manualshive.com logo in svg

ZyXEL Communications VSG-1200 V2, User Manual

Share
Download
ZyXEL Communications VSG-1200 V2 User Manual Download Page 168

VSG-1200 V2 User’s Guide

Chapter 23 Private LAN

168

C

H A P T E R

23

Private LAN

This chapter shows you how to set up a private LAN that allows specified devices to 
communicate with each other. 

23.1  Private LAN Overview 

By default the IP Plug and Play (iPnP) and layer-2 isolation features (see 

Section 5.1 on 

page 56

) are enabled to prevent devices on the LAN from communicating with each other. 

These features provide additional security protection. 

However, you can configure a private LAN to allow communication between devices with the 
specified IP addresses in the 

Private LAN

 screen. The VSG does not apply iPnP or layer-2 

isolation on the devices in a private LAN. 

The following figure shows a network example where computers 

A

 and 

B

 can communicate 

with each other in the private LAN. Since computers 

C

 and 

D

 are not in the private LAN, the 

VSG disallows communication between the two. 

Figure 112   

Private LAN Network Example 

23.2  Configuring a Private LAN

To specify the IP address(es) to belong to the private LAN, click 

Advanced

 and 

Private LAN

 

in the navigation panel. 

A

Private LAN

B

C

D

Internet

Summary of Contents for VSG-1200 V2

Page 1: ...VSG 1200 V2 Vantage Service Gateway User s Guide Version 1 00 10 2006 Edition 1 ...

Page 2: ...yXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to...

Page 3: ...rgy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this device in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense CE Mark Warning This is a class A product In a domestic environment this product may cause radi...

Page 4: ...VSG 1200 V2 User s Guide Certifications 4 2 Select your product from the drop down list box on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page ...

Page 5: ...ing cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect the power adaptor or cord to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and ...

Page 6: ...VSG 1200 V2 User s Guide Safety Warnings 6 ...

Page 7: ...ement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL ...

Page 8: ... Modrany Ceská Republika info cz zyxel com 420 241 091 359 DENMARK support zyxel dk 45 39 55 07 00 www zyxel dk ZyXEL Communications A S Columbusvej 2860 Soeborg Denmark sales zyxel dk 45 39 55 07 07 FINLAND support zyxel fi 358 9 4780 8411 www zyxel fi ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland sales zyxel fi 358 9 4780 8448 FRANCE info zyxel fr 33 4 72 52 97 97 www zyxel fr Zy...

Page 9: ... es ZyXEL Communications Arte 21 5ª planta 28033 Madrid Spain sales zyxel es 34 913 005 345 SWEDEN support zyxel se 46 31 744 7700 www zyxel se ZyXEL Communications A S Sjöporten 4 41764 Göteborg Sweden sales zyxel se 46 31 744 7701 UKRAINE support ua zyxel com 380 44 247 69 78 www ua zyxel com ZyXEL Ukraine 13 Pimonenko Str Kiev 04050 Ukraine sales ua zyxel com 380 44 494 49 32 UNITED KINGDOM sup...

Page 10: ...2 1 3 Applications 35 1 3 1 Internet Access for LAN Networks 35 1 3 2 Internet Access in Public Areas 36 1 3 3 Hotel Application with PMS 36 Chapter 2 Hardware Installation and Connection 38 2 1 Installation Options 38 2 1 1 Desktop Installation 38 2 1 2 Rack Mount Installation 38 2 2 Hardware Connections 39 2 2 1 Front Panel 39 2 2 1 1 LAN Port 40 2 2 1 2 WAN Port 40 2 2 1 3 Console Port 40 2 2 1...

Page 11: ... of the Web Configurator 48 Chapter 4 Initial Setup Example 50 4 1 Overview 50 4 2 Configure the VSG for Internet Access 50 4 3 Create a Billing Profile 51 4 4 Setting User Authentication Method 52 4 5 Creating Customer Accounts 53 4 6 Customer Login Test 53 Chapter 5 System 56 5 1 General System Setting 56 Chapter 6 LAN and WAN Setup 60 6 1 Factory Ethernet Defaults 60 6 2 LANs and WANs 60 6 3 IP...

Page 12: ... 3 Example 3 One to One and Many to One 77 8 3 NAT Pool Setup 78 Chapter 9 Authentication 80 9 1 Authentication Overview 80 9 1 1 User Agreement 80 9 1 2 CAS Central Authentication Service 80 9 1 3 Built in Authentication 81 9 1 4 RADIUS 81 9 1 4 1 RADIUS Accounting 81 9 1 4 2 Vendor Specific Attribute 82 9 2 Authentication Configuration 82 9 2 1 Scenario Options 85 Chapter 10 Billing 88 10 1 Bill...

Page 13: ...1 Dynamic Subscriber Account Overview 104 12 2 Dynamic Account General Settings 104 12 3 Creating Dynamic Accounts 106 12 3 1 Dynamic Account Generation Using the Web Configurator 106 12 3 2 Dynamic Account Generation Using a Statement Printer 107 12 4 Viewing the Dynamic Account List 108 12 4 1 Backing Up the Dynamic Account List 109 Chapter 13 Port Location Mapping 112 13 1 Port Location Mapping...

Page 14: ...44 16 1 1 Bandwidth Allocation 144 16 2 Activating Bandwidth Management 144 16 2 1 Equal Bandwidth Setup 145 16 2 2 Class of Service Bandwidth Setup 146 Chapter 17 Portal Page Advertisement Link and Walled Garden 148 17 1 Overview 148 17 2 Portal Page 148 17 3 Advertisement Links 149 17 4 Walled Garden 149 Chapter 18 Passthrough 152 18 1 Passthrough Overview 152 18 2 Computer IP and MAC Address Pa...

Page 15: ...etup 164 Chapter 23 Private LAN 168 23 1 Private LAN Overview 168 23 2 Configuring a Private LAN 168 Chapter 24 Syslog 170 24 1 Syslog Overview 170 24 1 1 Syslog Server Setup 170 24 1 2 Log Settings 171 Chapter 25 Session Trace 176 25 1 Session Trace Overview 176 25 1 1 Configuring Session Trace 176 25 1 2 Session Trace Filename Convention 177 Chapter 26 SNMP 178 26 1 SNMP Overview 178 26 1 1 Netw...

Page 16: ... 2 Configuration Backup 196 29 2 1 Configuration Backup Using TFTP 198 29 3 Restore Configuration 199 29 3 1 Restore Configuration Using TFTP 199 29 4 Reset to the Factory Defaults 200 Chapter 30 Firmware 202 30 1 Firmware Overview 202 30 2 Manual Firmware Upgrade 202 30 2 1 Manual Firmware Upgrade via a TFTP Server 203 30 3 Scheduled Firmware Upgrade 204 Chapter 31 SSL Certificate 206 31 1 SSL Ce...

Page 17: ...s 223 32 9 System Utilities 224 32 9 1 Firmware Upgrade 225 32 9 2 Changing the Administrator Login Password 226 32 10 Restart 227 32 11 SMT Logout 227 32 12 Factory Defaults 227 Chapter 33 Troubleshooting 230 33 1 Using the LEDs to Diagnose Problems 230 33 1 1 The Power LED 230 33 1 2 The LAN Port LEDs 230 33 1 3 The WAN Port LEDs 231 33 2 The Console Port 231 33 3 Web Configurator 232 33 4 Inter...

Page 18: ...uide Table of Contents 18 Report Printing Using the SP 200 246 Appendix F Cable Types and Cable Pin Assignments 252 Appendix G Setting up Your Computer s IP Address 256 Appendix H IP Addresses and Subnetting 268 Index 276 ...

Page 19: ...VSG 1200 V2 User s Guide 19 Table of Contents ...

Page 20: ...Figure 18 Initial Setup Network Example 50 Figure 19 System Setting System 56 Figure 20 System Settings WAN LAN LAN Configuration 62 Figure 21 System Settings WAN LAN WAN MAC Address 63 Figure 22 System Settings WAN LAN Dynamic Static WAN IP Address 64 Figure 23 System Settings WAN LAN PPPoE 65 Figure 24 System Settings WAN LAN PPTP 67 Figure 25 System Settings Server 71 Figure 26 NAT Example One ...

Page 21: ... Backup File Download 109 Figure 59 Dynamic Account List Backup Save As 110 Figure 60 System Setting Port Location Mapping 113 Figure 61 Advanced Setting Credit Card 117 Figure 62 Customization Login 121 Figure 63 Customization Login Standard 122 Figure 64 Subscriber Login Screen Example Standard 122 Figure 65 Customization Login Screen Redirect 122 Figure 66 Customization Login Screen Advanced 12...

Page 22: ...lled Garden 150 Figure 99 Subscriber Login Screen with Walled Garden Links Example 151 Figure 100 Passthrough Subscriber IP and MAC Address 153 Figure 101 Passthrough Destination URL and IP 154 Figure 102 Advanced Filter 156 Figure 103 Privilege User 158 Figure 104 Privilege User Access Session List Example 159 Figure 105 LAN Devices 161 Figure 106 LAN Device Remote Management Example 1 162 Figure...

Page 23: ...TFTP 203 Figure 146 Scheduled Firmware Upgrade Synchronization File Example 204 Figure 147 Scheduled Firmware Upgrade Example 204 Figure 148 Firmware Scheduled Upgrade 204 Figure 149 SSL Certificate 207 Figure 150 System Settings Server Configuration Enable SSL Security 207 Figure 151 System Settings Authentication Activate SSL Login 208 Figure 152 Installing the SSL Security Certificate First Sec...

Page 24: ... 200 Daily Account 247 Figure 185 SP 200 Monthly Account 248 Figure 186 SP 200 System Status 249 Figure 187 SP 200 Network Statistics 250 Figure 188 WAN Port Cable Pin Assignments 253 Figure 189 LAN Port Cable Pin Assignments 253 Figure 190 DB25 Male to DB9 Male Connector 254 Figure 191 WIndows 95 98 Me Network Configuration 257 Figure 192 Windows 95 98 Me TCP IP Properties IP Address 258 Figure 1...

Page 25: ...VSG 1200 V2 User s Guide 25 List of Figures ...

Page 26: ...ario Guide 87 Table 19 System Setting Billing Billing Profile 89 Table 20 System Settings Billing Billing Profile Setting 90 Table 21 System Setting Billing PMS Configuration 92 Table 22 Static Account Settings Global Settings 95 Table 23 Create Static Subscriber Account Generate Automatically 96 Table 24 Create Static Subscriber Account Manual 97 Table 25 Static Account Operator 100 Table 26 Stat...

