background image

VSG-1000 Vantage Service Gateway 

Getting to Know Your VSG 

1-1 

This chapter introduces the features and applications of the VSG.  

1.1 

Introducing the VSG 

The VSG (Vantage Service Gateway) allows Internet service providers and property managers to provide 
broadband Internet access to end users (or subscribers). The VSG is ideal in office or hotspot environments.  
Hotspots are public areas, such as airports, hotels, coffee shops, where end users can access the Internet at any time.  

1.2 Features 

Your VSG provides the following features to accommodate subscribers with a variety of network configurations 
with little or no technical support.   

Plug-and-Play Internet Access 

The VSG provides plug-and-play Internet connectivity so subscribers can access the Internet without configuring 
their computers. In addition, with transparent proxy, the VSG resolves any incompatible proxy settings.  

Port Forwarding 

Use this feature to forward incoming service requests to a server on your local network. 

DHCP Support 

DHCP (Dynamic Host Configuration Protocol) allows the individual computers (DHCP clients) to obtain TCP/IP 
configuration at start-up from a centralized DHCP server. The VSG has built-in DHCP server capability. It can 
assign IP addresses, an IP default gateway and DNS servers to DHCP clients. The VSG can also act as a surrogate 
DHCP server (DHCP Relay) where it relays IP address assignment from the actual real DHCP server to the DHCP 
clients. 

RADIUS (Remote Authentication Dial-In User Service) Client 

The VSG allows you to maintain a central subscriber database on a remote RADIUS server.  Subscriber accounting 
and authentication is then done through the remote RADIUS server.  

CAS (Central Authentication Service) 

The Hilton Group Corporation developed the High Speed Internet Access (HSIA) service to provide Internet access 
service across its entire Hilton Group hotels. In order to use the HSIA, hotel guest(s) must be authenticated through 
the proprietary CAS. The CAS performs both user authentication and accounting. 

Local Subscriber Database 

The VSG allows you to maintain a subscriber database on the VSG without setting up an external RADIUS server. 
Subscriber accounting and authentication are done using the local subscriber database.  

Accounting 

Accounting can be done using an external RADIUS server or the built-in accounting feature.  

Local Content and Advertising Links 

Once connected to the network, the VSG directs the subscriber to a specified web site and display advertisement 
links. This can be a source of extra online advertising revenues and increased business exposure. 

Access control (Walled Garden) 

With the walled garden feature, subscribers are able to access predetermined web sites without logging in. The 
VSG blocks full Internet access until the subscribers log in.  

Chapter 1   

Getting to Know Your VSG

Summary of Contents for ZyXEL Vantage VSG-1000

Page 1: ...VSG 1000 Vantage Service Gateway User s Guide Version 1 06 August 2004...

Page 2: ......

Page 3: ...n of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any prod...

Page 4: ...limits are designed to provide reasonable protection against harmful interference in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed...

Page 5: ...eplacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantabilit...

Page 6: ...Miller St Anaheim CA 92806 2001 U S A support zyxel de 49 2405 6909 0 www zyxel de GERMANY sales zyxel de 49 2405 6909 99 ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany 33 0 4 72...

Page 7: ...1 Installation Options 2 1 2 1 1 Desktop Installation 2 1 2 1 2 Rack Mount Installation 2 1 2 2 Hardware Connections 2 2 2 2 1 Front Panel 2 2 2 2 2 Front Panel LEDs 2 2 2 2 3 Rear Panel 2 2 2 2 4 Tu...

Page 8: ...t Page 5 9 5 4 Subscriber Management Screen 5 9 Chapter 6 Local Subscriber Management 6 1 6 1 Introduction 6 1 6 2 Subscriber Management without Billing 6 1 6 2 1 Editing Subscriber Account 6 1 6 2 2...

Page 9: ...T Main Menu Summary 12 2 12 4 Navigating the SMT Interface 12 2 12 4 1 SMT Screen Breakdown 12 2 12 4 2 The Navigation Keys 12 3 Chapter 13 System Configuration Using the SMT 13 5 13 1 About SMT Syste...

Page 10: ...ernet Access 15 2 15 5 TFTP File Transfer 15 3 15 6 Administrator Password and Username 15 3 Appendix A IP Address Assignment Conflicts A Appendix B Subscriber Login C Appendix C Cable Types and Cable...

Page 11: ...igure 5 5 Subscriber Control Built in Authentication 5 4 Figure 5 6 Subscriber Control RADIUS 5 6 Figure 5 7 Subscriber Logout Window Version 1 5 8 Figure 5 8 Subscriber Logout Window Version 2 5 8 Fi...

Page 12: ...Figure 12 3 SMT Main Menu 12 2 Figure 12 4 SMT Menu Breakdown 12 3 Figure 13 1 SMT System Configuration 13 5 Figure 13 2 SMT System Status 13 7 Figure 13 3 SMT Change Administrator Password 13 9 Figu...

Page 13: ...Billing 6 2 Table 6 2 Subscribers List No Billing 6 3 Table 6 3 Add New Subscribers With Billing 6 5 Table 6 4 Add New Subscriber Account Modify 6 5 Table 6 5 Account Modify Account List 6 6 Table 7...

Page 14: ...VSG 1000 Vantage Service Gateway xiv List of Tables Table 15 8 Troubleshooting TFTP File Transfer 15 3...

Page 15: ...m 1 IP Address Conflicts Case A A Diagram 2 IP Address Conflicts Case B A Diagram 3 IP Address Conflicts Case C A Diagram 4 IP Address Conflicts Case D B Diagram 5 Subscriber Login Screen C Diagram 6...

Page 16: ......

Page 17: ...e g as shorthand for for instance and i e as shorthand for that is or in other words throughout this manual The notation indicates the sequence in which menus should be selected for example click Win...

Page 18: ......

Page 19: ...SG 1000 Vantage Service Gateway I Part I Getting Started This part introduces the VSG Vantage Service Gateway hardware installation connections and basic system configuration using the web configurato...

Page 20: ......

Page 21: ...s a surrogate DHCP server DHCP Relay where it relays IP address assignment from the actual real DHCP server to the DHCP clients RADIUS Remote Authentication Dial In User Service Client The VSG allows...

Page 22: ...ding to your business needs The advanced settings allows you to include welcome messages company logo and basic formatting Local Console Management The VSG provides a console port for local management...

Page 23: ...et access to subscribers Account billing and authentication can be done either using a remote RADIUS server or the built in billing function and local subscriber database Connect an access point AP to...

Page 24: ......

Page 25: ...t to each corner on the bottom of the VSG These rubber feet help protect the VSG from shock or vibration and ensure space between devices when stacking Do not block the ventilation holes Leave space b...

Page 26: ...cable for system configuration The Console Port Local management of the VSG is done through the console port It requires a direct connection between the VSG and a computer via a console cable Refer t...

Page 27: ...tion 2 3 Figure 2 3 Rear Panel 2 2 4 Turning on the VSG Connect one end of the supplied power cord to the power socket on the back of the VSG and the other end to an appropriate power source When the...

Page 28: ......

Page 29: ...ator Step 1 Make sure your VSG is properly connected refer to instructions in the chapter on hardware installtion Step 2 Launch your web browser and type the WAN IP address 192 168 1 1 is the default...

Page 30: ...er to the Troubleshooting chapter if you forget the administrator username and or password The account manager account is used for subscriber account management only No system configuration is allowed...

Page 31: ...to save the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will n...

Page 32: ......

Page 33: ...VSG 1000 Vantage Service Gateway II Part II Web Configurator System Configuration This part covers system configuration and subscriber management using the web configurator...

Page 34: ......

Page 35: ...Dynamic Host Configuration Protocol allows the individual clients Ethernet device to obtain the TCP IP configuration at start up from a centralized DHCP server The VSG has built in DHCP server capabi...

Page 36: ...lient machines along with the assigned IP address and subnet mask There are two ways that an ISP disseminates the DNS server addresses The first is for an ISP to tell a customer the DNS server address...

Page 37: ...or more information on IP address translation refer to RFC 1631 The IP Network Address Translator NAT 4 7 3 How NAT Works Each packet has two addresses a source address and a destination address For o...

Page 38: ...igure below shows an example where the two subscribers S1 and S2 tries to establish secure VPN connections to the same VPN server V1 at the same time For example the VSG is using a public IP address o...

Page 39: ...destination is different while subscriber S3 maps to a different WAN IP address Figure 4 3 NAT Example One to One and Many to One The following table shows the address mapping Table 4 5 NAT Example On...

Page 40: ...VSG 1000 Vantage Service Gateway 4 6 System Configuration Figure 4 4 System Configuration The following table describes the fields in this screen...

Page 41: ...the static WAN IP address assigned to you by your ISP or network administrator Subnet Mask Enter the subnet mask depending on your network needs The default is 255 255 255 0 Refer to the Subnetting a...

Page 42: ...primary syslog server to which the logs are sent Secondary Server IP Enter the IP address of the secondary syslog server to which the logs are sent Interval Time Enter the time interval in minutes to...

Page 43: ...vious screen The changes you made will not be saved if you have not clicked Apply The following table describes the system logs you may select in the System Configuration screen Table 4 7 Syslog Descr...

Page 44: ......

Page 45: ...criber Control Enable Select Enable to activate subscriber authentication and configure the related fields as described in the following sections Disable Select Disable to allow subscribers Internet a...

Page 46: ...sage agreement before they can access the Internet Display the Subscriber Control screen as shown Figure 5 2 Subscriber Control User Agreement The following table describes the labels in this screen T...

Page 47: ...l guest launches a web browser Step 2 The VSG redirects the guest s web browser to a login screen at CAS Step 3 The guest enters the provided access information Once authentication is successful CAS i...

Page 48: ...you have not clicked Apply 5 2 4 Built in Authentication You can use the local subscriber database on the VSG to set up subscriber information This is useful if you don t have a RADIUS server Billing...

Page 49: ...counting method allows multiple re logins until the allocated time period or until the subscriber account is invalid The VSG accounts for the time the subscriber logs in for Internet access The Time t...

Page 50: ...een Table 5 5 Subscriber Control RADIUS FIELD DESCRIPTION Management Type Select RADIUS to use the subscriber database on a remote RADIUS server Primary Server Server IP Enter the IP address of the pr...

Page 51: ...Time to Finish to allow one time login Accounting Service Select Enable from the drop down list box to activate the accounting feature Otherwise select Disable to de activate the accounting feature A...

Page 52: ...ion a message is sent to the RADIUS server to stop the accounting process and update the accounting information The following table summarizes the different logout windows and the configuration option...

Page 53: ...manually log out by entering http 1 1 1 1 Logout in the web browser To display the Internet time usage information enter http 1 1 1 1 Time 5 3 User Agreement Page In cases where user authentication i...

Page 54: ...e Management Type RADIUS Figure 5 11 Web Configurator Subscriber Management Version 2 Subscriber Control Enable Management Type Built in Authentication Billing Mechanism Enable Figure 5 12 Web Configu...

Page 55: ...Subscriber Management and Add Subscribers The Add Subscribers screen varies depending on whether the billing mechanism is activated The Built in Authentication management type supports Accumulation a...

Page 56: ...ave the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will not be...

Page 57: ...ser name and password pair The user name and password for each account must be separated with a comma Spaces between the comma and the password are allowed An example is shown in the following figure...

Page 58: ...sed The VSG automatically disconnects the subscriber after the time units are used up For post pay billing the VSG keeps track of how long a subscriber accesses the Internet until the subscriber logs...

Page 59: ...efer to Section 6 3 3 for more information Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previous Click Previous to go back to...

Page 60: ...Click Apply to save the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you...

Page 61: ...te a subscriber account click Delete in the selected account entry in the Account Modify screen This removes the account entry immediately from the list To terminate a subscriber account that is curre...

Page 62: ......

Page 63: ...Service Gateway III Part III Web Configurator Advanced Configuration This part covers setting the login screen port mapping IP and MAC address pass through wall garden and advertising links using the...

Page 64: ......

Page 65: ...tion Subscriber Management and Customize Login Screen There are three ways in which you can customize the login screen Standard Advanced and Frame 7 2 Standard Login Screen The standard login screen i...

Page 66: ...he color specified for example enter 000000 for black Click View Color Grid to display a list of web friendly colors and corresponding hexadecimal values Article Enter a block of text up to 1024 chara...

Page 67: ...changes you made will not be saved if you have not clicked Apply You can enter simple HTML tags such as b in the text box for formatting purposes The following figure shows an example of an advanced s...

Page 68: ...ld for example http www zyxel com Down Frame Specify the color of the frame background For example enter 000000 for black Click View Color Grid to display a list of web friendly color and correspondin...

Page 69: ...VSG 1000 Vantage Service Gateway Subscriber Login Screen 7 5 Figure 7 6 Frame Subscriber Login Screen Example Refer to the next chapter to configure walled garden and advertisement links...

Page 70: ......

Page 71: ...ndow or activate the walled garden feature for generating on line advertising revenues 8 2 The Portal Page and Advertisement Links You can set the VSG to direct a subscriber to a specified portal web...

Page 72: ...w displays randomly one at a time URL Link 1 10 Enter the web site addresses in the fields provided Walled Garden Select Enable to activate this feature Refer to Section 8 3 for more information Selec...

Page 73: ...FIELD DESCRIPTION Walled Garden Select Enable to activate this feature and set the field s below Select Disable to de activate this feature Link 1 3 In the Prompt field enter a descriptive name up to...

Page 74: ......

Page 75: ...NAT enabled device that makes your whole inside network appear as a single computer to the outside world 9 1 1 Port Mapping To make LAN devices behind the VSG visible to the outside world you configu...

Page 76: ...enu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previous Click Prev...

Page 77: ...o access an inside server on the LAN enter the WAN IP address of your VSG and the virtual port number of the inside server separated by a colon In this example to access the FTP server enter http 172...

Page 78: ......

Page 79: ...P MAC A screen displays as shown Figure 10 1 IP MAC Address Pass Through The following table describes the labels in this screen Table 10 1 IP MAC Address Pass Through LABEL DESCRIPTION No This read o...

Page 80: ...teway 10 2 IP and MAC Address Pass Through Table 10 1 IP MAC Address Pass Through LABEL DESCRIPTION Previous Click Previous to go back to the previous screen The changes you made will not be saved if...

Page 81: ...tion name of the VSG for identification purposes Consol Port Speed This field displays the speed of the console port on the VSG Date This field displays the current date in yyyy mm dd format Time This...

Page 82: ...P Address This field displays the IP address of the secondary DNS server Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previou...

Page 83: ...g to sort the entries if applicable Figure 11 3 Web Configurator Status Current User The following table describes the labels in this screen Table 11 3 Web Configurator Status Current User LABEL DESCR...

Page 84: ......

Page 85: ...e Gateway IV Part IV The SMT System Maintenance and Additional Information This part contains information on the SMT System Management Terminal configuration and firmware maintenance troubleshooting a...

Page 86: ......

Page 87: ...Establishing a Console Port Connection After the VSG is directly connected to a computer using the console port turn on the computer and run a terminal emulation program for example Hyper Terminal in...

Page 88: ...current configuration of the VSG 3 Utilities Use this menu to perform firmware upgrade and change login password 4 Restart Use this menu to restart your VSG 5 Logout Use this menu to log out of the SM...

Page 89: ...KEY DESCRIPTION ENTER To move to the next configuration field in the menu ESC Press ESC to discard any changes and return to the previous screen Firmware Upgrade TFTP Server IP Address 10 10 10 10 Dow...

Page 90: ......

Page 91: ...e same change to the terminal emulator software Auto Logout Timer Specify how many minutes between 0 and 60 the SMT session can be left idle before the session times out The default is 10 minutes Afte...

Page 92: ...set the VSG to automatically obtain an IP address and other network information DNS information etc from a DHCP server on the LAN network Enter R Relay to set the VSG to forward network configuration...

Page 93: ...2 SMT System Status The following table describes the fields in this screen Table 13 2 SMT System Status FIELD DESCRIPTION System Name This field displays the name of the VSG for identification purpos...

Page 94: ...ress of the DHCP server Agent IP Address This field is visible when the DHCP Service field displays Relay This field displays the IP address of the DHCP relay agent Start IP Address This field is visi...

Page 95: ...action and return to the main menu 13 6Reset the VSG to Factory Defaults If you forgot your login user name and password you have to reset the VSG back to factory defaults Resetting the VSG restores a...

Page 96: ...ge Service Gateway 13 10 System Configuration Using the SMT Figure 13 5 SMT Reset to Factory Defaults Are you sure you want to reset the device back to the factory defaults Y N Enter the command key a...

Page 97: ...fy any name or file extension for the firmware and the configuration files However it is recommended to use the bin file extension for the firmware file and rom for the configuration file for manageme...

Page 98: ...omplete Check the firmware version in the login screen Figure 14 4 SMT Successful Firmware File Transfer 14 3 2 Firmware Upgrade Using the Web Configurator Follow the steps below to upload the firmwar...

Page 99: ...re Upgrade Successful Step 7 After the VSG finishes restarting access the web configurator again Check the firmware version number in the login screen 14 4Configuration File Maintenance You can only u...

Page 100: ...current configuration before restoring a previous back up configuration please do not attempt to restore unless you have a backup configuration file stored on disk Step 1 Run a TFTP server program on...

Page 101: ...ed to an Ethernet device Table 15 2 Troubleshooting LAN LEDs STEPS CORRECTIVE ACTION 1 Make sure you are using the correct Ethernet cable Connect the LAN port to a hub switch using a crossover Etherne...

Page 102: ...in the SMT 3 Make sure you entered the correct username and password The default username is admin and the default password is 1234 The username and password are case sensitive If you have forgotten y...

Page 103: ...tings do not prevent any file transfer 15 6Administrator Password and Username If you have forgotten the administrator password and username you cannot access the VSG You must reload the firmware to t...

