4IPNET WHG315 User manual

User’s Manual
V2.20
WHG & HSG Series
Secure WLAN Controller /
Wireless Hotspot Gateway

User’s Manual
WHG Controller / HSG Gateway ENGLISH
ii
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored,
transcribed in an information retrieval system, translated into any language, or transmitted in any
form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or
otherwise, without the prior written permission of 4IPNET, INC.
Disclaimer
4IPNET, INC. does not assume any liability arising out the application or use of any products, or
software described herein. Neither does it convey any license under its parent rights nor the parent
rights of others. 4IPNET further reserves the right to make changes in any products described herein
without notice. The publication is subject to change without notice.
Trademarks
4IPNET (4ipnet) is a registered trademark of 4IPNET, INC. Other trademarks mentioned in this
publication are used for identification purposes only and may be properties of their respective
owners.

User’s Manual
WHG Controller / HSG Gateway ENGLISH
iii
FCC CAUTION
WHG311, WHG321
This equipment has been tested and proven to comply with the limits for a class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates uses and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
---Reorient or relocate the receiving antenna.
---Increase the separation between the equipment and receiver.
---Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
---Consult the dealer or an experienced radio/TV technician for help.
WHG315, WHG325, WHG401, WHG405, WHG425, WHG505, WHG515,
WHG525, WHG707, WHG711, HSG1100, HSG1250, HSG3200, HSG3250,
HSG5200
These equipment have been tested and found to comply with the limits for a Class A
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instruction manual, may
cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user will be
required to correct the interference at his own expense.

User’s Manual
WHG Controller / HSG Gateway ENGLISH
iv
Table of Contents
Chapter 1. Introduction ........................................................................ 9
1.1. WHG Controller Series ..................................................................... 9
1.2 WHG Controller Models................................................................... 11
1.3 HSG Gateway Series ...................................................................... 11
1.4 HSG Gateway Models ..................................................................... 12
1.5 4ipnet Solution Overview ................................................................ 13
1.6 Key Terms & Concepts ................................................................... 15
1.7 Recommended Configuration Sequence ............................................ 19
1.7.1. Common Settings.............................................................. 19
1.7.2. Advanced Settings and Application....................................... 19
Chapter 2. WMI & Setup Wizard ......................................................... 21
2.1. Web Management Interface ............................................................ 21
2.2 Running the Wizard........................................................................ 23
Chapter 3. Basic Network Settings ..................................................... 28
3.1. Network Planning .......................................................................... 28
3.2. Uplink (WAN side) Configuration...................................................... 31
3.2.1 WAN Settings ................................................................... 31
3.2.2. Dual Uplink ...................................................................... 32
3.2.3. WAN Port Selection for dual WAN1 / WAN2 models................. 34
3.2.4. WAN Traffic Control ........................................................... 36
3.2.5. Uplink Detection & Failover ................................................. 36
3.3. Downlink (LAN side) VLAN option .................................................... 39
3.3.1. Port-Based Service Zone .................................................... 39
3.3.2. Tag-Based Service Zone ..................................................... 40
Chapter 4. User Authentication Database ........................................... 41
4.1. Authentication Database Configuration ............................................. 41
4.2. Built-in Authentication Databases .................................................... 43
4.2.1. Local User Database ............................................................ 43
4.2.2. On-Demand User Database................................................... 46
4.2.3. The Guest Authentication Option.......................................... 51
4.3. External Authentication Options....................................................... 54
4.3.1. RADIUS............................................................................ 55
4.3.2. POP3 ............................................................................... 58
4.3.3. LDAP ............................................................................... 59
4.3.4. NT Domain ....................................................................... 60
4.3.5. SIP .................................................................................. 60
Chapter 5. Group Attributes & Policy Rules......................................... 63
5.1 Overview of the Concept................................................................. 63
5.2 Practical Setups of Group and Policies............................................... 66
Chapter 6. Basic Service Zone Configuration ...................................... 73
6.1 The Concept of Service Zone ........................................................... 73
6.2 Service Zone Setup........................................................................ 73
6.2.1. Tag-based or Port-based Service Zones................................. 73
6.2.2. NAT Mode or Router Mode................................................... 76
6.2.3. Service Zone Network Interface ........................................... 76
6.2.4. DHCP Server options.......................................................... 77
6.2.5. Authentication Options ....................................................... 78
6.2.6. Portal Customization .......................................................... 80
Chapter 7. Basic AP Management (WHG Only).................................... 83
7.1. Introduction ................................................................................. 83