Page 27: ...ace 176 Table 58 Session Trace File Fields 177 Table 59 SNMP 180 Table 60 Miscellanea 183 Table 61 System Status System 185 Table 62 System Status Current User List 187 Table 63 System Status DHCP Clients 188 Table 64 System Status Session List 188 Table 65 System Status NAT Tool Table 189 Table 66 System Status LAN Device Status 190 Table 67 System Status Billing Log 191 Table 68 System Status St...

Page 28: ...nting Key Combination 247 Table 93 SP 200 System Status 249 Table 94 SP 200 Network Statistics 251 Table 95 Network Cable Types 252 Table 96 WAN Port Cable Ping Assignments 252 Table 97 LAN Port Cable Pin Assignments 253 Table 98 Console Port Pin Assignment 254 Table 99 DB25 Male to DB9 Male Connector Ping Assignment 254 Table 100 Classes of IP Addresses 269 Table 101 Allowed IP Address Range By C...

Page 29: ...VSG 1200 V2 User s Guide 29 List of Tables ...

Page 30: ... www zyxel com for an online glossary of networking terms and additional support documentation User Guide Feedback Help us help you E mail all User Guide related comments questions or suggestions for improvement to techwriters zyxel com tw or send regular mail to The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan Thank you Syn...

Page 31: ...VSG 1200 V2 User s Guide 31 Preface Graphics Icons Key VSG 1200 V2 Computer Notebook computer Server Statement Printer Access Point Switch Router Internet ...

Page 32: ...MS Many hotels use a PMS to perform automatic billing of services the guests use such as room service mini bar pay per view TV or telephone calls The VSG supports PMS from Micros Fidelios CAS Central Authentication Service The Hilton Group Corporation developed the High Speed Internet Access HSIA service to provide Internet access service across its entire Hilton Group hotels In order to use the H...

Page 33: ... to its factory defaults Plug and Play Internet Access The VSG provides Internet access to attached computer s without extra software installation or computer configuration In addition with transparent proxy the VSG resolves any incompatible proxy settings Port Forwarding Use this feature to forward incoming service requests to a server on your local network DHCP Support DHCP Dynamic Host Configur...

Page 34: ... access predetermined web sites without logging in The VSG blocks full Internet access until the subscribers log in E mail Forwarding The VSG is able to forward and retrieve e mail messages when the subscriber s default e mail server is down or behind a firewall DNS Proxy With DNS proxy the VSG provides DNS redirection when a subscriber s configured DNS server is behind a firewall or located in a ...

Page 35: ...h an embedded web based configurator It offers advanced management features and allows you to manage the VSG remotely using Internet Explorer version 5 5 or above or Netscape version 6 0 or later System Maintenance The firmware of the VSG can be upgraded via the web configurator or the SMT menu The Embedded FTP server is for firmware upgrades as well as configuration file backups and restoration 1...

Page 36: ...lt in billing function and local subscriber database Connect an access point AP to bridge the wired and the wireless network allowing wireless stations to access the Internet through the VSG Figure 2 Application Internet Access in Public Areas 1 3 3 Hotel Application with PMS The following figure depicts an example where the VSG is used in a hotel to provide Internet service as one of their in roo...

Page 37: ...VSG 1200 V2 User s Guide 37 Chapter 1 Getting to Know Your VSG ...

Page 38: ...VSG and the connected cables Make sure there is a power outlet nearby 2 Make sure there is enough clearance around the VSG to allow air circulation and the attachment of cables and the power cord 3 Attach the rubber feet to each corner on the bottom of the VSG These rubber feet help protect the VSG from shock or vibration and ensure space between devices when stacking 2 1 2 Rack Mount Installation...

Page 39: ... rack by lining up the holes in the brackets with the appropriate holes on the rack Secure the VSG to the rack with rack mounting screws Figure 5 Rack Mount Securing to the Rack 2 2 Hardware Connections The following sections describe the hardware connections of the VSG 2 2 1 Front Panel The console LAN and WAN ports the reset button and the LEDs are located on the front panel ...

Page 40: ...CONSOLE It requires a direct connection between the VSG and a computer via a console cable Refer to chapters on SMT configurations for more information You can also connect the CONSOLE port to a statement printer also known as account generator printer sold separately with a DB25 male to DB9 male adapter A statement printer allows you to create and print out subscriber accounts automatically In ad...

Page 41: ...n the back of the VSG and the male end to an appropriate power source When the power source is turned on the PWR LED on the front panel turns on Table 1 Front Panel LEDs LED STATUS DESCRIPTION PWR On The VSG is receiving power Off The VSG is not receiving power SYS On The system is functioning normally Blinking The system is not functioning properly Off The system is not ready or has failed LAN or...

Page 42: ...gurator session at a time 1 Make sure your VSG is properly connected refer to the instructions in Chapter 2 on page 38 2 Launch your web browser and type the WAN or LAN IP address of the VSG as the web site address 192 168 1 1 is the default IP address for the WAN port and 10 59 1 1 is the default IP address for the LAN port 3 If you are using a different port number between 8000 and 8099 for the ...

Page 43: ... Main Menu Note If there is no activity for longer than five minutes after you log in the VSG will automatically log you out If this happens simply log back in again You can change the timeout period in the web configurator refer to Chapter 7 on page 70 3 3 Navigation Panel The VSG web configurator provides two levels of navigation the Configuration Menu panel and a screen specific link panel Firm...

Page 44: ...nfigurator Navigation Panel 3 3 2 Screen Specific Links In some screens a link panel displays on the top of the screen that allows you to navigate to advanced configuration screens An example is shown in the figure below Figure 12 Navigation Panel Screen specific Links 3 4 Screen Overview The following table lists the various web configurator screens Table 2 Web Configurator Screen Overview SYSTEM...

Page 45: ...account allows you full access to all system configurations The default administrator user name is admin and password 1234 The account manager account is used for subscriber account management only No system configuration is allowed This account is useful for front desk personnel such as in a hotel for setting up subscriber accounts without tampering with the system configuration The default user ...

Page 46: ... DESCRIPTION Administrator Account This account permits full access to all system configurations Username Enter the user name for the administrative account The default is admin Password Enter a new administrative account password The default is 1234 Confirm Enter the new administrator password again for confirmation Account Manager This account allows you to set up subscriber accounts No system c...

Page 47: ... Username Enter the user name for the supervisor account The default is supervisor Password Enter a new supervisor password The default is supervisor Confirm Enter the new administrator password again for confirmation Super Subscriber Account Once you have configured the Internet connection settings on the VSG you can use this account to test the Internet connection through the VSG Super Subscribe...

Page 48: ...ter 3 The Web Configurator 48 Figure 16 System Tools Restart 3 9 Logging Out of the Web Configurator In the Main Menu screen click System Tools Logout and click Apply to exit from the web configurator Figure 17 System Tools Logout ...

Page 49: ...VSG 1200 V2 User s Guide 49 Chapter 3 The Web Configurator ...

Page 50: ...hich checks the account information before Internet access is allowed Figure 18 Initial Setup Network Example The following outlines the configuration steps 1 You should have already made the hardware connections and turned on the VSG Refer to Chapter 2 on page 38 for more information 2 Configure the VSG for Internet access using the information provided by your ISP 3 Create a billing profile that...

Page 51: ...from a DHCP server in the WAN Port Mode field 5 Click Apply to save the changes 6 Click Apply again to restart the VSG 7 Log into the web configurator again and check that the VSG has obtained a WAN IP address in the System Status screen 4 3 Create a Billing Profile Next you create a billing profile that charges 5 per hour for Internet access and allows customers to purchase up to 15 hours of Inte...

Page 52: ...s 8 Click Apply and Close to save the settings 9 In the Billing Profile screen you should see the name of the profile you have just created Select Active to enable it and click Apply to save the settings 4 4 Setting User Authentication Method You want to configure the VSG to check user account information against the account information stored on its database 1 In the web configurator click System...

Page 53: ... the account names 3 To create 10 accounts enter 1 the From field and enter 10 in the To field 4 In the Billing Profile field select Standard to apply the profile you just created 5 Select 6 in the Random Password Length field to have the VSG generate a 6 character password for each account 6 Click Apply to generate the accounts Click back 7 To view the list of accounts created click the Static Ac...

Page 54: ...amic IP address and is connected to the LAN port on the VSG 4 Open a web browser and enter any web site address for example www zyxel com 5 A Welcome screen displays prompting you to enter the account information 6 Enter the customer account user name and password you wrote down in step 1 Click Enter 7 An Information Window screen displays This indicates that you have successfully logged into the ...

Page 55: ...VSG 1200 V2 User s Guide 55 Chapter 4 Initial Setup Example ...

Page 56: ...al System Setting The System screen displays first when you access the web configurator The Domain Name entry is what is propagated to the DHCP clients on the LAN If you leave this blank the domain name obtained by a DHCP server is used While you must enter the host name System Name on each individual computer the domain name can be assigned from the VSG via DHCP Figure 19 System Setting System ...

Page 57: ...ow it here If you leave this field blank the VSG may obtain a domain name from a DHCP server The domain name entered by you is given priority over the DHCP server assigned domain name Location Information Specify where the VSG is located and the person or administrator you can contact in case you have problem using the VSG Location Name Enter a descriptive name of the location for identification p...

Page 58: ...ISP network administrator if you are unsure of this information Time Zone Select your time zone from the drop down list box This will set the time difference between your time zone and Greenwich Mean Time GMT Update Time Enter the number of hours between updates Daylight Savings Select this option if you use daylight savings time Daylight saving is a period from late spring to early fall when many...

Page 59: ... the Console Type field Select a console port speed from the drop down list box Choices are 1200 2400 4800 9600 default 14400 19200 38400 57600 and 115200 Data bits Select a data bit from the drop down list box Parity Select the parity from the drop down list box Stop bits Select the stop bit from the drop down list box Administrator Authorized Access IP Address Select Any to use any computer to a...

Page 60: ...d to the immediate area usually the same building or floor of a building A WAN Wide Area Network on the other hand is an outside connection to another network or the Internet 6 3 IP Address Assignment A static IP is a fixed IP that you configure on the VSG A dynamic IP is not fixed the DHCP server provides an IP address to the VSG each time it connects to the network When an Ethernet device is con...

Page 61: ...from a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address...

Page 62: ...s based on the new LAN IP address 6 5 WAN Configuration To configure the WAN settings on the VSG click System Settings and WAN LAN The WAN LAN screen varies depending on the settings in the WAN Port Mode field 6 5 1 WAN MAC Address Use the WAN LAN screen to configure the MAC address of the WAN port by either setting the VSG to use the factory default or specify the MAC address of a computer on the...

Page 63: ... WAN Port Mode Dynamic Fixed IP Address Use the WAN LAN screen to change the WAN IP address settings Table 6 System Settings WAN LAN WAN MAC Address FIELD DESCRIPTION WAN MAC Address Select Default to use the factory assigned MAC address If your ISP requires MAC address authentication select Change to and enter the MAC address of a computer on the LAN in the fields provided ...

Page 64: ...ence and requires no new learning or procedures Table 7 System Settings WAN LAN WAN IP FIELD DESCRIPTION WAN Port Mode Get automatically from a DHCP server Select this option to set the VSG to act as a DHCP client on the WAN The VSG obtains TCP IP information IP address DNS server information etc from a DHCP server Use fixed IP address Select this option to set the VSG to use a static or fixed IP ...

Page 65: ...his enables the service provider to easily create and offer new IP services for specific users Operationally PPPoE saves significant effort for both the subscriber and the ISP carrier as it requires no specific configuration of the broadband modem at the subscriber s site By implementing PPPoE directly on the VSG rather than individual computers the computers on the LAN do not need PPPoE software ...

Page 66: ...Password Enter the password associated with the user name above PPP MTU Setting Enter the size of a Maximum Transmission Unit MTU TCP MSS Setting Enter the size of the Maximum Segment Size MSS Service Name Enter the name of your PPPoE service Connect on Demand Select this option when you don t want the connection up all the time and specify an idle timeout in the Max Idle Time field maximum 65535 ...

Page 67: ...re information PPTP Local IP Address Enter the IP address assigned to you PPTP Local Subnet Mask Enter the subnet mask assigned to you PPTP Local Default Gateway Enter the IP address of the gateway device Username Enter the user name exactly as your ISP assigned If assigned a name in the form user domain where domain identifies a service name then enter both components exactly as given Password En...

Page 68: ...nnection up all the time and specify an idle timeout in the Max Idle Time field maximum 65535 minutes This is the default setting with an idle timeout of 10 minutes Keep Alive Select this option when you want the Internet connection up all the time and specify a redial period in the Redial Period field maximum 65535 seconds When disconnected the VSG will attempt to bring up the connection after th...

Page 69: ...VSG 1200 V2 User s Guide 69 Chapter 6 LAN and WAN Setup ...

Page 70: ...configure the VSG as a DHCP server you can set the VSG to assign private or public IP addresses to subscriber computer s connected to the LAN port In most cases the VSG assigns private IP address to subscriber computer s connected on the LAN When the subscribers access the Internet NAT is applied This allows multiple computers to share one Internet connection With public IP address assignment thro...

Page 71: ...hind a NAT enabled network If you enter a number between 8010 and 8060 you need to append the port number to the WAN or LAN port IP address to access the web configurator For example if you enter 8010 as the web server port number then you must enter http www 192 168 1 1 8010 where 192 168 1 1 is the WAN or LAN port IP address SSL Security Security Secure Socket Layer SSL security allows you to cr...

Page 72: ...is given a new unused IP address Primary Secondary DNS IP Address Enter the IP address of the DNS server s in the Primary DNS IP Address and or Secondary DNS IP Address fields Note You must specify a DNS server DHCP Server Public Select this option if you want to assign public IP address es to the computer s connected on the LAN port The VSG does not apply NAT on traffic using public IP address as...

Page 73: ... the domain name of the e mail server to which the VSG forwards e mail SMTP Port Specify the port number 25 is the default for SMTP Simple Mail Transfer Protocol Enter a number between 2500 and 2599 Apply Click Apply to save the settings Table 10 System Settings Server continued LABEL DESCRIPTION ...

Page 74: ...ess of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host in a packet when the packet is still...

Page 75: ...ddress For outgoing packets the ILA Inside Local Address is the source address on the LAN and the IGA Inside Global Address is the source address on the WAN For incoming packets the ILA is the destination address on the LAN and the IGA is the destination address on the WAN NAT maps private local IP addresses to globally unique ones required for communication with hosts on other networks It replace...

Page 76: ... where the two subscribers S1 and S2 tries to establish secure VPN connections to the same VPN server V1 at the same time For example the VSG is using a public IP address of 211 21 21 11 In this case the VSG performs One to One IP address translation on the WAN Figure 26 NAT Example One to One The following table shows the address mapping Table 12 WAN NAT Mapping Types for VPN TYPE DESCRIPTION One...

Page 77: ... the address mapping 8 2 3 Example 3 One to One and Many to One The figure below shows an example where subscriber S1 tires to connect to VPN server V1 while subscriber S2 and S3 try to connect to the same VPN server V2 at the same time In this case subscribers S1 and S2 map to the same WAN IP address since the destination is different while subscriber S3 maps to a different WAN IP address Figure ...

Page 78: ...e 15 NAT Example One to One and Many to One SUBSCRIBER ORIGINAL SOURCE IP TRANSLATED SOURCE IP S1 10 59 1 2 211 21 21 2 S2 10 59 1 3 211 21 21 2 S3 10 59 1 4 211 21 21 3 Table 16 System Settings NAT Pool LABEL DESCRIPTION Disable Select this option to deactivate this feature Subscribers are not be able to establish multiple connections simultaneously to the same VPN server that has the single conn...

Page 79: ...esses Group 2 211 21 21 20 211 21 21 29 ten IP addresses Group 3 211 21 21 60 211 21 21 69 ten IP addresses Group 4 211 21 21 75 211 21 21 76 two IP addresses Note You can configure up to ten address pools each pool can contain up to 50 addresses on the VSG No This read only field displays the index number Address List This read only field displays the address pool Delete Click Delete to remove th...

Page 80: ...and anyone can access the Internet through the VSG you can set the VSG to redirect client users to an Internet service usage agreement page Users must accept the service usage agreement before they can access the Internet 9 1 2 CAS Central Authentication Service The Hilton Group Corporation developed the High Speed Internet Access HSIA service to provide Internet access service across its entire H...

Page 81: ...such as session time out to the VSG which uses this information to control the subscriber s connection 9 1 4 1 RADIUS Accounting The VSG sends accounting start and accounting stop messages to the RADIUS server which uses these messages to accurately track subscriber Internet usage The VSG provides two accounting methods Accumulation and Time to Finish The Accumulation accounting method allows mult...

Page 82: ...subscriber Limit Total traffic bandwidth allowed per subscriber Specify advertising web site per subscriber Enable disable SMTP redirect Note Before you can make use of these functions on the VSG configure the proprietary VSAs on the RADIUS server Refer to the documentation that comes with your RADIUS server for more information See Appendix D on page 242 for more information on the VSAs 9 2 Authe...

Page 83: ...VSG 1200 V2 User s Guide 83 Chapter 9 Authentication Figure 32 System Settings Authentication ...

Page 84: ...ver Then configure the following fields Check Local Account First Select this option to have the VSG authenticate a subscriber using the local user database first If the account information is not found then the VSG authenticates subscribers using the RADIUS server s specified Clear this check box to have the VSG authenticate subscribers using the RADIUS server s only Accumulation Select this opti...

Page 85: ...k after a period of inactivity The subscriber may need to enter the username and password again before access to the network is allowed Specify the idle timeout between 1 and 1440 minutes The default is 5 minutes SSL Login Page Security Select Enable to activate SSL security upon accessing the login screen so that user names and passwords are encrypted before being transmitted to the VSG Select Di...

Page 86: ...VSG 1200 V2 User s Guide Chapter 9 Authentication 86 Figure 33 System Authentication Scenario Guide The following table describes each scenario ...

Page 87: ...static or dynamic accounts However subscribers using the dynamic or static accounts are prompted for usernames and passwords Figure 34 Subscriber Login Scenario A Scenario B Select this option if you want to use PMS billing without port location mapping You must then create the subscriber accounts Subscribers are prompted for their usernames and passwords before Internet access is allowed Subscrib...

Page 88: ...and or account expiration time You must associate a subscriber account with a billing profile In addition for PMS billing subscribers may have a choice of purchasing additional time blocks with different billing profiles you set and activate on the VSG 10 1 1 Billing Profile You can create up to ten billing profiles on the VSG Click System Setting Billing and the Billing Profile link to display th...

Page 89: ...ofile LABEL DESCRIPTION Currency Specify the type of currency and or dollar sign for billing Number of decimal places Specify the number of decimal places for the currency The default is 2 No This field displays the index number of a billing profile Active Select this check box to enable the billing profile Name This field displays the name of a billing profile Description This field displays a de...

Page 90: ...ber accounts will be invalid once the allocated time period is used up This option is only available when you select the Day Week or Month option in the Period Time field Selective Unit Specify the range of time units between 1 and 99 a subscriber is allowed to purchase at any one time The range is presented as a drop down list box in the information pop up window Bandwidth Limit Note You must act...

Page 91: ...one location and reconnects in another location the VSG prompts for the user name and password again Select Based on Subscriber to allow a subscriber to freely move between different locations without prompting for user name and password 10 2 2 PMS Configuration Click System Setting Billing and click the PMS Configuration link to display the screen as shown next Service Type Select Private Service...

Page 92: ...ithout prompting for user name and password Note You must activate the port location mapping feature Refer to Chapter 13 on page 112 Regenerate password of static account with PMS checkout This feature is applicable when you select Scenario B with Built in Authentication in the Authentication screen see Figure 32 on page 83 Select Enable to automatically generate a new password for the static acco...

Page 93: ...r example Internet Marriott Revenue Code Enter a revenue code between 01 and 99 Reference Enter a description to identify the service For example Internet Proprietary Select this option if you are using a proprietary PMS system Speed of PMS Interface Set the fields below to configure the PMS port settings on the VSG Note Make sure the port settings are the same on the VSG and the connected PMS dev...

Page 94: ...gement Once a static subscriber account is created it stays permanently in the VSG unless deleted manually You can generate static accounts automatically or manually The following figure shows the links for accessing the static account configuration screens when you click System Settings Accounting and Static Accounts Figure 40 Static Account Links 11 2 Global Static Account Settings To configure ...

Page 95: ...access the Internet using the same account at the same time Then specify the number of concurrent users from the Max concurrent access drop down list box The default number of concurrent access is 2 users per account Customize Printout Click Customize printout text to set the account printout page Refer to Account Printout on page 129 Print To Select Statement Printer if you want to print the acco...

Page 96: ...ts in the Create Static Subscriber Account screen Figure 43 Create Static Subscriber Account Generate Automatically The following table describes the related labels in this screen Table 23 Create Static Subscriber Account Generate Automatically LABEL DESCRIPTION Generate a batch of static accounts Prefix Specify the starting characters affixed to the beginning of all account user names Postfix Spe...

Page 97: ...s in this screen To Enter the ending number of the range of static accounts Billing Profile Select a predefined billing profile from the drop down list box Note This drop down list box displays active profiles only Refer to Section 10 1 1 on page 88 for more information Random Password Length The VSG automatically generates a password for each automatically created static account Specify the lengt...

Page 98: ... section 2 Click Backup Figure 45 Static Subscriber Account Backup and Restore 3 A File Download window displays Click Save Password Enter the password associated with the user name above You may also set the VSG to generate a password automatically refer to Section 11 5 on page 100 Billing Profile From the drop down list box select a billing profile for the static account Note This drop down list...

Page 99: ...t Backup and Restore Save As You can view the backed up file using any text editing program 11 4 2 Restoring a Static Account List You may restore the static account list if you accidentally reset the VSG back to the factory defaults and erased the subscriber account information Follow the steps below to restore a previously backed up subscriber account list 1 In the Create Static Subscriber Accou...

Page 100: ...ABEL DESCRIPTION Refresh Click this button to update the screen Print List Click this button to print a list of all subscriber accounts No This read only field displays the index number of an entry Username This read only field displays the account user name Click the heading to sort the entries in ascending or descending order Hide Password Show Password Click Hide Password to not display the pas...

Page 101: ...figure the printout page Concurrent Access This field displays how many computers are logged in using this account Print Click the icon to print the account information of the selected account Go page Select a page number from the drop down list box to display the selected page First Click First to go to the first page Previous Click Previous to return to the previous page Next Click Next to go to...

Page 102: ...e Chapter 11 Static Subscriber Accounts 102 Figure 50 Static Account Information Printout Example 11 6 Viewing the Static Account List To display the static account list click Static Account List Figure 51 Static Account List ...

Page 103: ...is column Password This field displays the account password Billing Profile This field displays the name of the profile associated to the account Concurrent Access This field displays the number of users are currently using this account for Internet access First Login This field displays the time a subscriber logs in using the account Expiration This field displays the time the account becomes inv...

Page 104: ...e following figure displays the links for accessing the dynamic account configuration screens when you click System Settings Accounting and Dynamic Account Figure 52 Dynamic Account Links 12 2 Dynamic Account General Settings There are two ways you can create dynamic accounts on the VSG using a statement printer connected to the VSG using the web configurator Before you create dynamic accounts you...

Page 105: ...nt Setting LABEL DESCRIPTION Web based Statement Panel Settings No This read only field displays the button index number Button 1 4 The button numbers correspond to the buttons displayed in the Dynamic Account Operator Panel screen Refer to Section 12 3 1 on page 106 for more information SP Button This read only field displays the button label on the statement printer Refer to Figure 54 on page 10...

Page 106: ...creating billing profiles General Settings Flexible Digit Specify how many characters digits the VSG uses for the generated account username and password Unused Accounts Specify the number of hours to wait before the VSG deletes an inactive dynamic account Printout copy Select the number of copies 1 to 3 to print from the drop down list box Click Customize printout text to configure the printout p...

Page 107: ...ccount printout to configure the printout page Figure 56 Dynamic Account Information Printout Example 12 3 2 Dynamic Account Generation Using a Statement Printer Follow the steps below to create dynamic accounts and print the account information using a statement printer Note You have to purchase a statement printer separately 1 Connect the statement printer to the port labeled CONSOLE Refer to Se...

Page 108: ...up the account information to a computer Refer to Section 12 4 1 on page 109 Print List Click Print List to print all account information to the local printer connected to the computer that you use to configure the VSG Note This does NOT display a printout preview window S N This field displays the serial number or the Index number of a dynamic account Username This field displays the account user...

Page 109: ... List Backup File Download 5 A Save As window displays Specify the filename and or location and click Save Status This field displays In Use when the account is currently in use Otherwise it displays Not In Use Delete Click Delete All to remove all accounts Click Delete to remove the selected account Go page Select a page number from the drop down list box to display the selected page First Click ...

Page 110: ...VSG 1200 V2 User s Guide Chapter 12 Dynamic Subscriber Accounts 110 Figure 59 Dynamic Account List Backup Save As You can view the backed up file using any text editing program ...

Page 111: ...VSG 1200 V2 User s Guide 111 Chapter 12 Dynamic Subscriber Accounts ...

Page 112: ...as a hotel This is done using IEEE802 1q VLAN tags The port location mapping feature is used together with the PMS billing function so charges can be done automatically 13 2 Configuring Port Location Mappings Note Make sure you select Built in Authentication and Scenario A in the Authentication screen see Figure 32 on page 83 and configure the PMS Configuration screen see Figure 39 on page 92 Clic...

Page 113: ...match the VLAN ID of a port Port Identifier ID Enter the an ID number between 1 and 999999 of a port for this mapping This is the location ID number you set in the PMS Description Enter a description up to 32 characters for this mapping for identification purposes Status Select No Charge if you don t want to bill a subscriber accessing the Internet at this port location Select Charge for use to bi...

Page 114: ...FTP server specify the IP address of the TFTP server and the file name in the fields provided and click Apply Restore Make sure you have previously backed up the port location mapping Note All current port location mappings will be lost To restore from a local computer specify the name and location of the backup file or click Browse to locate it and click Apply To restore from a TFTP server specif...

Page 115: ...VSG 1200 V2 User s Guide 115 Chapter 13 Port Location Mapping ...

Page 116: ...ts a credit card payment option 2 The customer selects a service type and enters the contact and billing information 3 Customer billing information is processed real time via the secure online clearing house 4 After the transaction is successful the VSG provides the username and password information so the customer can log in for Internet access 14 1 2 Configuration Steps Do the following to provi...

Page 117: ...en you cannot use credit card for billing Click Advanced Setting Credit Card to displays the screen as shown below Enter your payment account in this screen Figure 61 Advanced Setting Credit Card The following table describes the labels in this screen Table 30 Advanced Setting Credit Card LABEL DESCRIPTION Authorize net Select this option if you have a payment account from Authorize net Version Th...

Page 118: ...number that you received from iValidate Terminal ID Enter the terminal ID number that you received from iValidate Secure Server Address Enter the address of the iValidate gateway The default value is https silverado trivalley com merchant processcc aspl Note You don t need to change this address unless instructed by iValidate administrator World Pay Select this option if you have a payment account...

Page 119: ...yed on the login page Select the check box es of the credit card icon s that you want the VSG to display on the subscriber login screen refer to Figure 36 on page 87 for an example Apply Click Apply to save the changes Table 30 Advanced Setting Credit Card continued LABEL DESCRIPTION ...

Page 120: ...touts 15 2 Login Screen When subscriber authentication is activated in the Authentication Configuration screen the subscriber login screen is the first screen that all subscribers see when trying to access the Internet You can configure walled garden web addresses for web sites which all subscribers are allowed to access without logging in refer to Section 17 4 on page 149 The VSG provides differe...

Page 121: ...ion Login 15 2 1 Standard Login Screen The standard subscriber login screen is the VSG s pre configured default simple login screen You can modify the screen color and title and add copyright information and a footnote In the Login Screen Configuration screen select Standard ...

Page 122: ...dard Select this option to use the standard subscriber login screen Title Enter the login page title up to 80 characters in the field provided Footnote Select this check box and enter up to 240 characters in the field provided to add the footnote to the login screen Copyright Select this check box and enter the copyright information up to 80 characters in the field provided to add copyright inform...

Page 123: ...nced Select this option to set the VSG to display the advanced subscriber login screen Welcome Slogan Enter a welcome message up to 80 characters long in the text box provided Page Background Select None to set the background color of the login screen to white FFFFFF the default Select Background Color to set the color of the login screen background to the color specified for example enter 000000 ...

Page 124: ...a web page with images and or advanced multimedia features Figure 68 Customization Login Screen Frame Article Background Color Select None to set the background color of the article text block to white FFFFFF the default Select Background Color to set the background color of the article text block to the color specified for example enter 000000 for black Click View Color Grid to display a list of ...

Page 125: ...re available in the subscriber login screen only when you configure the VSG to use PMS billing Table 34 Customization Login Screen Frame LABEL DESCRIPTION Frame Select this option to configure and set the VSG to display the subscriber login screen in two frames Top Frame Enter a web site address in the URL field for example http www zyxel com Bottom Frame The bottom frame of the subscriber login s...

Page 126: ... Table 35 Customization Service Selection Customization LABEL DESCRIPTION Service Selection Customization Service Selection Messages Enter a message to instruct the subscribers to select a billing profile Purchase Unit Message Enter a message to instruct the subscribers to select the number of time units to purchase Notification Message 1 3 Enter additional message s regarding the replenish featur...

Page 127: ...cess when you select Built in Authentication in the Authentication Configuration screen or when you select RADIUS Server and the RADIUS server is configured not to send session timeout messages The information window displays the amount of time a subscriber still has to use for Internet access when you select RADIUS Server in the Authentication Configuration screen and the RADIUS server is configu...

Page 128: ...e time Information Window Content Window Name Enter a descriptive name for the window title Main message Enter a short message up to 30 characters Message Description Enter a short description about the information window Usage count label Enter the label for the field displaying the remaining time in the first text box provided This field displays when the VSG is set to use proprietary or RADIUS ...

Page 129: ... printout click Advanced Settings Customization and click the Account Printout link to display the screen as shown Figure 74 Customization Account Printout The following table describes the labels in this screen Table 37 Customization Account Printout LABEL DESCRIPTION Title Enter a title up to 24 characters for the printout Subtitle Enter a subtitle up to 80 characters for the printout Username E...

Page 130: ...m the drop down list boxes Expire Description Enter a short description that tells the subscribers when they should activate their accounts before the displayed time Date Time Select a date and time format for the expiry date Accumulation Enter a short description that tells the subscribers when they should use their purchased Internet access service before the displayed time Ending Select this ch...

Page 131: ...VSG 1200 V2 User s Guide 131 Chapter 15 Customization Figure 75 Static Account Printout Example Figure 76 Static Account with PMS Billing Printout Example ...

Page 132: ...VSG 1200 V2 User s Guide Chapter 15 Customization 132 Figure 77 Static Account Printout Statement Printer Example Figure 78 Static Account with PMS Billing Printout Statement Printer Example ...

Page 133: ... authentication is not required and anyone can access the Internet through the VSG you can set the VSG to require users to accept a service usage agreement before they can access the Internet The VSG has a built in user agreement page that you can customize To customize the user agreement page click Advanced Setting Customization and click the User Agreement Page link to display the screen as show...

Page 134: ... of the article text For example use 000000 for black Click View Color Grid to display a list of web friendly colors and corresponding hexadecimal values Article Background Color Specify the background color of the article text color For example enter 000000 for black Click View Color Grid to display a list of web friendly colors and corresponding hexadecimal values Page Background Color Set the b...

Page 135: ...k Apply to save the changes 15 6 1 Standard Login Page If you use the standard subscriber login screen you can specify a message to re direct credit card paying subscribers to the credit card information screen In the Credit Card Customization screen enter the message in the Credit Card Message field and click Apply to save the changes Figure 83 Credit Card Customization Standard Login Screen Mess...

Page 136: ...ion 136 Figure 84 Credit Card Customization Standard Login Screen Message Preview 15 6 2 Service Selection Page Specify the service selection and credit card messages to display on the subscriber login screen in the Credit Card Customization screen ...

