manualshive.com logo in svg

Gemtek Systems P-560, User Manual

Share
Download
Gemtek Systems P-560 User Manual Download Page 23

User’s Guide 

Chapter 3 – Universal Address Translation 

IP: 10.11.11.11

IP: 10.1.1.1/16

IP: 192.168.2.66/24

IP: 10.11.11.11

IP Conflict

 

 
 
 
 
 
 
Conflict

: Two subscribers connected to one 

Access Controller cannot use the same IP 
address. For instance, this situation can happen 
when DHCP and UAT are used in parallel. 
 

Work-around

: Enable the DHCP service. 

IP: 10.11.11.11
Subnet: 255.255.0.0

Gateway: 10.11.1.254

 

 
 
 
 
The subscriber’s IP address and gateway 
address must be in the same subnet (a real 
network configuration). 

Gemtek Systems 

 

Page 23 

 

Summary of Contents for P-560

Page 1: ...54Mb Hotspot in a Box P 560 User s Guide Revision 1 2 March 3 2004 Copyright 2002 2004 Gemtek Systems Holding BV www gemtek systems com...

Page 2: ...eiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution To assure c...

Page 3: ...y to the degree specified in the terms of sale and delivery The reproduction and distribution of the documentation and software supplied with this product and the use of its contents is subject to wri...

Page 4: ...Back Panel 13 LEDs 13 Connectors 14 Connecting the Access Controller 15 Initialization 16 Software Introduction KickStart 16 Access Your P 560 16 Step by Step Setup 19 CHAPTER 3 UNIVERSAL ADDRESS TRA...

Page 5: ...S WISP 67 Network Interface RADIUS Proxy 67 Network Interface RADIUS Accounting Backup 69 Network Interface Tunnels 70 Network Interface Tunnels PPPoE PPTP GRE 70 Network Interface Tunnels PPTP Client...

Page 6: ...on 110 Connection Users 110 Connection E mail Redirection 112 Connection Station Supervision 112 APPENDIX 113 A Access Controller Specification 113 Technical Data 113 B Factory Defaults for the Access...

Page 7: ...hooting knowledge Conventions Used in this Document The following typographic conventions and symbols are used throughout this document Very important information Failure to observe this may result in...

Page 8: ...d on standard RADIUS EAP and supports various billing plans from prepaid pay per time per volume per use or flat rate Integration into existing OSS BSS systems can be done with ease Service Differenti...

Page 9: ...High receiver sensivity up to 90 dBm 1Mbps 8 PER AAA Multiple authentication methods UAM 802 1x EAP RADIUS MAC Smart Client e g iPass WISPr compliant Internal and external accounting backups Internal...

Page 10: ...10 100Mb auto sensing 802 1q p tagged VLAN support in preparation Management Secure management via https SSH SNMP SNMP proxy SNMPv3 incl authentication and encryption Management subnet for remote AP...

Page 11: ...e following 54Mb High Performance Hotspot in a Box model P 560 Detachable Antennas SMA type 2 units Power Cord for EU 1 unit Power Adapter 5V 2 5A 1 unit Ethernet Patch Cable STP 1 8 m length 2 units...

Page 12: ...ng and connection operations The reverse panel of the Access Controller contains Connectors which enable you to make different network connections for the controller Reset button enables you to reboot...

Page 13: ...spot in a Box model P 560 MAC address of the device The label item 2 in figure above shows the WLAN interface MAC address of the device You can determine the WAN and LAN interfaces MAC addresses by a...

Page 14: ...LAN 1 2 3 4 Orange On 10 Mbps network connection exists Connectors The Access Controller has several connectors on the rear panel Power Reset Internet LAN 4 3 2 1 1 2 3 4 Figure 4 Connectors Descript...

Page 15: ...cable to the LAN port of the Access Controller and to a free hub port on your local network Step 3 Connect one Ethernet patch cable to the WAN port of the Access Controller and to an Ethernet port of...

Page 16: ...feature list for the KickStart utility is listed below Scanning your subnet for all connected APs ACs Quick access to your AC via HTTPS telnet SSH Setting new IP address of your AC Reset to factory d...

Page 17: ...ator log on you will see the main page of the access controller s Web interface If second method is prefered follow the instuctions Step 1 Install the KickStart utility from the Installation CD Click...

Page 18: ...dmin Password admin01 Step 4 After successful administrator log on you will see the controller web interface The controller system statistics page is displayed by default If you cannot connect to the...

Page 19: ...matically if provided by the ISP dynamically via DHCP PPPoE or PPTP Step 3 IP Address Management For automatic IP assignments to client stations set the DHCP settings in the network interface DHCP men...

Page 20: ...ular authentication method for public users is the UAM Universal Access Method UAM can be enabled using the system access AAA menu With UAM users can log on to the Access Controller using their web br...

Page 21: ...n t forget to change the administrator password in the user interface administrator menu Step 7 E mail Redirection If you have a SMTP mail server available for your subscribers enter its IP address an...

Page 22: ...potentially losing any fixed IP address settings they previously entered When using UAT operators have to be aware of some principal limitations IP 192 168 2 100 IP 10 1 1 1 16 IP 192 168 2 66 24 IP...

Page 23: ...nected to one Access Controller cannot use the same IP address For instance this situation can happen when DHCP and UAT are used in parallel Work around Enable the DHCP service IP 10 11 11 11 Subnet 2...

Page 24: ...the user Login page subscriber authentication page allows the user to login to the network Logout page small pop up window for logged on user statistics and log out function Help page get help with t...

Page 25: ...e page The login page is loaded from the Access Controller To get access to the network the user should enter his authentication settings login name and password and click the login button Figure 11 S...

Page 26: ...cs in bytes Input Output bytes left session input and output bytes left for subscriber limited from RADIUS in B KB MB GB and unlimited Total bytes left session total input and output bytes left for su...

Page 27: ...ge according to its needs See more details in section Changing User Pages Unauthorized Page If web log on method UAM or EAP based authentication methods are disabled on the AC and the subscriber attem...

Page 28: ...ory Supported user pages template formats XSL Extensible Style sheet Language for welcome login logout one click pages HTML Hypertext Markup Language for help unauthorized pages The following image fo...

Page 29: ...ry to upload other than supported formats Such uploaded pages will not be displayed properly Step 5 Save entered changes with the apply changes button Step 6 Check for new uploaded user page e g login...

Page 30: ...nder the user interface configuration upload menu click the upload button to upload new prepared user pages The memory space in the AC for internal user pages is limited to 1 MB Step 3 Specify the loc...

Page 31: ...a number of times until all necessary images are uploaded Step 5 Check for the newly uploaded user pages and images to ensure that everything is uploaded and displayed correctly Go to the link https...

Page 32: ...User s Guide Chapter 4 User Pages If at anytime you wish to restore the factory default user pages click the reset button under the system reset menu Gemtek Systems Page 32...

Page 33: ...er to render the custom login screen HTML page the AC must be configured to 2 fetch XSL script from a remote server which in this case is a Web Application Server WAS or have custom XSL uploaded on th...

Page 34: ...t 3 Direct client communication with WAS 4 Client sends his her login and password 8 WAS reports client status authenticated or not 5 WAS tries to authenticate client 6 AC sends request to RADIUS 7 RA...

Page 35: ...est to the following URLs 1 Remote user logon Script name pplogon user Parameters all parameters are required secret shared secret to protect page from accidental use ip IP address of user to be logge...

Page 36: ...IP and MAC At least one of IP and MAC addresses should be supplied If supplied only IP user is checked and logged off by username and IP If IP and MAC addresses are supplied then user is checked and l...

Page 37: ...122 error description User with supplied IP address not found description ppstatus Response statuses and error codes status error description OK 0 User status is ok Not checked 100 Status information...

Page 38: ...entry entry id 14 32 Mbps entry entry id 15 04 59 55 entry entry id 16 EAP entry ppstatus Status detailed information by ID id description 1 User name 2 User IP address 3 User MAC address 4 Session ti...

Page 39: ...N Scroll through the history of commands Figure 17 Key Combinations in the CLI Get Connection to CLI There are three different ways to get a connection to the CLI of the Access Controller via the Teln...

Page 40: ...gin settings in the displayed CLI command prompt The default administrator login settings Login admin Password admin01 Figure 18 CLI Login After a successful login command prompt is displayed the CLI...

Page 41: ...the subcommands again contain several parameters In general network command usage is as follows network command subcommand1 subcommand2 parameter value To get a list of all available commands in the...

Page 42: ...counting 1 a 127 0 0 2 p 1814 s testing111 where parameters are as follows a RADIUS server IP address used for RADIUS accounting p RADIUS server port number used for RADIUS accounting s Shared secret...

Page 43: ...commands again contain several parameters In general wireless command usage is as follows wireless command subcommand1 parameter value To get a list of all available commands in the configure category...

Page 44: ...ser commands type user Figure 29 User Commands List To get a list of all available subcommands for a specific command type user command e g user walled_garden All available subcommands for walled gard...

Page 45: ...ds type status Figure 32 System Status Commands List To get the general device status information type status device Figure 33 Device Status Here you can find the current firmware version of your AC T...

Page 46: ...r and reboot the device type the reboot command in the command line No configuration changes are done The last saved configuration is applied to the rebooted controller Reset To reset the controller t...

Page 47: ...are manuals on how to do that SNMP Versions Access Controller supports the following versions of SNMP SNMPv1 The Simple Network Management Protocol A Full Internet Standard defined in RFC 1157 RFC 115...

Page 48: ...variable and responds to the manager with that value Set a MIB variable The SNMP agent begins this function in response to a message from the SNMP manager The SNMP agent changes the value of the MIB...

Page 49: ...set request format MIB SNMP Agent P 560 SNMP Manager get response traps get request get next reguest get bulk set request Figure 37 SNMP Network Gemtek Private MIB In addition to standard SNMP MIBs Ge...

Page 50: ...erface configuration network interfaces configuration VLAN define VLAN on your controller Route define new static route on the controller interface Port forwarding port forwarding rules Management sub...

Page 51: ...local controller memory Save and restore save current device configuration for backup Pronto Pronto compatibility agent configuration Access configure access to your controller Access Control set defa...

Page 52: ...etwork interface configuration properties click the edit button in the action column The status can be changed now Figure 40 Edit Interface Configuration Settings part 1 Interface standard interface n...

Page 53: ...is usually the gateway router of the ISP or other WAN network Default gateway is marked with Update update old values with entered ones The DHCP server settings will be automatically adjusted to match...

Page 54: ...ign ID for your VLAN network 1 to 4094 Client devices that associate using the ID are grouped into this VLAN Other VLAN settings cannot be changed Click on the disabled link to continue specifying set...

Page 55: ...to the target network is routed to the specified AC interface or to another gateway router To add a new static route for the system click the new button under the action column and specify the follow...

Page 56: ...rding Rules Click the new button to add a port forwarding rule Figure 53 Add Port Forwarding Rule Status select status enabled disabled Type select type of forwarding traffic TCP UDP Local IP Address...

Page 57: ...he management subnet IP address will be set on the network interface as an alias so you can connect to the P560 using this address This IP address should be used on access points as the gateway addres...

Page 58: ...the administrator can use PPTP client for VPN or GRE tunnel see Network Interface Tunnels to setup a tunnel between the administrator s computer and the P560 The only addresses visible on the Interne...

Page 59: ...Dynamic Host Configuration Protocol service is supported on the LAN interfaces eth0 ixp0 vlan n This service enables clients on the LAN to request configuration information such as an IP address from...

Page 60: ...parameters Figure 63 Edit DHCP Server Settings IP Address from IP Address to specify the IP address range supported for the DHCP service mandatory fields WINS Address Windows Internet Naming Service s...

Page 61: ...address of the device WAN interface is used If DHCP relay service is selected the default WAN gateway is used automatically Update to update entered values the following screen appears Figure 65 Apply...

Page 62: ...Authentication Dial In User Service menu to set up the following RADIUS settings RADIUS Settings general RADIUS settings configuration e g NAS server ID servers timeouts RADIUS Servers up to 32 differ...

Page 63: ...unt of user inactivity time before automatically disconnecting user from the network sec Location ISO Country code location ID attribute country code according ISO standards string Location E 164 Coun...

Page 64: ...lue Figure 67 Edit RADIUS Settings Use the update button to update to an entered value Now select another RADIUS setting to edit or apply changes and restart the server if the server configuration is...

Page 65: ...system Figure 69 RADIUS Servers Settings New add new RADIUS server Details click on details to get more information about RADIUS server settings Edit edit selected RADIUS server settings Delete remov...

Page 66: ...es packets sent from AC port to the client If we move this point to the client we will get the reversing of Acct Input and Acct Output attributes values The Acct Input then should contain bytes packet...

Page 67: ...ain username New click to define WISP for RADIUS server Figure 73 Define New WISP Name new WISP domain name string up to 256 symbols no space dot or dash allowed RADIUS Name select RADIUS for new WISP...

Page 68: ...oxy accounting detection timeout in seconds The AC will wait the specified period for accounting packet after the authentication request was got 0 3600 The authentication RADIUS proxy port should diff...

Page 69: ...u Figure 75 Accounting Backup Backup via syslog enable this type to send the RADIUS accounting information via syslog protocol to the specified host enable disable and note that the Host IP specificat...

Page 70: ...ived via the specified PPTP PPPoE or GRE server tunnel By default no services are available on the controller Figure 76 PPPoE PPTP GRE for DSL To specify PPTP tunnel for your controller click the edit...

Page 71: ...ach access points behind the P560 from his workstation Should be used with Management Subnet feature otherwise the firewall will not be enabled to reach anything behind the P560 Only specific traffic...

Page 72: ...d take care that no unencrypted private information is going through the GRE tunnel By default the GRE tunnel is disabled on the AC Figure 82 GRE Tunnel See the following example to understand GRE set...

Page 73: ...IP 211 139 210 168 GRE Device Netmask 255 255 255 0 Settings in Management Subnet page on eth0 interface network interface configuration management subnet menu of AC IP Address 192 168 3 1 Netmask 25...

Page 74: ...e subnet format IP address N The N stands for the number of bits that are in the network address There are 32 bits so we have 32 N bits left that are part of our network The first N bits of x x x x co...

Page 75: ...must use the same SSID Wireless Network Mode select wireless network mode for optimal performance from the drop down list Each wireless network mode includes basic and supported rates Wireless Networ...

Page 76: ...e Short Slot capability bit in the Beacons Probes and Association Responses Clients should therefore not use it Regulatory Domain select the domain according to your country The full frequency range o...

Page 77: ...is disabled RTS Threshold when set this setting specifies the maximum packet size beyond which the Wireless LAN Card invokes its RTS CTS mechanism Packets that exceed the specified RTS threshold trigg...

Page 78: ...curity menu and select the WPA with RADIUS server security method Figure 89 WPA with RADIUS Server Security Settings To configure the WEP encryption select the WEP key algorithm and enter the pre shar...

Page 79: ...to define special access rules for specific network devices The access control list is based on the network device s MAC address In the MAC addresses and policies table you need only specify the netw...

Page 80: ...the wired connection between them WDS Link Wired LAN P 560 Wired LAN P 560 Figure 93 WDS Link The WDS mode is configured by entering the WDS link peer access points AP e g P 560 MAC address in each o...

Page 81: ...ireless interface eth0 MAC address of the peer AP for the WDS link 6 HEX pairs separated by colon 1 9 A F a f You can discover the wireless interface eth0 MAC address of your P 560 in the system statu...

Page 82: ...is displayed by default Figure 96 Available User Pages for Configuration Login Logout Help Unauthorized pages settings detailed description is given in the Chapter 4 Only Welcome page settings refere...

Page 83: ...lick the button to clear cached user pages Controller cache is also cleared after device reboot reset User Interface Configuration Upload Look for the user pages template samples in the Installation C...

Page 84: ...ure 101 Set HTTP Headers The system administrator can set his own header encoding and language settings Use the HTML 4 01 specification to define the header encoding and language User Interface Config...

Page 85: ...ver text string can not be empty Password enter password by which user should be authenticated text string can not be empty Portal URL enter T mobile portal URL to redirect user when One Click roaming...

Page 86: ...access controller Then client selects T mobile AC internally authenticates client with a provided username and password AC opens a new browser window and which in turns open popup window Latter popup...

Page 87: ...age is the default web page where users will be redirected after log on This value will be overwritten by the WISP RADIUS attribute no 4 Redirection URL if provided in the authentication response mess...

Page 88: ...e 113 Walled Garden link in the Welcome Page New Host If you need to define hosts web servers for walled garden specify hosts by clicking the new host button and click the update button Figure 114 Wal...

Page 89: ...e access to the Internet The system administrator should list only ports the AC is listening on for proxy requests Figure 115 Web Proxy Web proxy is enabled by default and the port numbers are 3128 an...

Page 90: ...esses and get the system log messages remotely using the system configuration syslog menu by default the syslog utility is disabled Figure 118 Syslog Settings To enable the syslog remote sending funct...

Page 91: ...story size to display 102400 512000 bytes Level select the messages level you need to trace The level determines the importance of the message The levels are in order of increasing importance Debug de...

Page 92: ...The NTP Network Time Protocol is used to synchronize the clock of the AC to a selected time reference You can synchronize the system clock settings using the system configuration NTP menu Figure 124...

Page 93: ...upload your own SSL certificates and private key files Figure 128 Upload New Certificate Certificate File the PEM encoded certificate file for the server Corresponding RSA or DSA private keys SHOULD...

Page 94: ...mplates System configuration settings including syslog NTP configuration access settings Connection settings including e mail redirection and station supervision Click the download button to start sav...

Page 95: ...me Walled garden entries Default RADIUS authentication accounting and accounting backup servers IP Default RADIUS authentication accounting and accounting backup shared secrets SNMP Read Only and Read...

Page 96: ...ement to your AC and to specific services Access control to your device includes access to these services Telnet SSH SNMP Thus the administrator can control the access of a single or every user to the...

Page 97: ...0 when N 8 bits netmask 32 255 255 255 255 31 255 255 255 252 30 255 255 255 248 26 255 255 255 192 25 255 255 255 128 24 255 255 255 0 16 255 255 0 0 8 255 0 0 0 0 0 0 0 0 Access select the access p...

Page 98: ...icator with TLS authentication method EAPTTLS 802 1x authenticator with TTLS authentication method MAC user is authenticated from RADIUS server by its MAC address and password Use the user interface c...

Page 99: ...tem Access NAV The Universal Address Translation UAT function can be enabled using the system access UAT menu UAT can be configured separately for each interface All available interfaces are listed Fi...

Page 100: ...interface non editable NAT network address translation service status enabled disabled If enabled users can access the Internet under its network gateway address Authentication with disabled authentic...

Reviews:

No comments

Brands by name

Popular brands

Load more brands