User’s Manual
WHG Controller / HSG Gateway ENGLISH
v
7.2 Local Area AP Management ............................................................. 86
7.2.1 AP List .............................................................................. 86
7.2.2 AP Adding and Discovery ..................................................... 87
7.2.3 Templates Configuration ...................................................... 90
7.2.4. AP Firmware Management .................................................. 92
7.2.5 WDS Links ......................................................................... 93
7.2.6 Rogue AP Scanning ............................................................. 96
7.2.7 AP Load Balancing Feature ................................................... 97
7.3 Wide Area AP Management ............................................................. 98
7.3.1. Adding an Access Point....................................................... 99
7.3.2. AP Discovery to find Multiple Access Points ............................ 99
7.3.3 AP Configuration with Templates ..........................................100
7.3.4 AP auto Discovery and Configuration using CAPWAP ...............101
7.3.5 Tunneled VAP Location Mapping Setup ..................................106
7.3.6 Access Points on Map .........................................................107
7.3.7 Rogue AP Scanning ............................................................109
7.3.8 AP Load Balancing Feature ..................................................110
Chapter 8. Advanced Settings for Network Environment ........................ 111
8.1 IPv4 / IPv6 Dual Stack Network.....................................................111
8.2 User Access Control .....................................................................114
8.3 Certification ...............................................................................117
8.3.1. System Certificate ............................................................118
8.3.2. Internal Root CA...............................................................119
8.3.3. Internally Issued Certificate ...............................................120
8.3.4. Trusted Certificate Authorities ............................................121
8.4 Management Access .....................................................................122
Chapter 9. Utilities for Controller Management................................. 123
9.1 WHG Controller Management .........................................................123
9.2 Configuration Backup & Restore ......................................................125
9.3 Firmware Upgrade.........................................................................127
9.4 Restart .......................................................................................128
Chapter 10. Reports and Logs for Monitoring ..................................... 129
10.1 System Related Status ..................................................................129
10.1.1 The Dashboard..................................................................129
10.1.2 System Summary ..............................................................130
10.1.3 Network Interface..............................................................132
10.1.4 Routing...........................................................................134
10.1.5 DHCP Server ...................................................................134
10.2 Client Related Status ....................................................................136
10.2.1 Online User .....................................................................136
10.2.2 Associated Non Login Users ...............................................136
10.2.3 Cross Gateway Roaming Users ...........................................137
10.2.4 On-Demand Roaming Out User...........................................137
10.2.5 Session List .....................................................................138
10.3 Logs and Reports .........................................................................139
10.3.1 System Related................................................................139
10.3.2 User Events.....................................................................140
10.4 Reports & Notification ...................................................................141
Chapter 11. Hotspot Application ......................................................... 144
11.1 On-Demand Billing Plans ...............................................................144
11.2 On-Demand Billing Plan Types .......................................................145

User’s Manual
WHG Controller / HSG Gateway ENGLISH
vi
11.2.1 Usage-time with Expiration Time........................................145
11.2.2. Usage-time with No Expiration Time ..................................147
11.2.3. Hotel Cut-off-time ...........................................................149
11.2.4. Volume..........................................................................150
11.2.5. Duration-time with Elapsed Time.......................................152
11.2.6. Duration-time with Cut-off Time........................................154
11.2.7. Duration-time with Begin-and-End Time.............................155
11.3 Terminal Server Setup ..................................................................157
11.4 Customizing POS Tickets ...............................................................165
11.5 Creating Accounts ........................................................................170
11.6 User Self Service..........................................................................172
Chapter 12. PMS Integration .............................................................. 177
12.1 Hotel Room Location Mapping ........................................................178
12.2 Net-Retriever...............................................................................180
12.3 Micros Opera ...............................................................................181
Chapter 13. Account Roaming............................................................. 184
13.1 Roaming Related ..........................................................................184
13.2 WISPr for ISP Roaming ..................................................................184
13.3 Cross Gateway Roaming.................................................................186
13.4 Local / On-Demand Account Roaming Out.........................................187
Chapter 14. VPN ................................................................................. 190
14.1 Site-to-Site .................................................................................190
14.2 Remote Client..............................................................................192
14.3 Local Client .................................................................................193
Chapter 15. Switch Management ........................................................ 195
15.1 Switch List ..................................................................................195
15.2 PoE Schedule Template .................................................................196
15.3 Backup Configuration....................................................................197
Chapter 16. Platform Dependent Features.......................................... 198
16.1 High Availability (HA) (WHG321, WHG325, WHG405, WHG515,
WHG525, WHG707, WHG711, WHG801).........................................198
16.2 Hardware Button (WHG311, WHG315) ............................................200
16.2.1. Quick-Restore.................................................................201
16.2.2. Quick-VPN .....................................................................205
16.2.3. Quick-Maintenance..........................................................206
16.3 AP Simulation (WHG321, WHG325, WHG405, WHG425, WHG515,
WHG525, WHG711, WHG801) .......................................................208
16.3.1. Simulation Tool (Utilities) .................................................208
16.3.2. Managed AP Simulation (Status) .......................................212
Appendix A. WHG Models & Installation.............................................. 213
Appendix B. HSG Models & Installation ............................................... 229
Appendix C. External Pages ................................................................ 235
Appendix D. Useful Management & Evaluation Tools ............................ 249
Appendix E. On-Demand Account Types ............................................... 251
Appendix F. UI Reference Index ........................................................... 258
I. Main .....................................................................................258
II. Setup Wizard..........................................................................258
III. Dashboard ............................................................................259
A. System ..................................................................................260
1) General ..................................................................................260

User’s Manual
WHG Controller / HSG Gateway ENGLISH
vii
2) WAN .....................................................................................261
3) IPv6 .....................................................................................263
4) LAN Ports ...............................................................................264
5) High Availability ......................................................................264
6) Service Zones .........................................................................265
7) Port Location Mapping ..............................................................270
8) Middleware .............................................................................274
B. Users .....................................................................................276
1) Groups...................................................................................276
2) Internal Authentication.............................................................277
3) External Authentication ............................................................279
4) On-Demand Accounts...............................................................279
5) Schedule ................................................................................280
6) Policies...................................................................................281
7) Blacklists................................................................................282
8) Privilege Lists..........................................................................283
5) Additional Control ....................................................................283
C. Access Points ..........................................................................285
1) Local Area AP Management .......................................................285
a) Overview................................................................................285
b) List .....................................................................................286
c) Adding ...................................................................................287
d) Discovery ...............................................................................288
e) Templates...............................................................................289
f) Firmware ................................................................................297
g) Upgrade .................................................................................297
h) WDS Management ...................................................................298
i) Rogue AP Detection ..................................................................299
j) AP Load Balancing ....................................................................300
2) Wide Area AP Management .......................................................301
a) Map .....................................................................................301
b) List .....................................................................................308
c) Discovery ...............................................................................311
d) Adding ...................................................................................312
e) Template ................................................................................313
f) WDS List.................................................................................318
g) Backup Config .........................................................................319
h) Firmware................................................................................319
i) CAPWAP ..................................................................................319
j) Rogue AP Detection ..................................................................320
k) AP Load Balancing ...................................................................321
l) Third Party AP Management .......................................................322
D. Switches ................................................................................322
1) Switch List..............................................................................322
2) PoE Schedule Template.............................................................323
3) Backup Configuration ...............................................................325
E. Network .................................................................................325
1) NAT .....................................................................................325
2) Monitor IP ..............................................................................327
3) Walled Garden and Walled Garden Ad .........................................328
4) VPN .....................................................................................329

