4IPNET WHG301 User manual

V1.00
4ipnet WHG301
User sManual

Copyright
The contents of this publication may not be reproduced in anypartoras a whole, stored, transcribed in
an information retrieval system,translated into any language, or transmittedin any form or byany means,
mechanical,magnetic, electronic, optical, photocopying, manual,orotherwise, without the prior written
permission of 4IPNET, INC.
Disclaimer
4IPNET, INC.does notassume any liability arising out the application oruse of any products,orsoftware
described herein. Neitherdoes itconvey any license underits parentrights not the parentrights of others.
4IPNET further reserves the right to make changes in any products described herein without notice.The
publication is subjectto change without notice.
Trademarks
4IPNET (4ipnet) is aregistered trademark of 4IPNET,INC. Other trademarks mentioned in this publication
are used foridentification purposes only and may be properties of their respective owners.

20084IPNET, INC.
3
4ipnet WHG301
User
’
s Manual
FCC CAUTION
This equipment has been tested and proven to complywith the limits for a class B digital device, pursuant
to part 15 of the FCC Rules. These limits are designed to provide reasonable protection againstharmful
interference in a residential installation. This equipment generates uses and can radiate radio frequency
energyand, if not installed and used in accordancewith the instructions, maycause harmful interference to
radio communications. However, there is no guarantee thatinterference will not occur in a particular
installation. Ifthis equipment does cause harmful interference toradio or television reception, which can be
determinedbyturning the equipmentoff and on, the user is encouraged to tryto correctthe interference by
one or more of the following measures:
---Reorient or relocate the receiving antenna.
---Increase the separation between the equipment and receiver.
---Connectthe equipment into an outleton a circuitdifferent from that to which the receiver is connected.
---Consult the dealer or an experienced radio/TV technician for help.

20084IPNET, INC.
i
4ipnet WHG301
User
’
s Manual
Tableof Contents
1. Before You Start.................................................................................................................................................1
1.1 Preface...................................................................................................................................................1
1.2 Document Conventions..........................................................................................................................1
2. SystemOverview ...............................................................................................................................................2
2.1 Introductionof 4ipnetWHG301..............................................................................................................2
2.2 System Concept.....................................................................................................................................2
2.3 Specification...........................................................................................................................................3
2.3.1 Hardware Specification..................................................................................................................3
2.3.2 Technical Specification...................................................................................................................3
3. Installation..........................................................................................................................................................6
3.1 Hardware Installation..............................................................................................................................6
3.1.1 System Requirements....................................................................................................................6
3.1.2 Package Contents..........................................................................................................................6
3.1.3 Panel Function Descriptions..........................................................................................................7
3.1.4 Installation Steps............................................................................................................................8
3.2 QuickSoftware Configuration.................................................................................................................9
4. Web Interface Configuration...........................................................................................................................19
4.1 System Configuration...........................................................................................................................21
4.1.1 Configuration Wizard...................................................................................................................22
4.1.2 System Information......................................................................................................................23
4.1.3 WAN1 Configuration....................................................................................................................25
4.1.4 WAN2 Configuration....................................................................................................................27
4.1.5 WAN TrafficSettings....................................................................................................................29
4.1.6 LAN Port Mapping........................................................................................................................31
4.1.7 Service Zones..............................................................................................................................34
4.2 UserAuthentication..............................................................................................................................39
4.2.1 Authentication Configuration........................................................................................................40
4.2.2 BlackList Configuration...............................................................................................................65
4.2.3 Group Configuration.....................................................................................................................67
4.2.4 PolicyConfiguration.....................................................................................................................71
4.2.5 Additional Configuration...............................................................................................................78
4.3 AP Management...................................................................................................................................81
4.3.1 AP List..........................................................................................................................................82
4.3.2 AP Discovery...............................................................................................................................86
4.3.3 Manual Configuration...................................................................................................................88
4.3.4 Template Settings........................................................................................................................89
4.3.5 Firmware Management................................................................................................................90

