AirLive WIAS-3200N User Manual Download Page 55

Page: 55 / 137

6. Restrain the Users

AirLive WIAS-3200N User’s Manual

The administrator is able to add new custom service protocols by clicking

Add

, and delete

the added protocols individually or with

Select All

followed by

Delete

operation.

Caution:

The Predefined Service Protocols can not be deleted.

Click

Add

to add a custom service protocol. The

Protocol Type

can be defined from a list

of service by protocols (TCP/UDP/ICMP/IP); and then define the

Source Port

(range) and

Destination Port

(range); click

Apply

to save this protocol.

If the

Protocol Type

ICMP

, it will need to define

Type

and

Code

Summary of Contents for WIAS-3200N

Page 1: ...User s Manual 802 11n Internet Access Server WIAS 3200N ...

Page 2: ...cal photocopying or recording without the written consent of OvisLink Corp OvisLink Corp has made the best effort to ensure the accuracy of the information in this user s guide However we are not liable for the inaccuracies or errors in this guide Please use with caution All information is subject to change without notice All Trademarks are properties of their respective holders ...

Page 3: ...ncrease the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment This devi...

Page 4: ...4 System Requirement 9 2 5 Installation Steps 10 2 6 Access Web Management Interface 11 3 Combine WIAS 3200N to the Network 13 3 1 Network Requirement 13 3 2 Configure WAN Port 13 3 3 Internet Connection Detection 15 3 4 WAN Bandwidth Control 16 3 5 What is Zone 17 4 Let Your Network to Be a Wireless Network 22 4 1 System Wireless General Settings 22 4 2 Zone Wireless Settings 23 4 3 Zone Wireless...

Page 5: ...3 8 User Login and Logout 64 8 1 Before User Login 64 8 2 After User Login 68 9 Networking Features of a Gateway 70 9 1 IP Plug and Play 70 9 2 Dynamic Domain Name Service DDNS 71 9 3 Port and IP Redirect 72 10 System Management and Utilities 73 10 1 System Time 73 10 2 Management IP 73 10 3 User Log Access IP Address 75 10 4 SNMP 76 10 5 Three Level Administration 76 10 6 Change Password 78 10 7 ...

Page 6: ...87 11 2 Notification 94 12 Advanced Applications 98 12 1 Upload Download Local Users Accounts 98 12 2 RADIUS Advanced Settings 99 12 3 Roaming Out 100 12 4 Customizable Pages 101 Appendix A Network Configuration on PC User Login 104 Appendix B Policy Priority 117 Appendix C WDS Management 118 Appendix D On demand Account Types Billing Plan 120 Appendix E External Payment Gateways 124 ...

Page 7: ...sents essential steps actions or messages that should not be ignored Contains related information that corresponds to a topic Note Indicates that clicking this button will return to the homepage of this section Indicates that clicking this button will exit the system Indicates that clicking this button will apply all of your settings Indicates that clicking this button will clear what you have set...

Page 8: ...ernet Cable x 1 y Power Adapter DC 12V x 1 y Rubber Antenna x 2 y Mounting Kit x 1 y Ground Cable x 1 Caution It is highly recommended to use all the supplies in the package instead of substituting any components by other suppliers to guarantee best performance ...

Page 9: ...e wall mountable dust proof IP50 metal housing 2 2 System Concept WIAS 3200N is capable of managing user authentication authorization and accounting The user account information is stored in the local database or a specified external RADIUS database server Featured with user authentication and integrated with external payment gateway WIAS 3200N allows users to easily pay the fee and enjoy the Inte...

Page 10: ... 2 WES Press to start running WES WDS Easy Setup process 3 Console Attach the RS 232 console cable here for management use only 4 LAN1 LAN2 Attach Ethernet cables here for connecting to the wired local network LAN1 maps to Private Zone and requires no user authentication LAN2 maps to Public Zone and by default requires user authentication ...

Page 11: ...upports Power over Ethernet PoE for flexible installation 6 Reset This is hardware reset button Press once to restart the system 7 Power Socket For connecting to external power supply via the power adapter 12VDC 1A Rear Panel Attach antennas here WIAS 3200N supports 1 RF interface with 2 SMA connectors Antenna Connector Top LED Panel ...

Page 12: ... wireless ready 5 LED ON indicates WAN port is connected to the internet 6 For indicating WES status during WES setup Master Slave WES Start LED BLINKING SLOWLY LED BLINKING QUICKLY WES Negotiate LED BLINKING SLOWLY LED BLINKING QUICKLY WES Fail Negotiate Timeout LED OFF LED OFF WES Success LED ON for over 5 seconds LED ON for over 5 seconds after Master displays WES Success 7 For future usage onl...

Page 13: ...et cable to the LAN1 port of WIAS 3200N on the front panel Connect the other end of the cable to a PC for configuring the system The LAN1 LED indicator should be ON to indicate a proper connection Note WIAS 3200N has two virtual zones Private and Public which are mapped to LAN1 192 168 1 254 and LAN2 192 168 11 254 respectively 4 There are two ways to supply power over to WIAS 3200N a Connect the ...

Page 14: ...thentication is required for users Note The instructions below are illustrated with the administrator PC connected to LAN1 To access the web management interface connect a PC to the LAN Port and then launch a browse Make sure you have set DHCP in TCP IP of your PC to get an IP address dynamically The default gateway IP address is the default gateway IP address of Private Zone 192 168 1 254 Next en...

Page 15: ...N as an illegal website Please press Continue to this website to continue Caution If you can t get the login screen the reasons may be 1 The PC is set incorrectly so that the PC can t obtain the IP address automatically from the LAN port 2 The IP address and the default gateway are not under the same network segment Please set your PC with a static IP address such as 192 168 1 xx in your network a...

Page 16: ...s for the WAN Port Static Dynamic and PPPoE These connection types are enough to support most ISP Now let us discuss how to configure WAN port Go to Main Menu System WAN Configuration The parameters related to each connection method are described in the following section 3 2 1 Static IP Static Manually specifying the IP address of the WAN Port The fields with red asterisks are mandatory z IP Addre...

Page 17: ...he system Click the Renew button to get an IP address automatically 3 2 3 PPPoE PPPoE When selecting PPPoE to connect to the network please set the User Name Password MTU and Clamp MSS There is a Dial on demand function under PPPoE If this function is enabled a Maximum Idle Time will be available for input a value When the idle time is reached the system will automatically disconnect itself ...

Page 18: ...rnet Connection Detection When enabled system will try to access these IP Domain addresses if system can reach these IP Domain address it means that the outbound Internet connection is in normal state On the other hand there is a text box available for the administrator to enter a reminding message This reminding message will appear on clients screens when Internet connection is down ...

Page 19: ...traffic though the WAN interface These parameters set here should not exceed the real bandwidth coming from your ISP For example if your xDSL is 8Mbs 640kbs you may input these two values here Available Bandwidth on WAN Interface y Uplink It specifies the maximum uplink bandwidth that can be shared by clients of the system y Downlink It specifies the maximum downlink bandwidth that can be shared b...

Page 20: ... required to be authenticated before using the network service On the other hand clients in Public Zone are required to get authentication before using the network service y Name Mnemonic name of the Zone y ESSID The SSID that is associated with the Zone y Wireless Security Data encryption method for wireless networks within the Zone y Default Authen Option Default authentication method server tha...

Page 21: ...MI can also be accesses via WAN port as long as the administrator uses an IP address listed in Management IP Address List setting If both WAN and LAN ports are unable to reach WMI please use console interface to solve this issue 3 5 2 Planning Your Internet Network Administrator can access the Web Management Interface WMI of WIAS 3200N through the wired LAN port Waiters or waitresses can send orde...

Page 22: ...work Configure Zone network go to Menu System Zone Configuration Click the button Configure of Private zone for further configuration The parameter descriptions of Basic Settings for Private Zone and Public Zone are the same The wireless settings under each zone will be covered in the next section ...

Page 23: ...d the IP address of clients will be assigned by an external DHCP server The system will only relay DHCP information from the external DHCP server to downstream clients of this zone o Start IP Address End IP Address A range of IP addresses that the built in DHCP server will assign to clients Note please change the Management IP Address List accordingly at System General Management IP Address List t...

Page 24: ...rver is applicable to this zone o Lease Time This is the time period that the IP addresses issued from the DHCP server are valid and available o Reserved IP Address List Each zone can reserve up to 40 IP addresses from predefined DHCP range to prevent the system from issuing these IP addresses to downstream clients The administrator can reserve a specific IP address for a special device with certa...

Page 25: ...s Select Enable for Short Preamble or Disable for Long Preamble y Short Guard Interval 802 11g n only The guard interval is the space between symbols characters being transmitted to eliminate inter symbol interference With 802 11n short guard interval is half of what it is used to be to increase throughput Select Enable to use Short Guard Interval or Disable to use normal Guard Interval y Channel ...

Page 26: ...e interval for waiting the ACKnowledgement frame If the ACK is not received within that timeout period then the packet will be re transmitted Higher ACK Timeout will decrease the packet lost but the throughput will be growing worse 4 2 Zone Wireless Settings Each zone has its own VAP and corresponds to one SSID In Private zone it s VAP1 and the SSID is hidden so public users cannot scan this SSID ...

Page 27: ...ed Fragment Threshold Enter a value between 256 and 2346 The default is 2346 A packet size larger than this threshold will be fragmented sent with several pieces instead of one chunk before transmission A smaller value results in smaller frames but allows a larger number of frames in transmission A lower Fragment Threshold setting can be useful in areas where communication is poor or disturbed by ...

Page 28: ...me indicates how often the beacon signal will be sent from the VAP RTS Threshold Enter a value between 1 and 2346 RTS Request to Send Threshold determines the packet size at which the system issues a request to send RTS before sending the frame to prevent the hidden node problem The RTS mechanism will be activated if the data size exceeds the value provided A lower RTS Threshold setting can be use...

Page 29: ...based on four access categories voice video best effort and background Applications without WMM and applications that do not require QoS are assigned to the best effort category which receives a lower priority than that of voice and video Therefore WMM decides which data streams are more important and assigns them a higher traffic priority This option works with WMM capable clients only 4 3 Zone W...

Page 30: ...will be used for the encryption of wireless frames during data transmission o WEP Keys Provide the pre defined WEP key value the system supports up to 4 sets of WEP keys 802 1X o Dynamic WEP For 802 1X security type Dynamic WEP is always enabled to automatically generate WEP keys for encryption o WEP Key Length Select from 64 bit or 128 bit key length o Re keying Period The time interval for the d...

Page 31: ...A RADIUS Same as 802 1X when it is selected it is combined with TKIP AES or Mixed mode o Cipher Suite Select an encryption method from TKIP WPA AES WPA TKIP WAP2 AES WAP2 or Mixed o Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds ...

Page 32: ...and ONDEMAND y Auth Server Name Set a name for the authentication databases by using numbers 0 9 alphabets a z or A Z dash underline _ space and dot only This name is used for the administrator to identify the authentication options easily such as HQ RADIUS y Postfix A postfix represents the authentication server in a complete username For example user1 local means that this user user1 will be aut...

Page 33: ...text file The Download User button is for exporting all local user accounts into a text file Clicking on each user account leads to a page for configuring the individual local account y Add User Click this button to enter into the Adding User s to the List interface Fill in the necessary information such as Username Password MAC Address and Remark Select a desired Policy to classify local users Cl...

Page 34: ...elete all the users at once or click on Delete hyperlink to delete a specific the user individually y Edit User If editing the content of individual user account is needed click the username of the desired user account in Local User List to enter the User Profile Interface for that particular user and then modify or add any desired information such as Username Password MAC Address optional Applied...

Page 35: ...of any one of RADIUS servers for further configuration The RADIUS server sets the external authentication for user accounts Enter the information for the primary server and or the secondary server the secondary server is not mandatory The fields with red asterisk are necessary information These settings will become effective immediately after clicking the Apply button ...

Page 36: ...uthentications for users authenticating through this Server o Username Format Select the format which the user login information is sent to the external RADIUS Server You may choose to send username in Complete userID Postfix Only ID or Leave Unmodified Please note that if Leave Unmodified option is selected the system will send the username to ...

Page 37: ...server needs this o Class Group Mapping This function is to assign a Group to a RADIUS class attribute sent from the RADIUS server When the clients classified by RADIUS class attributes logs into the system via the RADIUS server each client will be mapped to an assigned Group Primary Secondary RADIUS Server o Server Enter the domain name or IP address of your RADIUS Server o Authentication Port En...

Page 38: ...entication option y WLAN ESSID It will show the ESSID of Public Zone y Wireless Key It will show the wireless key that was configured in Public Zone settings y Currency Select the desired currency unit for charged internet access y Remaining Reminder Enable it and input the count down minute system will remind users that their quota will run out soon when their quota reaches this time The remainin...

Page 39: ...ing your own background image for the ticket or choose none Click Edit to select the image file and then click Upload The background image file size limit is 100 Kbytes No limit for the dimensions of the image is set but a 460x480 image is recommended y Number of Tickets Enable this function to print duplicate receipts Another Remark field will appear when the Number of Ticket is selected to 2 and...

Page 40: ...work y Price The unit price charged for buying an account from this billing plan y Enable Check the checkbox to activate the plan y Function Click the button Edit to add one billing plan For detailed information regarding on demand accounts and billing plan configuration please refer to Appendix E On demand Account types Billing Plan 4 External Payment Gateway This section is for merchants to set ...

Page 41: ...t is configurable Select Manual created in Username Password Creation and then administrator can enter desired username and password for the on demand account In addition an External ID such as student s school ID can be entered together with account creation After the account is created you can click Printout to print a receipt which will contain the on demand user s information including the use...

Page 42: ... total time amount or period on how On demand users are allowed to access the network For Time users it is the total time For Volume users it is the total amount of traffic y Price For each plan this is the unit price charged for an account y Status Show the status in enabled or disabled y Function Press Create button for the desired plan and Creating an On demand Account page will appear for crea...

Page 43: ... Accounts field of disabled plans will not be able to enter any number The sum of all Number of Accounts will be constrained and will not accept a number over the available account limits in database Click Create button to start batch creation Next page will show Success or Failed message to indicate the batch creation status Once creation is successful all created accounts can be exported to a te...

Page 44: ...el Cut off y Quota The total time amount interval or traffic volume on how On demand users are allowed to access the network y Price For each plan this is the unit price charged for an account y Number of Accounts The desired number of accounts to be created from the plan 8 On demand Account List All created On demand accounts are listed and related information on is also provided ...

Page 45: ... the account o Normal the account is not currently in use and has not exceeded the quota limit o Online the account is currently in use o Expired the account is not valid any more even if there is remaining quota left o Out of Quota the account has exceeded the quota limit o Redeemed the account has been applied for account renewal y External ID This is an additional information field for combined...

Page 46: ... is 365dys 23hrs 59mins 59secs even after redeem If the redeem amount exceeds this number the system will automatically reject the redeem process Note Duration time and Hotel Cut off type do not support redeem function 5 2 User Login 5 2 1 Default Authentication There are different types of authentication database LOCAL RADIUS and ONDEMAND that are supported by the system Only Public Zone can set ...

Page 47: ...stem the username must contain the postfix to identify the authentication option this user belongs to 5 2 3 An Example of User Login Normally users will be authenticated before they get network access through WIAS 3200N This section presents the basic authentication flow for end users Please make sure that the WIAS 3200N is configured properly and network related settings are done 1 Open an Intern...

Page 48: ...for example we use a local user account test local here and then click Submit button If the Remember Me check box is checked the browser will store the username and password on the current computer in order to automatically login to the system at the next login Then click the Submit button The Credit Balance button on the User Login Page is for on demand users only where they can check their Remai...

Page 49: ...5 Who Can Access the Network AirLive WIAS 3200N User s Manual 46 3 Successful The Login Success Page means you are connected to the network and Internet now ...

Page 50: ...user access control Users accounts that appear in the black list will be denied of network access The administrator can use the pull down menu to select the desired black list y Select Black List There are 5 black list profiles available for utilization y Name Set the black list name and it will show on the pull down menu above y Add User s Click the Add User s button to add users to the selected ...

Page 51: ...Remark blank not required click Apply to add the users If removing a user from the black list is desired select the user s Delete check box and then click the Delete button to remove that user from the black list After the Black List editing is completed You can select the Black List in each Authentication Server to let it to become effective ...

Page 52: ...he users with their MAC addresses in this list can login to WIAS 3200N There are 40 users maximum allowed in this MAC address list User authentication is still required for these users Click Edit to enter the MAC Address Control list Fill in these MAC addresses select Enable and then click Apply Caution The format of the MAC address is xx xx xx xx xx xx or xx xx xx xx xx xx ...

Page 53: ...l be mapped to a user of a RADIUS class attribute Global Policy Global policy is the system s universal policy containing Firewall Rules Specific Routes Profile and Maximum Concurrent Sessions which will be applied to all users unless the user has been regulated and applied with another individual Policy y Select Policy Select the desired policy profile to configure y Firewall Profile Global polic...

Page 54: ...ed to control the clients login time When Schedule is enabled clients applied with this policy are only allowed to login the system at the time which is checked in Schedule profile settings y QoS Profile QoS profile defines the traffic class for the users governed by this Policy y Maximum Concurrent Sessions Set the maximum concurrent sessions for each client belonging to this group 6 3 1 Firewall...

Page 55: ...lect All followed by Delete operation Caution The Predefined Service Protocols can not be deleted Click Add to add a custom service protocol The Protocol Type can be defined from a list of service by protocols TCP UDP ICMP IP and then define the Source Port range and Destination Port range click Apply to save this protocol If the Protocol Type is ICMP it will need to define Type and Code ...

Page 56: ...ber of filter Rule No to edit individual rules and click Apply to save the settings The rule status will show on the list Check Active checkbox and click Apply to enable that rule Rule No 1 has the highest priority Rule No 2 has the second priority and so on Each firewall rule is defined by Source Destination and Pass Block action Optionally a Firewall Rule Schedule can be set to specify when the ...

Page 57: ...t the source and destination subnet masks o Source MAC Address The MAC Address of the source IP address This is for specific MAC address filter o Service Protocol These are defined protocols in the service protocols list to be selected o Schedule When schedule is selected clients assigned with this policy are applied the firewall rule only within the time checked There are three options Always Rec...

Page 58: ...te value based on the combination of Network IP Address and Subnet Mask that have just been entered and applied o Destination Subnet Netmask The subnet mask of the destination network Select 255 255 255 255 32 if the destination is a single host o Gateway IP Address The IP address of the gateway or next router to the destination 2 Default Gateway Default Gateway The default gateway of a desired IP...

Page 59: ...Profile to enter the configuration page Select Enable to show the Permitted Login Hours list This function is used to limit the time when clients can log in Check the desired time slots checkbox and click Apply to save the settings These settings will become effective immediately after clicking Apply 6 3 4 QoS Profile For certain applications or users that need stable bandwidth or traffic priority...

Page 60: ...ownlink and Individual Maximum Downlink Total Uplink Defines the maximum uplink bandwidth allowed to be shared by clients Individual Maximum Uplink Defines the maximum uplink bandwidth allowed for an individual client The Individual Maximum Uplink cannot exceed the value of Total Uplink Individual Request Uplink Defines the guaranteed minimum bandwidth allowed for an individual client The Individu...

Page 61: ...er will be implicitly suspended upon receipt of any new connection request In this case a record will be logged to a SYSLOG server Since this basic protection mechanism may not be able to protect the system from all malicious DoS attacks it is strongly recommended to build some immune capabilities such as IDS or IPS solutions in network deployment to maintain network operation ...

Page 62: ...ess as a set After the setup accessing the External IP address listed in DMZ will be mapped to accessing the corresponding Internal IP Address These settings will become effective immediately after clicking the Apply button The External IP Address of the Automatic WAN IP Assignment is the IP address of External Interface WAN that will change dynamically if WAN Interface is Dynamic When Automatic W...

Page 63: ...ient devices outside the managed network can access these servers within the managed network Different virtual servers can be configured for different sets of physical services such as TCP and UDP services in general Enter the External Service Port Local Server IP Address and Local Server Port Select TCP or UDP for the service s type In the Enable column check the desired server to enable These se...

Page 64: ...ut any authentication 7 3 1 Privilege IP Privilege IP Address List Configure Privilege IP Address List go to Network Configuration Privilege IP Address List If there are workstations inside the managed network that need to access the network without authentication enter the IP addresses of these workstations in the Granted Access by IP Address The Remark field is not necessary but is useful to kee...

Page 65: ... the MAC address of the workstations that need to access the network without authentication to be set in the Granted Access by MAC Address WIAS 3200N allows 100 privilege MAC addresses at most When manually creating the list enter the MAC address the format is xx xx xx xx xx xx as well as the remark not necessary These settings will become effective immediately after clicking Apply Caution Permitt...

Page 66: ...thentication in Public Zone Configure Disable Authentication in Public Zone go to System Zones Configuration click Configure in Public Zone z Authentication Required For the Zone When it is disabled users will not need to authenticate before they get access to the network within Public Zone ...

Page 67: ...s the use of Secure Socket Layer SSL or Transport Layer Security TLS as a sub layer under regular HTTP application layering HTTPS encrypts and decrypts user page requests as well as the pages that are returned by the Web server HTTP Protected Login function will let the client s login with https for more security Enable to activate https encryption or disable to activate http non encryption login ...

Page 68: ...the uploaded SSL certificate as the domain name To Configure Certificate go to Users Additional Control Upload File Certificate A data record used for authenticating network entities such as a server or a client A certificate contains X 509 information pieces about its owner called the subject and the signing Certificate Authority called the issuer plus the owner s public key and the signature mad...

Page 69: ...key Click restart to validate the changes 8 1 3 Walled Garden Configure Walled Garden go to Network Walled Garden This function provides certain free services for users to access the websites listed here before login and authentication Up to 20 addresses or domain names of the websites can be defined in this list Users without the network access right can still have a chance to experience the actu...

Page 70: ...n AD List go to Network Walled Garden AD List This function provides advertisement links to web pages for users to access free of charge before login and authentication Advertisement hyperlinks are displayed on the user s login page Clients who click on it will be redirected to the listed advertisement websites ...

Page 71: ... Portal URL after successful login Configure Portal URL after a successful user login go to System General When this function is enabled enter the URL of a Web server as the Portal page Once logged in successfully users will be directed to this URL such as http www google com regardless of the original homepage set in their browsers When this function is disabled after users logged in successfully...

Page 72: ...00N User s Manual 8 2 3 Multiple Login Configure Multiple Login go to Users Additional Control When enabled a user can log in from different computers with the same account This function doesn t support On demand users and RADIUS authentication ...

Page 73: ...Client Mobility WIAS 3200N supports IP PNP function User can login and access network with any IP address setting This function is disabled in default settings When IP PNP is enabled at the user end a static IP address can be used to connect to the system Regardless of what the IP address at the user end is using authentication can still be performed through WIAS 3200N ...

Page 74: ...administrator to easily access WIAS 3200N s WAN If the dynamic DHCP is activated at the WAN port it will update the IP address of the DNS server periodically These settings will become effective immediately after clicking Apply y DDNS Enable or disable this function y Provider Select the DNS provider y Host name The IP address domain name of the WAN port y Username E mail The register ID username ...

Page 75: ... IP addresses at most for redirection purpose When the user attempts to connect to a destination IP address listed here the connection packet will be converted and redirected to the corresponding destination Please enter the IP Address and Port of Destination and the IP Address and Port of Translated to Destination Select TCP or UDP for the service s type These settings will become effective immed...

Page 76: ... and the IP address of at least one NTP server for adjusting the time automatically Universal Time is Greenwich Mean Time GMT Manually set up is another option to setup system time if you choose to setup system time manually please enter the Year Month Day the current time and click Apply to activate the changes Note When system can not sync the time with NTP server all clients will not allow to l...

Page 77: ...ator is using a computer with the IP address range of 10 2 3 0 24 he or she can access the web management page Another example is 10 0 0 3 if an administrator is using a computer with the IP address of 10 0 0 3 he or she can access the web management page The default value is 0 0 0 0 0 0 0 0 It means that the WIAS 3200N can be accessed by any IP address for security consideration please change thi...

Page 78: ... General Specify an IP address of the administrator s computer or a billing system to get billing history information of WIAS 3200N with the predefined URLs The file name format is yyyy mm dd An example is provided as follows Traffic History https 10 2 3 213 status history 2005 02 17 On demand History https 10 2 3 213 status ondemand_history 2005 02 17 ...

Page 79: ...an be assigned for SNMP access to the system 10 5 Three Level Administration WIAS 3200N supports three kinds of account interface You can log in as admin manager or operator The default usernames and passwords show as follows Admin The administrator can access all configuration pages of WIAS 3200N Username admin Password airlive After a successful login to WIAS 3200N a web management interface wit...

Page 80: ...figuration pages under User Authentication to manage the user accounts User Name manager Password manager Operator The operator can only access the configuration page of Create On demand User to create new on demand user accounts and print out the on demand user account receipts User Name operator Password operator ...

Page 81: ... administrator can access all configuration pages of WIAS 3200N User Name admin Password airlive Manager The manager can only access the configuration pages under User Authentication to manage the user accounts User Name manager Password manager Operator The operator can only access the configuration page of Create On demand User to create new on demand user accounts and print out the on demand us...

Page 82: ...still can be changed through the text mode management interface via the serial console port 10 7 Backup Restore and Reset to Factory Configure Backup Restore and Reset to Factory Default go to Utilities Backup Restore This function is used to backup restore the WIAS 3200N settings Also WIAS 3200N can be restored to the factory default settings here ...

Page 83: ... y y Restore System Settings Click Browse to search for a db database backup file created by WIAS 3200N and click Restore to restore to the same settings at the time when the backup file was saved y Reset to Factory Default Click Reset to load the factory default settings of WIAS 3200N 10 8 Firmware Upgrade Configure Firmware Upgrade go to Utilities System Upgrade ...

Page 84: ... not lease IP So please use static IP PC to upgrade system firmware Caution 1 Firmware upgrade may cause the loss of some data You may need to manually backup user account information please refer to the release notes for the limitation before upgrading 2 Do not power on off the system during the upgrade or restart process It may damage the system and cause malfunction 10 9 Restart To perform syst...

Page 85: ... use y Wake on LAN is for waking up remote devices that supports Wake on LAN feature by entering the MAC address of the target device and then press Wake Up button y Ping is to see whether a destination host is reachable and alive by entering the destination host s domain name or IP address and then press Ping button y Trace Route display the actual route taken to reach the destination host by ent...

Page 86: ...nation using IP address or Host domain name 10 10 4 Show ARP Table It allows administrator to view the IP to Physical address translation tables used by address resolution protocol ARP 10 11 Monitor IP Link Configure Monitor IP Link go to Network Monitor IP WIAS 3200N will send out a packet periodically to monitor the connection status of the IP addresses on the list On each monitored item with a ...

Page 87: ...enu driven text interface with dialog boxes Please use arrow keys on the keyboard to browse the menu and press the Enter key to make selection or confirm what you enter 3 Once the console port of WIAS 3200N is connected properly the console main screen will appear automatically If the screen does not appear in the terminal simulation program automatically please try to press the arrow keys so that...

Page 88: ...routing table The internal routing table of the system is displayed which may help to confirm the Static Route settings Display ARP table The internal ARP table of the system is displayed Display system up time The system live time time for system being turn on is displayed Check service status Check and display the status of the system Set device into safe mode If the administrator is unable to u...

Page 89: ...we have to enter the username and password The username is admin and the default password is airlive which is the same as for the web management interface Password can also be changed here If administrators forget the password and are unable to log in the management interface from the web or the remote end of the SSH they can still use the null modem to connect the console management interface and...

Page 90: ...n includes System Interface Routing Table Online Users User Log and E mail SYSLOG to provide system status information and online user status 11 1 1 System Status View System Status go to Status System This section provides an overview of the system for the administrator The description of the above mentioned table is as follows ...

Page 91: ...he network Retained Days The maximum number of days for the system to retain the users information User Log Receiver Email Address es The email address to which the user log information will be set NTP Server The network time server that the system is set to align System Time Time The system time is shown as the local time Idle Time Out The minutes allowed for the users to be inactive before their...

Page 92: ...11 System Status and Reports 89 AirLive WIAS 3200N User s Manual ...

Page 93: ... port MAC Address The MAC address of the Wireless Band The current Band setting of Wireless Channel The current Channel setting of Wireless Zone Wireless General Settings Transmit Power The current Transmit Power setting of Wireless Mode The operation mode of the zone MAC Address The MAC address of the zone IP Address The IP address of the zone Zone General Subnet Mask The Subnet Mask of the zone ...

Page 94: ...icy from 1 to 5 y Global Policy Shows the information of the Global Policy y System Shows the information of the system administration Destination The Destination IP address Subnet Mask The Subnet Mask of the IP address range Gateway The Gateway IP address of the interface Interface Including WAN Private and Public 11 1 4 Current Users View Current Users go to Status Online Users In this page each...

Page 95: ...age is used to check the traffic history of WIAS 3200N The history of each day will be saved separately in the DRAM for at least 3 days 72 full hours The system also keeps a cumulated record of the traffic data generated by each user in the last 2 calendar months Caution Since the history is saved in the DRAM if you need to restart the system and at the same time keep the history please manually c...

Page 96: ...cord consisting of 14 fields Date Type Name NSID NASIP NASPort UserMAC SessionID SessionTime Bytes in Bytes Out Pkts In Pkts Out and Message of user activities y Roaming In User Log Each line is a roaming in traffic history record consisting of 15 fields Date Type Name NSID NASIP NASPort UserMAC UserIP SessionID SessionTime Bytes in Bytes Out Pkts In Pkts Out and Message of user activities 11 1 6 ...

Page 97: ...gure Notification go to Status E mail SYSLOG WIAS 3200N can automatically send the notification of Monitor IP Report Users Log and Session Log to up to 3 particular e mail addresses A trial email is provided by the system for validation Secondly the system supports recording of System Log On demand Users Log and Session Log via external SYSLOG servers and sending Session Log to an external FTP ser...

Page 98: ...er s e mail addresses There are four kinds of notification to selection Monitor IP Report Users Log On demand Users Log and Session Log and check which type of notification to be sent Interval The time interval to send the e mail report SMTP Setting Test To test the settings immediately Sender Email Address The e mail address of the administrator in charge of the monitoring This will show up as th...

Page 99: ...n password Netscape uses Plain Outlook and Outlook express use Login as default although they can be set to use NTLMv1 o Pegasus uses CRAM MD5 or Login but which method to be used can not be configured 11 2 2 SYSLOG y SYSLOG Server Settings There are 3 types of SYSLOG supported System Log On demand User Log and Session Log Enter the IP address and Port number to specify which and from where the re...

Page 100: ...g the log report Anonymous Enter the Username and Password for accessing your FTP Server if required FTP Setting Test The system will send test log to verify the FTP settings 11 2 4 Event Log Event Log The Event Log provides the system activities records The administrator can monitor the system status by checking this log In the log normally each line represents an event record which includes thes...

Page 101: ...Or click Quick Links Local User Management from system Home page z Upload User Click Upload User to enter the Upload User from File interface Click the Browse button to select the text file for uploading user accounts then click Upload to complete the upload process When uploading a file any format error or duplicated username will terminate the uploading process and no account will be uploaded Pl...

Page 102: ...D For RADIUS authentication there is an option to send the complete username with postfix or username only Username Format When Complete option is checked both the username and postfix will be transferred to the RADIUS server for authentication On the other hand when Only ID option is checked only the username will be transferred to the external RADIUS server for authentication NAS Identifier Syst...

Page 103: ...Roaming Out Configure local user Roaming Out go to Users Authentication click configure of Local Under certain configurations WIAS 3200N can act as a RADIUS server for Roaming Out local user logged from other system The Local User database will act as the RADIUS user database y Account Roaming Out 802 1X Authentication When Account Roaming Out is enabled the link of Roaming Out 802 1X Client Devic...

Page 104: ...pply to complete the settings In the other system such as another WIAS 3200N setup it s RADIUS server to this WIAS 3200N with same postfix then the local user in this WIAS 3200N can login success from another WIAS 3200N by RADIUS authentication 12 4 Customizable Pages Configure Custom Pages go to System Zone Configuration click Configure in Public zone There are several user login and logout pages...

Page 105: ...ge the text displayed as you wish After finishing the setting click Preview to see the result If you are happy with the customized pages click Apply to activated the changes made Disclaimer Page z The Disclaimer Page is for the hotspot owner or MIS staff who want to display terms of use or announcement information before the user login page Click the button of Configure the setup page will appear ...

Page 106: ...er s Manual designated website Click the button of Configure for each custom pages and enter the URL of its corresponding external login page and then click Apply After applying the setting the new login page can be previewed by clicking Preview button ...

Page 107: ...n on PC User Login Network Configuration on PC After WIAS 3200N is installed the following configurations must be set up on the PC Internet Connection Setup and TCP IP Network Setup y Internet Connection Setup Windows 9x 2000 1 Choose Start Control Panel Internet Options 2 Choose the Connections tab and then click Setup ...

Page 108: ... I want to set up my Internet connection manually or I want to connect through a local Area network LAN and then click Next 4 Choose I connect through a local area network LAN and then click Next 5 DO NOT choose any option in the following LAN window for Internet configuration and just click Next ...

Page 109: ...n on PC User Login AirLive WIAS 3200N User s Manual 106 6 Choose No and then click Next 7 Finally click Finish to exit the Internet Connection Wizard Now the set up is completed Windows XP 1 Choose Start Control Panel Internet Option ...

Page 110: ...n on PC User Login 107 AirLive WIAS 3200N User s Manual 2 Choose the Connections tab and then click Setup 3 When the Welcome to the New Connection Wizard window appears click Next 4 Choose Connect to the Internet and then click Next ...

Page 111: ...ive WIAS 3200N User s Manual 108 5 Choose Set up my connection manually and then click Next 6 Choose Connect using a broadband connection that is always on and then click Next 7 Finally click Finish to exit the Connection Wizard Now the setup is completed ...

Page 112: ... address and related information for each PC If the Windows operating system is not a server version the default settings of the TCP IP will regard the PC as a DHCP client and this function is called Obtain an IP address automatically If checking the TCP IP setup or using the static IP in the LAN1 LAN2 or LAN3 LAN4 section is desired please follow these steps Check the TCP IP Setup of Window 9x ME...

Page 113: ...obtained from WIAS 3200N 4 Using Specific IP Address If you want to use a specific IP address acquire the following information from the network administrator the IP Address Subnet Mask and DNS Server address provided by your ISP and the Gateway address of WIAS 3200N Caution If your PC has been set up completely please inform the network administrator before proceeding to the following steps 4 1 C...

Page 114: ...ss of WIAS 3200N in the New gateway field and click Add Then click OK 4 3 Click on DNS Configuration tab If the DNS Server field is empty select Enable DNS and enter DNS Server address Click Add and then click OK to complete the configuration Check the TCP IP Setup of Window 2000 1 Select Start Control Panel Network and Dial up Connections ...

Page 115: ...ect Properties 3 Select Internet Protocol TCP IP and then click Properties Now you can choose to use DHCP or a specific IP address 4 Using DHCP If you want to use DHCP choose Obtain an IP address automatically and then click OK This is also the default setting of Windows Then reboot the PC to make sure an IP address is obtained from WIAS 3200N ...

Page 116: ...S 3200N Caution If your PC has been set up completely please inform the network administrator before proceeding to the following steps 5 1 Choose Use the following IP address and enter the IP address Subnet mask If the DNS Server field is empty select Using the following DNS server addresses and enter the DNS Server address Then click OK 5 2 Click Advanced to enter the Advanced TCP IP Settings win...

Page 117: ...gateway address of field Check the TCP IP Setup of 1 Control Panel 2 Right click on the Local Area E WIAS 3200N in the Gateway and then click Add After back to the IP Settings tab click OK to complete the configuration Window XP Select Start Network Connection Connection icon and select Properties ...

Page 118: ... completely please inform the network administrator before to the following steps 3 choose Internet Protocol TCP IP and then click Properties Now you can choose to use DHCP or a specific IP address use DHCP choose Obtain an IP address automatically and click OK Th default setting of Windows Then reboot the PC to make sure an IP address is obtained from WIAS 3200N network administrator the IP Addre...

Page 119: ... 4 Enter the gateway address of WIAS 3200N in the to the IP address Subnet mask If the DNS Server field is empty select Using the following DNS server addresses an enter the DNS Server address Then click OK Click Advanced to enter the Advanced TCP window Default gateways column and the TCP IP Gateway Address window will appear Gateway field and then click Add After back Settings tab click OK to fi...

Page 120: ... individually For example a Local user user01 is assigned to Policy1 and the Local Authentication is assigned to Policy2 Then user01 login to Public Zone will get Policy1 This is a common case for users that can assign Policy individually For Local and RADIUS if these users are not assigned any User Policy individually they will be the same as other users within the same authentication server For ...

Page 121: ...nnect APs Access Points wirelessly to extend wireles coverage The WDS management function of the system can help administrators to setup two WDS links Configure WDS go to System Zone Configuration click Configure in Public zone wire setup two WDS Wireless Distribution System is a function used to connect APs Access Points lessly The WDS management function of the system can help administrators to ...

Page 122: ...h may be 64 bits 128 bits or 152 bits and WEP Key Format can be ASCII or HEX Lastly enter the WEP Key DS Status AC Addres ecurity Typ WEP W elect Enable to active this WDS link of Remote AP Enter the MAC of the remote AP that create WPA PSK Select the preferred ciphering method TKIP or AES and enter the PSK Pass phrase ...

Page 123: ...expires when Valid Period has been used up or quota depleted Quota is the total period of time xx days yy hrs zz mins during which On demand users are allowed to access the network The total maximum quota is 364Days 23hrs 59mins 59secs even after redeeming Account Activation is the time period for which the user must execute a first login Failure to do so in the time period set in Account Activati...

Page 124: ...Appendix D On demand Account Types Billing Plan 121 AirLive WIAS 3200N User s Manual ...

Page 125: ...a while using Account expires only when quota depleted Quota is the total period of time xx days yy hrs zz mins during which On demand users are allowed to access the network The total maximum quota is 364Days 23hrs 59mins 59secs even after redeem Account Activation is the time period for which the user must execute a first login Failure to do so in the time period set in Account Activation the ac...

Page 126: ...Appendix D On demand Account Types Billing Plan 123 AirLive WIAS 3200N User s Manual ...

Page 127: ...ents via Authorize Net go to Users Authentication On demand User External Payment Gateway Authorize Net Before setting up Authorize Net it is required that the merchant owners have a valid Authorize Net account Authorize Net Payment Page Configuration Merchant ID This is the Login ID that comes with the Authorize Net account Merchant Transaction Key The merchant transaction key is similar to a pas...

Page 128: ...e Client s Purchasing Record other tha Test Mod the paym MD5 Has enter and uthorize Net In this mode merchants can post test transactions for free erly transaction response received by their server were actually sent from the Authorize Net Service Dis Service Disclaimer Content View service agreements and fees for the standard payment gateway services here as well as adding new or editing services...

Page 129: ...ing Record o Starting Invoice Number additional information with a transaction The number will be incremented automatically for each following transaction Click the Change the Number checkbox to change it o Description Item Name This is the item information to descr pro of the invoice Authorize Net Payment Page Field Author o Item C o Display ize Net Payment Page Fields Configuration heck the box ...

Page 130: ...of the company associated with the billing or shipping information entered on a given transaction o Address The address entered either in the billing or shipping information of a given transaction o City The city is associated with either the billing address or shipping address of a transaction o State A state is associated with both the billing and shipping address of a transaction This may be en...

Page 131: ...e the area code and num orizie Net Payment Page Remark Content Enter additional details for the transaction such as Tax Freight and Duty Amounts Tax Exempt status and a yments via PayPal ayments via PayPal go to Authentication On demand User External Payment Gateway ore setting up PayPal it is required that the hotspot owners have a valid P ss Account ening a PayPal Business A of this PayPal accou...

Page 132: ...imer content here re the plans in Billing Configuration and the desired plan s can be enabled Client s Purchasing Record PayPal Payment Page Remark Content o Choose Billing Plan for PayPal Payment Page These 10 plans a Client s Purchasing Record n This is a reference field that may contain any o Enter the product service description e g wireless access der o Starting Invoice Number An invoice numb...

Page 133: ... a payment via PayPal 3 Payments via SecurePay Configure Payments via SecurePay go to Users Authentication On demand User External Payment Gateway SecurePay Before setting up SecurePay it is required that the hotspot owners have a valid SecurePay Merchant Account from its official website of the PayPal payment page PayPal Payment Page Remark Content The message content will be displayed ...

Page 134: ...is is to help protect the system from accessing a website other than Secure Pay Currency The currency to be used for the payment transactions Service Disclaimer Content View the service agreement and fees for the standard payment gateway services as well as add or edit the service disclaimer content here Choose Billing Plan for SecurePay Payment Page These 10 plans are the plans in Billing Configu...

Page 135: ...ns are the plans in Billing Configuration and the desired plan s an be enabled WorldPay Payment Configuration WorldPayInstallation ID The ID of the associated Me Payment Gateway URL The default website of posting all transaction data Currency The currency to be used for the payment transactions Service Disclaimer Content View the service agreement and fees for the standard payment gateway services...

Page 136: ...y com support index php page login c WW WorldPay Note Co Before setting up WorldPay it is required that the hotspot owners have a valid World Merchant A h Select Business Gateway Formerly WorldPay h Click Merchant Interface h Username user2009 h Password user2009 STEP Select Installations from the left hand navigation STEP Choose an installation and select the Integration Setup button for the spec...

Page 137: ... 134 STEP er Response Check the Enable the Shopp STEP Select the Save Changes button STEP Input Installation ID and Payment Gateway URL in gateway UI h Installation ID 2009test h URL https select wp3 rbsworldpay com wcc purchase Note The WAN IP of gateway must be real IP ...

Search results

Summary of Contents for WIAS-3200N

Reviews:

Related manuals for WIAS-3200N

Brands by name

Popular brands

AirLive WIAS-3200N, User Manual

Search results

Summary of Contents for WIAS-3200N

Reviews:

Related manuals for WIAS-3200N

Brands by name

Popular brands