User’s Manual
WHG Controller / HSG Gateway ENGLISH
viii
5) Proxy Server...........................................................................331
6) Local DNS Record ....................................................................333
7) Dynamic Routing .....................................................................334
8) DDNS ....................................................................................338
9) Client Mobility .........................................................................338
F. Utilities ...................................................................................339
1) Administrator Account ..............................................................339
2) Backup & Restore ....................................................................343
3) Certificates .............................................................................344
4) Network Utilities ......................................................................347
5) Simulation Tool .......................................................................349
6) Restart...................................................................................350
7) System Upgrade......................................................................351
G. Status....................................................................................351
1) System Summary ....................................................................352
2) Interface ................................................................................354
3) Monitor Users..........................................................................355
4) Managed AP Simulation ............................................................356
5) Process Monitor.......................................................................357
6) Logs & Reports........................................................................358
7) Reporting ...............................................................................359
8) Session List ............................................................................365
9) DHCP Lease ............................................................................365
10) Routing Table ........................................................................367

User’s Manual
WHG Controller / HSG Gateway ENGLISH
9
Chapter 1.Introduction
1.1. WHG Controller Series
4ipnet WHG Controllers are feature rich network edge devices designed for network
service provisioning, authentication, security, and management. Depending on the
scale of deployment, there are a selection 4ipnet WHG Controller models to meet
the network demands with various scale of capacities.
4ipnet WHG Controllers are designed to cater for the fundamental needs of any
network environment, namely triple A (AAA) which stands for Authentication,
Authorization, and Accounting. With 4ipnet WHG Controllers, various users are
authenticated based on user role, from there it will define the user’s accessible
network segments, the user’s network portfolio including accessible time, QoS,
routing rules, firewall rules, usage terms and privileges which are collectively
known as authorization. Finally accounting are performed by 4ipnet WHG
Controllers periodically while a client is using the network, updating the accounting
information for this client to either the internal user database or an external user
database depending on deployment.
Wireless network provisioning is no easy task when the scale reaches multiple AP
deployments. 4ipnet WHG Controllers are equipped with comprehensive AP
management feature to cover not only 4ipent AP devices deployed locally under the
Local Area Network (LAN) but also 4ipnet AP devices deployed remotely in the Wide
Area Network (WAN), relative to the location of your 4ipnet WHG Controller.
Furthermore, with a 3rd party AP management interface, 4ipnet WHG Controllers
are capable of performing generic AP management features including associated
online user monitoring, shortcut to GUI interface, and location planning for non-
4ipnet APs.

User’s Manual
WHG Controller / HSG Gateway ENGLISH
10
Network safety and traffic control are other big areas of concern for network
owners, hoteliers as these are major factors in determining the quality and stability
of your network environment as a whole. 4ipnet WHG Controllers addresses these
needs with the following major features: equipped with static and dynamic routing
features for optimized path selection, QoS mapping for enforcing bandwidth control
to each individual user, system uplink bandwidth control, and customization firewall
protocols and rules.
Common networking features can be found well packed into the 4ipnet WHG
Controllers. Providing three varieties of NAT function, Walled Garden for free
website surfing, Network device monitoring tool, Static DNS translation, Proxy
Server, VPN and more. 4ipnet WHG Controllers simplify network deployment by
incorporation multiple networking features into one device, avoiding the need to
setup external NAT servers, Proxy servers, VPN gateway, etc. thereby reducing
deployment complexity.
Network Maintenance and Network monitoring tasks are made easy with built in
displays of system traffic, system resource utilization such as CPU usage and
memory consumption, online user record, DHCP lease record, and more. Event logs
can be sent to external servers for long term record keeping or in depth analysis.