20084IPNET, INC.
ii
4ipnet WHG301
User
’
s Manual
4.3.6 AP Upgrade.................................................................................................................................90
4.3.7 WDS Management.......................................................................................................................91
4.4 NetworkConfiguration..........................................................................................................................92
4.4.1 NetworkAddress Translation.......................................................................................................93
4.4.2 Privilege List.................................................................................................................................96
4.4.3 Monitor IPList..............................................................................................................................98
4.4.4 Walled Garden List......................................................................................................................99
4.4.5 ProxyServer Properties.............................................................................................................100
4.4.6 DynamicDNS............................................................................................................................101
4.4.7 IPMobility...................................................................................................................................101
4.4.8 VPN Configuration.....................................................................................................................102
4.5 Utilities................................................................................................................................................104
4.5.1 Change Password......................................................................................................................105
4.5.2 Backup/Restore Settings...........................................................................................................106
4.5.3 Firmware Upgrade.....................................................................................................................107
4.5.4 Restart........................................................................................................................................108
4.5.5 NetworkUtilities.........................................................................................................................109
4.6 Status..................................................................................................................................................110
4.6.1 System Status.............................................................................................................................111
4.6.2 InterfaceStatus..........................................................................................................................113
4.6.3 Routing Table.............................................................................................................................115
4.6.4 Current Users.............................................................................................................................116
4.6.5 TrafficHistory.............................................................................................................................117
4.6.6 NotifyConfiguration...................................................................................................................120
4.7 Help....................................................................................................................................................122
Appendix A. Accepting Payment via Authorize.Net.......................................................................................123
Appendix B. Accepting Payment via PayPal ..................................................................................................132
Appendix C. Service Zone DeploymentExample...........................................................................................141
Appendix D. Proxy Setting................................................................................................................................150
Appendix E. Session Limit and Session Log .................................................................................................155
Appendix F. Network Configuration on PC & User Login.............................................................................157
Appendix G. Console Interface ........................................................................................................................173
Appendix H. Local VPN.....................................................................................................................................176
Appendix I. Customizable Pages....................................................................................................................180

20084IPNET, INC.
1
4ipnet WHG301
User
’
s Manual
1. Before You Start
1.1 Preface
Thismanual is forhotspot owners ornetworkadministratorsto set up a networkenvironment using the 4ipnet
WHG301 system. It contains step-by-step proceduresand graphic examplesto guide MIS staff orindividualswith
slight network system knowledge to complete the installation.
1.2 Document Conventions
Representsessential steps, actions, ormessagesthat should not beignored.
8Note: Containsrelatedinformation that correspondsto atopic.
Indicates that clicking this button will return to the homepage of this section.
Indicates that clicking this button will return to the previous page.
Indicates that clicking this button will applyall of your settings.
Indicates that clicking this button will clear what you have set before these settingsare applied.

20084IPNET, INC.
2
4ipnet WHG301
User
’
s Manual
2.System Overview
2.1 Introduction of 4ipnet WHG301
4ipnet WHG301 isan all-in-one product speciallydesigned forwired and wirelessdata networkenvironmentsin
small to middle scaled businesses and hotspots.It featuresintegratedmanagement, secured data transmission, and
enhanced accounting and billing. System administratorscan effectivelymonitor wired orwirelessusers, including
employees and guest usersvia itsuser management interface. Moreover, administratorscan discover, configure,
monitor, and upgrade allmanaged AccessPoints(APs)from a single, centralized APmanagement interface.
2.2 System Concept
4ipnet WHG301 iscapable of managing user authentication, authorization and accounting. The user account
information isstored inthe local database or a specified external database server. Featured with user authentication
and integrated with external payment gateway, WHG301 allowsusers to easilypaythe fee and enjoythe Internet
service using credit cards through Authorize.net orPayPal. With centralized APmanagement feature, the
administrator does not need to worryabout howto manage multiple wirelessaccess point devices. Furthermore,
WHG301 introduces the concept of Service Zones- multiple virtual networks, each with its own definable access
control profiles. This is veryuseful for hotspot ownersseeking to provide different customers or staff with different
levelsof networkservices. Thefollowing diagramisan example of WHG301 set tomanage the Internetand network
accessservices at a hotspot venue.
Figure-1: An example of managed network