Page 137: ...VSG 1200 V2 User s Guide 137 Chapter 15 Customization Figure 85 Credit Card Customization Service Selection Page The following table describes the labels in this screen ...

Page 138: ...button on which subscribers clicks to send the information in the screen Additional Customer Data If you want to obtain more information from the subscribers select the checkbox es and specify the corresponding field label s Customer ID Select this checkbox to display this field and enter the field label for customer ID information First Last Name Select this checkbox to display these two fields a...

Page 139: ...mputer when the credit card is validated and the transaction is successful Scroll down the Credit Card Customization screen and configure the Successful Page fields and click Apply to save the changes Fax Select this checkbox to display this field and specify the label name of the field in which subscribers enter the fax numbers Preview of the Service Selection Page Click Preview of the Service Se...

Page 140: ...n Enter the caption for the account information Username Enter the label name for the username field Password Enter the label name for the password field Usage Time Enter the label name for the usage time field Expiration Date Enter the label name for the expiration date field Email Button Enter the label name for the e mail button the subscribers click to have the VSG e mail this information in t...

Page 141: ...l down the Credit Card Customization screen and configure the Fail Page fields and click Apply to save the changes Figure 89 Credit Card Customization Fail Page The following table describes the labels in this screen Table 41 Credit Card Customization Fail Page LABEL DESCRIPTION Notification Message 1 3 Enter additional message s For example why the transaction failed Try Again Button Enter the la...

Page 142: ...customize how the bill will printout in the Output Bill Customization screen Click Advanced Setting Customization and the Output Bill link to display the screen as shown Figure 91 Customization Output Bill Close Button Enter the label name for the button subscribers click to close this screen Preview of Fail Page Click Preview of Fail Page for a preview screen see Figure 90 on page 142 for an exam...

Page 143: ...play the hotel room number Service Specify the field label name to display the service type For example Internet Access Unit Specify the field label name to display the number of time units purchased Price Specify the field label name to display the total price Purchase Time Select this checkbox to display this field and select the time and date format to display the purchase time Ending Select th...

Page 144: ...t to the WAN port whereas inbound traffic refers to network traffic coming from the WAN port to a LAN port 16 1 1 Bandwidth Allocation The VSG provides two types of bandwidth control based on a subscriber s computer MAC address equal share or class based With equal share bandwidth allocation the VSG allocates an equal amount of outgoing and incoming bandwidth for each subscriber on the LAN With cl...

Page 145: ...Equal Bandwidth Setup To configure the VSG to impose the same bandwidth limits on all subscribers select Equal bandwidth for all subscribers in the Bandwidth Management screen and set the related fields Figure 94 Bandwidth Management Equal Share The following table describes the related labels in this screen ...

Page 146: ... page 88 to set the bandwidth limits in a billing profile Figure 95 Bandwidth Management Class of Service Table 43 Bandwidth Management Equal Share LABEL DESCRIPTION Maximum Upstream Bandwidth To use a pre defined option select the first option and choose a bandwidth from the drop down list box To manually set the bandwidth select the second option and specify the bandwidth in the field provided M...

Page 147: ...VSG 1200 V2 User s Guide 147 Chapter 16 Bandwidth Management ...

Page 148: ... site display advertisement links or activate the walled garden feature for generating on line advertising revenue 17 2 Portal Page A portal page is the first web site to which a subscriber is redirected after logging in successfully If you do not specify a portal web site the subscriber will be directed to the intended web site specified Click Advanced and Portal Page to display the screen as sho...

Page 149: ...rden you can define the web site address es which all users can access without logging in Table 45 Advertisement LABEL DESCRIPTION Frequency Select One Time Only to display an advertisement web site in a pop up browser window once after a subscriber logs in successfully Select Every Min s to display an advertisement web site in a pop up browser window once every time period specified between 1 and...

Page 150: ... Figure 98 Walled Garden The following table describes the labels to configure the walled garden feature The following figure shows a subscriber login screen example with walled garden links Table 46 Walled Garden LABEL DESCRIPTION Link 1 10 In the Name field enter a descriptive name up to 80 characters for the walled garden link to be displayed in the web browser In the URL field enter the web si...

Page 151: ...VSG 1200 V2 User s Guide 151 Chapter 17 Portal Page Advertisement Link and Walled Garden Figure 99 Subscriber Login Screen with Walled Garden Links Example ...

Page 152: ...he web site address by IP address or URL that any user can access without logging in This is similar to the walled garden feature but without displaying the web site link s in the subscriber login screen You have to inform the users about which web sites they can access for free To configure passthrough on the VSG click Advanced and then Passthrough 18 2 Computer IP and MAC Address Passthrough You...

Page 153: ...IPTION Subscriber IP MAC Address Passthrough No This read only field displays the index number of an entry IP Address Enter the IP address of a computer in dotted decimal notation whose packets are allowed to pass through the VSG For example 10 59 1 10 MAC Address Enter the MAC address of a computer in 6 hexadecimal pairs separated by a hyphen for example 00 50 BA 8D 22 96 whose packets are allowe...

Page 154: ...ser name or password Figure 101 Passthrough Destination URL and IP The following table describes the fields in this screen Table 48 Passthrough Destination URL and IP FIELD DESCRIPTION Destination IP Address Passthrough No This read only field displays the index number of an entry IP Address Enter the IP address of a web site in dotted decimal notation for example 192 168 1 10 Pass Through Destina...

Page 155: ... Chapter 18 Passthrough No This read only field displays the index number of an entry URL Link Page Enter the web site address for example http www zyxel com Table 48 Passthrough Destination URL and IP continued FIELD DESCRIPTION ...

Page 156: ...trict access to specified IP address es via the VSG You can prevent subscribers from accessing certain web sites for example playboy based on the IP address To configure a filter click Advanced and Filtering in the navigation panel Figure 102 Advanced Filter The following table describes the fields in this screen Table 49 Filter FIELD DESCRIPTION ENABLE FILTER Select this option to activate this f...

Page 157: ...in dotted decimal notation For example 10 59 1 10 IP Address Range No This read only field displays the index number of an entry IP Address Specify a range of IP addressed for the network devices you want to block Internet access through the VSG Enter the beginning and ending IP addresses in dotted decimal notation For example 10 59 1 10 to 10 59 1 20 Apply Click Apply to save the changes Table 49...

Page 158: ...gure 103 Privilege User The following table describes the fields in this screen Table 50 Privilege User FIELD DESCRIPTION Disable Select Disable to deactivate this feature You need to log into the web configurator first to view the Session List screen Enable Select Enable to allow the computer s with the specified IP address es to access the Session List screen without logging in Set the IP addres...

Page 159: ... in the web browser The Session List screen displays Refer to Section 28 5 on page 188 for the field descriptions The following figure shows an example where the WAN IP address of the VSG is 172 23 37 16 Figure 104 Privilege User Access Session List Example Address List This field displays one or a range of privilege IP address es Delete Click Delete to remove the selected IP address es Apply Clic...

Page 160: ... Your VSG is a NAT enabled device that makes your whole inside network appear as a single computer to the outside world 21 1 1 Port Mapping To make LAN devices behind the VSG visible to the outside world you configure a mapping between a virtual port on the VSG and a server port on a LAN device A virtual port is a port on the VSG that appears as a physical port to the attached devices A server por...

Page 161: ...and 60300 to map to the port number in the Server Port field Device IP Address Enter the IP address of a LAN device in dotted decimal notation For example 10 59 1 111 Device Server Port Enter the port number of a management service for example 80 for HTTP on the LAN device MAC Address Enter the MAC address of the LAN device in hexadecimal notation in 6 hexadecimal pairs for example 0050BA8D2296 No...

Page 162: ...7 LAN Devices Example 1 To access the web based management interface enter the WAN IP address of your VSG and the virtual port number of the LAN device separated by a colon In this example to access the access point AP enter http 192 168 1 1 60001 where 192 168 1 1 is the WAN IP address of the VSG The login screen of the LAN device management interface should display Go page Select a page number f...

Page 163: ...ver Figure 109 LAN Devices Example 2 To access an inside server on the LAN enter the WAN IP address of your VSG and the virtual port number of the inside server separated by a colon In this example to access the web server enter http 192 168 1 1 9602 where 192 168 1 1 is the WAN IP address of the VSG You can also access the server by entering the domain name provided that you specified a DNS serve...

Page 164: ...fies only the network to which the gateway is directly connected and the VSG has no knowledge of the networks beyond For instance the VSG knows about network N2 in the following figure through remote node Router 1 However the VSG is unable to route a packet to network N3 because it does not know that there is a route through remote node Router 1 via Router 2 The static routes allow you to tell the...

Page 165: ...e the IP address of the gateway The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Hop Count Hop count represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for directly connected networks Select a number that approximates th...

Page 166: ...ateway device Hop Count This field displays the cost of this static route Interface This field displays whether the static routing setting is applied on the LAN or WAN interface Delete Select this option and click Delete to remove the selected static route s Table 52 Advanced Static Route continued LABEL DESCRIPTION ...

Page 167: ...VSG 1200 V2 User s Guide 167 Chapter 22 Static Route ...

Page 168: ...ver you can configure a private LAN to allow communication between devices with the specified IP addresses in the Private LAN screen The VSG does not apply iPnP or layer 2 isolation on the devices in a private LAN The following figure shows a network example where computers A and B can communicate with each other in the private LAN Since computers C and D are not in the private LAN the VSG disallo...

Page 169: ...ddress Select this option to specify one IP address to belong to the private LAN Enter the IP address in field provided Add to List Click Add to List to insert the new setting in the table below Private LAN device List This table displays the IP addresses or ranges of IP addresses in the private LAN No This field displays the index number Active Select this option to set the selected entry to part...

Page 170: ...log Overview Syslog logging allows the VSG to send logs to an external syslog server that is used to store and analyze logs 24 1 1 Syslog Server Setup Use the Syslog screen to configure to where the VSG is to send logs To configure the syslog settings click Advanced Logs to display the screen as shown next Figure 114 Logs Syslog ...

Page 171: ...address of the second syslog server on the WAN in dotted decimal notation Send to Email Select Enable to have the VSG send logs to the specified email address Select Disable to deactivate this feature In this case you can only view the log information on the VSG or the syslog server s Email Server IP Address or Domain Name Enter the IP address or domain name of the mail server SMTP Port Enter the ...

Page 172: ...yslog Select this option to record and send this type of logs to the syslog server s Configure syslog server settings in the Syslog screen Email Selec this option to send this type of logs to the specified email address es Configure email address settings in the Syslog screen Syslog Name This field displays the name or type of the log Select the check box es to send the syslog ...

Page 173: ...sor Accounting Operator User IP IP Address Status Login Logout Idle Time Out Each time when the system account logs in or logs out Account Created Id Mac Address Account Create username Account usage time Billing profile information Where Username Single account username or Batch account prefix from to postfix Billing profile information index name When an account is created Subscriber Trace Id MA...

Page 174: ...ress Administration Access Fail Fail message User IP Username Where Fail message Bad Username Password Unauthorized IP Exceeded Maximum Login Note If Fail message Unauthorized IP and no user name can be obtained then Username None If Fail message Exceeded Maximum Login then Username Administrator Supervisor Accounting Operator Each time a system login attempt fails NAT Pool Exhausted IP Port Id MA...

Page 175: ...VSG 1200 V2 User s Guide 175 Chapter 24 Syslog ...

Page 176: ...n reaches a maximum of 50 records or the specified time period is reached the VSG sends the session information to the specified TFTP server 25 1 1 Configuring Session Trace To configure the VSG to send subscriber session information click Advanced Session Trace to display the screen as shown Figure 116 Advanced Session Trace The following table describes the labels in this screen Table 57 Advance...

Page 177: ...ecords the VSG sends the session information to the TFTP server even if the time interval is not up Apply Click Apply to save the settings Table 57 Advanced Session Trace continued LABEL DESCRIPTION Host Name User Name Date VLANId SourceIP SourceMac SourcePort DestIP DestPort MIS Cindy 22Oct04130403 192 168 1 10 0085A0010104 3974 192 168 1 1 80 MIS Cindy 22Oct04130404 192 168 1 10 0085A0010104 397...

Page 178: ...suite Your VSG supports SNMP version one and version 2 The next figure illustrates an SNMP management operation Figure 118 SNMP Management Model An SNMP managed network consists of two main components agents and a manager An agent is a management software module that resides in a managed device An agent translates the local management information from the managed device into a form compatible with...

Page 179: ...owing protocol operations Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the manager to set values for object var...

Page 180: ...VSG for sending SNMP traps The default is 162 Otherwise enter a port number between 16200 and 16299 Configuration No This read only field displays the index number of the entry Community Name Enter the community string or the password of the management station NMS Address Enter the IP address of the management station Privileges Select a privilege level from the drop down list box Options are Read...

Page 181: ...VSG 1200 V2 User s Guide 181 Chapter 26 SNMP ...

Page 182: ...ugh for the connection you can use a TCP IP RS 232 convertor to make an extension The TCP IP RS 232 convertor is a hardware device installed between the VSG and the statement printer on the LAN The following figure shows a network example where the VSG connects to the statement printer via the TCP IP RS 232 convertor Figure 120 Network Example Using TCP IP RS232 Convertor 27 2 TCP IP RS 232 Conver...

Page 183: ...Select Enable to activate this feature Select Disable to deactivate this feature Socket Port Enter the number of the service port for the IP serial conversion service Statement Printer Device Select the model name of your statement printer Convertor IP Address Specify the IP address of the converter Enter the IP address in dotted decimal notation For example 10 59 1 100 Apply Click Apply to save t...

Page 184: ...8 1 System Status Overview Use the System Status screen to view current device status such as the WAN LAN settings current online user list session lists etc 28 2 System Information Click System Status and System to display the screen as shown next The System screen automatically updates every 5 seconds Figure 122 System Status System ...

Page 185: ...e VSG on the LAN WAN IP Settings WAN Port Mode This field displays the DHCP mode of the WAN port IP Address This field displays the IP address of the WAN port on the VSG Subnet Mask This field displays the subnet mask of the WAN port on the VSG Default IP Gateway This field displays the IP address of the default gateway of the WAN port on the VSG DNS Primary DNS Server This field displays the IP a...

Page 186: ...rivate This field is visible when the DHCP Status is Server This field displays the time in minutes a DHCP client is allowed to use an assigned IP address E mail Server IP Address The field displays the IP address or the domain name of the e mail server SSL Certificate Country This field displays the two letter abbreviation of your country State This field displays the name of the state or provinc...

Page 187: ...screen This field displays Non_Auth for a subscriber accessing without authentication Username This field displays the username of a subscriber account Billing Profile This field displays the number of concurrent access allowed and the name of the billing profile that the subscriber uses Login Time This field displays the time the subscriber logs in Expiration This field displays the time this acc...

Page 188: ...Access Control or Ethernet address on a LAN Local Area Network is unique to your computer six pairs of hexadecimal characters A network interface card such as an Ethernet adapter has a hard wired address that is assigned at the factory This address follows an industry standard that ensures no other adapter has a similar address IP Address This field displays the IP address assigned to the client c...

Page 189: ...f inactivity for a session Go page Select a page number from the drop down list box to display the selected page First Click First to go to the first page Previous Click Previous to return to the previous page Next Click Next to go to the next page End Click End to go to the last page Table 64 System Status Session List continued LABEL DESCRIPTION Table 65 System Status NAT Tool Table LABEL DESCRI...

Page 190: ...and click the device name A new Internet browser should display showing the login screen of the LAN device management interface Table 66 System Status LAN Device Status LABEL DESCRIPTION No This field displays the index number Device Name This field displays the name of the LAN device Click the device name to access web based management interface of the LAN device if the Status field is OK For mor...

Page 191: ...Click Export to File to back the billing logs Refer to Section 28 8 1 on page 192 for instructions Clear Log Click Clear Log to clear all log entries No This field displays the index number of the entry Username Location This field displays the user name or the room number for Dynamic PMS or Static accounts only Billing Profile This field displays the name of the billing profile an account is usin...

Page 192: ...og Backup File Download 2 Select Save this file to disk and click OK A Save As window displays Figure 130 Billing Log Backup Save As 3 Specify the file name and or location and click Save to start the backup process To view the billing logs open the log file using any text editor The following figure shows an example Next Click Next to go to the next page End Click End to go to the last page Table...

Page 193: ...can view the list of static routes configured in the Static Route Table screen Click System Status and Static Route Table to display the screen Figure 133 System Status Static Route Table Billing Log Profile NO Username Location BillingProfile Log Time Usage Time Bill Charge from Status 1 222222tt Profile 1 2006 06 21 09 43 07 1 day s 10 00 Dynamic Un used 2 2222zzrr Profile 1 2006 06 21 09 42 29 ...

Page 194: ...gured No This field displays the index number Destination IP Address This field displays the IP address of the final destination Destination Subnet Mask This field displays the subnet mask of the final destination Gateway IP Address This field displays the IP address of the gateway device Hop Count This field displays the cost of this static route Interface This field displays the name of the inte...

Page 195: ...VSG 1200 V2 User s Guide 195 Chapter 28 System Status ...

Page 196: ...to follow Therefore you can specify any name or file extension the configuration files It is recommended that you to use the rom file extension for the configuration file for management purposes You can use the Configuration screen in the web configurator to back up and restore configuration or reset the device to the factory defaults You can back up and restore the configuration file either throu...

Page 197: ...apter 29 Configuration Figure 134 Configuration Backup 2 Click Backup A File Download window displays as shown next Figure 135 Configuration Backup File Download 3 Select Save this file to disk and click OK A Save As window displays ...

Page 198: ... TFTP 1 Click System Tools and Configuration A screen displays as shown next 2 In the Backup section enter the IP address of the TFTP server in dotted decimal notation in the TFTP Server IP Address field 3 Specify a file name for the configuration backup in the Text File Name field Figure 137 Configuration Backup using TFTP 4 Click Apply When the file transfer process is complete a screen displays...

Page 199: ...store unless you have a backup configuration file stored on disk 1 Click System Tools and Configuration A screen displays as shown next Figure 139 Configuration Restore 2 In the Restore section specify the location and filename of a configuration file in the File Path field or click Browse 3 Click Apply to start the configuration restore process The VSG automatically restarts after the restoration...

Page 200: ...nfiguration backup in the Text File Name field 4 Click Apply to start the configuration restore process The VSG automatically restarts after the restoration process is complete 29 4 Reset to the Factory Defaults This section shows you how to reset the device configuration back to the factory defaults If you have forgotten the administrator login password or username you need to use the RESET butto...

Page 201: ... to the Reset the system back to factory defaults section at the bottom of the screen 3 If you want to keep all subscriber account information select Keep subscriber profile and or Keep port location mapping profile 4 Click Apply 5 Wait for the VSG to finish restarting before accessing the VSG again ...

Page 202: ...e from www zyxel com With scheduled firmware upgrade the VSG automatically checks for downloads and upgrades the latest firmware every time interval specified The following figure shows the links in the Firmware screen Figure 142 Firmware Links 30 2 Manual Firmware Upgrade Follow the steps below to upgrade the firmware manually 1 Download the latest firmware from www zyxel com to your computer Unz...

Page 203: ... the file if it is zipped 2 Run a TFTP server program and specify the location of the firmware file and the communication mode Refer to the documentation that comes with your TFTP server program for instructions 3 Access the web configurator Refer to the section on accessing the web configurator for instructions 4 Click System Tools Firmware and the Manual Firmware Upgrade link to display the scre...

Page 204: ...el com to the TFTP server and update the synchronization file Figure 147 Scheduled Firmware Upgrade Example The following describes the automatic firmware upgrade process 1 The VSG checks the synchronization file on the TFTP server for the firmware version number 2 If the synchronization file has the latest firmware version number VSG retrieves the latest firmware file as specified in the synchron...

Page 205: ... resides Synchronization Check File A Synchronization Check file is a file containing the latest firmware filename and version number on the TFTP server Click View Sample File to display an example Enter the name of the check file Frequency Set how often Weekly Daily or Hourly you want to have the VSG check for new firmware and upgrade to new firmware if available default Weekly Then select the da...

Page 206: ...A digital certificate also referred to as a certificate contains the key owner s name and public key the name of the issuing certification authority the certification authority s digital signature and a certificate validity time limit and other optional information fields 31 1 2 Certificate Authorities A Certification Authority CA issues digital certificates and guarantees the identity of the cert...

Page 207: ...ve the changes and restart the VSG when prompted 3 Enable SSL security in the Authentication screen Click System Setting and Authentication in the navigation panel 4 A screen displays as shown Select Enable in the SSL Login Security field Table 70 SSL Certificate LABEL DESCRIPTION Password Enter the secret password you used when applying for the certificate Note This password must be the same as t...

Page 208: ...Computer After you enable and activate the SSL login security on the VSG you can access the VSG through a secure connection Follow the steps below to view and install the default SSL security certificate on a computer 1 Access the VSG A Security Alert window displays Click OK to continue and close the window Figure 152 Installing the SSL Security Certificate First Security Alert 2 A second Securit...

Page 209: ...ty Alert 3 Click View Certificate to display the Certificate window as shown Notice the warning about the untrusted certificate Figure 154 Installing the SSL Security Certificate View Certificate 4 Click Install Certificate to install the certificate to your computer A Certificate Import Wizard window displays Click Next ...