Page 104: ...tings and enter n Otherwise enter y to change the settings again 1 Run Monitor 2 Restart system 3 Erase entire FLASH 4 SDRAM Testing Enter selection 3 Erasing flash 0 block 0 OK Erasing flash 0 block...

Page 105: ...s any key to continue prompt press any key to display the SMT login screen Enter admin as the username and 1234 as the password to access the VSG TFTP download parameters IP address 10 59 1 1 TFTP ser...

Page 106: ......

Page 107: ...use a public WAN IP address Case B The VSG LAN IP address conflicts with the DHCP client IP address In the following figure the VSG is acting as a DHCP server The VSG assigns an IP address which is t...

Page 108: ...situations where two or more subscribers are using the same private IP address This may happen when a subscriber is configured to use a static or fixed IP address that is the same as the IP address th...

Page 109: ...uch as www zyxel com in a web browser The login screen displays prompting you to enter the user name and password Diagram 5 Subscriber Login Screen Enter a user name and password and click Enter Depen...

Page 110: ...describes the Ethernet cable pin assignment for the WAN port Chart B WAN Port Cable Ping Assignments PIN NO RJ 45 SIGNAL ASSIGNMENT DESIGNATION 1 Output Transmit Data TD 2 Output Transmit Data TD 3 I...

Page 111: ...in the figure ETHERNET DEVICE COMPUTER UPLINK PORT VANTAGE SERVICE GATEWAY 1 TD 1 RD 2 TD 2 RD 3 RD 3 TD 6 RD 6 TD Diagram 7 LAN Port Cable Pin Assignments Serial Console Port The following table desc...

Page 112: ...manually assign IP information instead of using dynamic assignment make sure that your computers have IP addresses that place them in the same subnet as the VSG s LAN port for Internet access or WAN...

Page 113: ...he list of network clients and then click OK e Restart your computer so the changes you made take effect Configuring 1 In the Network window Configuration tab select your network adapter s TCP IP entr...

Page 114: ...IP address remove previously installed gateways If you have a gateway IP address type it in the New gateway field and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to...

Page 115: ...indows 2000 NT XP 1 For Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial...

Page 116: ...XP and click Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have a sta...

Page 117: ...tric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when finished 7 In the Internet Protocol TCP IP Properties window the General tab in Windows XP Click O...

Page 118: ...igned settings select Using DHCP Server from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Ty...

Page 119: ...ilt in Ethernet from the Show list Click the TCP IP tab 3 For dynamically assigned settings select Using DHCP from the Configure list 4 For statically assigned settings do the following From the Confi...

Page 120: ...are used for multicasting There is also a class E address It is reserved for future use Chart 5 Classes of IP Addresses IP ADDRESS OCTET 1 OCTET 2 OCTET 3 OCTET 4 Class A 0 Network number Host ID Host...

Page 121: ...wed by a continuous sequence of zeros for a total number of 32 bits Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remain...

Page 122: ...8 Subnet Mask Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 The remaining 7 bits de...

Page 123: ...BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 12...

Page 124: ...h Class A and Class B Networks For class A and class B addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID A class B address has two h...

Page 125: ...IP Subnetting S Chart 17 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255 252 30 16384...

Page 126: ...client AAA Web based authentication RADIUS AAA Secondary RADIUS server Global roaming support Built in authentication and accounting Proprietary CAS Central Authentication Service Security L2 isolati...

Page 127: ...ecifications U PHYSICAL ENVIRONMENT Dimension 440 W x 116 L x 44 H mm Temperature 0 to 50C Humidity 10 to 95 non condensing Power 100 220 V AC 50 60 Hz Maximum power consumption 20W Certification FCC...

Page 128: ...stem password 13 8 Changing System password 3 2 class A iv classes of IP addresses O configuration and firmware files filename convention 14 1 configuration file backup 14 3 restore 14 4 configuration...

Page 129: ...P and MAC address pass through 10 1 IP subnetting O ipconfig L L LAN Local Area Network 4 1 LAN device 9 1 LAN device management 9 1 example 9 2 LAN port E LEDs 2 2 local subscriber database 1 1 5 4 l...

Page 130: ...5 4 RADIUS 5 5 Subscriber Management screen 5 9 subscriber manual logout 5 9 super user account 5 2 Syntax Conventions xvii syslog 4 2 4 8 4 9 syslog format 4 2 system information 13 7 11 1 system Mai...

Page 131: ...VSG 1000 Vantage Service Gateway Index Y type of system login accounts 3 2 winipcfg I www zyxel com v Z ZyXEL Limited Warranty v ZyXEL Web Page xvii ZyXEL website v...

Reviews: