ALCON AQ500h User manual

AX500h User manual
1

AX500h User manual
Copyright Notice
Copyright Incorporated 2006. All rights reserved.
Disclaimer
Incorporated shall not be liable for technical or editorial errors or omissions
contained herein; nor for incidental or consequential damages resulting from
furnishing this material, or the performance or use of this product.
Incorporated reserves the right to change the product specification without notice.
Information in this document may change without notice.
Trademarks
Microsoft, Windows 95, 98, ME, 2000, NT, and XP are registered trademarks of
the Microsoft Corporation. All other brand and product names mentioned herein
may be registered trademarks of their respective owners.
Customers should ensure that their use of this product does not infringe upon
any patent rights. Trademarks mentioned in this publication are sued for
identification purposes only and are properties of their respective companies.
2

AX500h User manual
Table of Contents
Introduction ................................................................................................5
Features.....................................................................................................5
Minimum Requirements .............................................................................5
Physical Specification ................................................................................6
Installation..................................................................................................6
Configuring the Clients...............................................................................7
Configuration Wizard..................................................................................7
Status.........................................................................................................9
System Profile ........................................................................................9
DHCP IP Assignment .............................................................................9
DDNS ...................................................................................................10
Online Users.........................................................................................10
Traffic Statistics ....................................................................................10
Network Setup..........................................................................................12
WAN Interface......................................................................................12
LAN Interface........................................................................................13
Virtual Server........................................................................................13
Port Trigger...........................................................................................14
Real DMZ .............................................................................................15
Software DMZ.......................................................................................16
DDNS ...................................................................................................17
Multi DMZ.............................................................................................17
Alias IP .................................................................................................18
Destination Route.................................................................................18
Change WAN MAC address.................................................................19
Firewall.....................................................................................................20
Service Management............................................................................20
Access Rules........................................................................................21
Special Rules........................................................................................21
MAC Filter.............................................................................................22
Anti-DoS...............................................................................................23
Web URL Filter.....................................................................................25
Web Content Filter................................................................................26
Application Filter...................................................................................28
Traffic Control...........................................................................................30
Link Bandwidth.....................................................................................30
Service Management............................................................................30
IP Management....................................................................................32
Statistic Setting.....................................................................................32
Bandwidth Group..................................................................................33
System Service........................................................................................35
Administrator ........................................................................................35
Time......................................................................................................35
UPNP....................................................................................................36
3

AX500h User manual
SNMP...................................................................................................36
Centralized Control...............................................................................37
Version .................................................................................................37
Backup..................................................................................................39
Restore.................................................................................................39
Diagnostic.............................................................................................40
Access Control.........................................................................................41
Authentication Setting...........................................................................41
Login Page Management......................................................................42
RADIUS................................................................................................46
Group Configuration .............................................................................47
Authentication Policy ............................................................................47
Local Account.......................................................................................49
Service Plan .........................................................................................50
On-Demand User .................................................................................51
Guest User ...........................................................................................52
Walled Garden......................................................................................52
Log...........................................................................................................54
View Log...............................................................................................54
Log Settings..........................................................................................54
Web Statistics.......................................................................................55
Packet Statistics ...................................................................................55
MISC........................................................................................................56
Reboot..................................................................................................56
FAQ..........................................................................................................56
4

AX500h User manual
Introduction
The AQ500h used in the Hotspot environment usually connects Internet through
ADSL. To install the system with ADSL, you have to prepare an Ethernet Cable
in addition to the one included in the product package. Please refer to the
following figure to connect your devices.
The AQ500h features zero configuration connectivity, which means that as an
administrator you do not need to reconfigure every computer’s TCP/IP
information, which attempts to connect to your network. However, given the
simplicity of connecting, other access control methods needed to be designed.
The AQ500h solves this solution by requiring all users to authenticate themselves
before they are allowed to use the Internet. Authentication is simple and easy, all
users need to attempt to connect to some web site, and the AQ500h will
automatically redirect them to an authentication page, where they enter their
username and password. If the administrator should so choose, the AQ500H will
also verify if the MAC address of the computer attempting to connect with a
specific username and password is valid, denying access if not. Once the user
has authenticated himself with the AQ500h, he will be redirected to his originally
intended website, if it is a legal URL, and his computer is now free to use other
services such as email and instant messaging. The last of which is of course at
the discretion of the network administrator as the AQ500h can be configured to
block services with its firewall capabilities.
Features
zZero configuration connectivity
zSimple and powerful access control system
zConfigurable as a DHCP server
zUniversal Plug and Play
zRemote administration
zSoftware DMZ
zPort forwarding
zNAT firewall
Minimum Requirements
•One PC equipped with:
oTCP/IP Protocol
oA web browser
oAn Ethernet adapter with a UTP CAT 5 network cable.
•Internet access via cable modem or DSL modem with an Ethernet
connection.
5

AX500h User manual
Physical Specification
zPorts (10/100Mbps RJ45)：WAN：2 ports , LAN：8 ports
zConsole Ports：1 port
zStorage：8 MB
zMemory：128 MB
zPower：110 – 220V AC Power
zLEDs：Power/Status, WAN1 , WAN2 , LAN1 – LAN 8
zDimension (mm)：243(W)x150(D)x45.5(H)
Installation
Installation of the AQ500h is simple:
1. Plug in the network cable from the WAN interface of the AQ500H to your DSL
modem or cable modem.
2. Plug in a network cable from your computer to one of the four LAN interfaces
on the AQ500h. You do not need to change your computer’s TCP/IP settings
in either case.
3. Plug in the power to your AQ500H.
4. The AQ500h comes with default DHCP server enabled for range (172.16.1.1-
172.16.1.253), Set the networking TCP/IP properties of the system connected
to AQ500H to get IP automatically from the DHCP server. The AQ500h will
assign a IP address to the connected PC.
5. Open a web browser. Change the URL shown at the top to use port 9953 by
typing http://172.16.1.254:9953
6. Once you have hit enter, the AQ500h will prompt you to enter a username
and password. The default username and password to log into the
administrative user interface is admin and 123456.
6

AX500h User manual
7. Once you login you will see the administrative interface to configure.
8. Click on Network Setup>Click on WAN Interface.
9. Select the radio button corresponding to your type of network connection.
10.Enter the pertinent information.
A. DSL providers generally use PPPoE connections, in which case you
have a username and password.
B. Cable modem providers generally use DHCP connections, in which
case you do not need to provide anymore information to connect.
C. DSL and cable modem providers sometimes provide static IP services
as well as other type of installations. This will require the Fixed IP
setting and you will need to provide the IP, net mask, and gateway for
the AQ500H.
11. When you are done, you can logout or just attempt to connect to the Internet.
You must always authenticate yourself using the web interface before other
services will be available to you.
Configuring the Clients
Clients using the AQ500h as a gateway do not need any special configuration
unless you are planning to use them as virtual servers. If you are planning on
making a virtual server out of one of the computers in your local area network
(LAN), you will need to know how to change the IP, net mask, and gateway of
your client computer, or at least know how to get that information to update your
AQ500h should your IP, net mask, and gateway of your virtual server should ever
change.
Configuration Wizard
Step.1 Enter the page in the path “TRAFFIC CONTROL > Link Bandwidth”.
Then enable the function and set the uplink and downlink bandwidth
value for WAN1 or WAN2.
7

AX500h User manual
Step.2 Click the page in the path “TRAFFIC CONTROL > Bandwidth Group”.
Then add one bandwidth group.
Step.3 Click the ACCESS CONTROL from the top menu. Then, click
Authentication Policies and configure authentication type. If you choose
RADIUS for authentication type, please enter RADIUS page under the
ACCESS CONTROL to set radius server.
Step.4 Click the TRAFFIC CONTROL from the top menu. Then, click Bandwidth
Group to configure the bandwidth profile.
Step.5 Click the ACCESS CONTROL from the top menu. Then, click Group
Configuration to configure Group ID and set a bandwidth profile.
Step.6 Click the ACCESS CONTROL from the top menu. Then, click Service
Plan and enable the function.
Step.7 Click the ACCESS CONTROL from the top menu. Then, click On-
Demand User and enter User Name, Password and service plan for a
new user.
Step.8 Click the ACCESS CONTROL from the top menu. Then, click Guest
User and enable certain guest user and assign session time.
Step.9 Click the ACCESS CONTROL from the top menu. Then, click Local User
and begin the following steps.
(1)enable local user
(2)bandwidth setting
(3)group assign
(4)policy assign
8

AX500h User manual
Status
The status pages of the AQ500h Web-based User Interface allow the
administrator to quickly gather information about the workings of the AQ500h,
what users are using the AQ500h, and other important at-a-glance
information.
System Profile
This page shows the administrator basic network information about how the
AQ500h is configured.
DHCP IP Assignment
This page shows what IP addresses have been assigned by the AQ500h
and to which MAC addresses they have been assigned.
9

AX500h User manual
DDNS
1. Under DDNS condition, you can choose Enable or Disable to function
the system.
2. Use web display setting function, you can set up Auto DDNS update
per minute to update by minute, or choose Auto Data Refresh per
seconds to determine the data renew by second.
3. The figure below shows the DDNS form, all the DDNS details data can
be display clearly using a chart form as below.
4. You can click the Update 、Remove or Edit icons to change any
DDNS data as needed.
Online Users
This page shows what users are connected through the AQ500h, their
username, login time, what service they are currently using, their MAC and
IP address, the remote server they are connected to, and how much of the
bandwidth they are using. Users that are highlighted have been configured
by the administrator to use MAC binding and their connections will not be
timed out.
Traffic Statistics
This page shows the bandwidth usage by types of services and also displays
the total ad individual user’s bandwidth usage. An instant update of the
information can be done by clicking on the “Update” on the right hand side.
10