Page 210: ...te 210 Figure 155 Installing the SSL Security Certificate Certificate Import Wizard 5 Accept the default or specify the location to store the certificate Click Next Figure 156 Certificate Import Wizard Location 6 Click Finish to import the certificate ...

Page 211: ...isplays as shown Click Yes to store the certificate to the computer Figure 158 Root Certificate Store 8 When the certificate is saved successfully a Certificate Import Wizard window displays Click OK Figure 159 Certificate Import Wizard 9 A Certificate window displays the detailed information Notice that the certificate is now trusted ...

Page 212: ...dow to return to the Security Alert window as shown Notice that the first item in the list changed to inform you that the certificate is from a trusted host Click Yes to proceed to the login screen in secure mode Figure 161 Security Alert Trusted Note Once you are logged in with SSL security the URL starts with https instead of http ...

Page 213: ...VSG 1200 V2 User s Guide 213 Chapter 31 SSL Certificate ...

Page 214: ...orrect mode Refer to Chapter 3 on page 42 on system settings using the web configurator Use the SMT to set general system settings configure the LAN and WAN settings change the administrator login password upgrade firmware or reset the device to the factory defaults For advanced configuration use the web configurator Refer to the corresponding web configurator chapters for background information 3...

Page 215: ...tor user name admin and default password 1234 and then press ENTER Note The user name and password are case sensitive Figure 163 SMT Login Screen Note The VSG automatically logs you out after five minutes of inactivity Simply log back into the VSG if this happens 32 3 The SMT Main Menu Summary The SMT main menu is shown next Internet Subscriber Server III Copyright c 2005 2015 All Rights Reserved ...

Page 216: ...election Enter a numeric between 1 and 8 Table 71 SMT Main Menu NUMBER MENU TITLE FUNCTION 1 System Configuration Use this menu to set up general system setup 2 WAN Configuration Use this menu to configure the WAN port 3 LAN Configuration Use this menu to configure the LAN port 4 System Status Use this menu to view the current configuration of the VSG 5 Utilities Use this menu to perform firmware ...

Page 217: ...hanges and return to the main screen TAB To move to the next configuration field SPACE To toggle between field choices System Configuration System Name Doamin Name Console Port Speed 9600 Web Server Port 80 E Mail Server Redirect Table 73 SMT System Configuration FIELD DESCRIPTION System Name Enter a descriptive name up to 32 characters for identification purposes Domain Name Enter the domain name...

Page 218: ...xample if you enter 8010 as the web server port number then you must enter http www 192 168 1 1 8010 where 192 168 1 1 is the WAN or LAN port IP address E mail Server Redirect Enter the IP address or domain name of the e mail server to which the VSG forwards e mail This field should be configured if the e mail server is behind a firewall or on a NAT enabled network At the S ave and return R eturn ...

Page 219: ...when you select D in the WAN Mode field Enter the subnet mask depending on your network needs The default is 255 255 255 0 Refer to Appendix H on page 268 if you are implementing subnetting Default Gateway Enter the IP address of the default gateway Primary Secondary DNS IP Address Enter the IP address of the DNS server s in the Primary DNS IP Address and or Secondary DNS IP Address fields The def...

Page 220: ... connection automatically if it is disconnected Redial Period Sec The field is only visible when you select K in the Connect Setting field Type the time in seconds that elapses before the VSG automatically attempts to reconnect to the PPPoE server The default is 30 seconds Max Idle Time Min This field is only visible when you select C in the Connect Setting field Type the time in minutes that elap...

Page 221: ...r the password associated with the user name above Connect Setting C K Enter C Connect on demand when you don t want the connection up all the time and specify an idle time out in the Max Idle Timeout Setting field This is the default selection Enter K Keep alive when you want your connection up all the time and specify the redial time in the Redial Period field to set how long the VSG waits befor...

Page 222: ...ress 168 95 1 1 Secondary DNS IP Address Table 77 SMT LAN Configuration FIELD DESCRIPTION DHCP Service D R S Enter D Disable to deactivate DHCP services on the LAN Ethernet devices connected to the LAN interface must use static IP addresses Enter R Relay to set the VSG to forward network configuration requests to a DHCP server on the LAN network Then configure the Server IP Address and Agent IP Ad...

Page 223: ...s ENTER to save the changes and return to the previous screen type R and press ENTER to discard all changes and return to the previous screen or type M and press ENTER to continue configuring the fields Restart the device when prompted Press ESC and enter Y to stop any actions in the current screen and return to the previous screen All changes will be discarded Table 77 SMT LAN Configuration conti...

Page 224: ...ubnet mask on the WAN port Gateway This field displays the IP address of the default gateway Primary DNS Server This field displays the IP address of the primary DNS server Secondary DNS Server This field displays the IP address of the secondary DNS server DHCP Configuration DHCP Service D R S This field displays the DHCP mode Server Relay or Disable on the LAN port Start IP Address This field is ...

Page 225: ...the console port Refer to the section on establishing a console port connection for more information 2 In the SMT main menu type 5 and press ENTER to display the Utilities Menu screen 3 Type 1 and press ENTER to display the Firmware Upgrade screen 4 Enter the IP address of the computer running the TFTP server in the TFTP Server IP Address field 5 Specify the name of the firmware file in the Downlo...

Page 226: ...nge the administrator login password 1 In the main menu type 5 and press ENTER to display the Utilities menu 2 In the Utilities menu type 2 and press ENTER The Change Administrator Password menu displays Figure 174 SMT Change Administrator Password 3 Type your current system password in the Enter the old password field and press ENTER 4 Type your new system password in the Enter the new password f...

Page 227: ...isplays Enter Y to log out Figure 176 SMT System Logout 32 12 Factory Defaults If you forgot your administrator login user name and password you have to use the RESET button to reset the VSG back to the factory defaults Refer to Chapter 2 on page 38 Resetting the VSG restores all system configuration back to the factory defaults However you may retain the subscriber account information Note All sy...

Page 228: ...er account information in the local subscriber database Type N and press ENTER to delete all subscriber account information 4 Press ENTER to reset the VSG The VSG automatically restarts Figure 177 SMT Reset to Factory Defaults Change to factory defaults and the system will be restarted Are you sure Y N ...

Page 229: ...VSG 1200 V2 User s Guide 229 Chapter 32 Using The SMT ...

Page 230: ...onnections from the VSG to the power source Make sure you are using the supplied power cord and proper power supply Refer to the appendix on product specifications 2 Make sure the power source is turned on and that the VSG is receiving sufficient power 3 If these steps fail to correct the problem contact your local distributor for assistance Table 80 Troubleshooting the LAN LED STEPS CORRECTIVE AC...

Page 231: ...CORRECTIVE ACTION 1 Check to see if the VSG is connected to your computer using a console cable 2 Check to see if the communications program is configured correctly Set the communication parameters as stated here Emulation auto detect Baud Rate 9600 bps No Parity 8 data bits 1 stop bit Flow Control None 3 Make sure you entered the correct username and password The default administrator username is...

Page 232: ...st reset the VSG back to the factory defaults using the reset button Use a pointed object to press the reset button on the front panel to reset the VSG All your custom configuration will be lost 3 Ping the VSG from your computer on the WAN or LAN Table 84 Troubleshooting Internet Browser Display STEP CORRECTIVE ACTION 1 Make sure you are using Internet Explorer version 4 0 and later or Netscape ve...

Page 233: ...E ACTION 1 Make sure the statement printer is connected to a power source and is turned on 2 Check that the statement printer is connected to the port labeled Console 3 Make sure there is enough printing paper in the statement printer 4 Check that you select Statement Printer Device in the Console Type field in the System screen 5 4 Make sure you configure and associate a billing profile for the f...

Page 234: ...AN DHCP server with client pool size of 512 and DHCP relay HTTP proxy SMTP DNS redirection WAN connection static IP DHCP client PPPoE PPTP NAT for VPN IPSec PPTP AAA Web based authentication RADIUS AAA Secondary RADIUS server Proprietary CAS Central Authentication Service Global roaming support Built in Authentication and accounting Vendor Specific Attributes Static Dynamic Accounting Security Por...

Page 235: ...rs 1 024 Management Web based management TFTP HTTP firmware upgrade Schedules firmware upgrade Backup Restore configuration Real time status list Remote authorized management Configuration file import export LAN device management Syslog Session trace SNMP v1 v2 MIB II with traps Table 89 Product Specifications Physical and Environmental LED Power SYS WAN LAN 10 100 Dimension 440 W x 116 L x 44 H m...

Page 236: ...Address Conflicts Scenario 1 You must set the VSG to use different LAN and WAN IP addresses on different subnets if you enable DHCP server on the VSG For example you set the WAN IP address to 192 59 1 1 and the LAN IP address to 10 59 1 1 Otherwise It is recommended the VSG use a public WAN IP address Scenario 2 The VSG LAN IP address conflicts with the DHCP client IP address In the following figu...

Page 237: ... WAN IP address to 192 59 1 1 and the LAN IP address to 10 59 1 1 Otherwise It is recommended the VSG use a public WAN IP address Scenario 4 Two or more subscribers have the same IP address By converting all private IP addresses to the WAN IP address the VSG allows subscribers with different network configurations to access the Internet However there are situations where two or more subscribers ar...

Page 238: ... s Guide Appendix B IP Address Assignment Conflicts 238 Figure 181 IP Address Conflicts Scenario 4 This problem can be solved by adding a VLAN enabled switch or setting the computers to obtain IP addresses dynamically ...

Page 239: ...VSG 1200 V2 User s Guide 239 Appendix B IP Address Assignment Conflicts ...

Page 240: ...ttings a subscriber login screen displays prompting for a user name and password Figure 182 Subscriber Login Screen Framed Example Enter a user name and password and click Enter Depending on the settings in the VSG either the specified web page or an advertisement web page displays After a successful login an information window may display Figure 183 Subscriber Login Information Window Example ...

Page 241: ...VSG 1200 V2 User s Guide 241 Appendix C Subscriber Login ...

Page 242: ...ver and the VSG It is necessary you define the VSAs on the RADIUS sever if you want the VSG to perform any of the additional functions listed below Limit Download bandwidth per subscriber Limit Upload bandwidth per subscriber Limit Total traffic bandwidth allowed per subscriber Specify advertising web site per subscriber Enable disable SMTP redirect Note Before you can make use of these functions ...

Page 243: ... expiration time This means that a subscriber is allowed to access the Internet until the total upload bandwidth allocated is reached This attribute is supported when you enable bandwidth management on the VSG with the class of service based on the RADIUS settings Refer to Chapter 16 Bandwidth Management on page 144 for more information Note You must also specify the BW Down attribute Integer 64 2...

Page 244: ...dth Management disable Bandwidth management is not activated on the VSG while the VSA response from the external RADIUS server contains upload and download bandwidth limits VSA Error BW up down Equal bandwidth for all subscriber selected Bandwidth management is activated on the VSG with equal bandwidth applied to all subscribers VSA Error BW up down Class of service is selected but no BW up down B...

Page 245: ...VSG 1200 V2 User s Guide 245 Appendix D Vendor Specific Attributes ...

Page 246: ...us Network statistics Initial Setup Do the following before you start report printing using an SP 200 1 Purchase an SP 200 from your local dealer if you don t have one 2 Set the function of the console port on the VSG for statement printer connection see Section 5 1 General System Setting on page 56 3 Connect the SP 200 to the CONSOLE port on the VSG see Section 2 2 Hardware Connections on page 39...

Page 247: ...example Figure 184 SP 200 Daily Account Monthly Account Summary This report shows the username and price for the subscriber account s that is created for the current month Key combination A B C B B Table 92 SP 200 Report Printing Key Combination REPORT TYPE KEY COMBINATION Daily Account Summary A B C A A Monthly Account Summary A B C B B System Status A B C C C Network Statistics A B C A B Daily A...

Page 248: ...hly Account System Status This report shows the current system information such as the host name and WAN IP address Key combination A B C C C The following figure shows an example Monthly Account 2004 10 Username Price bwh2y936 10 00 Cindy 10 00 9v269m55 10 00 bwh2y943 20 00 TOTAL ACCOUTNS 4 TOTAL PRICE 50 00 2004 10 28 14 11 26 End ...

Page 249: ... SYST This field displays the time since the system was last restarted HOST This field displays the description name of the VSG for identification purposes FRMW This field displays the version of the firmware on the VSG BTRM This field displays the version of the bootrom WAMA This field displays the MAC address of the VSG on the WAN LAMA This field displays the MAC address of the VSG on the LAN WA...

Page 250: ...inuous addresses in the IP address pool If the DHCP field is DHCP Relay this field displays the DHCP server IP address DHEP This field is visible when the DHCP is DHCP Server This field displays the end of the continuous addresses in the IP address pool DHLT This field is visible when the DHCP is DHCP Server This field displays the time in minutes a DHCP client is allowed to use an assigned IP add...

Page 251: ... the WAN WARD This field displays the number of packets received on the WAN WATE This field displays the number of error packets transmitted on the WAN WARE This field displays the number of error packets received on the WAN LATD This field displays the number of packets transmitted on the LAN LARD This field displays the number of packets received on the LAN LATE This field displays the number of...

Page 252: ...es the Ethernet cable pin assignments for the WAN port Make sure that the Ethernet cable connection between the VSG and the hub or router conforms to the pin assignments as shown in the following diagram Table 95 Network Cable Types SPEED NETWORK CABLE TYPE 10 Base TX 100 2 pair UTP STP Category 3 4 or 5 100 Base TX 100 2 pair UTP STP Category 5 Table 96 WAN Port Cable Ping Assignments PIN NO RJ 4...

Page 253: ...d a computer or switch uplink port conforms to the pin assignments as shown in the figure Figure 189 LAN Port Cable Pin Assignments Serial Console Port The following table describes the console cable pin assignments for the serial console port Table 97 LAN Port Cable Pin Assignments PIN NO RJ 45 SIGNAL ASSIGNMENT DESIGNATION 1 Input Transmit Data RD 2 Input Transmit Data RD 3 Output Transmit Data ...

Page 254: ...ION 1 DCD Received Line Signal Detector to the VSG 2 TXT Transmitted Data from the VSG 3 RXT Received Data to the VSG 4 DTR Data Terminal Ready from the VSG 5 GND Signal Ground Common 6 DSR Data Set Ready to the VSG 7 RTS Request to Send from the VSG 8 CTS Clear to Send to the VSG 9 RI Ring Indicator to the VSG Table 99 DB25 Male to DB9 Male Connector Ping Assignment P1 P2 1 8 2 2 3 3 4 20 5 7 6 6...

Page 255: ...VSG 1200 V2 User s Guide 255 Appendix F Cable Types and Cable Pin Assignments ...

Page 256: ...requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network If you manually assign IP information instead of using dynamic assignment make sure that you...

Page 257: ... Microsoft Networks If you need the adapter 1 In the Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 In the Network window click Add 2 Select Protocol and then click Add 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK...

Page 258: ...dapter s TCP IP entry and click Properties 2 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields Figure 192 Windows 95 98 Me TCP IP Properties IP Address 3 Click the DNS Configuration tab If you do not know your DNS informati...

Page 259: ...to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your VSG 1200 V2 and restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 In the Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet ...

Page 260: ...mputer s IP Address 260 Figure 194 Windows XP Start Menu 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial up Connections Figure 195 Windows XP Control Panel 3 Right click Local Area Connection and then click Properties ...

Page 261: ...Connections Properties 4 Select Internet Protocol TCP IP under the General tab in Win XP and click Properties Figure 197 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically ...

Page 262: ... tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a de...

Page 263: ...m Figure 199 Windows XP Internet Protocol TCP IP Properties 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click OK to close the Local Area Connection Properties window 10Turn on your VSG 1200 V2 and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 In the Command Prompt window type ipconfig and then press EN...

Page 264: ...up Your Computer s IP Address 264 Figure 200 Macintosh OS 8 9 Apple Menu 2 Select Ethernet built in from the Connect via list Figure 201 Macintosh OS 8 9 TCP IP 3 For dynamically assigned settings select Using DHCP Server from the Configure list ...

Page 265: ...ck Save if prompted to save changes to your configuration 7 Turn on your VSG 1200 V2 and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel window Macintosh OS X 1 Click the Apple menu and click System Preferences to open the System Preferences window Figure 202 Macintosh OS X Apple Menu 2 Click Network in the icon bar Select Automatic fro...

Page 266: ...From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your VSG 1200 V2 in the Router address box 5 Click Apply Now and close the window 6 Turn on your VSG 1200 V2 and restart your computer if prompted Verifying Settings Check your TCP IP properties in the Network window ...

Page 267: ...VSG 1200 V2 User s Guide 267 Appendix G Setting up Your Computer s IP Address ...

Page 268: ...inary number Therefore each octet has a possible range of 00000000 to 11111111 in binary or 0 to 255 in decimal There are several classes of IP addresses The first network number 192 in the above example defines the class of IP address These are defined as follows Class A 0 to 127 Class B 128 to 191 Class C 192 to 223 Class D 224 to 239 Class E 240 to 255 IP Address Classes and Hosts The class of ...

Page 269: ...t bit Class B addresses have a 1 in the leftmost bit and a 0 in the next leftmost bit Class C addresses start with 1 1 0 in the first three leftmost bits Class D addresses begin with 1 1 1 0 Class D addresses are used for multicasting which is used to send information to groups of computers There is also a class E It is reserved for future use The following table shows the allowed ranges for the f...

Page 270: ...network number bits By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number...

Page 271: ...last octet bit values indicate host ID bits borrowed to make network ID bits The number of borrowed host ID bits determines the number of subnets you can have The remaining number of host ID bits after borrowing determines the number of hosts you can have on each subnet 255 255 255 240 28 1111 0000 240 255 255 255 248 29 1111 1000 248 255 255 255 252 30 1111 1100 252 Table 103 Alternative Subnet M...

Page 272: ... need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits giving 26 2 or 62 hosts for each subnet all zeroes is the subnet itself all ones is the broadcast address on the subnet Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 16...

Page 273: ...192 168 1 127 Highest Host ID 192 168 1 126 Table 109 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 110 Subnet 4 IP SUBNET MAS...

Page 274: ...octets available for subnetting and a class A address has three host ID octets see Table 100 on page 269 available for subnetting Table 111 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 255 Table 112 Class C Subnet Planning NO BORROWED HOST ...

Page 275: ...NET 1 255 255 128 0 17 2 32766 2 255 255 192 0 18 4 16382 3 255 255 224 0 19 8 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25 512 126 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255 252 30 16384 2 15 ...

Page 276: ...te firmware upgrade 204 automatic firmware upgrade process 204 B backing up billing logs 192 bandwidth control 144 bandwidth limit downlink 90 uplink 90 Bandwidth Management 90 144 activate 144 class based 144 equal share 144 RADIUS 146 types 144 bandwidth management 243 billing 88 234 account credit card 32 billing logs 191 backup 192 charge type 191 delete all 191 export 191 opening 192 sample 1...

Page 277: ...mer Support 8 customize subscriber login screen 120 D daily account summary 247 desktop installation 38 device reset 33 40 47 DHCP 33 lease time 222 mode DHCP client 56 pool size 234 DHCP client table 187 update interval 187 DHCP pool size 222 DHCP relay 223 DHCP server 56 222 236 DHCP services 222 digital certificate 206 digital signature 206 dimension 235 disclaimer 2 display subscriber account ...

Page 278: ...nformation window 127 example 128 session timeout messages 127 setup 128 in room billing 91 install SSL certificate 208 installation option 38 interface 234 IP Address 165 IP address 236 setup 256 IP address assignment 224 236 important note 256 IP address conflicts 236 scenario 1 236 scenario 2 236 scenario 3 237 scenario 4 237 IP address setup 256 DNS information 258 263 install components 257 M...

Page 279: ... or MAC 152 types 152 pin assignment 252 pin assignments 252 PMS 40 88 91 Based on Room 91 Based on Subscriber 91 charge modes 91 connection speed 93 port location mapping 91 type of 92 PMS billing 88 service selection messages 125 PMS port connector 40 PMS port settings 93 PMS setup 92 PMS transaction 193 PMS transaction messages 193 Point to Point Protocol over Ethernet See PPPoE Point to Point ...

Page 280: ...6 See SSL security 234 serial console port 253 server port 160 server port number 232 service selection messages 125 session information 188 client computer 188 total entries 188 update interval 188 session timeout messages 127 session trace 176 example 177 filename convention 177 number of records 176 setup 176 TFTP server 177 Setting up your computer s IP address 256 Simple Network Management Pr...

Page 281: ...redit card billing 135 customize 120 standard 121 synchronization check file 205 synchronization file 204 205 example 204 syntax convention 30 syslog 170 on the LAN 171 on the WAN 171 syslog server 171 syslog settings 170 system information 184 System Management Terminal See SMT System Management Terminal SMT 214 system name 56 system reset 33 40 47 system setup 56 system status 184 248 T TCP IP c...

Page 282: ...sages 244 vendor ID 85 VSG reset to factory defaults 227 W walled garden 34 149 example 150 important note 150 WAN port 40 cable pin assignment 252 WAN port the 252 warranty note 7 web configurator 35 42 configuration menu 44 idle timeout 43 menu summary 44 navigation panel 43 supported browser 35 web redirect 34 web server port 218 winipcfg 259 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands