other than by a qualified person at a service centre authorised by NetComm; and, 6. The serial number has been defaced or altered in any way or if the serial number plate has been removed. Limitations of Warranty The Trade Practices Act 1974 and corresponding State and Territory Fair Trading Acts or legalisation of another Government (“the relevant acts”) in certain circumstances imply mandatory conditions and warranties which cannot be excluded. This warranty is in addition to and not in replacement for such conditions and warranties. To the extent permitted by the Relevant Acts, in relation to your product and any other materials provided with the product (“the Goods”) the liability of NetComm under the Relevant Acts is limited at the option of NetComm to: • Replacement of the Goods; or • Repair of the Goods; or • Payment of the cost of replacing the Goods; or • Payment of the cost of having the Goods repaired. All NetComm ACN 002 490 486 products have a standard 12 months warranty from date of purchase. However some products have an extended warranty option (refer to packaging). To be eligible for the extended warranty you must supply the requested warranty information to NetComm within 30 days of the original purchase by registering on-line via the NetComm web site at www.netcomm.com.au 210 Product Warranty NetComm products have a standard 12 months warranty from date of purchase. However some products have an extended warranty option, via registering your product online at the NetComm website www.netcomm.com.au. Technical Support If you have any technical difficulties with your product, please refer to the support section of our website. www.netcomm.com.au/support Note: NetComm Technical Support for this product only covers the basic installation and features outlined in the Quick Start Guide. For further information regarding the advanced features of this product, please refer to the configuring sections in the User Guide or contact a Network Specialist. www.dynalink.co.nz NETCOMM LIMITED PO Box 1200, Lane Cove NSW 2066 Australia P: 02 9424 2070 F: 02 9424 2010 E: sales@netcomm.com.au W: www.netcomm.com.au DYNALINK NZ 224b Bush Road, Albany, Auckland, New Zealand P: 09 448 5548 F: 09 448 5549 E: sales@dynalink.co.nz W: www.dynalink.co.nz Trademarks and registered trademarks are the property of NetComm Limited or their respective owners. Specifications are subject to change without notice. Images shown may vary slightly from the actual product.
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.6 Linearized : Yes Tagged PDF : No XMP Toolkit : 3.1-702 Modify Date : 2008:12:19 12:22:25+11:00 Create Date : 2008:12:19 12:22:25+11:00 Metadata Date : 2008:12:19 12:22:25+11:00 Creator Tool : Adobe InDesign CS2 (4.0.5) Format : application/pdf Document ID : uuid:1795eafe-98b4-4cae-98a5-b6bbc1d48f6d Instance ID : uuid:3ea42b71-43b6-4485-9522-b7e570c5d4ba Producer : Adobe PDF Library 7.0 Page Count : 212 Creator : Adobe InDesign CS2 (4.0.5)EXIF Metadata provided by EXIF.tools