20084IPNET, INC.
3
4ipnet WHG301
User
’
s Manual
2.3 Specification
2.3.1HardwareSpecification
General
Ø Form Factor: Mini-desktop
Ø Dimensions (Wx D xH): 9.6" x5.9" x1.8" (243 mm x150 mm x45.5 mm)
Ø Weight: 2.8 lbs (1.29 kg)
Ø Operating Temperature: 0 ~ 45
Ø Storage Temperature: 0 ~65
Ø Power: 110~220 VAC, 50/60 Hz
Ø Ethernet Interfaces: 10 x Fast Ethernet (10/100 Mbps)
Connectors and Display
Ø WAN Ports: 2 x 10BASE-T/100BASE-TXRJ-45
Ø LAN Ports: 8 x 10BASE-T/100BASE-TX RJ-45
Ø Console Port: 1 x RJ-11
Ø LED Indicators: 1 x Power, 1 xStatus, 2 x WAN, 8 xLAN
2.3.2Technical Specification
Networking
Ø Support NATorRouter mode
Ø Support Static IP, DHCP, PPPoE on WAN interface
Ø Choose freelywhich LAN isauthentication-enabled LAN
Ø Support NAT(a) IP/Port destination redirection (b) DMZservermapping (c)virtual servermapping (d) H.323
pass-through
Ø Built-in with DHCPServer and support DHCPrelay
Ø Support walled garden (free surfing zone)
Ø Support SMTPredirection
Ø Support MAC-address and IP-address pass-through
Ø Support HTTPProxy
Ø Support IPPlug and Play(IPPnP)
Ø Support configurable staticroutes
Ø Contain built-in hardware-based VPN accelerator
Ø Support dual uplinks, outbound load balancing and failover formore reliable Internet connection
Ø Support SIPpass-through NAT
Service Zones
Ø The network isdivided into maximum eight Service Zones(plus one default zone), each defined bya pair of
VLAN tag and ESSID
Ø Each service zone has its own (a)login portal page (b) redirected home page (c) authentication options (d)
LAN interface IPaddress (e) DHCPaddress range

20084IPNET, INC.
4
4ipnet WHG301
User
’
s Manual
Ø Each service zone allowsaccessto the selected groups
Ø Each service zone assignsa network policyto each usergroup
User Management and Guest Accounts
Ø Authentication methods supported: Local and On-demand accounts, POP3, LDAP, RADIUS, Windows
Domain, and SIPauthentication
Ø Single-Sign-On for WindowsDomain
Ø AllowMAC addressand useridentitybinding for local userauthentication
Ø Support MACAccess Control List
Ø Support auto-expired guest accounts
Ø Users can be divided into user groups
Ø Each user group has its own network properties, including bandwidth, QoS, accessible service zones, and
other privileges
Ø Support QoS and WMM traffictypes: Voice, Video, Best Effort and Background
Ø Each group (role) mayget different network policiesin different service zones
Ø Maxconcurrent user session (tcp/udp) limit
Ø Asetting foruser-idle-timeout
Ø Configurable userBlackList
Ø Instant guest account generation byauthorized users
Ø Export/Import local users list to/from a text file
Ø Definable session limit in policyputs a cap to each users concurrent sessions (tcp/udp)
SecurityFeatures
Ø Support data encryption: WEP(64/128-bit), WPA, WPA2, IPSec VPN
Ø Support various authentication methods: WPA-PSK, WPA2-PSK, IEEE 802.1x (EAP-MD5, EAP-TLS, CHAP,
PEAP)
Ø Provide VPN termination of IPSectunnels
Ø Support VPN pass-through (IPSecand PPTP)
Ø Built-in DoS attackprotection
Ø AP Management
Ø Provide centralized remote management via HTTP/SNMPinterface
Ø Auto Discoveryfor Managed APs
Ø Enable or disable APseasilyvia userinterface
Ø Templatesfor Managed APs
Ø Monitoring Managed APforitsstatus, the number of associated clients, and RF info
Ø Recover APsautomaticallywhen the systemfails
Ø Upgrade managedAPscentrally, including bulkupgrade
Ø Monitor 3rd partynon-integrated AP

20084IPNET, INC.
5
4ipnet WHG301
User
’
s Manual
Monitoring and Reporting
Ø Status monitoring of online users
Ø IP-based monitoring of networkdevices
Ø Uplink(WAN) connection failure alert
Ø Support Syslog for diagnosis and troubleshooting
Ø User traffic historylogging
Ø Traffichistoryreport via email to administrator
Ø Users session log can be sent to ftp orSyslog server
Accounting and Billing
Ø Support local on-demand and external RADIUSserver
Ø Contain ten configurable billing plans foron-demand accounts
Ø Support credit card billing system byAuthorize.net and PayPal
Ø Provide session expiration control for on-demand accounts
Ø Provide detailed per-user networktraffic historyfor both local and on-demand user accounts
Ø Support automatice-mail to report networktraffichistory
SystemAdministration
Ø Support web-based management user interface
Ø Provide customizable login and logout portal page
Ø SSH remote management
Ø Remote firmware upgrade
Ø NTPtime synchronization
Ø Menu driven console management interface
Ø Utilities to backup and restore the system database

20084IPNET, INC.
6
4ipnet WHG301
User
’
s Manual
3.Installation
3.1 HardwareInstallation
3.1.1System Requirements
Ÿ Standard 10/100BaseTincluding five networkcables with RJ-45 connectors
Ÿ All PCs need to install the TCP/IPnetworkprotocol
3.1.2Package Contents
The standard package of 4ipnet WHG301 includes:
Ÿ 4ipnet WHG301 x 1
Ÿ QuickInstallation Guide (QIG)x 1
Ÿ CD-ROM (with User sManual and QIG) x 1
Ÿ DC 12V Power Adaptorx 1
Ÿ Console Cable x 1
Ÿ Core x1
It is highly recommended to use all the supplies in the package instead of substituting anycomponentsby
other suppliers to guarantee best performance.

20084IPNET, INC.
7
4ipnet WHG301
User
’
s Manual
3.1.3Panel FunctionDescriptions
Front Panel
LED: There are four kindsof LED, Power, Status, WAN and LAN, to indicate different status of the system.
Ø Power: LED ON indicatespower on.
Ø Status: While system power ison, statusOFF indicates BIOS is running; BLINKING indicatesthe OS is
running, and ON indicatessystemis ready.
Ø WAN: LED ON indicates connection to the WAN port.
Ø LAN: LED ON indicatesconnection to the LAN port.
②WAN1/WAN2: Two WAN ports (10 Base-T / 100Base-TX RJ-45)are available on the system.
LAN1~LAN8: Client machines connect to WHG301 via LAN ports(10 Base-T / 100Base-TX RJ-45).
8Note:
Bydefault, allLAN portsare set with Port-based Default Service Zone; for Service Zone
configuration, please referto 4.1.7. Service Zones.
Rear Panel
①Reset: Pressthisbutton to restart the system
②Console: The system can be configured via a serial console port. The administrator can use a terminal
emulation program such as Microsofts HyperTerminal to login to the configuration console interface to change
admin password ormonitor system status, etc.
Power Socket: The power adapter attaches here.

20084IPNET, INC.
8
4ipnet WHG301
User
’
s Manual
3.1.4Installation Steps
Please followthe stepsbelowto install 4ipnet WHG301:
1. Connect the 12V poweradapterto the power socket on the rear panel. The PowerLEDshould beon to indicate
a proper connection.
2. Connect an Ethernet cable to the WAN1 Port on the front panel. Connect the otherend of the Ethernet cable to
an xDSL/cable modem, or a switch/hub on the LAN of a company/organization. The LED of thisport should be
on to indicate a proper connection.
3. Connect an Ethernet cable to one of the LAN1~LAN8 Ports on the front panel. Per yourneeds, connect the
otherend of the Ethernet cable to an administratorPC for configuring the WHG301 system,anAP forextending
wireless coverage, a switch for connecting more wired clients, or a client PC. The LED of the connected port
should be on to indicate a proper connection.
WHG301 supportsAuto Sensing MDI/MDIX. You may use either a straight-through or a cross-over
Ethernet cable to connect the Ethernet port.

20084IPNET, INC.
9
4ipnet WHG301
User
’
s Manual
3.2 Quick SoftwareConfiguration
4ipnet WHG301 supports web-based configuration. Upon the completion of hardware installation, WHG301 can be
configured via web browsers with JavaScript enabled such as Internet Explorer version 6.0 and above or Firefox.
There are two waysto configure the 4ipnet WHG301 system: using the onlineConfiguration Wizard or changing
the settingsbycommandsmanually. TheConfiguration Wizard comprises of six basic steps asfollows. Follow the
instructions of Configuration Wizard to enter the required information step bystep, save your settings, and restart
WHG301. The 6 steps of Configuration Wizard are listed below:
Step 1. Change Admin s Password
Step 2. Choose System s Time Zone
Step 3. Set System Information
Step 4. Select Connection Type for WAN Port
Step 5. Add Local User Account (Optional)
Step 6. Save and Restart4ipnet WHG301
Please follow the following steps to complete the quickconfiguration:
1. To access the web management interface, connect a PC to one of the LAN1~8 ports, and then launch a
browse. Make sure you have set DHCPin TCP/IPofyour PC to get an IPaddress dynamically.
Next, enter the gatewayIPaddressof WHG301 at the address field. The default gatewayIPaddress
is https://192.168.1.254”(“https”is used fora secured connection).
The administrator login page will appear. Enter admin”, the default username, and admin”, the default
password, in the UserName and Password fields. Click Enter to log in.
After a successful login, a “Welcome to System Administration”page will appear on the screen.

20084IPNET, INC.
10
4ipnet WHG301
User
’
s Manual
For the first time, if WHG301 is not using a trusted SSL certificate, there willbe a “Certificate Error”,
because the browsertreats WHG301 asan illegal website. Please press“Continue to this website”to
continue. The default user login page will then appear in the browser.Formore information, please see 4.2.5
Additional Configuration.
If you cant get the login screen, the reasons maybe: (1)The PC isset incorrectly so that the PC cant
obtain the IPaddressautomatically from the LAN port; (2) The IPaddress and the default gatewayarenot
under the same network segment. Please use default IP address such as 192.168.1.xx in yournetwork
and then try it again. For the configuration on PC, please refer toAppendix F.
4ipnet WHG301 supports three kindsof account interface. You can log in asadmin, manager or operator. The
default usernames and passwordsshow as follows:
Admin: The administratorcan access all configuration pages of WHG301.
User Name: admin
Password: admin

20084IPNET, INC.
11
4ipnet WHG301
User
’
s Manual
Manager: The managercan onlyaccessthe configuration pagesunderUser Authentication to manage the
user accounts, but without the permission to change the settings of the profiles of Firewall, Specific Route and
Schedule.
User Name: manager
Password: manager
Operator: The operator can onlyaccess the configuration page ofCreate On-demand User to create new
on-demand useraccountsand print out the on-demand useraccount receipts.
User Name: operator
Password: operator

20084IPNET, INC.
12
4ipnet WHG301
User
’
s Manual
After a successful login to WHG301, a web management interface with a welcome message will appear.
8Note:
To logout, simplyclickthe Logout icon on the upper right cornerof the interface to return to the login
screen.
2. Nowyou are readyto run the Wizard.
To quicklyconfigure WHG301 byusing the Configuration Wizard, click System Configuration from the top
menu to go to the System Configuration page. Then, click Configuration Wizard on the left.
Clickthe Run Wizard button to begin the Configuration Wizard. The Configuration Wizard will appear in a
pop-up browserwindow. Click Next to begin.

20084IPNET, INC.
13
4ipnet WHG301
User
’
s Manual
3. Running Configuration Wizard
Awelcome screen that brieflyintroduces the 6 stepswill appear. ClickNext to begin.
8Note:
During everystep of the wizard, if you wish to go backto modifythe settings, please clicktheBack
button to go backto the previous step.
Ÿ Step 1. Change Admin s Password
† Enter a New Password for the admin account and retype it in the Verify Password field
(20-character maximum and no spaces). For security concern, it isstronglyrecommended to change
the administrator'spassword.
† Click Next to continue.

20084IPNET, INC.
14
4ipnet WHG301
User
’
s Manual
Ÿ Step 2. Choose System s Time Zone
† Select a proper time zone from the drop-down list box.
† Click Next to continue.
Ÿ Step 3. SetSystem Information
† Home Page: Enter the URLthat usersshould be initiallydirected to when successfully
authenticated to the network.
† NTPServer: Enterthe URLof the external time server for 4ipnet WHG301 time synchronization or
use the default setting.
† DNSServer: Enter the IPAddressof a DNS Serverprovided byyour ISP(Internet Service
Provider). Contact the ISP if the DNS IPAddress is unknown.
† Click Next to continue.

20084IPNET, INC.
15
4ipnet WHG301
User
’
s Manual
Ÿ Step 4. SelectConnection Type for WAN Port
Three are three types of WAN port to be selected from: Static IP Address, Dynamic IPAddress and
PPPoE Client. Select a proper Internet connection type and click Next to continue.
Ø Dynamic IPAddress
If this option is selected, an appropriate IPaddressand related information will automaticallybe
assigned.
Click Next to continue.
Ø Static IPAddress:Set WAN Port s Static IP Address
Enterthe “IPAddress”, “Subnet Mask”and “DefaultGateway”provided byyour ISP.
Click Next to continue.