background image

 

©

 2008 4IPNET, INC.

 

26 

4ipnet WHG301 User

s Manual 

 

Ÿ 

PPTP Client: 

Select 

STATIC

 to specify the IP address of the PPTP Client manually or select

 DHCP

 to get the IP 

address automatically. The fields with red asterisks are required to be filled in. There is a

 Dial on demand

 

function under PPPoE. If this function is enabled, a 

Maximum Idle Time

 can be set. When the idle time is 

reached, the system will automatically disconnect itself. 

 

 

Summary of Contents for WHG301

Page 1: ...V1 00 4ipnet WHG301 User s Manual...

Page 2: ...INC does not assume any liability arising out the application or use of any products or software described herein Neither does it convey any license under its parent rights not the parent rights of ot...

Page 3: ...e harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or...

Page 4: ...on Steps 8 3 2 Quick Software Configuration 9 4 Web Interface Configuration 19 4 1 System Configuration 21 4 1 1 Configuration Wizard 22 4 1 2 System Information 23 4 1 3 WAN1 Configuration 25 4 1 4 W...

Page 5: ...4 5 3 Firmware Upgrade 107 4 5 4 Restart 108 4 5 5 Network Utilities 109 4 6 Status 110 4 6 1 System Status 111 4 6 2 Interface Status 113 4 6 3 Routing Table 115 4 6 4 Current Users 116 4 6 5 Traffic...

Page 6: ...knowledge to complete the installation 1 2 Document Conventions Represents essential steps actions or messages that should not be ignored 8 Note Contains related information that corresponds to a top...

Page 7: ...tication authorization and accounting The user account information is stored in the local database or a specified external database server Featured with user authentication and integrated with externa...

Page 8: ...h LAN is authentication enabled LAN Support NAT a IP Port destination redirection b DMZ server mapping c virtual server mapping d H 323 pass through Built in with DHCP Server and support DHCP relay Su...

Page 9: ...vice zones Max concurrent user session tcp udp limit A setting for user idle timeout Configurable user Black List Instant guest account generation by authorized users Export Import local users list to...

Page 10: ...IUS server Contain ten configurable billing plans for on demand accounts Support credit card billing system by Authorize net and PayPal Provide session expiration control for on demand accounts Provid...

Page 11: ...o install the TCP IP network protocol 3 1 2 Package Contents The standard package of 4ipnet WHG301 includes 4ipnet WHG301 x 1 Quick Installation Guide QIG x 1 CD ROM with User s Manual and QIG x 1 DC...

Page 12: ...N1 WAN2 Two WAN ports 10 Base T 100Base TX RJ 45 are available on the system LAN1 LAN8 Client machines connect to WHG301 via LAN ports 10 Base T 100Base TX RJ 45 8 Note By default all LAN ports are se...

Page 13: ...on the LAN of a company organization The LED of this port should be on to indicate a proper connection 3 Connect an Ethernet cable to one of the LAN1 LAN8 Ports on the front panel Per your needs conne...

Page 14: ...w Step 1 Change Admin s Password Step 2 Choose System s Time Zone Step 3 Set System Information Step 4 Select Connection Type for WAN Port Step 5 Add Local User Account Optional Step 6 Save and Restar...

Page 15: ...screen the reasons may be 1 The PC is set incorrectly so that the PC can t obtain the IP address automatically from the LAN port 2 The IP address and the default gateway are not under the same networ...

Page 16: ...unts but without the permission to change the settings of the profiles of Firewall Specific Route and Schedule User Name manager Password manager Operator The operator can only access the configuratio...

Page 17: ...the interface to return to the login screen 2 Now you are ready to run the Wizard To quickly configure WHG301 by using the Configuration Wizard click System Configuration from the top menu to go to t...

Page 18: ...ep of the wizard if you wish to go back to modify the settings please click the Back button to go back to the previous step Step 1 Change Admin s Password Enter a New Password for the admin account an...

Page 19: ...age Enter the URL that users should be initially directed to when successfully authenticated to the network NTP Server Enter the URL of the external time server for 4ipnet WHG301 time synchronization...

Page 20: ...and PPPoE Client Select a proper Internet connection type and click Next to continue Dynamic IP Address If this option is selected an appropriate IP address and related information will automatically...

Page 21: ...2008 4IPNET INC 16 4ipnet WHG301 User s Manual PPPoE Client Set PPPoE Client s Information Enter the Username and Password provided by your ISP Click Next to continue...

Page 22: ...ame e g test Password e g test MAC Address optional and assign an Applied Group to this particular user or use the default None More users can be added to this authentication method by clicking the Ad...

Page 23: ...ent message will appear on the screen Please do NOT interrupt WHG301 restart process until the Configuration Wizard pop up window has disappeared which indicates the restart process has been completed...

Page 24: ...2008 4IPNET INC 19 4ipnet WHG301 User s Manual 4 Web Interface Configuration This chapter will guide you through further detailed settings The following table shows all the functions of 4ipnet WHG301...

Page 25: ...pgrade Routing Table WAN2 Configuration Policy Configuration Template Settings Walled Garden List Restart Current Users WAN Traffic Settings Additional Configuration Firmware Management Proxy Server P...

Page 26: ...WHG301 User s Manual 4 1 System Configuration This section includes the following functions Configuration Wizard System Information WAN1 Configuration WAN2 Configuration WAN Traffic Settings LAN Port...

Page 27: ...301 system using the online Configuration Wizard or changing the settings by commands manually The Configuration Wizard comprises of 6 basic steps providing a simple and easy way to go through the bas...

Page 28: ...its IP address In addition when Use the name on the security certificate option is checked the system will use the CN Common Name value of the uploaded SSL certificate as the domain name Home Page En...

Page 29: ...tor is using a computer with the IP address of 10 0 0 3 he or she can access the web management page SNMP If this function is enabled the Manager IP and the community can be assigned to access to acce...

Page 30: ...1 port Preferred DNS Server The primary DNS server used by the system Alternate DNS Server The substitute DNS server used by the system This is an optional field Dynamic IP Address It is only applicab...

Page 31: ...Client manually or select DHCP to get the IP address automatically The fields with red asterisks are required to be filled in There is a Dial on demand function under PPPoE If this function is enable...

Page 32: ...WAN2 port connects to Default gateway a gateway of the network WAN2 port connects to Preferred DNS Server The primary DNS server used by the system Alternate DNS Server The substitute DNS server used...

Page 33: ...2008 4IPNET INC 28 4ipnet WHG301 User s Manual...

Page 34: ...thms based on the weight ratio WAN1 Weight The percentage of traffic through WAN1 Range 1 99 by default it is 50 Base The weight ratio between WAN1 and WAN2 can be based on Sessions Packets or Bytes P...

Page 35: ...01 User s Manual a reminding message This reminding message will appear on clients screens when Internet connection is down SIP authentication is exempt from Load Balancing and WAN Failover A fixed WA...

Page 36: ...fic from one Service Zone as each Service Zone is identified by physical LAN ports In Tag Based mode each LAN port can serve traffic from any Service Zone as each Service Zone is identified by VLAN ta...

Page 37: ...is selected traffic from different virtual Service Zones will be distinguished by physical LAN ports Each LAN port can be mapped to a Service Zone in the form of a many to one mapping between ports an...

Page 38: ...y VLAN tagging instead of by physical LAN ports Select Tag Based and then click Apply to activate the Tag Based VLAN function When a restart message screen appears do NOT restart the system until you...

Page 39: ...security feature wireless encryption method traffic control and etc There are up to nine Service Zones to be utilized by default they are named as Default SZ1 SZ8 as shown in the table below Service...

Page 40: ...DHCP Server Settings Related information needed on setting up the DHCP Server is listed here Please note that when Enable DHCP Relay is enabled the IP address of clients will be assigned by an extern...

Page 41: ...ertain MAC address 2 Service Zone Settings SIP Interface Configuration The system provides SIP proxy functionality which allows SIP clients to pass through NAT When enabled all SIP traffic can pass th...

Page 42: ...efer to Appendix I Customizable Pages for more details Group Permission for this Service Zone For each Service Zone the administrator can set up multiple groups for that Service Zone For each group an...

Page 43: ...they attempt to send receive their emails using POP3 email program for example Microsoft Outlook before they are authenticated Click Edit Mail Message to edit the message in HTML format 4 Service Zone...

Page 44: ...ipnet WHG301 User s Manual 4 2 User Authentication This section includes the following functions Authentication Configuration Black List Configuration Group Configuration Policy Configuration and Addi...

Page 45: ...ervice Zones Server Name There are several authentication options supported by WHG301 Server 1 to Server 4 On demand User and SIP Click the hyperlink of the respective Server Name to configure the aut...

Page 46: ...ob BostonLdap or tim TaipeiRadius when multiple options are concurrently in use One of authentication option can be assigned as default For authentication assigned as default the postfix can be omitte...

Page 47: ...te local user account The Upload User button is for importing a list of user account from a text file The Download User button is for exporting all local user accounts into a text file Clicking on eac...

Page 48: ...to 4 2 3 Group Configuration o Upload User Click Upload User to enter the Upload User from File interface Click the Browse button to select the text file for uploading user accounts then click Upload...

Page 49: ...account information and then save it on disk Search Enter a keyword of a username to be searched in the text filed and click this button to perform the search All usernames matching the keyword will...

Page 50: ...r Roaming Out and the section for 802 1X Authentication Click the hyperlink RADIUS Client List to enter the Radius Client Configuration interface Choose the desired type Disable Roaming Out or 802 1X...

Page 51: ...Enter the information for the primary server and or the secondary server the secondary server is not required The fields with red asterisk are necessary information These settings will become effectiv...

Page 52: ...nformation for the primary server and or the secondary server the secondary server is not required The fields with red asterisk are necessary information These settings will become effective immediate...

Page 53: ...class attribute sent from the RADIUS server When the clients classified by RADIUS class attributes log into the system via the RADIUS server each client will be mapped to its assigned Group Server IP...

Page 54: ...s of the external LDAP server Port The authentication port of the external LDAP server Base DN The Distinguished Name for the navigation path of LDAP account Account Attribute The attribute of LDAP ac...

Page 55: ...2008 4IPNET INC 50 4ipnet WHG301 User s Manual...

Page 56: ...on Enter the server IP address and enable disable the transparent login function These settings will become effective immediately after clicking theApply button Server IP The IP address of the externa...

Page 57: ...s used to inform the system which type of authentication database to be used for authentication when multiple databases are concurrently in use Enter the postfix used for on demand users Monetary Unit...

Page 58: ...t will be printed on the receipt These headers are optional Receipt Footer The entered content will be printed on the receipt This footer is optional Background Image You can choose to customize the t...

Page 59: ...n is activated Plan The number of the specific plan Type This is the type of the plan based on which it defines how the account can be used Quota The limit on how On demand users are allowed to access...

Page 60: ...end customers who wish to pay for the service on line The three options are Authorize Net PayPal and Disable Authorize Net Before setting up Authorize Net it is required that the merchant owners have...

Page 61: ...d by their server were actually sent from the Authorize Net Service Disclaimer Content Choose Billing Plan for Authorize Net Payment Page Client s Purchasing Record Service Disclaimer Content View ser...

Page 62: ...at needs to be shown for this field Required Check the box to indicate this item as a required field Credit Card Number Credit card number of the customer The Payment Gateway will only accept card num...

Page 63: ...ess entered either in the billing or shipping information of a given transaction City The city is associated with either the billing address or shipping address of a transaction State A state is assoc...

Page 64: ...ken of this PayPal account to continue PayPal Payment Page Configuration External Payment Gateway PayPal Payment Page Configuration Business Account The Login ID an email address that is associated wi...

Page 65: ...mark Content Client s Purchasing Record Invoice Number An invoice number may be provided as additional information against a transaction This is a reference field that may contain any kind of informat...

Page 66: ...ts cannot be created by clicking Create button Please goes back to Billing Plans to active at least one Billing plan by clickingEdit button and Apply the setting to activate the plan The printer used...

Page 67: ...2008 4IPNET INC 62 4ipnet WHG301 User s Manual...

Page 68: ...assword of the user Remaining Quota The remaining time or volume that the user can continue to use to access the network Status The status of the account o Normal the account is not currently in use a...

Page 69: ...trusted SIP Registrars up to four of them A group can be chosen to govern SIP traffic SIP SIP authentication supports 4 Trusted SIP Registrar IP Address The IP address of the Trusted SIP Registrar Re...

Page 70: ...red black list Select Black List There are 5 lists to select from for the desired black list Name Set the black list name and it will show on the pull down menu above Add User to List Click the hyperl...

Page 71: ...2008 4IPNET INC 66 4ipnet WHG301 User s Manual...

Page 72: ...Policy within this zone The same Group within different Service Zones can be applied with different Policies as well as different Authentication Options Group Configuration Group 1 8 QoS Profile Set...

Page 73: ...andwidth allowed to be shared by clients within this Group o Individual Maximum Uplink Defines the maximum uplink bandwidth allowed for an individual client belonging to this Group The Individual Maxi...

Page 74: ...n accessing respective Service Zones Edit Group Permission The relation between Group and Service Zone is many to many every Group can access network services via more than one Service Zone and meanwh...

Page 75: ...Group 1 8 can access Default Service Zone where they are governed by Policy 1 8 respectively o Policy Select a Policy that the Group will be applied with when accessing this Service Zone o Edit Group...

Page 76: ...of authentication database is LDAP the Attribute Group Mapping function will be available to allow the administrator to assign a Group for LDAP attribute therefore a Policy applied to this Group will...

Page 77: ...This link leads to a Service Protocols List where the administrator can define a list of service by protocols TCP UDP ICMP IP o Firewall Rules Click the number of Filter Rule No to edit individual rul...

Page 78: ...Sec Encrypted Check the box for only filtering on the encrypted traffic o Service Protocol There are defined protocols in the service protocols list to be selected o Schedule When schedule is selected...

Page 79: ...type of authentication database is LDAP the Attribute Group Mapping function will be available to allow the administrator to assign a Group for LDAP attribute therefore a Policy applied to this Group...

Page 80: ...add new customized service protocols by clicking Add and delete the added protocols by clicking Delete o Firewall Rules Click on the hyperlink in the No column to edit individual rules and then click...

Page 81: ...ffic Check the box to filter the encrypted traffic only o Service Protocol Select a defined protocol from the drop down list box o Schedule Defines the time when this firewall rule will be activated W...

Page 82: ...e destination is a single host o Gateway IP Address The IP address of the gateway or next router to the destination Schedule Profile Click Setting of Schedule Profile to enter the configuration page S...

Page 83: ...up the user will be kicked out automatically Idle Timeout If a user has idled with no network activities the system will automatically kick out the user Interim Update The system will update the user...

Page 84: ...user login page To Use Default Certificate Click Use Default Certificate to use the default certificate and key Click restart to validate the changes Credit Reminder The administrator can enable this...

Page 85: ...sses in this list can log into WHG301 There are 40 users maximum allowed in this MAC address list User authentication is still required for these users Please enter the Permit MAC Address List to fill...

Page 86: ...agement WHG301 supports to manage up to 12 access points AP and they can be configured in this section This section includes the following functions AP List AP Discovery Manual Configuration Template...

Page 87: ...be shown in the list The AP can be edited by clicking the hyperlink of AP Name and the AP status can be got by clicking the hyperlink of Status Check any AP and then click the button below to Reboot E...

Page 88: ...N Interface Setting Wireless Interface Setting and Access Control Setting Click the hyperlink to go on the configuration General Setting Click Setting to enter the General Setting interface Firmware i...

Page 89: ...onnect to the AP When Disabled is selected all clients can connect to the AP The default is Disabled o User Limit Limit the number of users connected to that AP Status After clicking the hyperlink in...

Page 90: ...2008 4IPNET INC 85 4ipnet WHG301 User s Manual...

Page 91: ...very Start assigning from this IP address to discovered APs Then click the Scan Now button and the APs match the given settings will show in the list below If one of the IP addresses intended is used...

Page 92: ...ess configuration is the same as the settings mentioned above When Background AP Discovery function is enabled the system will scan once every 10 minutes or according to the time set by the administra...

Page 93: ...WHG301 User s Manual 4 3 3 Manual Configuration The AP also can be added manually even though when it is offline Input the related data of the AP and select a Template After clicking Add the AP will b...

Page 94: ...ithout configuring the template from the beginning administrators can also revise some settings for demand If copy is not desired please select NONE Input the Template Name and Template Remark and cli...

Page 95: ...current version of the AP s firmware New firmware can be uploaded here to update the current firmware To upload click Browse to select the file and then click Upload 4 3 6 AP Upgrade Check the APs wh...

Page 96: ...Update Update the WDS connection with the following operations Add Add a new WDS connection with a Child AP not in the WDS and a Parent AP from the AP List A new WDS Tree will be added if the selecte...

Page 97: ...User s Manual 4 4 Network Configuration This section includes the following functions Network Address Translation Privilege List Monitor IP List Walled Garden List Proxy Server Properties Dynamic DNS...

Reviews: