Netcomm Hs1100 Users Manual

HS1100 to the manual d625cbb5-4088-41f0-ae59-7b5d1a2f3dff

2015-02-02

: Netcomm Netcomm-Hs1100-Users-Manual-439024 netcomm-hs1100-users-manual-439024 netcomm pdf

Open the PDF directly: View PDF PDF.
Page Count: 212 [warning: Documents this large are best viewed by clicking the View PDF Link!]

User Guide
(AG400-Optional extra)
Wireless Hotspot
HS1100 Wireless Hotspot Gateway User Manual
i
Table of Contents
1.Before You Start.............................................................................................................................3
Preface .................................................................................................................................................................3
Document Conventions........................................................................................................................................3
2.System Overview...........................................................................................................................4
Introduction of HS1100 .......................................................................................................................................4
System Concept ...................................................................................................................................................4
3.Installation ......................................................................................................................................5
Hardware Installation...........................................................................................................................................5
System Requirements..................................................................................................................................................5
Package Contents ........................................................................................................................................................5
Panel Function Descriptions........................................................................................................................................6
Installation Steps .........................................................................................................................................................7
Quick Software Configuration.............................................................................................................................8
4.Web Interface Configuration.................................................................................................17
System Configuration ........................................................................................................................................19
Configuration Wizard................................................................................................................................................20
System Information...................................................................................................................................................21
WAN Configuration ..................................................................................................................................................25
LAN1 & LAN2 Configuration..................................................................................................................................27
LAN3 & LAN4 Configuration..................................................................................................................................31
Wireless Configuration..............................................................................................................................................34
User Authentication ...........................................................................................................................................41
Authentication Configuration....................................................................................................................................42
Black List Configuration...........................................................................................................................................78
Policy Configuration .................................................................................................................................................80
Guest User Configuration..........................................................................................................................................83
Additional Configuration ..........................................................................................................................................84
Network Configuration....................................................................................................................................106
Network Address Translation ..................................................................................................................................107
Privilege List...........................................................................................................................................................109
Monitor IP List........................................................................................................................................................110
Walled Garden List..................................................................................................................................................112
Walled Garden Ad List............................................................................................................................................113
Proxy Server Properties...........................................................................................................................................115
Dynamic DNS.........................................................................................................................................................116
HS1100 Wireless Hotspot Gateway User Manual
ii
Utilities.............................................................................................................................................................117
Network Utilities.....................................................................................................................................................118
Change Password ....................................................................................................................................................119
Backup/Restore Settings .........................................................................................................................................120
Firmware Upgrade ..................................................................................................................................................121
Restart .....................................................................................................................................................................122
Status................................................................................................................................................................123
System Status ..........................................................................................................................................................124
Interface Status........................................................................................................................................................126
Current Users ..........................................................................................................................................................128
Traffic History.........................................................................................................................................................129
Notify Configuration...............................................................................................................................................132
Session Log.............................................................................................................................................................134
Help..................................................................................................................................................................136
Appendix A. Console Interface .................................................................................................137
Appendix B. Accepting Payment via Authorize.Net........................................................140
Appendix C. Accepting Payment via PayPal......................................................................149
Appendix D. Accepting Payment via SecurePay ..............................................................159
Appendix E. RADIUS Accounting............................................................................................170
Appendix F. Proxy Setting..........................................................................................................177
1.Proxy Setting for Hotspot.................................................................................................................177
2.Proxy Setting for Enterprise............................................................................................................180
Appendix G. Network Configuration & External Network Access............................185
1.Network Configuration on PC .........................................................................................................185
2.External Network Access / User Login.........................................................................................198
Appendix H. Session Limit and Session Log.......................................................................201
Appendix I: NetComm AG400 Thermal Ticket Printer Quick Start Guide...............203
1. Package Contents.........................................................................................................................................203
2. Product Overview ........................................................................................................................................204
3. Installation ...................................................................................................................................................206
Appendix J: Legal & Regulatory Information...................................................................203
HS1100 Wireless Hotspot Gateway User Manual
3
1. Before You Start
Preface
This manual is for Hotspot owners or network administrators to set up a network environment using the HS1100
system. It contains step-by-step procedures and graphic examples to guide MIS staff or individuals with slight
network system knowledge to complete the installation. It also contains a Quick Start Guide for the NetComm
AG400 Thermal Ticket Printer.
Document Conventions
Represents essential steps, actions, or messages that should not be ignored.
Note: Contains related information that corresponds to a topic.
Indicates that clicking this button will return to the homepage of this section.
Indicates that clicking this button will return to the previous page.
Indicates that clicking this button will apply all of your settings.
Indicates that clicking this button will clear what you have set before these settings are applied.
HS1100 Wireless Hotspot Gateway User Manual
4
2. System Overview
Introduction of HS1100
HS1100 is an all-in-one product specially designed for small wireless/wired network environments. It integrates
“secure access control”, “visitor account provisioning”, and “high-speed secure wireless connection” into
one system to fulfill the needs in Hotspot locations. HS1100 supports 802.11b and 802.11g dual wireless
transmission modes, and at the same time, incorporates convenience, efficiency, and friendliness for network
services.
System Concept
HS1100 is specially designed for user authentication, authorization and accounting management. The user account
information is stored in the local database or a specified external databases server. The user authentication is
processed via the SSL encrypted web interface. This interface is compatible to most desktop devices and palm
computers. HS1100 manages network services for both wired and wireless network users.
The users located at the managed network will be unable to access network resources without permission. When a
user attempts to connect to the Internet by opening a web browser on his computer, HS1100 will redirect the
browser to the user login webpage of HS1100. The user must enter a username and password for authentication.
After the identity is authenticated successfully, the user will gain proper access right defined on HS1100.
HS1100 Wireless Hotspot Gateway User Manual
5
3. Installation
Hardware Installation
System Requirements
y Standard 10/100BaseT including five network cables with RJ-45 connectors
y All PCs need to install the TCP/IP network protocol
Package Contents
The standard package of HS1100 includes:
y HS1100 x 1
y CD-ROM x 1
y Power Adaptor (DC 12V) x 1
y Ethernet Cable x 1
y Console Cable x 1
y 2dbi Omni-antenna x 2
It is highly recommended to use all the supplies in the package instead of substituting any components by
other suppliers to guarantee best performance.
HS1100 Wireless Hotspot Gateway User Manual
6
Panel Function Descriptions
Front Panel
Rear Panel
y DC IN: The power adaptor plugs here.
y RESET: Press this button to restart/reboot the system (NOT reset back to factory default).
y WAN: The WAN port is used to connect to a network which is not managed by HS1100, and this port can be
used to connect an xDSL/cable modem, or a switch/hub on a LAN of a company/organization.
y LAN1/LAN2: These two default authentication-demanding Public LAN ports are connected to the managed
network or WLAN. They may be configured as authentication-demanding Public LAN or authentication-free
Private LAN ports.
y LAN3/LAN4: These two default authentication-free Private LAN ports are connected to a trustful network, where
the users can always access network resources without authentication. These ports may be connected to an
external server such as a File Server or Database Server.
y Console: The system can be configured via HyperTerminal. For example, if you need to set the Administrators
Password, you can connect a PC to this port as a Console Serial Port via a terminal connection program (such
as the super terminal with the parameters of 9600, 8, N, 1, None flow control) to change the Administrators
Password.
HS1100 Wireless Hotspot Gateway User Manual
7
Installation Steps
Please follow the steps below to install HS1100:
1. Connect the power adapter to the power socket on the rear panel. If the power supply and connection are
normal, the Power LED will light up.
2. Connect an Ethernet cable to the WAN Port on the rear panel. Connect the other end of the Ethernet cable to
an xDSL/cable modem, or a switch/hub on the LAN of a company/organization. The LED of this port should be
on to indicate a proper connection.
3. Connect an Ethernet cable to the LAN1/LAN2 Port on the rear panel. Per your needs, connect the other end of
the Ethernet cable to an AP for extending wireless coverage, a switch for connecting more wired clients, or a PC.
The LED of LAN1/LAN2 should be on to indicate a proper connection.
Authentication is required for the clients to access the network via LAN1/LAN2 Port. The LAN port
with authentication function is referred to as Public LAN.
4. Connect an Ethernet cable to the LAN3/LAN4 Port on the rear panel. Connect the other end of the Ethernet
cable to a PC for configuring the HS1100 system. The LED of LAN3/LAN4 should be on to indicate a proper
connection.
Authentication is NOT required for the clients to access the network via the LAN3/LAN4 Port. The
LAN port WITHOUT authentication function is referred to as Private LAN.
Note: HS1100 supports Auto Sensing MDI/MDIX. You may use either a straight-through or a cross-over
Ethernet cable to connect the Ethernet port.
After the hardware of HS1100 properly installed, follow the steps below to set up the HS1100 system.
HS1100 Wireless Hotspot Gateway User Manual
8
Quick Software Configuration
There are two ways to configure the HS1100 system: using the online Configuration Wizard or changing the
settings by commands manually. The Configuration Wizard comprises of seven basic steps as follows. Follow the
instructions of Configuration Wizard to enter the required information step by step, save your settings, and restart
HS1100. The seven steps of Configuration Wizard are listed below:
Step 1. Change Admin’s Password
Step 2. Choose System’s Time Zone
Step 3. Set System Information
Step 4. Select the Connection Type for WAN Port
Step 5. Set Authentication Methods
Step 6. Set Wireless – Access Point Connection
Step 7. Save and Restart HS1100
Please follow the following steps to complete the quick configuration:
1. Use the network cable of the 10/100BaseT to connect a PC to the LAN3/LAN4 port, and then start a browser
(such as Microsoft IE). Next, enter the gateway address for that port, the default is http://192.168.111.1. In the
opened webpage, a login screen will appear. Enter “admin”, the default username, and “admin”, the default
password, in the User Name and Password fields. Click Enter to log in.
If you cannot get the login screen, your PC may have been set in DHCP to obtain an IP address
automatically from another existing authentication LAN port, or the IP address used does not have the
same subnet as the default URL of HS1100. Please use default IP address such as 192.168.111.xxx (xxx:
2~254) in your network and then try it again.
You can log in as admin, manager or operator. The default usernames and passwords show as follows:
HS1100 Wireless Hotspot Gateway User Manual
9
Admin: The administrator can access all configuration pages of HS1100.
User Name: admin
Password: admin
Manager: The manager can only access the configuration pages under User Authentication to manage the user
accounts, but without the permission to change the settings of the profiles of Firewall, Specific Route and Schedule.
User Name: manager
Password: manager
Operator: The operator can only access the configuration page of Create On-demand User to create new
on-demand user accounts and print out the on-demand user account receipts.
User Name: operator
Password: operator
2. After successfully logging into HS1100, a web management interface with a welcome message will appear.
There is a Logout button on the upper right corner to log out the system when finished.
3. To quickly configure HS1100 by using the Configuration Wizard, click System Configuration to go to the
System Configuration homepage.
HS1100 Wireless Hotspot Gateway User Manual
10
4. Then, select Configuration Wizard and click the Run Wizard button to start the wizard.
HS1100 Wireless Hotspot Gateway User Manual
11
5. Configuration Wizard
A welcome screen that briefly introduces the 7 steps
will appear. Click Next to begin.
HS1100 Wireless Hotspot Gateway User Manual
12
y Step 1. Change Admin’s Password
Enter a new password for the admin account and retype it in
the verify password field (maximum number of characters up
to 20 and no spaces allowed).
Click Next to continue.
y Step 2. Choose System’s Time Zone
Select a proper time zone from the drop-down list box.
Click Next to continue.
y Step 3. Set System Information
¾ Home Page: Enter the URL to where the users
should be directed when they are successfully
authenticated.
¾ NTP Server: Enter the URL of the external time
server for HS1100 time synchronization or use the
default setting.
Click Next to continue.
HS1100 Wireless Hotspot Gateway User Manual
13
y Step 4. Select the Connection Type for WAN Port
Three are three types of WAN port to select from:
Static IP Address, Dynamic IP Address and
PPPoE Client.
Select a proper Internet connection type and click
Next to continue.
¾ Dynamic IP Address
If this option is selected, an appropriate IP
address and related information will
automatically be assigned.
Click Next to continue.
¾ Static IP Address: Set WAN Port’s Static IP
Address
Enter the “IP Address”, “Subnet Mask”, “Default
Gateway” and “DNS Server” provided by your
Internet Service Provider.
Click Next to continue.
¾ PPPoE Client: Set PPPoE Client’s Information
Enter the “Username” and “Password” provided
by your ISP.
Click Next to continue.
HS1100 Wireless Hotspot Gateway User Manual
14
y Step 5. Set Authentication Methods
¾ Set the users information in advance. Enter an
easily identified name as the postfix name in
the “Postfix” field (e.g. test@Postfix1), select
a “Policy” (or use the default value), and
choose one authentication method from the 5
options appearing in this window.
Click Next to continue.
¾ Local User: Add User
A new user can be added to the local user data
base. To add a user here, enter the “Username”
(e.g. test), “Password” (e.g. test), “MAC”
(optional) and assign it a policy (or use the default).
Upon completing adding a user, more users can be
added to this authentication method by clicking the
ADD button.
Click Next to continue.
¾ POP3 User: POP3
Enter POP3 Servers “Domain Name/IP” and
“Server Port”, and then choose “Enable SSL” or
not.
Click Next to continue.
HS1100 Wireless Hotspot Gateway User Manual
15
¾ RADIUS User: RADIUS
Enter RADIUS Server’s “Domain Name/IP”,
“Accounting Port” and “Secret Key”. Then
choose to enable or disable “Accounting
Service”, and select the desired
“Authentication Method”.
Click Next to continue.
¾ LDAP User: LDAP
Add a new user to the LDAP user data base if
desired. Enter the LDAP Servers “Domain
Name/IP”, “Server Port”, and “Base DN”.
Click Next to continue.
¾ NT Domain User: NT Domain
When NT Domain User is selected, enter the
information for “Server IP Address”, and
choose to enable/disable “Transparent Login”.
If “Transparent Login” is enabled, users are
logged in HS1100’s NT Domain active directory
and authenticated automatically when they log
into their Windows OS domain.
Click Next to continue.
HS1100 Wireless Hotspot Gateway User Manual
16
y Step 6. Set Wireless – Access Point Connection
¾ Band: HS1100 supports two transmission modes,
Disabled, 802.11b, 802.11g and 802.11 (b+g).
Select the appropriate transmission mode to work
with the wireless clients in the network.
¾ Channel: If the default channel has been used by
many other access points, it is necessary to
select another channel from the drop-down list
box for a better performance.
¾ ESSID: Enter a SSID (up to 32 characters) for
the system. The default is HS1100. ESSID is a
unique identifier used for the wireless users’
devices to associate with HS1100.
Click Next to continue.
Note: Available channels depend upon the region you are located. For instance, Channel 1~11
is available in North America, and Channel 1-13 in Europe.
y Step 7. Save and Restart HS1100
Click Restart to save current settings and restart
HS1100. The Setup Wizard is now completed.
y Setup Wizard. During HS1100 restart, a “Restarting now.
Please wait for a while.” message will appear on the
screen. Please do not interrupt HS1100 restarting process
until the message has disappeared. This indicates
that the entire restart process has been completed
successfully.
HS1100 Wireless Hotspot Gateway User Manual
17
During every step of the wizard, if you wish to go back to modify the settings, please click the Back button
to go back to the previous step.
4. Web Interface Configuration
This chapter will guide you through further detailed settings. The following table shows all the functions of HS1100.
OPTION System
Configuration
User
Authentication
Network
Configuration Utilities Status
Configuration
Wizard
Authentication
Configuration
Network Address
Translation Network Utilities System Status
System
Information
Black List
Configuration Privilege List Change
Password Interface Status
WAN
Configuration
Policy
Configuration Monitor IP List Backup/Restore
Settings Current Users
LAN1 & LAN2
Configuration
Guest User
Configuration
Walled Garden
List
Firmware
Upgrade Traffic History
FUNCTION
LAN3 & LAN4
Configuration
Additional
Configuration
Walled Garden
AD List Restart Notify
Configuration
HS1100 Wireless Hotspot Gateway User Manual
18
Wireless
Configuration
Proxy Server
Properties
Dynamic DNS
After finishing the configuration of the settings, please click Apply and pay attention to see if a RESTART
message appears on the screen. If such message appears, the system must be restarted to allow the new
settings to take effect. All on-line users will be disconnected during restart.
HS1100 Wireless Hotspot Gateway User Manual
19
System Configuration
This section includes the following functions: Configuration Wizard, System Information, WAN Configuration,
LAN1 & LAN2 Configuration, LAN3 & LAN4 Configuration and Wireless Configuration.
HS1100 Wireless Hotspot Gateway User Manual
20
Configuration Wizard
There are two ways to configure the HS1100 system: using the online Configuration Wizard or changing the
settings by commands manually. The Configuration Wizard comprises of seven basic steps, providing a simple
and easy way to go through the basic setups of HS1100 and is served as Quick Configuration.
HS1100 Wireless Hotspot Gateway User Manual
21
System Information
Main information about HS1100 is shown as follows:
y System Name: Set the system’s name or use the default.
y Administrator Info: Enter the administrator’s information here, such as the administrators name, telephone
HS1100 Wireless Hotspot Gateway User Manual
22
number, e-mail address, etc. If a user encounters problems while connecting to HS1100’s WAN and can’t get
online, this information will appear on the users login screen.
y Home Page: Enter the URL of a Web server as the homepage. Once logged in successfully, the users will be
directed to this homepage, such as http://www.netcomm.com.au, regardless of the original homepage set in
their computers.
¾ Homepage Redirect is the system’s special feature that would redirect client to your configured
homepage right after the successful login. Your homepage appears after a successful login no matter
what their browsers homepages are.
y Access History IP: Specify an IP address of the administrator’s computer or a billing system to get billing
history information of HS1100. An example is provided as follows (“10.2.3.213” is the WAN IP of HS1100).
Traffic Historyhttps://10.2.3.213/status/history/2005-02-17
On-demand Historyhttps://10.2.3.213/status/ondemand_history/2005-02-17
HS1100 Wireless Hotspot Gateway User Manual
23
HS1100 Wireless Hotspot Gateway User Manual
24
y Remote Manage IP: Set the IP range where the web management interface of HS1100 can be connected via
the authenticated port (WAN or Public LAN). For example, 10.2.3.0/24 means that as long as you are within the
IP range of 10.2.3.0/24, you can reach the management interface.
y SNMP: HS1100 supports SNMPv2. If this function is enabled, the administrator can assign the Manager IP
address and the SNMP community name used to access the Management Information Base (MIB) of the
system.
y User logon SSL: Enable to activate https (encryption) or disable to activate http (non encryption) login page.
y Time: HS1100 supports NTP (Network Time Protocol) communication protocol to synchronize the network time.
Please specify the IP address of a NTP server to adjust the time automatically (Universal Time is Greenwich
Mean Time, GMT). The time can also be set manually by selecting “Set Device Date and Time” and then
entering the date and time in these fields.
HS1100 Wireless Hotspot Gateway User Manual
25
WAN Configuration
There are 4 methods of obtaining IP address for the WAN Port: Static IP Address, Dynamic IP Address, PPPoE
and PPTP Client.
y Static IP Address: Manually specifying the IP address of the WAN Port is applicable for the network
environment where the DHCP server is unavailable. The fields with red asterisks are required to be filled in.
IP Address: The IP address of the WAN port.
Subnet Mask: The subnet mask of the WAN port.
Default Gateway: The gateway of the WAN port.
Preferred DNS Server: The primary DNS Server of the WAN port.
Alternate DNS Server: The substitute DNS Server of the WAN port. This is not required.
y Dynamic IP Address: It is only applicable for the network environment where the DHCP server is available on
the network. Click the Renew button to get an IP address automatically.
y PPPoE Client: When selecting PPPoE to connect to the network, please set the “User Name”, “Password”,
“MTU” and “CLAMPMSS”. There is a Dial on demand function under PPPoE. If this function is enabled, a
Maximum Idle Time can be set. When the idle time is reached, the system will automatically disconnect itself.
HS1100 Wireless Hotspot Gateway User Manual
26
y PPTP Client: Select STATIC to specify the IP address of the PPTP Client manually or select DHCP to get the IP
address automatically. The fields with red asterisks are required to be filled in. There is a Dial on demand
function under PPPoE. If this function is enabled, a Maximum Idle Time can be set. When the idle time is
reached, the system will automatically disconnect itself.
HS1100 Wireless Hotspot Gateway User Manual
27
LAN1 & LAN2 Configuration
In this section, set the configuration for LAN1/LAN2 port and DHCP server. User authentication for LAN1/LAN2 port
can be enabled or disabled.
HS1100 Wireless Hotspot Gateway User Manual
28
y LAN1 & LAN2 Port
IP PNP: Choose to enable or disable this function. If “IP PnP” is enabled, no matter what the IP address of the
client device is – static or dynamic IP, users can access the network without changing the client IP address after
being authenticated by HS1100.
User Authentication: Choose to enable or disable this function. If “User Authentication” is disabled, users
can access the Internet without being authenticated.
Operation Mode: Choose one of the two modes, NAT mode and Router mode, by the requirements.
IP Address: Enter the desired IP address for the LAN1 & LAN2 port.
Subnet Mask: Enter the desired subnet mask for the LAN1 & LAN2 port.
y DHCP Server Configuration
There are three methods to set the DHCP Server: Disable DHCP Server, Enable DHCP Server and Enable
DHCP Relay.
1. Disable DHCP Server: Disable DHCP Server function.
2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for
the DHCP server. The fields with red asterisks are required to be filled in.
HS1100 Wireless Hotspot Gateway User Manual
29
HS1100 Wireless Hotspot Gateway User Manual
30
DHCP Scope: Enter the “Start IP Address” and the “End IP Address” of this DHCP block. These fields
define the IP address range that will be assigned to the Public LAN clients.
Preferred DNS Server: The primary DNS server for the DHCP.
Alternate DNS Server: The substitute DNS server for the DHCP.
Domain Name: Enter the domain name.
WINS IP Address: Enter the IP address of WINS.
Lease Time: Choose the time interval to update DHCP IP addresses automatically.
Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink
of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following
figure will appear. Enter the related “Reserved IP Address, “MAC”, and Description (not mandatory).
Click Apply to save the settings.
3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be
specified. See the following figure.
HS1100 Wireless Hotspot Gateway User Manual
31
LAN3 & LAN4 Configuration
In this section, set the configuration for LAN3/LAN4 port and DHCP server.
y LAN3 & LAN4 Port
Operation Mode: Choose one of the two modes, NAT mode and Router mode, by the requirements.
IP Address: Enter the desired IP address for the LAN3 & LAN4 port.
Subnet Mask: Enter the desired subnet mask for the LAN3 & LAN4 port.
HS1100 Wireless Hotspot Gateway User Manual
32
y DHCP Server Configuration
There are three methods to set the DHCP server: Disable DHCP Server, Enable DHCP Server and Enable
DHCP Relay.
1. Disable DHCP Server: Disable DHCP Server function.
2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for
the DHCP server. The fields with red asterisks are required to be filled in.
DHCP Scope: Enter the “Start IP Address” and the “End IP Address” of this DHCP block. These fields
define the IP address range that will be assigned to the Private LAN clients.
Preferred DNS Server: The primary DNS server for the DHCP.
Alternate DNS Server: The substitute DNS server for the DHCP.
Domain Name: Enter the domain name.
WINS IP Address: Enter the IP address of WINS.
Lease Time: Choose the time interval to update DHCP IP addresses automatically.
Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink
of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following
figure will appear. Enter the related “Reserved IP Address, “MAC”, and Description (not mandatory).
Click Apply to save the settings.
HS1100 Wireless Hotspot Gateway User Manual
33
3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be
specified. See the following figure.
HS1100 Wireless Hotspot Gateway User Manual
34
Wireless Configuration
In this section, set the configuration for the wireless port.
y Wireless Configuration
Band: There are 4 modes to select from, 802.11b (2.4G, 1~11Mbps) and 802.11 (b+g) (2.4G, 1~11Mbps and
2.4G, 54Mbps).
HS1100 Wireless Hotspot Gateway User Manual
35
Channel: Select the appropriate channel from the list to correspond to the network settings; for example,
Channel 1~11 is available in the North America area. All access points on the same wireless network must use
the same channel to ensure correct connection.
Max Transmit Rate: The default value is Auto. The range is from 1 to 54Mbps. The rate of data transmission
should be set depending on the speed of this particular wireless network.
ESSID: The SSID is a unique name shared among all devices in a wireless network. The SSID must be the
same for all devices in the wireless network. The SSID must not exceed 32 characters and may be any
character on the keyboard. The administrator can give a new name in this field or use the default name.
¾ Security: Configure wireless encryption methods. For security settings in detail, please click the
hyperlink of Security to go into the Security page. Choose Security to configure the settings.
WEP Type
802.1X Type
HS1100 Wireless Hotspot Gateway User Manual
36
WPA-PSK Type
WPA-RADIUS Type
1. Security Type: There are disabled and 4 other security types to choose from, WEP (Wired
Equivalent Privacy), 802.1X, WPA-PSK and WPA-RADIUS.
2. Detail Settings
o 802.11 Authentication: Choose either Open System or encryption with static Shared Key.
o WEP Key Length/Format/Index: This is a data privacy mechanism based on a 64 bit or 128 bits
shared key algorithm. There are types of encryption, HEX or ASCII.
o Re-keying Period: The default is 300 seconds.
o Cipher Suite: Choose among WPA, WPA2 or Mixed.
o Pass-phrase: Type the pass phrase for administrators.
o Group Key Update Period: The default is 600 seconds. Time for updated period.
¾ Advanced: Configure wireless transmission data packet format (for advanced users only, default
recommended). Please click the hyperlink Advanced to go into the Advanced configuration page.
HS1100 Wireless Hotspot Gateway User Manual
37
o Super G: Choose Enable or Disable this function.
o Short Preamble: Choose Enable or Disable this function.
o Transmit Power: The default value is Auto. Select a range of transmission speeds or use the
default setting, Auto, to allow the access point to automatically use the fastest possible data rate.
o Beacon Interval: The default value is 100 milliseconds. The specified value represents the
amount of time between access point beacon signal transmissions.
o RTS Threshold: Ready To Send threshold. The range is from 256 to 2346 and the default is OFF.
The administrator can set the value which is the amount of time between packet transmissions. It is
recommended that the value remains in the range of 256 to 2346.
o Fragment Threshold: The range is from 256 to 2346 and the default is OFF. The value specifies
the maximum size of a packet allowed before data is fragmented into multiple packets. It should be
remained in the range of 256 to 2346. A smaller value results in smaller packets but allows a larger
number of packets in transmission.
o Broadcast SSID: Enable or disable SSID broadcast. When disabled, clients cannot detect Access
Point by its SSID broadcast, they must manually connect to Access Point by entering SSID on their
devices.
o Station Isolation: When enabled, wireless client stations are isolated from each other. In other
words, one PC on the wireless network is not able to see other PCs on the same wireless network.
o WMM: WMM (Wi-Fi Multimedia) provides basic Quality of service (QoS) features to Wi-Fi networks.
When enabled, it prioritizes traffic according to four Access Categories (AC) - voice, video, best
effort, and background. However, it does not provide guaranteed throughput.
o IAPP: IAPP (Inter-Access Point Protocol) is to support smooth users’ hand-over (roaming) from
one access point to another. When enabled, it provides a better capability for wireless client
stations to roam among APs with the same SSID.
HS1100 Wireless Hotspot Gateway User Manual
38
¾ WDS Settings:
Choose WDS Setting to configure the settings. This function can extend the range of accessing the
network. When this function is enabled, please enter the MAC address of the repeater in the blank and
choose Security Type.
y Wireless Configuration
IP PNP: Choose to enable or disable this function. If “IP PnP” is enabled, no matter what the IP address of the
client device is – static or dynamic IP, users can access the network without changing the client IP address after
being authenticated by HS1100.
User Authentication: If “User Authentication” is disabled, “Specific Route Profile” needs to be specified for
users to access the Internet.
Operation Mode: Select one from the two modes, NAT mode and Router mode, by the requirements.
IP Address: Enter desired IP address for the wireless port.
Subnet Mask: Enter desired subnet mask for the wireless port.
HS1100 Wireless Hotspot Gateway User Manual
39
y DHCP Server configuration
There are three methods to set the DHCP server: Disable DHCP Server, Enable DHCP Server and Enable
DHCP Relay.
1. Disable DHCP Server: Disable the DHCP Server function.
2. Enable DHCP Server: Choose “Enable DHCP Sever” function and set the appropriate configuration for
the DHCP server. The fields with red asterisks are required to be filled in.
DHCP Scope: Enter “Start IP Address” and “End IP Address” of this DHCP block. These fields define
the IP address range that will be assigned to the Wireless LAN clients.
Preferred DNS Server: The primary DNS server for the DHCP.
Alternate DNS Server: The substitute DNS server for the DHCP.
Domain Name: Enter the domain name.
WINS IP Address: Enter the IP address of WINS.
Lease Time: Choose the time interval to update DHCP IP addresses automatically.
Reserved IP Address List: To reserve an IP address for a specific client device via MAC, click the hyperlink
of Reserved IP Address. Then, the setup screen of the Reserved IP Address List as shown in the following
figure will appear. Enter the related “Reserved IP Address, “MAC”, and Description (not mandatory).
Click Apply to save the settings.
HS1100 Wireless Hotspot Gateway User Manual
40
3. Enable DHCP Relay: If enabling this function is desired, the other DHCP Server IP address must be
specified. See the following figure.
HS1100 Wireless Hotspot Gateway User Manual
41
User Authentication
This section includes the following functions: Authentication Configuration, Black List Configuration, Policy
Configuration, Guest User Configuration and Additional Configuration.
HS1100 Wireless Hotspot Gateway User Manual
42
Authentication Configuration
In this section, set the configuration for authentication servers, and on-demand user authentication. The
On-demand User authentication is designed to create on-demand user accounts to provide temporary users with
free or paid wireless Internet access.
y Authentication Server Configuration
HS1100 provides three authentication servers and one on-demand server that the administrator can apply with
different policy. Click on the server name to set the configuration for that particular server. After completing and
clicking Apply to save the settings, go back to the previous page to select a server to be the default server and
enable or disable any server on the list. Users can log into the default server without the postfix to allow faster
login process.
Server 1~3: There are 5 authentication methods, Local User, POP3, RADIUS, LDAP and NTDomain, to
select from.
HS1100 Wireless Hotspot Gateway User Manual
43
Server Name: Set a name for the server using numbers (0 to 9), alphabets (a to z or A to Z), dash (-),
underline (_) and dot (.) with a maximum of 40 characters, all other letters are not allowed.
Sever Status: The status shows that the server is enabled or disabled.
Postfix: Set a postfix that is easy to distinguish (e.g. Local) for the server using numbers (0 to 9), alphabets
(a to z or A to Z), dash (-), underline (_) and dot (.) with a maximum of 40 characters, all other letters are not
allowed.
The Policy Name cannot contain these words: MAC and IP.
Black List: There are 5 sets of the black lists. Select from one of them or choose “None”. Please refer to
4.2.2 Black List Configuration
Authentication Methods: There are 5 authentication methods, Local, POP3, RADIUS, LDAP and NT
Domain to select from for further configuration. Select the desired method and click the link besides the
pull-down menu for the advanced configuration. For more details, please refer to 4.2.1.1~6 Authentication
Method.
Enabling two or more servers of the same authentication method is NOT allowed.
Policy: Select one from the 3 policies and apply it to this server.
HS1100 Wireless Hotspot Gateway User Manual
44
Authentication Method – Local User Setting
Choose “Local User from the Authentication Method field, the hyperlink besides the pull-down menu will
become “Local User Setting”.
A. Local User Setting
Click the hyperlink of Local User Setting for further configuration.
Ø
HS1100 Wireless Hotspot Gateway User Manual
45
HS1100 Wireless Hotspot Gateway User Manual
46
y Edit Local User List: Click this to enter the “Local User List” screen.
Add User: Click the hyperlink of Add User to enter the Add User interface. Fill in the necessary information
such as “Username”, “Password”, “MAC” (optional) and “Remark” (optional). Then, select a desired Policy
and click Apply to complete adding the user(s).
Add the user(s) and enter the necessary information.
HS1100 Wireless Hotspot Gateway User Manual
47
After adding the user(s) and all necessary information, click Apply.
Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text file for the
user account upload. Then click Submit to complete the upload process.
The uploading file should be a text file and the format of each line is "ID, Password, MAC, Policy, Remark"
without the quotes. There must be no spaces between the fields and commas. The MAC field could be omitted
but the trailing comma must be retained. When adding user accounts by uploading a file, the existing accounts in
the embedded database will not be replaced by new ones.
HS1100 Wireless Hotspot Gateway User Manual
48
HS1100 Wireless Hotspot Gateway User Manual
49
Download User: Click this to enter the Users List page and the system will show a list of all created user
accounts. Click Download to create a .txt file and then save it on disk.
Refresh: Click Refresh to renew the user list.
HS1100 Wireless Hotspot Gateway User Manual
50
HS1100 Wireless Hotspot Gateway User Manual
51
Search: Enter a keyword of a username to be searched in the text field and click the Search button to perform
the search. All usernames matching the keyword will be listed.
Del All: This will delete all the users at once.
Delete: This will delete the user(s) one by one.
Edit User: If editing the content of any individual user account is desired, click the username of that desired user
account to enter its Edit User Interface, and then modify or add any desired information such as “Username”,
“Password”, “MAC” (optional) and “Remark” (optional). Then, click Apply to complete the modification.
B. Radius Client Setting
Click the hyperlink of Radius Client Setting for further configuration.
HS1100 Wireless Hotspot Gateway User Manual
52
Ø
802.1X Authentication: Enable this function and the hyperlink of Radius Client List will appear. Click the
hyperlink of Radius Client List to get into the RADIUS Client Configuration list for further configuration. In the
Radius Client Configuration table, depending on the Type to be selected (either Roaming Out or 802.1x), the
client’s IP address will be either another NAC’s IP address (Roaming Out) or wireless AP/802.1x switch’s IP
addess (802.1x). The system will handle the authentication request from these clients accordingly.
Authentication Method – POP3
Choose “POP3” from the Authentication Method field, the hyperlink beside the pull-down menu will become
“POP3 Setting”.
Click the hyperlink of POP3 Setting for further configuration. Enter the information for the primary server and/or the
secondary server (the secondary server is not required). The fields with red asterisk are necessary information.
HS1100 Wireless Hotspot Gateway User Manual
53
These settings will become effective immediately after clicking the Apply button.
y Server IP: Enter the IP address/domain name given by your ISP.
y Port: Enter the Port. The default value is 100.
y Enable SSL Connection: If this option is enabled, the POP3 protocol will perform the authentication.
HS1100 Wireless Hotspot Gateway User Manual
54
Authentication Method – RADIUS
Choose “RADIUS” from the Authentication Method field, the hyperlink beside the pull-down menu will become
“Radius Setting”.
Click the hyperlink of Radius Setting for further configuration. The RADIUS server sets the external authentication
for user accounts. Enter the information for the primary server and/or the secondary server (the secondary server is
not required). The fields with red asterisk are necessary information. These settings will become effective
immediately after clicking the Apply button.
HS1100 Wireless Hotspot Gateway User Manual
55
y 802.1X Authentication: Enable this function and the hyperlink of Radius Client List will appear. Click the
hyperlink of Radius Client List to get into the RADIUS Client Configuration list for further configuration. In the
Radius Client Configuration table, depending on the Type to be selected (either Roaming Out or 802.1x), the
client’s IP address will be either another NAC’s IP address (Roaming Out) or wireless AP/802.1x switch’s IP
addess (802.1x). The system will handle the authentication request from these clients accordingly.
y Trans Full Name: When enabled, the ID and postfix will be transferred to the RADIUS server for authentication.
When disabled, only the ID will be transferred to the RADIUS server for authentication.
y NASID: Enter the NASID of HS1100 for the external RADIUS authentication server.
y Server IP: Enter the IP address/domain name of the RADIUS server.
y Authentication Port: Enter the authentication port for the RADIUS server and the default value is 1812.
y Accounting Port: Enter the accounting port for the RADIUS server and the default value is 1813.
y Secret Key: Enter the key for encryption and decryption.
y Accounting Service: Select this to enable or disable the “Accounting Service” for accounting capabilities.
y Authentication Protocol: There are two methods, CHAP and PAP for selection.
HS1100 Wireless Hotspot Gateway User Manual
56
Authentication Method – LDAP
Choose “LDAP” from the Authentication Method field, the hyperlink beside the pull-down menu will become
“LDAP Setting”.
Click the hyperlink of LDAP Setting for further configuration. Enter the information for the primary server and/or the
secondary server (the secondary server is not required). The blanks with red asterisk are necessary information
which should be filled in. These settings will become effective immediately after clicking the Apply button.
y Server IP: Enter the IP address or domain name of the LDAP server.
y Port: Enter the Port for the LDAP server, and the default value is 389.
y Base DN: Enter the distinguished name for the LDAP server.
y Account Attribute: Enter the account attribute of the LDAP server.
HS1100 Wireless Hotspot Gateway User Manual
57
Authentication Method – NTDomain
Choose “NTDomain” from the Authentication Method field, the hyperlink beside the pull-down menu will become
NT Domain Setting”.
Click the hyperlink of NT Domain Setting for further configuration. Enter the server IP address and enable/disable
the transparent login function. These settings will become effective immediately after clicking the Apply button.
y Server IP address: Enter the server IP address of the domain controller.
y Transparent Login: If the function is enabled, users will log into HS1100 automatically when they log into the
Windows domain.
HS1100 Wireless Hotspot Gateway User Manual
58
Authentication Method – On-demand User
On-demand User Server Configuration: The administrator can enable and configure this authentication method to
create on-demand user accounts. This function is designed for hotspot owners to provide temporary users with free
or paid wireless Internet access in the hotspot environment. Major functions include accounts creation, users
monitoring list, billing plan, billing report statistics, and external payment gateway support.
y Server Status: The status shows that the server is enabled or disabled.
y Postfix: Set a postfix that is easy to distinguish (e.g. Local) for the server using numbers (0 to 9), alphabets (a to
z or A to Z), dash (-), underline (_) and dot (.) with a maximum of 40 characters, all other letters are not allowed.
y Receipt Header 1~3: Enter the receipt header message or use the default. When the administrator creates an
On-demand User account, he/she can print out a receipt containing this On-demand Users information such as
Username and Password.
y Receipt Footer 1~3: Enter the receipt footer message or use the default.
y Serial Port Baud Rate: Select the desired transmission baud rate. The default value is 9600.
y Monetary Unit: Select the desired monetary unit.
y WLAN ESSID: Enter the ESSID of the access point. The administrator can supply a new name or use the
HS1100 Wireless Hotspot Gateway User Manual
59
default
y Wireless Key: Enter the Wireless key of the access point such as WEP or WPA.
y Remark: Enter any additional information that will appear at the bottom of the receipt.
y Billing Notice Interval: While the on-demand user is still logged in, the system will update the billing notice of
the login successful page by the time interval defined here.
y Twin Ticket: Enable this function to print duplicate receipts.
y Terminal Server
Terminal Configuration is a list of serial devices that communicate with the system only; never get online and no
need to go through authentication.
For customers making purchase at the front desk in a hotel, a receptionist uses an account generator
(192.168.111.2) to create a guest account and print out receipts with account information. A client in the other
floor can print the same receipt without going to the front desk on the lobby by using the second floor account
generator (192.168.111.3). Both account generators work for the system on LAN side.
¾ Server IP: IP address of serial or converter devices.
¾ Server Port: Port number of serial or converter devices.
¾ Location: It will be displayed in on-demand users’ log.
¾ Remark: it will be shown only here.
HS1100 Wireless Hotspot Gateway User Manual
60
y Users List: Click to enter the On-demand Users List page. In the On-demand Users List, detailed information
will be documented here. By default, the on-demand user database is empty.
¾ Search: Enter a keyword of a username which needs to be searched in the text field and click the
Search button to perform the search. All usernames matching the keyword will be listed.
¾ Username: The login name of the on-demand user.
¾ Password: The login password of the on-demand user.
¾ Remaining Time/Volume: The total time/volume that the user can use currently.
¾ Status: The status of the account. “Normal” indicates that the account is not in-use and not overdue.
“Online” indicates that the account is in-use and not overdue. “Expire” indicates that the account is
overdue and cannot be used.
¾ Expiration Time: The expiration time of the account.
¾ Del All: Delete all the users at once.
¾ Delete: Delete the users one by one.
HS1100 Wireless Hotspot Gateway User Manual
61
¾ Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text
file for the user account upload. Then click Submit to complete the upload process.
The uploading file should be a text file and the format of each line is " ID (USERNAME), PASSWORD,
Type, Status, Available Data Transfer or Session Length, Activation Deadline (Date), Expired
Date, Validity Duration, Plan, Price, Total Data Transfer or Session Length when bought,
Generated Date, First Login Date, Last Logout Date, Logout Cause” without the quotes. The
separator between two columns in a line is a comma. When uploading a file, any format error or
duplicated username will terminate the uploading process and no account will be uploaded. Please
correct the format in the uploading file or delete the duplicated user account in the database, and then,
try again. The unit of data transfer is byte. The unit of session length is second. ID (Username) and
Password must be given in upper case.
>> Example 1: For Session Length type
Type must be written as “TIME,” and Status must be set as “0”. Set Session Length in seconds.
Activation Deadline must be in the format of “yyyy/mm/dd hh:mm:ss”. Set Validity Duration as “1”,
and give a Plan that’s already been generated and enabled from Billing Configuration page. Provide
a price in any monetary unit defined in On-demand User Server Configuration page. Finally, set
Session Length when bought the same as Session Length. Leave other fields blank.
>> Example 2: For Total Data Transfer type
Type must be written as “DATA,” and Status must be set as “0”. Set Total Data Transfer in bytes.
Activation Deadline must be in the format of “yyyy/mm/dd hh:mm:ss”. Set Validity Duration as “1”,
and give a Plan that’s already been generated and enabled from Billing Configuration page. Provide
a price in any monetary unit defined in On-demand User Server Configuration page. Finally, set
Total Data Transfer when bought the same as Session Length. Leave other fields blank.
HS1100 Wireless Hotspot Gateway User Manual
62
¾ Download User: Click this to create a .txt file and then save it on disk.
y Billing Configuration: The administrator can configure up to 10 billing plans.
¾ Status: Select to enable or disable this billing plan.
¾ Type: Set the billing plan by “Data (the maximum volume allowed is 9,999,999 Mbyte) or “Time” (the
maximum days allowed is 999 days).
¾ Expiration time: This is the duration of time that the account must be activated after generating the
account. After this duration, the account will self-expire
¾ Valid Duration: This is the duration of time that the user can use the Internet after activating the
account. After this duration, the account will self-expire.
¾ Policy Name: Select policy to be applied upon login when user purchases this billing plan.
¾ Price: The price charged for this billing plan.
HS1100 Wireless Hotspot Gateway User Manual
63
HS1100 Wireless Hotspot Gateway User Manual
64
y Create On-demand User: The administrator can create on-demand user accounts.
Click the Create button for the desired plan, an On-demand User account will be created. Then, click
Printout to print a receipt containing this On-demand Users information.
HS1100 Wireless Hotspot Gateway User Manual
65
HS1100 Wireless Hotspot Gateway User Manual
66
y Billing Report: The administrator can get a complete report or a report for a particular period.
¾ Report All: Click to get a complete report including all the on-demand records. This report shows the
total income as well as the individual accounting record of each plan for all plans available.
¾ Search: Select a time period to get a period report. This report shows the total income as well as the
individual accounting record of each plan for all plans available for that period of time.
HS1100 Wireless Hotspot Gateway User Manual
67
y Payment: This section is for hotspot owners to set up an external payment gateway to accept payments when
providing wireless access service to end customers who wish to pay for the service on-line.
Three payment selections include Authorize.Net, PayPal, Secure Pay and Disable. The default is Disable.
HS1100 Wireless Hotspot Gateway User Manual
68
Authorize.Net
Before setting up “Authorize.Net”, it is required that hotspot owners have a valid Authorize.Net account.
Please see Appendix B. Accepting Payments via Authorize.Net for more information about opening an
Authorize.Net account and its related maintenance functions.
¾ External Payment Gateway / Authorize.Net Payment Page Configuration
Merchant ID: The “Login ID” that comes with the Authorize.Net account
Merchant Transaction Key: The merchant transaction key is similar to a password and is used by
Authorize.Net to authenticate transactions.
Payment Gateway URL: The default website address to post all transaction data.
Verify SSL Certificate: This is to help protect the system from accessing a website other than
Authorize.Net.
y Trusted CA Management: Select the version of Trusted Certificate for the system.
Test Mode: In this mode, hotspot owners can post test transactions for free to check if the payment
function works properly.
MD5 Hash: If transaction responses need to be encrypted by the Payment Gateway, enter and
confirm a MD5 Hash value and select a reactive mode. The MD5 Hash security feature enables
merchants to verify that the results of a transaction or transaction response received by their server
were actually sent from the Authorize.Net.
HS1100 Wireless Hotspot Gateway User Manual
69
¾ Service Disclaimer Content / Credit Card Payment Page /Client’s Purchasing Record
Service Disclaimer Content: View the service agreement and fees for the standard payment gateway
services as well as add or edit the service disclaimer content here.
Credit Card Payment Page Billing Configuration: These 10 plans are the plans in Billing
Configuration, and the desired plan(s) can be enabled.
Client’s Purchasing Record:
Invoice Number: An invoice number may be provided as additional information against a transaction.
This is a reference field that may contain any kind of information.
Description: Enter the product/service description (e.g. wireless access service).
Email Header: Enter the information that will appear in the header of the invoice.
HS1100 Wireless Hotspot Gateway User Manual
70
¾ Credit Card Payment Page Fields Configuration / Credit Card Page Remark Content
Item: Check the box for the items that will show on the customers online payment interface.
Displayed Text: Enter what needs to be shown in this field.
Required: Check the box for the items that will show as required fields.
Credit Card Number: Credit card number of the customer. The Payment Gateway will only accept
card numbers that correspond to the listed card types.
Credit Card Expiration Date: Expired date of the credit card. This should be entered in the format of
MMYY (month & year). For example, if it is expired on July 2005, it should be entered as 0705.
First Name: The first name of a customer associated with the billing or shipping address of a
transaction. In the case when John Doe places an order, enter John in the First Name field indicating
this customer’s first name.
Last Name: The last name of a customer associated with the billing or shipping address of a
transaction. In the case when John Doe places an order, enter Doe in the Last Name field indicating
this customer’s last name.
HS1100 Wireless Hotspot Gateway User Manual
71
Card Type: This value indicates the level of match between the Card Code entered on a transaction
and the value that is on file with a customer’s credit card company. A code and narrative description are
provided indicating the results returned by the processor.
Card Code: The three- or four-digit code assigned to a customer’s credit card number (found either on
the front of the card at the end of the credit card number or on the back of the card).
E-mail: An email address may be provided along with the billing information of a transaction. This is the
customers email address and should contain an “@” symbol.
Customer ID: This is an internal identifier for a customer that may be associated with the billing
information of a transaction. This field may contain any kind of information.
Company: The name of the company associated with the billing or shipping information entered on a
given transaction.
Address: The address entered either in the billing or shipping information of a given transaction.
City: The city is associated with either the billing address or shipping address of a transaction.
State: A state is associated with both the billing and shipping address of a transaction. This may be
entered as either a two-character abbreviation or the full text name of the state.
Zip: The ZIP code represents the five or nine digit postal code associated with the billing or shipping
address of a transaction. This may be entered as five digits, nine digits, or five digits - four digits.
Country: The country is associated with both the billing and shipping address of a transaction. This
may be entered as either an abbreviation or full value.
Phone: A phone number is associated with both a billing and shipping address of a transaction. Phone
number information may be entered as all numbers or it may include parentheses ( ) or dashes (-) to
separate the area code and number.
Fax: A fax number may be associated with the billing information of a transaction. This number may be
entered as all numbers or contain parentheses ( ) and dashes (-) to separate the area code and
number.
Credit Card Payment Page Remark Content
Enter additional details for the transaction such as Tax, Freight and Duty Amounts, Tax Exempt status,
and a Purchase Order Number, if applicable.
HS1100 Wireless Hotspot Gateway User Manual
72
PayPal
Before setting up “PayPal”, it is required that the hotspot owners have a valid PayPal “Business Account”.
Please see Appendix C. Accepting Payments via PayPal for more information about setting up a PayPal
Business Account, relevant maintenance functions, and an example for clients.
After opening a PayPal Business Account, the hotspot owners should find the “Identity Token” of this
PayPal account to continue “PayPal Payment Page Configuration”.
¾ External Payment Gateway / PayPal Payment Page Configuration
Business Account: The “Login ID” (an email address) that is associated with the PayPal Business
Account.
Payment Gateway URL: The default website address to post all transaction data.
Identity Token: This is the key used by PayPal to validate all the transactions.
Verify SSL Certificate: This is to help protect the system from accessing a website other than PayPal
Currency: The currency to be used for the payment transactions.
HS1100 Wireless Hotspot Gateway User Manual
73
¾ Service Disclaimer Content / Billing Configuration for Payment Page
Service Disclaimer Content: View the service agreement and fees for the standard payment gateway
services as well as add or edit the service disclaimer content here.
Billing Configuration for Payment Page: These 10 plans are the plans in Billing Configuration, and
the desired plan(s) can be enabled.
HS1100 Wireless Hotspot Gateway User Manual
74
¾ Client’s Purchasing Record / PayPal Payment Page Remark Content
Client’s Purchasing Record:
Invoice Number: An invoice number may be provided as additional information against a transaction.
This is a reference field that may contain any kind of information.
Description: Enter the product/service description (e.g. wireless access service).
Title for Message to Seller: Enter the information that will appear in the header of the PayPal payment
page.
PayPal Payment Page Remark Content: The message content will be displayed as a special notice
to end customers in the page of “Rate Plan”. For example, it can describe the cautions for making a
payment via PayPal.
HS1100 Wireless Hotspot Gateway User Manual
75
SecurePay
Before setting up “SecurePay”, it is required that the hotspot owners have a valid SecurePay “Merchant
Account” from its official website. Please see Appendix D. Accepting Payments via SecurePay for more
information about setting up a SecurePay Account, relevant maintenance functions, and an example for
clients.
HS1100 Wireless Hotspot Gateway User Manual
76
HS1100 Wireless Hotspot Gateway User Manual
77
¾ Payment Page Configuration
Merchant ID: The ID that is associated with the Business Account.
Password: This is the key used by Secure Pay to validate all the transactions.
Payment Gateway URL: The default website address to post all transaction data.
Verify SSL Certificate: This is to help protect the system from accessing a website other than Secure
Pay.
Currency: The currency to be used for the payment transactions.
¾ Service Disclaimer Content
View the service agreement and fees for the standard payment gateway services as well as add or edit
the service disclaimer content here.
¾ SecurePay Payment Page Billing Configuration
These 10 plans are the plans in Billing Configuration, and the desired plan(s) can be enabled.
¾ SecurePay Payment Page Remark Content
The message content will be displayed as a special notice to end customers.
HS1100 Wireless Hotspot Gateway User Manual
78
Black List Configuration
The administrator can add, delete, or edit the black list for user access control. Each black list can include 40 users
at most. If a user in the black list wants to log into the system, the user’s access will be denied. The administrator
can use the pull-down menu to select the desired black list.
y Select Black List: There are 5 lists to select from for the desired black list.
y Name: Set the black list name and it will show on the pull-down menu above.
y Add User to List: Click the hyperlink of “Add User to List” to add users to the selected black list.
HS1100 Wireless Hotspot Gateway User Manual
79
After entering the usernames in the “Username” fields and other information in the “Remark” field (not
required).
Click Apply to add these users.
To remove a user from the black list, select the user’s “Delete” check box and then click the Delete button to
remove that user from the black list.
HS1100 Wireless Hotspot Gateway User Manual
80
Policy Configuration
Every Policy has three profiles, Firewall Profile, Specific Route Profile, and Schedule Profile as well as one
Bandwidth setting for that policy.
y Firewall Profile
Click the hyperlink of Setting for Firewall Profile, the Firewall Profiles list will appear. Click the numbers of
Filter Rule Item to edit individual rules and click Apply to save the settings. The rule status will show on the list.
Check Active to enable that rule.
HS1100 Wireless Hotspot Gateway User Manual
81
Rule Item: The rule selected.
Rule Name: The rule name can be changed here.
Enable this Rule: After checking this function, the rule will be enabled.
Action: There are two options, Block and Pass. Block. “Block” is to prevent packets from passing. “Pass” is
to permit packets passing.
Protocol: There are three protocols to select from, TCP, UDP and ICMP. Or choose ALL to use all three
protocols.
Source MAC Address: The MAC address of the source IP address. This is for specific MAC address filter.
Source/Destination Interface: There are five interfaces to choose from, ALL, WAN, Wireless, Public LAN
(LAN1/LAN2 by default) and Private LAN (LAN3/LAN4 by default).
Source/Destination IP: Enter the source and destination IP addresses.
Source/Destination Subnet Mask: Enter the source and destination subnet masks.
Source/Destination Start/End Port: Enter the range of source and destination ports.
y Specific Route Profile
Click the hyperlink of Setting for Specific Route Profile, the Specific Route Profile list will appear.
Profile Name: The profile name can be changed here.
IP Address: The destination IP address of the host or the network.
Subnet Netmask: Select a destination subnet netmask of the host or the network.
IP Address: The IP address of the next router to the destination.
Default: Check this option to apply the default value.
HS1100 Wireless Hotspot Gateway User Manual
82
y Schedule Profile
Click the hyperlink of Setting for Schedule Profile to enter the Schedule Profile list. Select “Enable” to show
the list. This function is used to restrict the time that the users can log in. Please enable/disable the desired time
slot(s) and click Apply to save the settings. These settings will become effective immediately after clicking the
Apply button.
y Total Bandwidth
Choose one bandwidth limit for that particular policy.
y Individual Maximum Bandwidth
Choose one maximum bandwidth for that particular policy.
y Individual Request Bandwidth
Choose one individual bandwidth limit for that policy, from none to 54Mbps.
y Maximum Concurrent Sessions
The concurrent sessions for each user, it can be restricted by administrator.
HS1100 Wireless Hotspot Gateway User Manual
83
Guest User Configuration
This function can permit guests to log into the system. Select “Enable Guest User” and click Apply to save the
settings.
y Guest User List: HS1100 allows 10 guest users to log in. To activate a guest user, just enter the password in
the corresponding “Password” field for that guest account. Guest accounts with blank password will not be
activated.
y Policy: Select one policy to apply to.
y Session Length: This restricts the connection time of the guest users. The default session length is 6 hours and
the available session time ranges from 1 to 12 hours or unlimited.
y Idle Timer: If a guest user has been idled with no network activities at all, the system will automatically kick out
the user. The Idle timer can be set in the range of 1~1440 minutes, and the default idle timer is 10 minutes.
HS1100 Wireless Hotspot Gateway User Manual
84
Additional Configuration
y User Control: Functions under this section applies for all general users.
¾ Idle Timer: If a user has been idled with no network activities at all, the system will automatically kick out
the user. The Idle timer can be set in the range of 1~1440 minutes, and the default idle timer is 10
minutes.
¾ Multiple Login: When enabled, a user can log in from different computers with the same account. (This
function doesn’t support On-demand users and RADIUS authentication method.)
y Roaming Out Timer
¾ Session Timeout: Maximum session timeout.
¾ Idle Timeout: Maximum idle timeout.
¾ Interim Update: Constant records update time interval.
y Internet Connection Detection: Enter a specific URL or IP address to which HS1100 will send packets for
detecting network connection status. If there is a problem in the connection in the WAN port of HS1100, and the
URL or IP address specified cannot be reached, there will be a message appearing on users’ login screen
HS1100 Wireless Hotspot Gateway User Manual
85
showing the Administrator Info, which can be set in 4.1.2 System Information section.
HS1100 Wireless Hotspot Gateway User Manual
86
y Upload File
¾ Certificate: The administrator can upload new private key and customer certification. Click the Browse
button to select the file for the certificate upload. Then click Apply to complete the upload process;
otherwise click Use Default Certificate to use the default one.
Click Use Default Certificate to use the default certificate and key.
1. Certification Pass Verification
It helps to verify validity of the entire
2. Alert Message
y Administrators’ alert message is shown when any invalid certificate in the chain found.
y Users’ alert message is shown when any invalid certificate in the chain found.
HS1100 Wireless Hotspot Gateway User Manual
87
3. How to avoid Alert Message
y For Clients, to install Root and Intermediate Certificates:
1. Obtain ALL certificate files Offline and save them on your desktop.
2. Click to Install Root CA and Intermediate certificates.
y For Administrators, to install Website Certificate:
1. Go to “Additional Configuration >> Upload Files>> Certificate”
2. Upload “Private Key” and “Customer Certificate” to HS1100
¾ Login Page: The administrator can use the default login page or get the customized login page by setting
the template page, uploading an edited page, or downloading a specific page from the designated
website. After finishing the setting, click Preview to see the login page.
a. Choose Default Page to use the default login page.
HS1100 Wireless Hotspot Gateway User Manual
88
HS1100 Wireless Hotspot Gateway User Manual
89
b. Choose Template Page to make a customized login page here. Click Select to pick a color and then fill
in all of the blanks. Click Preview to see the result.
9 Logo Image File: Customized logo can be edited with this function. The area circled in red in the
following image is the position of Logo.
HS1100 Wireless Hotspot Gateway User Manual
90
HS1100 Wireless Hotspot Gateway User Manual
91
Click on Preview and Edit the Image File to enter the editing interface as below.
Click on Browse to locate the desired image, and press Upload File to upload the file (the Logo file
size limit is 10 Kbytes and 120x60).
A warning message will appear. Click OK to complete the upload process.
9 Background and Image File: Click on Preview and Edit the Image File to enter the editing
interface. Repeat the steps of uploading logo image to upload the desired background image.
After the logo and background image upload process is completed, the new login Template Page
can be previewed by clicking Preview button at the bottom. The built-in login Template Page is
shown as below.
HS1100 Wireless Hotspot Gateway User Manual
92
c. Choose Uploaded Page to upload a new/edited login page. Click the Browse button to select the file for
uploading. Then, click Submit to complete the upload process.
After the upload process is completed, the new login page can be previewed by clicking Preview button
at the bottom.
The admin-defined login page must include the following HTML codes to provide the necessary fields for
username and password.
If the admin-defined login page includes an image file, the image file path in the HTML codes must be the
filename of the image file to be uploaded.
Then, enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload
Images Files” page and then click Submit. The system will show the used space and the maximum size
of the image file of 512K. If the administrator wishes to restore the factory default of the login page, click
the Use Default Page button to restore it to default.
HS1100 Wireless Hotspot Gateway User Manual
93
After the image file is uploaded, the file name will show on the “Existing Image Files” field. The
administrator can check the file and click Delete to delete that file.
>> How to edit “Terms of Use” or “Service Disclaimer” page:
In HS1100, the client first gets a login page when he/she opens a web browser right after associating with
an access point. However, in some situations, the hotspot owners or MIS staff may want to display “terms
of use” or announcement information before the login page. Hotspot owners or MIS staff can design a
new disclaimer/announcement page and save the page in their local server. After the agreement shown
on the page is read, users are asked whether they agree or disagree with the disclaimer. By clicking “I
agree”, users are able to log in. If users choose to decline, they will get a popup window saying they are
unable to log in. The basic design is to have the disclaimer and login function in the same page but with
the login function hidden until users agree with the disclaimer.
If the disclaimer page is successfully uploaded, an upload success page will show up.
Click “Preview” to see the uploaded page.
HS1100 Wireless Hotspot Gateway User Manual
94
If the user checks “I agree” and clicks Next, then he/she is prompted to fill in Login Name and Password.
If the user checks “I disagree” and clicks Next, a window shown as below will pop up to tell the user that
he/she cannot log in.
HS1100 Wireless Hotspot Gateway User Manual
95
d. Choose External Page and get the login page from the designated website. Enter the website address
in the “External Page Setting” field and then click Apply.
The External Page prepared to be downloaded here must have the following HTML codes to ensure the
system can work properly
After applying the setting, the new login page can be previewed by clicking Preview button at the bottom
of this page.
¾ Logout Page: The administrator can apply a new/edited logout page here. The process is similar to that of
Login Page.
HS1100 Wireless Hotspot Gateway User Manual
96
The different part is the HTML codes of the admin-defined logout page must include the following HTML
codes to allow users to enter the username and password. After the upload is completed, the admin-defined
logout page can be previewed by clicking Preview at the bottom of this page. If the administrator wants to
restore the factory default setting of the logout interface, click the “Use Default Page” button.
¾ Login Success Page: The administrator can use the default login success page or get the customized
login success page by setting the template page, uploading an edited page or downloading a specific page
from the designated website. After finishing the setting, click Preview to see the login success page.
a. Choose Default Page to use the default login success page.
HS1100 Wireless Hotspot Gateway User Manual
97
b. Choose Template Page to make a customized login success page here. Click Select to pick a color and
then fill in all of the blanks. Click Preview to see the result first.
HS1100 Wireless Hotspot Gateway User Manual
98
c. Choose Uploaded Page and upload a new/edited login success page. Click the Browse button to
select the file for uploading. Then, click Submit to complete the upload process.
After the upload process is completed, the new login success page can be previewed by clicking Preview
button at the bottom.
Enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload Images
Files” page and then click Submit. The system will show the used space and the maximum size of the
image file of 512K. If the administrator wishes to restore the factory default of the login success page, click
the Use Default Page button to restore it to default.
After the image file is uploaded, the file name will show on the “Existing Image Files” field. The
administrator can check the file and click Delete to delete the file.
HS1100 Wireless Hotspot Gateway User Manual
99
d. Choose External Page and down a specific login success page from the designated website. Enter the
website address in the “External Page Setting” field and then click Apply. After applying the setting,
the new login success page can be previewed by clicking Preview button at the bottom of this page.
¾ Login Success Page for On-Demand: The administrator can use the default login success page for
on-demand users or get the customized login success page by setting the template page, uploading an
edited page or downloading a specific page from the designated website. After finishing the setting, click
Preview to see the login success page for on-demand users.
a. Choose Default Page to use the default login success page for on-demand users.
HS1100 Wireless Hotspot Gateway User Manual
100
b. Choose Template Page to make a customized login success page for on-demand users here. Click
Select to pick a color and then fill in all of the blanks. Click Preview to see the result first.
HS1100 Wireless Hotspot Gateway User Manual
101
c. Choose Uploaded Page and click the Browse button to select the file for uploading. Then, click Submit
to complete the upload process.
After the upload process is completed, the new login success page for on-demand users can be previewed
by clicking Preview button at the bottom.
If the admin-defined login success page for on-demand users includes an image file, the image file path in
the HTML codes must be the image file to be uploaded.
Enter or browse the filename of the images to upload in the Upload Images field on the Upload Images
Files page and then click Submit. The system will show the used space and the maximum size of the image
file of 512K. If the administrator wishes to restore the factory default of the login success page for
on-demand users, click the Use Default Page button to restore it to default.
After the image file is uploaded, the file name will show on the “Existing Image Files” field. Check the file
and click Delete to delete the file.
HS1100 Wireless Hotspot Gateway User Manual
102
d. Choose the External Page selection and get the login success page for on-demand users from a
specific website. Enter the website address in the “External Page Setting” field and then click Apply.
After applying the setting, the new login success page for on-demand users can be previewed by
clicking Preview button at the bottom of this page.
¾ Logout Success Page: The administrator can use the default logout success page or get the customized
login success page by setting the template page, uploading the page or downloading from a specific
website. After finishing the setting, click Preview to see the logout success page.
a. Choose Default Page to use the default logout success page.
b. Choose Template Page to make a customized logout success page here. Click Select to pick up a color
and then fill in all of the blanks. Click Preview to see the result first.
HS1100 Wireless Hotspot Gateway User Manual
103
c. Choose Uploaded Page and click the Browse button to select the file for the logout success page
upload. Then click Submit to complete the upload process.
After the upload process is completed, the new logout success page can be previewed by clicking Preview
button at the bottom.
If the user-defined logout success page includes an image file, the image file path in the HTML code must
be the filename of the image file to be uploaded.
Enter or browse the filename of the images to upload in the “Upload Images” field on the “Upload Images
Files” page and then click Submit. The system will show the used space and the maximum size of the
image file of 512K. If the administrator wishes to restore the factory default of the logout success page, click
the Use Default Page button to restore it to default.
After the image file is uploaded, the file name will show on the “Existing Image Files” field. The
administrator can check the file and click Delete to delete it.
HS1100 Wireless Hotspot Gateway User Manual
104
d. Choose External Page and get a specific logout success page from the designated website. Enter the
website address in the “External Page Setting” field and then click Apply. After applying the setting,
the new logout success page can be previewed by clicking Preview button at the bottom of this page.
y Credit Reminder: The administrator can enable this function to remind the on-demand users before their credit
runs out. There are two kinds of reminder, Volume and Time. The default reminding trigger level for Volume is
1Mbyte and the level for Time is 5 minutes.
y POP3 Message: Before users log into the network with their usernames and passwords, users will receive a
welcome mail from HS1100. To edit the content, click the hyperlink of Edit Mail Message to enter the text edit
page.
HS1100 Wireless Hotspot Gateway User Manual
105
y Enhance User Authentication: If enabled, only the users with their MAC addresses in this list can log into
HS1100. However, user authentication is still required for these users. To specify the MAC addresses, click the
hyperlink of Permit MAC Address List to enter the “MAC Address Control” page and fill in the MAC
addresses. Select Enable and then click Apply.
The format of the MAC address is: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.
y SMTP Redirect: If enabled, please configure IP address of SMTP server and the port number of the SMTP
server here.
HS1100 Wireless Hotspot Gateway User Manual
106
Network Configuration
This section includes the following functions: Network Address Translation, Privilege List, Monitor IP List,
Walled Garden List, Walled Garden AD List, Proxy Server Properties and Dynamic DNS.
HS1100 Wireless Hotspot Gateway User Manual
107
Network Address Translation
Set the configuration for Static Assignments, Public Accessible Server and Port and Redirect.
y Static Assignments
The administrator can define mandatory external to internal IP mapping, so that a client on HS1100’s WAN can
access the managed machine (e.g. a PC, a system) on HS1100’s LAN by accessing the external IP. There are
40 sets of static Internal IP Address and External IP Address available. Enter Internal and External IP
Addresses as a set. After the setup, accessing the WAN will be mapped to access the Internal IP Address.
These settings will become effective immediately after clicking the Apply button.
y Public Accessible Server
This function allows the administrator to set 40 virtual servers at most, so that client devices outside the
managed network can access these servers within the managed network. Different virtual servers can be
configured for different sets of physical services, such as TCP and UDP services in general. Enter the “External
Service Port”, “Local Server IP Address” and “Local Server Port”. Select “TCP” or “UDP” for the service’s
type. In the Enable column, check the desired server to enable. These settings will become effective
immediately after clicking the Apply button.
HS1100 Wireless Hotspot Gateway User Manual
108
y Port and IP Redirect
This function allows the administrator to set 40 sets of the IP addresses at most for redirection purpose. When
the user attempts to connect to a destination IP address listed here, the connection packet will be converted and
redirected to the corresponding destination. Please enter the “IP Address” and “Port” of Destination, and the
“IP Address” and “Port” of Translated to Destination. Select “TCP” or “UDP for the service’s type. These
settings will become effective immediately after clicking Apply.
HS1100 Wireless Hotspot Gateway User Manual
109
Privilege List
Set the configuration for Privilege IP Address List and Privilege MAC Address List.
y Privilege IP Address List
If there are workstations inside the managed network that need to access the network without authentication,
enter the IP addresses of these workstations in the “Privilege IP Address List. The “Remark” field is not
necessary but is useful to keep track. HS1100 allows 100 privilege IP addresses at most. These settings will
become effective immediately after clicking Apply.
Permitting specific IP addresses to have network access rights without going through standard
authentication process at the Public LAN (LAN1/LAN2 by default) may cause security problems.
y Privilege MAC Address List
In addition to the IP address, the MAC address of the workstations that need to access the network without
authentication can also be set in the “Privilege MAC Address List”. HS1100 allows 100 privilege MAC
addresses at most. When manually creating the list, enter the MAC address (the format is xx:xx:xx:xx:xx:xx) as
well as the remark (not necessary). These settings will become effective immediately after clicking Apply.
Permitting specific MAC addresses to have network access rights without going through standard
authentication process at the Public LAN (LAN1/LAN2 by default) may cause security problems.
HS1100 Wireless Hotspot Gateway User Manual
110
Monitor IP List
HS1100 will send out a packet periodically to monitor the connection status of the IP addresses on the list. If the
monitored IP address does not respond, the system will send an e-mail to notify the administrator that such
destination is not reachable. After entering the necessary information, click Apply to save the settings. Click
Monitor to check the current status of all the monitored IP. The system supports monitoring on 40 IP addresses
listed in the “Monitor IP List”.
HS1100 Wireless Hotspot Gateway User Manual
111
y Send From: The e-mail address of the administrator in charge of the monitoring. This will show up as the
senders e-mail.
y Send To: The e-mail address of the person to which the monitoring result is sent. This will be the receiver’s
e-mail.
y Interval: The time interval to send the e-mail report.
y SMTP Server: The IP address of the SMTP server.
y Auth Method: The system provides four authentication methods, Plain, Login, CRAM-MD5 and NTLMv1, or
“None” to use none of the above. Select one authentication method and enter the Account Name, Password
and Domain.
y Send Test Email: To test if the settings are correct or not.
y Monitor IP Address: The IP addresses under monitoring.
HS1100 Wireless Hotspot Gateway User Manual
112
Walled Garden List
This function provides certain free services for users to access the websites listed here before login and
authentication. Up to 20 addresses or domain names of the websites can be defined in this list. Users without the
network access right can still have a chance to experience the actual network service free of charge. Enter the
website IP Address or Domain Name in the list and click Apply to save the settings.
HS1100 Wireless Hotspot Gateway User Manual
113
Walled Garden Ad List
This function provides advertisement web pages for users to access free advertisement websites listed before login
and authentication. Advertisement hyperlinks are displayed on the users login page. Clients who click on it will be
redirected to the listed advertisement websites.
y Edit: Click Edit to add a new item or make changes. Click Apply, the items will be added and shown in the list.
y Display: Choose Display to display advertisement hyperlinks on the login pages
Ø
HS1100 Wireless Hotspot Gateway User Manual
114
HS1100 Wireless Hotspot Gateway User Manual
115
Proxy Server Properties
HS1100 supports Internal Proxy Server and External Proxy Server functions. Please select an Access Gateway
and then set the necessary configurations.
y External Proxy Server: Under the security management of HS1100, the system will match the External Proxy
Server list to the clients’ proxy settings. If there is not a match, the clients will not be able to reach the login page
and thus unable to access the network. If there is a match, the clients will be directed to the system for
authentication. After a successful authentication, the clients will be redirected back to the desired proxy servers
depending on different situations.
y Internal Proxy Server: HS1100 has a built-in proxy server. If this function is enabled, the clients will be forced to
treat HS1100 as the proxy server regardless of their original proxy settings.
For more details about how to set up the proxy servers, please refer to Appendix F. Proxy Setting.
HS1100 Wireless Hotspot Gateway User Manual
116
Dynamic DNS
Before activating this function, you must have your Dynamic DNS hostname registered with a Dynamic DNS
provider. HS1100 supports DNS function to alias the dynamic IP address for the WAN port to a static domain name,
allowing the administrator to easily access HS1100’s WAN. If the dynamic DHCP is activated at the WAN port, it will
update the IP address of the DNS server periodically. These settings will become effective immediately after clicking
Apply.
y DDNS: Enable or disable this function.
y Provider: Select the DNS provider.
y Host name: The IP address/domain name of the WAN port.
y Username/E-mail: The register ID (username or e-mail) for the DNS provider.
y Password/Key: The register password for the DNS provider.
Note: To apply for free Dynamic DNS service, you may go to
http://www.dyndns.com/services/dns/dyndns/howto.html
HS1100 Wireless Hotspot Gateway User Manual
117
Utilities
This section provides four utilities to customize and maintain the system including Network Utilities, Change
Password, Backup/Restore Setting, Firmware Upgrade and Restart.
HS1100 Wireless Hotspot Gateway User Manual
118
Network Utilities
The system provides network diagnostic tools like “PING”, “Trace Route”, and “ARP Table”.
HS1100 Wireless Hotspot Gateway User Manual
119
Change Password
There are three levels of authorities: admin, manager or operator. The default usernames and passwords are as
follows:
Admin: The administrator can access all configuration pages of HS1100.
User Name: admin
Password: admin
Manager: The manager can only access the configuration pages under User Authentication to manage the user
accounts, but without permission to change the settings of the profiles of Firewall, Specific Route and Schedule.
User Name: manager
Password: manager
Operator: The operator can only access the configuration page of Create On-demand User to create new
on-demand user accounts and print out the on-demand user account receipts.
User Name: operator
Password: operator
The administrator can change the passwords here. Please enter the current password and then enter the new
password twice to verify. Click Apply to activate this new password.
If the administrators password is lost, the administrators password still can be changed through the text
mode management interface at the serial console port.
HS1100 Wireless Hotspot Gateway User Manual
120
Backup/Restore Settings
This function is used to backup/restore the HS1100 settings. Also, HS1100 can be restored to the factory default
settings here.
y Backup current system settings: Click Backup to create a .db database backup file and save it on disk.
y Restore system settings: Click Browse to search for a .db database backup file created by HS1100 and click
Restore to restore to the same settings at the time when the backup file was saved.
y Reset to the factory-default settings: Click Reset to load the factory default settings of HS1100.
HS1100 Wireless Hotspot Gateway User Manual
121
Firmware Upgrade
The administrator can download the latest firmware from website and upgrade the system here. Click Browse to
search for the firmware file and click Apply for the firmware upgrade. It might take a few minutes before the upgrade
process completes and the system needs to be restarted afterwards to activate the new firmware.
1. Firmware upgrade may cause the loss of some data. Please refer to the release notes for the limitation
before upgrading.
2. Please restart the system after upgrading the firmware. Do not power on/off the system during the
upgrade or restart process. It may damage the system and cause malfunction.
HS1100 Wireless Hotspot Gateway User Manual
122
Restart
This function allows the administrator to safely restart HS1100, and the process might take approximately three
minutes. Click YES to restart HS1100; click NO to go back to the previous screen. If the power needs to be turned off,
it is highly recommended to restart HS1100 first and then turn off the power after completing the restart process.
The connection of all online users of the system will be disconnected when system is in the process of
restarting.
HS1100 Wireless Hotspot Gateway User Manual
123
Status
This section includes System Status, Interface Status, Current Users, Traffic History, Notification
Configuration, and Session Log to provide system status information and online user status.
HS1100 Wireless Hotspot Gateway User Manual
124
System Status
This section provides an overview of the system for the administrator.
The description of the above-mentioned table is as follows:
HS1100 Wireless Hotspot Gateway User Manual
125
Item Description
Current Firmware Version The present firmware version of HS1100
System Name The system name. The default is HS1100
Admin Info The information to be shown on the login window when a user
has a connection problem.
Home Page The page to which the users are directed after successful login.
Syslog server-Traffic History The IP address and port number of the external Syslog Server.
N/A means that it is not configured.
Syslog server-On demand User log The IP address and port number of the external Syslog Server.
N/A means that it is not configured.
Proxy Server Enabled/disabled stands for that the system is currently using
the proxy server or not.
Friendly Logout
Enabled/disabled stands for the setting of hiding/displaying an
extra confirmation window when users close the login succeed
page.
Internet Connection Detection
Enabled/Disabled stands for the connection at WAN is normal or
abnormal (Internet Connection Detection) and all online users
are allowed/disallowed to log in the network.
Remote Management IP The IP(s) that is allowed for accessing the management
interface.
Management
SNMP Enabled/disabled stands for the current status of the SNMP
management function.
Retained Days The maximum number of days for the system to retain the users’
information.
Traffic log Email To The email address to which that the traffic history information will
be sent.
History
On-demand log Email
To
The email address to which the history information about
on-demand users is sent.
NTP Server The network time server that the system is set to align with.
Time
Date Time(GMT+0:00) The system time is shown as the local time.
Idle Timer The number of minutes before the system disconnects inactive
users.
Multiple Login Enabled/disabled stands for the current setting to allow/disallow
multiple logins form the same account.
User
Guest Account Enabled/disabled stands for the current status of
allowing/disallowing Guest Accounts to log in.
Preferred DNS Server IP address of the preferred DNS Server.
DNS Alternate DNS Server IP address of the alternate DNS Server.
HS1100 Wireless Hotspot Gateway User Manual
126
Interface Status
This section provides an overview of the interface for the administrator including WAN, LAN1 & LAN2, LAN3 &
LAN4, and Wireless Port.
HS1100 Wireless Hotspot Gateway User Manual
127
The description of the above-mentioned table is as follows:
Item Description
MAC Address The MAC address of the WAN port.
IP Address The IP address of the WAN port.
WAN
Subnet Mask The Subnet Mask of the WAN port.
Operation Mode The mode of the wireless port.
MAC Address The MAC address of the wireless port.
IP Address The IP address of the wireless port.
Subnet Mask The subnet mask of the wireless port.
ESSID The ESSID of the wireless port.
Channel The assigned Channel of the wireless port.
Wireless
Security Type The security type of the wireless port.
Status Enable/disable stands for status of the DHCP server on the wireless port.
WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured.
Start IP Address The start IP address of the DHCP IP range.
End IP address The end IP address of the DHCP IP range.
Wireless
DHCP Server
Lease Time The number of minutes of the lease time of the IP address.
Mode The mode of the LAN1 & LAN2 port.
MAC Address The MAC address of the LAN1 & LAN2.
IP Address The IP address of the LAN1 & LAN2.
LAN1 & LAN2
Subnet Mask The subnet mask of the LAN1 & LAN2.
Status Enable/disable stands for status of the DHCP server on the LAN1 & LAN2.
WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured.
Start IP Address The start IP address of the DHCP IP range.
End IP address The end IP address of the DHCP IP range.
LAN1 & LAN2
DHCP Server
Lease Time The number of minutes of the lease time of the IP address.
Mode The mode of the LAN3 & LAN4.
MAC Address The MAC address of the LAN3 & LAN4.
IP Address The IP address of the LAN3 & LAN4.
LAN3 & LAN4
Subnet Mask The subnet mask of the LAN3 & LAN4.
Status Enable/disable stands for status of the DHCP server on the LAN3 & LAN4 port
WINS IP Address The WINS server IP on DHCP server. N/A means that it is not configured.
Start IP Address The start IP address of the DHCP IP range.
End IP address The end IP Address of the DHCP IP range.
LAN3 & LAN4
DHCP Server
Lease Time The number of minutes of the lease time of the IP address.
HS1100 Wireless Hotspot Gateway User Manual
128
Current Users
In this function, each online user’s information can be obtained, including Username, IP Address, MAC Address,
Pkts In, Bytes In, Pkts Out, Bytes Out, Idle and Kick Out.
From the “Current Users List”, the administrator can force a specific online user to log out. Click the hyperlink of
Logout next to the online users name to logout that particular user. Click Refresh to renew the Current Users List.
HS1100 Wireless Hotspot Gateway User Manual
129
Traffic History
This function is used to check the traffic history of HS1100. The history of each day will be saved separately in the
DRAM for at least 3 days (72 full hours). The system also keeps a cumulated record of the traffic data generated by
each user in the latest 2 calendar months.
Since the history is saved in the DRAM, if you need to restart the system, and at the same time, keep the
history, please manually copy and save the traffic history information before restarting.
If the History Email has been entered under the Notify Configuration page, the system will automatically send out
the history information to that specified email address.
y Traffic History
All activities occur on the system within the nearest 72 hours are recorded; in date and time order. As shown in
the following figure, each line is a traffic history record consisting of 9 fields, Date, Type, Name, IP, MAC, Pkts
In, Bytes In, Pkts Out and Bytes Out of the user activities.
HS1100 Wireless Hotspot Gateway User Manual
130
y On-demand User Log
All activities occur on the system within the nearest 72 hours are recorded; in date and time order. As shown in
the following figure, each line is an on-demand user log record consisting of 13 fields, Date, System Name,
Type, Name, IP, MAC, Pkts In, Bytes In, Pkts Out, Bytes Out, Expiretime, Validtime and Remark of user
activities.
y Monthly Network Usage of Local User
The system keeps a cumulated record of the traffic data generated by each user in the latest 2 calendar months.
As shown in the following figure, each line in a monthly network usage of local user record consists of 6 fields,
System Name, Connection Time Usage, Packets In, Bytes In, Packets Out and Bytes Out of user activities.
¾ Download Monthly Network Usage of Local User: Click on the Download button for outputting the
report manually to a local database.
A warning message will then appear. Click Save to download the record into .txt format.
HS1100 Wireless Hotspot Gateway User Manual
131
HS1100 Wireless Hotspot Gateway User Manual
132
Notify Configuration
HS1100 will save the traffic history into the internal DRAM. If the administrator wants the system to automatically
send the history to a particular email address, enter the information shown as below.
y Send From: The e-mail address of the administrator in charge of the monitoring. This will show up as the
senders e-mail.
y Send To: The e-mail address of the person to which the history email is sent to. This will be the receivers
e-mail.
y Interval: The time interval for sending the e-mail report of the traffic history.
y SMTP Server: The IP address of the SMTP server.
y Auth Method: The system provides four authentication methods, PLAIN, LOGIN, CRAM-MD5 and NTLMv1,
or “NONE” to use none of the above. Select one authentication method and enter the Account Name,
Password and Domain.
HS1100 Wireless Hotspot Gateway User Manual
133
¾ NTLMv1 is not currently available for general use.
¾ PLAIN and CRAM-MD5 are standard authentication mechanisms while LOGIN and NTLMv1 are Microsoft
proprietary mechanisms.
¾ Only PLAIN and LOGIN can use the UNIX login password.
¾ Netscape uses PLAIN.
¾ Outlook and Outlook express use LOGIN as default, although they can be set to use NTLMv1.
¾ Pegasus uses CRAM-MD5 or LOGIN but the administrator cannot configure which method to be used.
y Send Test Email: To test the settings correct or not.
y Syslog Server: It specifies the IP and Port of the Syslog server.
HS1100 Wireless Hotspot Gateway User Manual
134
Session Log
Every connection created and activity executed on the Internet by users can be tracked if the Session Log function
is enabled; the system will automatically report the connection details to a specified Syslog Server. Log files can
also be sent out to an Email Box or uploaded to a particular FTP Server periodically when this function is enabled.
Send Log to Syslog Server
Select Enable, and enter IP Address of the Syslog Server to be used.
Select Facility and Severity from the drop-down list box.
Enter a Tag description which will be included in session logs sent to the specified Syslog server.
Click Apply to save the setting.
Send Log (to Email & FTP) every:
Select a time interval from the drop-down list box for sending session logs to an email box and/or FTP server.
Click Apply to save the setting.
Note:
The “Send Log (to Email & FTP) every” is applied only to “Send Log to Email Box”, and “Send
Log to FTP Server” functions, but does not have any effect on “Send Log to Syslog Server”
function.
HS1100 Wireless Hotspot Gateway User Manual
135
Send Log to Email Box
Select Enable, and enter Senders and Receiver’s Email Address.
Enter the domain name or IP address of the SMTP Server, and select an appropriate SMTP Authentication
Method from the drop-down list box.
Before applying the setting, you can send a test log to preview the setting by click Send Test Log button.
Click Apply to save the setting.
Send Log to FTP Server:
Enter IP Address of the FTP Server to be used. When selecting Anonymous, specify the Username and
Password for accessing the FTP Server.
Before applying the setting, you can send a test log to preview the setting by click Send Test Log button..
Click Apply to save the setting.
HS1100 Wireless Hotspot Gateway User Manual
136
Help
On the screen, the Help button is on the upper right corner. Click Help to the Online Help window and then click the
hyperlink of the items for further information.
HS1100 Wireless Hotspot Gateway User Manual
137
Appendix A. Console Interface
Via this port to enter the console interface for the
administrator to handle the problems and situations
occurred during operation.
1. In order to connect to the console port of HS1100,
a console, modem cable and a terminal simulation
program, such as the Hyper Terminal are needed.
2. If a Hyper Terminal is used, please set the
parameters as 9600,8,n,1.
The main console is a menu-driven text interface with dialog boxes. Please use arrow keys on the
keyboard to browse the menu and press the Enter key to make selection or confirm what you enter.
3. Once the console port of HS1100 is connected properly, the console main screen will appear automatically. If the
screen does not appear in the terminal simulation program automatically, please try to press the arrow keys, so
that the terminal simulation program will send some messages to the system, where the welcome screen or
main menu should appear. If the welcome screen or main menu of the console still does not pop up, please
check the connection of the cables and the settings of the terminal simulation program.
HS1100 Wireless Hotspot Gateway User Manual
138
y Utilities for network debugging
The console interface provides several utilities to assist the Administrator to check the system conditions
and to debug any problems. The utilities are described as follows:
¾ Ping host (IP): By sending ICMP echo request to a specified host and wait for the response to test
the network status.
¾ Trace routing path: Trace and inquire the routing path to a specific target.
¾ Display interface settings: It displays the information of each network interface setting including the
MAC address, IP address, and netmask.
¾ Display the routing table: The internal routing table of the system is displayed, which may help to
confirm the Static Route settings.
¾ Display ARP table: The internal ARP table of the system is displayed.
¾ Display system up time: The system live time (time for system being turn on) is displayed.
¾ Check service status: Check and display the status of the system.
¾ Set device into “safe mode”: If the administrator is unable to use Web Management Interface via
browser for the system failed inexplicitly. The administrator can choose this utility and set it into safe
mode, which enables him to manage this device with browser again.
¾ Synchronize clock with NTP server: Immediately synchronize the clock through the NTP protocol
and the specified network time server. Since this interface does not support manual setup for its
internal clock, therefore we must reset the internal clock through the NTP.
¾ Print the kernel ring buffer: It is used to examine or control the kernel ring buffer. The program helps
users to print out their boot-up messages instead of copying the messages by hand.
¾ Main menu: Go back to the main menu.
HS1100 Wireless Hotspot Gateway User Manual
139
y Change admin password
Besides supporting the use of console management interface through the connection of null modem, the
system also supports the SSH online connection for the setup. When using a null modem to connect to
the system console, we do not need to enter administrator’s password to enter the console management
interface. But connecting the system by SSH, we have to enter the username and password.
The username is “admin” and the default password is also “admin”, which is the same as for the web
management interface. Password can also be changed here. If administrators forget the password and
are unable to log in the management interface from the web or the remote end of the SSH, they can still
use the null modem to connect the console management interface and set the administrator’s password
again.
Although it does not require a username and password for the connection via the serial port, the same
management interface can be accessed via SSH. Therefore, we recommend you to immediately change
the HS1100 Admin username and password after logging in the system for the first time.
y Reload factory default
Choosing this option will reset the system configuration to the factory defaults.
y Restart HS1100
Choosing this option will restart HS1100.
HS1100 Wireless Hotspot Gateway User Manual
140
Appendix B. Accepting Payment via Authorize.Net
This section is to show independent Hotspot owners how to configure related settings in order to accept credit card
payments via Authorize.Net, making the Hotspot an e-commerce environment for clients to pay for and obtain
Internet access using their credit cards.
HS1100 Wireless Hotspot Gateway User Manual
141
HS1100 Wireless Hotspot Gateway User Manual
142
1. Setting Up
1.1 Open Accounts
To set up HS1100 to process credit card billing, the merchant owner will need two accounts (Internet Merchant
account and Authorize.Net account).
If you are looking for a merchant account or Internet payment gateway to process transactions, you can fill out the
Inquiry Form on http://www.authorize.net/solutions/merchantsolutions/merchantinquiryform/.
1.2 Configure HS1100 using an Authorize.Net account
Please log in HS1100. User Authentication >> Authentication Configuration >> Click the server On-demand
User >> On-demand User Server Configuration >> Click Payment >> Payment Configuration >> External
Payment Gateway >> Select Authorize.Net
HS1100 Wireless Hotspot Gateway User Manual
143
Some major fields are required:
Setting Description
Merchant Login ID This is the “Login ID” that comes with the Authorize.Net account.
Merchant Transaction Key
To get a new key, please log in Authorize.Net >> Click Settings and Profile >>
Go to the “Security” section >> Click Obtain Transaction Key >> Enter
“Secret Answer” >> Click Submit.
Payment Gateway URL https://secure.authorize.net/gateway/transact.dll (default gateway address)
MD5 Hash To enhance the transaction security, merchant owner can choose to enable this
function and enter a value in the text box: “MD5 Hash Value”.
Note: For detailed description, please see 4.2.1.6 Authentication Method >> On-demand User >>
Payment
1.3 Configure the Authorize.Net Merchant Account to Match the Configuration of HS1100
Settings of the merchant account on Authorize.Net should be matched with the configuration of HS1100:
Setting Description
MD5 Hash
To configure “MD5 Hash Value”, please log in Authorize.Net >> Click Settings
and Profile >> Go to the “Security” section >> Click MD5 Hash >> Enter
“New Hash Value” & “Confirm Hash Value” >> Click Submit.
Required Card Code
If the “Card Code” is set up as a required field, please log in Authorize.Net >>
Click Settings and Profile >> Go to the “Security section >> Click Card
Code Verification >> Check the Does NOT Match (N) box >> Click Submit.
Required Address Fields
After setting up the required address fields on the “Credit Card Payment Page
Billing Configuration” section of HS1100, the same requirements must be set
on Authorize.Net. To do so, please log in Authorize.Net >> Click Settings and
Profile >> Go to the “Security section >> Click Address Verification
System (AVS) >> Check the boxes accordingly >> Click Submit.
1.4 Test The Credit Card Payment via Authorize.Net
To test the connection between HS1100 and Authorize.Net, please log in HS1100. >> User Authentication >>
Authentication Configuration >> Click the server On-demand User >> On-demand User Server Configuration
>> Payment >> Payment Configuration >> Select Authorize.Net >> Go to “Authorize.Net Payment Page
Configuration” section >> Enable the “Test Mode” >> Click Try Test and follow the instructions
HS1100 Wireless Hotspot Gateway User Manual
144
2. Basic Maintenance
In order to maintain the operation, merchant owners will have to manage the accounts and transactions via
Authorize.Net as well as HS1100.
2.1 Void A Transaction and Remove the On-demand Account Generated on HS1100
Sometimes, a transaction (as well as the related user account on HS1100) may have to be canceled before it has
been settled with the bank.
a. To void an unsettled transaction, please log in Authorize.Net. Click Unsettled Transactions >> Locate the
specific transaction record on the “List of Unsettled Transactions” >> Click the Trans ID number >> Confirm
and click Void.
Note: To find the on-demand account name, click Show Itemized Order Information on the “Order
Information” page >> Username can be found in the “Item Description”.
b. To remove the specific account from HS1100, please log in HS1100. >> User Authentication >>
Authentication Configuration >> Click the server On-demand >> Users List >> Click Delete on the record
with the account name. Click Delete All to delete all users at once.
2.2 Refund A Settled Transaction and Remove the On-demand Account Generated on HS1100
a. To refund a credit card payment, please log in Authorize.Net. Click Virtual Terminal >> Select a Payment
Method >> Click Refund a Credit Card >> Payment/Authorization Information >> Type information in at least
three fields: Card Number, Expiration Date, and Amount >> Confirm and click Submit.
b. To remove the specific account from HS1100, please log in HS1100. >> User Authentication >>
HS1100 Wireless Hotspot Gateway User Manual
145
Authentication Configuration >> Click the server On-demand User >> On-demand User Server
Configuration >> Users List >> Click Delete on the record with the account name.
2.3 Find the Username and Password for A Specific Customer
Please log in Authorize.Net. Click Unsettled Transactions >> Try to locate the specific transaction record on the
“List of Unsettled Transactions” >> Click the Trans ID number >> Click Show Itemized Order Information in the
“Order Information” section >> Username and Password can be found in the “Item Description”.
2.4 Send An Email Receipt to A Customer
If a valid email address is provided, an email receipt with payment details for each successful transaction will be
automatically sent to the customer via Authorize.Net. To change the information on the receipt for customer, please
log in HS1100. >> User Authentication >> Authentication Configuration >> Click the server On-demand User
>> On-demand User Server Configuration >> Payment >> Payment Configuration >> External Payment
Gateway >> Select Authorize.NET >> Scroll down to Client's Purchasing Record section of the page >> Type in
information in the text boxes: “Description” and “E-mail Header” >> Confirm and click Apply.
2.5 Send an Email Receipt for Each Transaction to the Merchant Owner
A copy of email receipt with payment details for each successful transaction will also be automatically sent to the
merchant owner/administrator via Authorize.Net.
To configure the contact person who will receive a receipt for each transaction, please log in Authorize.Net. Click
Settings and Profile >> Go to the “General” section >> Click Manage Contacts >> Click Add New Contact to >>
Enter necessary contact information on this page >> Check the “Transaction Receipt” box >> Click Submit.
3. Reporting
During normal operation, the following steps will be necessary to generate transaction reports.
3.1 Transaction Statistics by Credit Card Type during the Period.
Please log in Authorize.Net. >> Click Reports >> Check “Statistics by Settlement Date radio button
>> Select “Transaction Type”, “Start Date”, and “End Date” as the criteria >> Click Run Report.
3.2 Transaction Statistics by Different Location
a. To deploy more than one HS1100, the way to distinguish transactions from different locations is to make the
invoice numbers different. To change the invoice setting, please log in HS1100. >> User Authentication >>
Authentication Configuration >> Click the server On-demand User >> On-demand User Server
HS1100 Wireless Hotspot Gateway User Manual
146
Configuration >> Payment >> Payment Configuration >> External Payment Gateway >> Select
Authorize.NET >> Scroll down to “Client's Purchasing Record” section of the page >> Check the “Reset”
box >> A location-specific ID (for example, Hotspot-A) can be used as the first part of “Invoice Number” >>
Confirm and click Apply.
b. Please log in Authorize.Net >> Click Search and Download >> Specify the transaction period (or ALL Settled,
Unsettled) in “Settlement Date” section >> Go to “Transaction” section >> Enter the first part of invoice
number plus an asterisk character (for example, Hotspot-A*) in the “Invoice #” text box >> Click Search >> If
transaction records can be found, the number of accounts sold is the number of search results >> Or, click
Download To File to download records and then use MS Excel to generate more detailed reports.
3.3 Search for The Transaction Details for A Specific Customer
Please log in Authorize.Net. Click Search and Download >> Enter the information for a specific customer as
criteria >> Click Search >> Click the Trans ID number to view the transaction details.
Note: For more information about Authorize.Net, please see http://www.authorize.net.
4. Examples of Making Payment for Clients
Step 1: Click the link below the login window to pay for the service by credit card via Authorize.Net.
Step 2: Choose I agree to accept the terms of use and click Next.
HS1100 Wireless Hotspot Gateway User Manual
147
Step 3: Please fill out the form and Click Submit to send out this transaction. There will be a confirm dialog box.
Step 4: Please confirm the data and the click OK to go on the transaction or click Cancel to revise the data or cancel
this transaction. After clicking OK, there will be another dialog box showing up to confirm this transaction again.
HS1100 Wireless Hotspot Gateway User Manual
148
Step 5: Click OK to complete the process or click Cancel to revise the data or cancel this transaction.
Step 6: Click Start Internet Access to use the Internet access service.
Note:
The clients must fill in the correct credit card number and expiration date. Card code is the last 3
digits of the security code located on the back of your credit card. If clients choose to enter the e-mail
addresses, clients will receive confirmation letters for reference.
HS1100 Wireless Hotspot Gateway User Manual
149
Appendix C. Accepting Payment via PayPal
This section is to show independent Hotspot owners how to configure related settings in order to accept payments
via PayPal, making the Hotspot an e-commerce environment for clients to pay for and obtain Internet access using
their PayPal accounts or credit cards.
HS1100 Wireless Hotspot Gateway User Manual
150
1. Setting Up
As follows are the basic steps to open and configure a “Business Account” on PayPal.
1.1 Open An Account
Step 1: Sign up for a PayPal Business Account and login.
Here is a link: https://www.paypal.com/cgi-bin/webscr?cmd=_registration-run
Step 2: Edit necessary settings in “Website Payment Preferences”
Click Profile >> Click Website Payment Preferences in the Selling Preferences section
Administrators should scroll down to edit each setting as shown in the table below. To activate all the changes,
please click Save at the end of the page.
HS1100 Wireless Hotspot Gateway User Manual
151
Settings Screenshots
Auto Return (On)
Return URL (Redirect Webpage)
Type http://www.www.com or other
URL.
Payment Data Transfer (On)
Block Non-encrypted Website
Payment (Off)
PayPal Account Optional (Off)
Contact Telephone Number (Off)
Click Save.
HS1100 Wireless Hotspot Gateway User Manual
152
1.2 Configure HS1100 with a PayPal Business Account
Please log in HS1100:
User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand
User Server Configuration >> Click Payment >> Payment Configuration >> External Payment Gateway >>
Select PayPal
Three fields are required:
Setting Description
Business Account ID This is the “Login ID” (email address) that is associated with the PayPal
Business Account.
Payment Gateway URL https://www.paypal.com/cgi-bin/webscr (default URL for PayPal)
Identity Token
Please log in PayPal after saving the above settings >> Click Profile
>> Click Website Payment Preferences in the Selling Preferences
section >> Scroll down to the section, Payment Data Transfer
(optional).
Copy the Identity Token in the above page to the section “PayPal
Payment Page Configuration” of HS1100.
HS1100 Wireless Hotspot Gateway User Manual
153
1.3 Requirements for Building a Secure PayPal-based E-Commerce Site
To deploy the PayPal function properly, it is required that the merchant register an Internet domain name (for
example, www.StoreName.com) for this subscriber gateway device.
In addition, it is necessary to sign up for a SSL certificate, licensed from a “Certificate Authority” (for example,
VerSign), for this registered Internet domain name.
Thus, by meeting these two requirements, it will allow end customers or subscribers to pay for the Internet access in
a securer and convenient way.
2. Basic Maintenance
In order to maintain the operation, the merchant owner will have to manage the accounts and payment transactions
on PayPal website as well as HS1100.
2.1 Refund a completed payment and remove the on-demand account generated on HS1100
(1) To refund a payment, please log in PayPal >> Click History >> Locate the specific payment listing in the activity
history log >> Click Details of the payment listing >> Click Refund Payment at the end of the details page >> Type
in information: Gross Refund Amount and/or Optional Note to Buyer >> Click Submit >> Confirm the details and
click Process Refund
(2) To remove the specific account from HS1100, please log in HS1100:
User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand
User Server Configuration >> Users List >> Click Delete on the record with the account ID. Click Delete All to
delete all users at once.
HS1100 Wireless Hotspot Gateway User Manual
154
2.2 Find the username and password for a specific customer
(1) To find the username, please log in PayPal >> Click History >> Locate the specific payment listing in the activity
history log >> Click Details of the payment listing >> Username can be found in the Item Title” field
(2) To find the password associated with a specific username, please log in HS1100:
User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand
User Server Configuration >> Users List. Search for the specific username. Password can be found in the same
record
Note:
As stated by PayPal, you can issue a full or partial refund for any reason and for 60 days after the
original payment was sent. To find the on-demand account name for a specific payment, click Details
of the payment listing in the activity history log >> Username can be found in the “Item Title field.
2.3 Send an email receipt to a customer
If a valid email address is provided, an email receipt with payment details for each successful transaction will be
automatically sent to the customer via PayPal. To change the information on the receipt for customer, please log in
HS1100:
User Authentication >> Authentication Configuration >> Click the server On-demand User >> On-demand
User Server Configuration >> Payment >> Payment Configuration >> External Payment Gateway>> Select
PayPal >> Go to “Client's Purchasing Record” section >> Type in information in the text boxes: Invoice Number
and Description (Item Name) >> Confirm and click Apply
2.4 Send an email receipt for each transaction to the merchant
A copy of email receipt with payment details (including available message note from buyer) for each successful
transaction will also be automatically sent to the merchant owner/administrator via PayPal.
HS1100 Wireless Hotspot Gateway User Manual
155
3. Reporting
During normal operation, the following steps will be necessary to generate transaction reports.
3.1 Transaction activity during a period
(1) Please log in PayPal >> Click History >> Choose activity type from the Show field as the search criteria
>> Specify the dates (From and To fields) for the period >> Click Search
3.2 Search for the transaction details for a specific customer
Please log in PayPal >> Click History >> Click Advanced Search >> Enter the name for a specific customer as
criteria in the Search For field and Choose Last Name or First Name in the In field >> Specify the time
period >> Click Submit >> Click Details to view the transaction details
Note: For more information about PayPal, please see http://www.paypal.com.
HS1100 Wireless Hotspot Gateway User Manual
156
4. Examples of Making Payment for Clients
Step 1: Click the link below the login window to pay for the service via PayPal.
Step 2: Choose I agree to accept the terms of use and click Next.
Step 3: Please fill out the form and Click Submit to send out this transaction. There will be a confirm dialog box.
HS1100 Wireless Hotspot Gateway User Manual
157
Step 4: You will be redirected to PayPal website to complete the payment process.
Step 5: Click Start Internet Access to use the Internet access service.
HS1100 Wireless Hotspot Gateway User Manual
158
Note:
(a) Payment is accepted via PayPal. PayPal enables you to send payments securely online using
PayPal account, a credit card or bank account. Clicking on Buy Now button, you will be
redirected to PayPal’s site to make payment.
(b) Please do not manually close the browser when you reach PayPal’s payment confirmation
page. It takes about 30 seconds or more before you are automatically redirected back to our
website with a set of Login ID and Password.
HS1100 Wireless Hotspot Gateway User Manual
159
Appendix D. Accepting Payment via SecurePay
How to use SecurePay
SecurePay is another external online payment gateway compatible with HS1100. This section guides you how to get
SecurePay working with HS1100 and how to check today’s billing transactions, and teaches your clients how to
purchase or renew different network-access plans online using their credit cards.
For Administrators to get started
Before getting started, administrators need to apply for a “Merchant ID” and “Merchant Password” from the
“SecurePay” official website.
In this example, merchant account one starting with plan one is
SecurePay Merchant ID: ABC0001
SecurePay Merchant Password: abc123
1. Create billing plans:
Administrators may come up with many ways to charge their clients. For example:
¾ Plan 2 (charged by Data): Each Plan 2 client has to make their first login within 15 days and 9 hours. He can
transfer up to 66 Mbytes and this account is valid for 63 days. He’s being charged 5 dollars for this plan.
¾ Plan 3 (charged by Time): Each Plan 3 client has to make their first login within 3 days and 15 hours. He can
access the internet for 12 hour and 40 minutes and this account is valid for 8 days. He’s being charged 3
dollars for this plan.
HS1100 Wireless Hotspot Gateway User Manual
160
2. Payment Configuration:
Select “Secure Pay” for your external payment gateway. Enter Merchant ID and Password. And Payment Gateway
URL is one fixed URL: https://www.securepay.com.au/xmlapi/payment.
Finally, enable whichever plan(s) you’d like to apply to “SecurePay”.
HS1100 Wireless Hotspot Gateway User Manual
161
How does your client purchase a plan?
1. Open a browser, it then shows a login page. And click “Click here to purchase by Credit Card online” to get
started.
2. Select “I agree” and click “Next”.
HS1100 Wireless Hotspot Gateway User Manual
162
3. Select a billing plan to purchase; enter your credit card information and “Submit”.
4. Double confirm your credit card information.
5. Double confirm with your purchase. And wait for a couple minutes till you get your receipt.
HS1100 Wireless Hotspot Gateway User Manual
163
6. Account has been successfully generated! Click “Login”. And it’s recommended not to close this page at all
times in case you might re-login.
7. The login successful box appears. Click “Start Browsing” to get online.
HS1100 Wireless Hotspot Gateway User Manual
164
8. User is now redirected to YOUR homepage that URL you fill in the blank “System Configuration >>
Homepage”.
HS1100 Wireless Hotspot Gateway User Manual
165
How does your client renew his service after running out of quota?
New username and password are needed to renew service. Client can either purchase a new account online (shown
in the last section) or at the counter desk. The following example is to enter Web UI, manually generate an account
and have your client renewed himself the service.
1. Go to On-demand Users List, the account being generated online (please see the last section) is shown.
2. Create an on-demand user.
HS1100 Wireless Hotspot Gateway User Manual
166
3. Choose a billing plan for this user and click “Create”.
4. Give your client the print-out of this receipt with new account information.
5. Have your client go back to the “Login successful page” and click “Redeem”. And enter new User Name and
Password.
HS1100 Wireless Hotspot Gateway User Manual
167
6. Redeem is successful and you can see more quota for internet access.
HS1100 Wireless Hotspot Gateway User Manual
168
How does Merchant check billing transactions?
1. Go to SecurePay Merchant Login Page at https://www.securepay.com.au/merchant/ and enter Merchant ID,
Login User Name and Password.
2. Click “Search Transactions” and “Today” to check today’s transactions.
HS1100 Wireless Hotspot Gateway User Manual
169
3. Today’s transaction is shown in table.
HS1100 Wireless Hotspot Gateway User Manual
170
Appendix E. RADIUS Accounting
How to create a user and add it into a group in Active Directory
Step 1. Open “Active Directory”
Step 2. Go to container “Users”
Step 3. Create a new user in this container.
Step 4. Enter the first name of this user.
Step 5. Enter User logon name which is the login name you will use in your RADIUS server.
Step 6. Click “Next” to continue.
Step 7. Enter your RADIUS password
Step 8. Re-enter your RADIUS password
Step 9. Check “Password never expires” so that this password lasts.
Step 10. Click Next to continue.
HS1100 Wireless Hotspot Gateway User Manual
171
Step 11. Click finish to get done with account creation.
Step 12. It shows “user_group3” just created in the container “User”.
Step 13. Now let’s make this user “user_group3” a member of “group03”. Right click “user_group3” and scroll
down to Properties.
HS1100 Wireless Hotspot Gateway User Manual
172
Step 14. Select Dial-in
Step 15. Select “Allow access”
Step 16. Click OK
HS1100 Wireless Hotspot Gateway User Manual
173
Step 17. Select “Member Of”
Step 18. Click “Add”
Step 19. Click “OK” to select Groups.
Step 20. Enter the object names “group03”
Step 21. Click “OK”
Step 22. Now this user is in “group3” under folder “2k3lab.idv.tw/Users”.
Step 23. Click “OK”
HS1100 Wireless Hotspot Gateway User Manual
174
RADIUS accounting with VSA
VSA stands for Vendor Specific Attributes. This VSA is a “value in bytes” sent by RADIUS server to gateway along
with an Access-Accept packet. In other words, when your external RADIUS server accepts HS1100’s request,
RADIUS not only replies with an “access-accept” but it also carries a maximum value in bytes that each client is
allowed to transfer. This value is the maximum allowable summation of each client’s download plus upload traffic in
bytes. Access-Accept packet and VSA are sent back to gateway in one session.
The bellowing shows the summary of this VSA format: (The fields are transmitted from left to right.)
Vendor Specific Attribute
Number
Vendor Code Vendor Assigned
Attribute Number
Attribute Value (the Max allowable
download and upload transfer for each
client in bytes)
By RADIUS Standard By vendor By vendor By local administrator
26 21920 10 0x100000
This section will guide you through a VSA configuration in your external RADIUS server. Before get started, go to or
remotely connect to your external RADIUS servers desktop.
Step 1 to 4: Run “Internet Authentication Server”, open “Remote Access Policies” and select a policy. Right click and
scroll down to its properties page.
HS1100 Wireless Hotspot Gateway User Manual
175
Step 5 to 9: Steps 5 to 9 guides you through adding a “Vendor-Specific” attribute into properties of this selected
policy.
Step 9 to 18: Step 9 to 18 guides you to add “Vendor Code = 21920”, “Vendor-assigned attribute number = 10”, and
“Attribute Value = 100000 in Hexadecimal” into properties of this policy.
Step 9 to 18: Step 19 to 21 shows that your Attribute Value has been added.
HS1100 Wireless Hotspot Gateway User Manual
176
HS1100 Wireless Hotspot Gateway User Manual
177
Appendix F. Proxy Setting
1. Proxy Setting for Hotspot
HotSpot is a place such as a coffee shop, hotel, or a public area where provides Wi-Fi service for mobile and
temporary users. HotSpot is usually implemented without complicated network architecture and using some proxy
servers provided by Internet Service Providers.
In Hotspots, users usually enable their proxy setting of the browsers such as IE and Firefox. Therefore, so we need
to set some proxy configuration in the Gateway need to be set. Please follow the steps to complete the proxy
configuration
1. Login Gateway by using “admin”.
2. Click the Network Configuration from top menu and the homepage of the Network Configuration will
appear.
HS1100 Wireless Hotspot Gateway User Manual
178
3. Click the Proxy Server Properties from left menu and the homepage of the Proxy Server Properties will
appear.
4. Add the ISP’s proxy Server IP and Port into External Proxy Server Setting.
HS1100 Wireless Hotspot Gateway User Manual
179
5. Enable Built-in Proxy Server in Internal Proxy Server Setting.
6. Click Apply to save the settings.
HS1100 Wireless Hotspot Gateway User Manual
180
2. Proxy Setting for Enterprise
Enterprises usually isolate their intranet and internet by using more elaborated network architecture. Many
enterprises have their own proxy server which is usually at intranet or DMZ under the firewall protection.
In enterprises, network managers or MIS staff may often ask their users to enable their proxy setting of the browsers
such as IE and Firefox to reduce the internet access loading. Therefore some proxy configurations in the Gateway
need to be set.
Some enterprises will automatically redirect packets to proxy server by using core switch or Layer 7
devices. However, the clients do not need to enable the proxy settings of their browsers, and the
administrator does not need to set any proxy configuration in the Gateway.
HS1100 Wireless Hotspot Gateway User Manual
181
Please follow the steps to complete the proxy configuration
Gateway Setting
1. Login Gateway by using “admin”.
2. Click the Network Configuration from top menu, and the homepage of the Network Configuration will
appear.
3. Click the Proxy Server Properties from left menu, and the homepage of the Proxy Server Properties will
appear.
HS1100 Wireless Hotspot Gateway User Manual
182
4. Add your proxy Server IP and Port into External Proxy Server Setting.
5. Disable Built-in Proxy Server in Internal Proxy Server Setting.
6. Click Apply to save the settings.
If your proxy server is disabled, it will make the user authentication operation abnormal. When users open
the browser, the login page will not appear because the proxy server is down. Please make sure that your
proxy server is always available.
HS1100 Wireless Hotspot Gateway User Manual
183
Client Setting
It is necessary for clients to add default gateway IP address into proxy exception information so the user login
successful page can show up normally.
1. Use command “ipconfig” to get Default Gateway IP Address.
2. Open browser to add default gateway IP address (e.g. 192.168.1.254) and logout page IP address
“1.1.1.1” into proxy exception information.
z For I.E
HS1100 Wireless Hotspot Gateway User Manual
184
z For Firefox
HS1100 Wireless Hotspot Gateway User Manual
185
Appendix G. Network Configuration & External
Network Access
1. Network Configuration on PC
After HS1100 is installed, the following configurations must be set up on the PC: Internet Connection Setup and
TCP/IP Network Setup.
y Internet Connection Setup
Windows 9x/2000
1) Choose Start >> Control Panel >> Internet
Options.
2) Choose the Connections tab, and then click
Setup.
HS1100 Wireless Hotspot Gateway User Manual
186
3) Choose “I want to set up my Internet
connection manually, or I want to connect
through a local Area network (LAN)”, and then
click Next.
4) Choose “I connect through a local area
network (LAN)” and then click Next.
5) DO NOT choose any option in the following LAN
window for Internet configuration, and just click
Next.
HS1100 Wireless Hotspot Gateway User Manual
187
6) Choose “No” and then click Next.
7) Finally, click Finish to exit the Internet
Connection Wizard. Now, the set up is
completed.
Windows XP
1) Choose Start >> Control Panel >> Internet
Option.
HS1100 Wireless Hotspot Gateway User Manual
188
2) Choose the Connections tab, and then click
Setup.
3) When the Welcome to the New Connection
Wizard window appears, click Next.
4) Choose “Connect to the Internet” and then
click Next.
HS1100 Wireless Hotspot Gateway User Manual
189
5) Choose “Set up my connection manually” and
then click Next.
6) Choose “Connect using a broadband
connection that is always on” and then click
Next.
7) Finally, click Finish to exit the Connection
Wizard. Now, the setup is completed.
HS1100 Wireless Hotspot Gateway User Manual
190
y TCP/IP Network Setup
If the operating system of the PC in use is Windows 95/98/ME/2000/XP, keep the default settings without any
changes to directly start/restart the system. With the factory default settings, during the process of starting the
system, HS1100 with DHCP function will automatically assign an appropriate IP address and related information
for each PC. If the Windows operating system is not a server version, the default settings of the TCP/IP will
regard the PC as a DHCP client, and this function is called “Obtain an IP address automatically.
If checking the TCP/IP setup or using the static IP in the LAN1/LAN2 or LAN3/LAN4 section is desired, please
follow these steps:
Check the TCP/IP Setup of Window 9x/ME
1) Choose Start >> Control Panel >> Network.
2) Click on the Configuration tab and select
“TCP/IP > AMD PCNET Family Ethernet
Adapter (PCI-ISA)”, and then click Properties.
Now, you can choose to use DHCP or a specific
IP address.
HS1100 Wireless Hotspot Gateway User Manual
191
3) Using DHCP: If you want to use DHCP, click on
the IP Address tab and choose “Obtain an IP
address automatically, and then click OK. This
is also the default setting of Windows. Then,
reboot the PC to make sure an IP address is
obtained from HS1100.
4) Using Specific IP Address: If you want to use a specific IP address, acquire the following information
from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your
ISP and the Gateway address of HS1100.
If your PC has been set up completely, please inform the network administrator before proceeding to the
following steps.
4.1) Click on the IP Address tab and choose
“Specify an IP address”. Enter the IP
Address, Subnet Mask and then click OK.
HS1100 Wireless Hotspot Gateway User Manual
192
4.2) Click on the Gateway tab. Enter the gateway
address of HS1100 in theNew gateway”
field and click Add. Then, click OK.
4.3) Click on DNS Configuration tab. If the DNS
Server field is empty, select “Enable DNS”
and enter DNS Server address. Click Add, and
then click OK to complete the configuration.
Check the TCP/IP Setup of Window 2000
1) Select Start >> Control Panel >> Network and
Dial-up Connections.
HS1100 Wireless Hotspot Gateway User Manual
193
2) Right click on the Local Area Connection icon
and select “Properties”.
3) Select “Internet Protocol (TCP/IP)” and then
click Properties. Now, you can choose to use
DHCP or a specific IP address.
4) Using DHCP: If you want to use DHCP, choose
“Obtain an IP address automatically, and then
click OK. This is also the default setting of
Windows. Then, reboot the PC to make sure an
IP address is obtained from HS1100.
HS1100 Wireless Hotspot Gateway User Manual
194
5) Using Specific IP Address: If you want to use a specific IP address, acquire the following information
from the network administrator: the IP Address, Subnet Mask and DNS Server address provided by your
ISP and the Gateway address of HS1100.
If your PC has been set up completely, please inform the network administrator before proceeding to the
following steps.
5.1) Choose “Use the following IP address” and
enter the IP address, Subnet mask. If the DNS
Server field is empty, select “Using the
following DNS server addresses” and enter
the DNS Server address. Then, click OK.
5.2) Click Advanced to enter the Advanced
TCP/IP Settings window.
5.3) Click on the IP Settings tab and click Add
below the “Default gateways” column and the
TCP/IP Gateway Address window will appear.
5.4) Enter the gateway address of HS1100 in the
Gateway” field, and then click Add. After
back to the IP Settings tab, click OK to
complete the configuration.
HS1100 Wireless Hotspot Gateway User Manual
195
Check the TCP/IP Setup of Window XP
1) Select Start >> Control Panel >> Network
Connection.
2) Right click on the Local Area Connection icon
and select “Properties”.
3) Click on the General tab and choose “Internet
Protocol (TCP/IP)”, and then click Properties.
Now, you can choose to use DHCP or a specific
IP address.
HS1100 Wireless Hotspot Gateway User Manual
196
4) Using DHCP: If you want to use DHCP, choose
“Obtain an IP address automatically” and click
OK. This is also the default setting of Windows.
Then, reboot the PC to make sure an IP address
is obtained from HS1100.
5) Using Specific IP Address: If you want to use a
specific IP address, acquire the following
information from the network administrator: the IP
Address, Subnet Mask and DNS Server address
provided by your ISP and the Gateway address of
HS1100.
If your PC has been set up completely, please inform the network administrator before proceeding to the
following steps.
5.1) Choose “Use the following IP address” and
enter the IP address, Subnet mask. If the DNS
Server field is empty, select “Using the
following DNS server addresses” and enter
the DNS Server address. Then, click OK.
5.2) Click Advanced to enter the Advanced
TCP/IP Settings window.
HS1100 Wireless Hotspot Gateway User Manual
197
5.3) Click on the IP Settings tab and click Add
below the “Default gateways” column and the
TCP/IP Gateway Address window will appear.
5.4) Enter the gateway address of HS1100 in the
Gateway” field, and then click Add. After
back to the IP Settings tab, click OK to finish
the configuration.
HS1100 Wireless Hotspot Gateway User Manual
198
2. External Network Access / User Login
If all the steps are set properly, HS1100 can be further connected to the managed network. Before connecting a
client device (e.g. laptop, PC) to HS1100’s Public LAN (LAN1/LAN2 by default), if eliminating the need for client IP
configuration is desired, the administrator can enable the “IP PnP” function to support both static and dynamic IP.
Otherwise, the client device must be set to use DHCP in TCP/IP to obtain an IP address automatically.
1. Open an Internet browser on a client device and the default User Login Page will be displayed.
2. Enter a username and password previously created in the Local User account database (e.g. “test@postfix1”
for Username and “test for Password). Check the Remember Me box to store the username and password on
the current computer in order to automatically login to the system at next login. Then, click the Submit button.
3. The Login Successful page appearing means HS1100 has been installed and configured successfully. Now,
you are connected to the network and Internet!
4. The Remaining button on the User Login Page is for on-demand users only, where they can check their
Remaining Usage time. The notice shown as below will appear when non-on-demand users click the Remain
HS1100 Wireless Hotspot Gateway User Manual
199
button.
5. An on-demand user can enter the username and password in the User Login Page and then click the
Remaining button to check the Remaining Usage time.
6. When an on-demand user logs in successfully, the Login Successful page shown as below will appear. The
Login Successful page contains Remaining Usage time and a Redeem button.
HS1100 Wireless Hotspot Gateway User Manual
200
y Remaining usage: Show the remaining time that the on-demand user can surf Internet.
y Redeem: When the remaining time or data size is insufficient, the user has to pay for adding credit at the
counter, and then, the user will get a new username and password. After clicking the Redeem button, a
login screen will appear. Please enter the new username and password obtained and click Redeem button.
The total available use time and data size after adding credit will show up.
The system will automatically reject the redeem process when the redeem amount exceeds the maximum
time/data volume provided by HS1100.
HS1100 Wireless Hotspot Gateway User Manual
201
Appendix H. Session Limit and Session Log
Session Limit
To prevent ill-behaved clients or malicious software from using up the system’s connection resources, the
administrator can restrict the number of concurrent sessions that a user can establish.
¾ The maximum number of concurrent sessions (TCP and UDP) for each user can be specified in the Global
policy, which applies to authenticated users, users on a non-authenticated port, privileged users, and
clients in DMZ zones.
¾ When the number of a users sessions reaches the session limit (a choice of Unlimited, 10, 25, 50, 100,
200, 350 and 500), the user will be implicitly suspended upon receipt of any new connection request. In
this case, a record will be logged to a Syslog server.
¾ Since this basic protection mechanism may not be able to protect the system from all malicious DoS
attacks, it is strongly recommended to build some immune capabilities (such as IDS or IPS solutions) in
network deployment to maintain network operation.
Session Log
The system can record connection details of each user accessing the Internet. In addition, the log data can be
sent out to a specified Syslog Server, Email Box or FTP Server based on pre-defined interval time.
¾ The description of the fields of a session log record is shown as below:
Field Description
Date and Time The date and time that the session is established
Session Type [New]: This is a newly established session.
[Blocked]: This session is blocked by a Firewall rule.
Username
The account name (with postfix) of the user. When it shows “N.A.”, it
indicates that the user or device does not need to log in with a
username, for example, the user or device is on a non-authenticated
port or on the privileged MAC/IP list. Change the account name
accordingly, if the name is not identifiable in the record.
Note: Only 31 characters are allowed for the combination of
Session Type plus Username.
Protocol The communication protocol of session: TCP or UDP
MAC The MAC address of the users computer or device
SIP The source IP address of the users computer or device
SPort The source port number of the users computer or device
DIP The destination IP address of the user’s computer or device
DPort The destination port number of the users computer or device
HS1100 Wireless Hotspot Gateway User Manual
202
¾ An example of session log data is shown as below:
31 Aug 12:35:05 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1626 DIP=203.125.164.132 DPort=80
31 Aug 12:35:05 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1627 DIP=203.125.164.132 DPort=80
31 Aug 12:35:06 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1628 DIP=203.125.164.142 DPort=80
31 Aug 12:35:06 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1629 DIP=203.125.164.142 DPort=80
31 Aug 12:35:07 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1630 DIP=67.18.163.154 DPort=80
31 Aug 12:35:09 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1631 DIP=202.43.195.52 DPort=80
31 Aug 12:35:10 2007 [New]user1@local TCP MAC=00:09:6b:cd:83:8c SIP=10.1.1.37 SPort=1632 DIP=203.84.196.242 DPort=80
HS1100 Wireless Hotspot Gateway User Manual
203
Appendix I: NetComm AG400 Thermal Ticket
Printer Quick Start Guide
AG400 is a plug and play thermal ticket printer that connects to the NetComm HS1100
wireless hotspot gateway or IAC3000 internet access controller to print out ticket for
on-demand user accounts. All billing profile configurations and settings are made in
the HS1100 or IAC3000; no configurations are required to be made in the AG400. For
detail explanation on how to configure billing profiles, please refer to the HS1100 or
IAC3000 product user manual.
1. Package Contents
The standard package of the AG400 Thermal Ticket Printer includes:
¾ AG400 Ticket Printer with paper x 1
¾ Power cable kit x 1 (AC Input: 100~240V / DC Output: 9~12V, 3A power
adaptor)
¾ Thermal paper roll x 1
¾ RJ11 Cable x 1
HS1100 Wireless Hotspot Gateway User Manual
204
2. Product Overview
HS1100 Wireless Hotspot Gateway User Manual
205
Please note:
DB25 and RJ11 connectors basically have the same function; they are used to connect
to different model. The ‘DB25 Connector’ is not used in HS1100 or IAC3000 system.
No connection is needed to this DB25 connector.
HS1100 Wireless Hotspot Gateway User Manual
206
3. Installation
HS1100 Wireless Hotspot Gateway User Manual
207
HS1100 Wireless Hotspot Gateway User Manual
208
AG400 Thermal Ticket Printer quick installation completed
HS1100 Wireless Hotspot Gateway User Manual
209
Appendix J: Legal & Regulatory Information
This manual is copyright. Apart from any fair dealing for the purposes of private study, research, criticism or review, as permitted under the Copyright Act, no part
may be reproduced, stored in a retrieval system or transmitted in any form, by any means, be it electronic, mechanical, recording or otherwise, without the prior
written permission of NetComm Limited. NetComm Limited accepts no liability or responsibility, for consequences arising from the use of this product.
NetComm Limited reserves the right to change the specifications and operating details of this product
without notice.
NetComm is a registered trademark of NetComm Limited.
All other trademarks are acknowledged the property of their respective owners.
Customer Information
ACA (Australian Communications Authority) requires you to be aware of the following information and warnings:
(1) This unit shall be connected to the Telecommunication Network through a line cord which meets the requirements of the ACA TS008 Standard.
(2) This equipment has been tested and found to comply with the Standards for C-Tick and or A-Tick as set by the ACA . These standards are designed to
provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio noise and,
if not installed and used in accordance with the instructions detailed within this manual, may cause interference to radio communications. However,
there is no guarantee that interference will not occur with the installation of this product in your home or office. If this equipment does cause some
degree of interference to radio or television reception, which can be determined by turning the equipment off and on, we encourage the user to try to
correct the interference by one or more of the following measures:
Change the direction or relocate the receiving antenna.
Increase the separation between this equipment and the receiver.
Connect the equipment to an alternate power outlet on a different power circuit from that to which the receiver/TV is connected.
Consult an experienced radio/TV technician for help.
(3) The power supply that is provided with this unit is only intended for use with this product. Do not use this power supply with any other product or do not
use any other power supply that is not approved for use with this product by NetComm. Failure to do so may cause damage to this product, fire or result
in personal injury.
GNU General Public License
This product includes software code that is subject to the GNU General Public License (“GPL”) or GNU Lesser General Public License (“LGPL”). This code is subject to
the copyrights of one or more authors and is distributed without any warranty. A copy of this software can be obtained by contacting NetComm Limited on +61 2 9424
2059.
Product Warranty
The warranty is granted on the following conditions:
1. This warranty extends to the original purchaser (you) and is not transferable;
HS1100 Wireless Hotspot Gateway User Manual
210
2. This warranty shall not apply to software programs, batteries, power supplies, cables or other accessories supplied in or with the product;
3. The customer complies with all of the terms of any relevant agreement with NetComm and any other reasonable requirements of NetComm including
producing such evidence of purchase as NetComm
may require;
4. The cost of transporting product to and from NetComm’s nominated premises is your responsibility; and,
5. NetComm does not have any liability or responsibility under this warranty where any cost, loss, injury or damage of any kind, whether direct, indirect,
consequential, incidental or otherwise arises out of events beyond NetComm’s reasonable control. This includes but is not limited to: acts of God, war,
riot, embargoes, acts of civil or military authorities, fire, floods, electricity outages, lightning, power surges, or shortages of materials or labour.
6. The customer is responsible for the security of their computer and network at all times. Security features may be disabled within the factory default
settings. NetComm recommends that you enable these features to enhance your security.
The warranty is automatically voided if:
1. You, or someone else, use the product, or attempts to use it, other than as specified by NetComm;
2. The fault or defect in your product is the result of a voltage surge subjected to the product either by the way of power supply or communication line,
whether caused by thunderstorm activity or any other cause(s);
3. The fault is the result of accidental damage or damage in transit, including but not limited to liquid spillage;
4. Your product has been used for any purposes other than that for which it is sold, or in any way other than in strict accordance with the user manual
supplied;
5. Your product has been repaired or modified or attempted to be repaired or modified, other than by a qualified person at a service centre authorised by
NetComm; and,
6. The serial number has been defaced or altered in any way or if the serial number plate has been removed.
Limitations of Warranty
The Trade Practices Act 1974 and corresponding State and Territory Fair Trading Acts or legalisation of another Government (“the relevant acts”) in certain
circumstances imply mandatory conditions and warranties which cannot be excluded. This warranty is in addition to and not in replacement for such conditions
and warranties.
To the extent permitted by the Relevant Acts, in relation to your product and any other materials provided with the product (“the Goods”) the liability of NetComm
under the Relevant Acts is limited at the option of NetComm to:
Replacement of the Goods; or
Repair of the Goods; or
Payment of the cost of replacing the Goods; or
Payment of the cost of having the Goods repaired.
All NetComm ACN 002 490 486 products have a standard 12 months warranty from date of purchase. However some products have an extended
warranty option (refer to packaging). To be eligible for the extended warranty you must supply the requested warranty information to NetComm within 30
days of the original purchase by registering on-line via the NetComm web site at
www.netcomm.com.au
Product Warranty
NetComm products have a standard 12 months warranty from date of purchase. However some products have an extended
warranty option, via registering your product
online at the NetComm website www.netcomm.com.au.
Technical Support
If you have any technical difficulties with your product, please refer to the support section of our website.
www.netcomm.com.au/support
Note: NetComm Technical Support for this product only covers the basic installation and features outlined in the Quick Start Guide. For further information regarding the advanced features of this product, please refer to the configuring
sections in the User Guide or contact a Network Specialist.
NETCOMM LIMITED PO Box 1200, Lane Cove NSW 2066 Australia
P: 02 9424 2070 F: 02 9424 2010
E: sales@netcomm.com.au W: www.netcomm.com.au
DYNALINK NZ 224b Bush Road, Albany, Auckland, New Zealand
P: 09 448 5548 F: 09 448 5549
E: sales@dynalink.co.nz W: www.dynalink.co.nz
www.dynalink.co.nz
www.dynalink.co.nz
Trademarks and registered trademarks are the property of NetComm Limited or their respective owners.
Specifications are subject to change without notice. Images shown may vary slightly from the actual product.

Navigation menu