Digisol DG-WU2008 User manual

1
DG-WU2008
User Manual
V1.0
2019-06-13
As our products undergo continuous development the specifications are subject to change without prior notice

DG-WU2008 User Manual
2
COPYRIGHT
Copyright 2019 by Digisol Systems Ltd. All rights reserved.
Company has an ongoing policy of upgrading its products and it may be possible that
information in this document is not up-to-date.
Please check with your local distributors for latest information. No part of this document
can be copied or reproduced in any form without written consent from the company.
Trademark
DIGISOL TM is a trademark of Digisol Systems Ltd. All other trademarks are the property
of the respective manufacturers.

DG-WU2008 User Manual
3
Table of Contents
CHAPTER 1 INTRODUCTION ........................................................................................................................................ 6
1.1 OVERVIEW .....................................................................................................................................................................................6
1.2 GET FAMILIAR WITH YOUR NEW CONTROLLER.......................................................................................................................7
1.3 PACKAGE CONTENT .....................................................................................................................................................................7
CHAPTER 2: HARDWARE INTRODUCTION..............................................................................................................8
HARDWARE: .........................................................................................................................................................................................8
CHAPTER 3: LOGIN WEB NETWORK MANAGEMENT...........................................................................................9
CHAPTER 4: WEB GUI CONFIGURATION............................................................................................................... 10
4.1 SYSTEM STATUS.........................................................................................................................................................................10
4.1.A DEVICE INFO ...........................................................................................................................................................................10
4.1.B INTERFACE STATUS ...............................................................................................................................................................11
4.1.C LAN IP FLOW.........................................................................................................................................................................12
4.1.D APPLICATION FLOW ..............................................................................................................................................................12
4.2 NETWORK CONFIGURE........................................................................................................................................ 13
4.2.A INTERFACE CONFIGURE ........................................................................................................................................................13
4.2.A.1 WAN CONFIGURE ..............................................................................................................................................................13
4.2.A.2 LAN/ DHCP.......................................................................................................................................................................14
4.2.A.3 PHYSICAL PORT DEFINITION............................................................................................................................................15
4.2.A.4 SUBINTERFACE CONFIGURE..............................................................................................................................................15
4.2.B ROUTE RULE ........................................................................................................................................................ 16
4.2.B.1 MULTI-LINE DEVERSION RULES ......................................................................................................................................16
4.2.B.2 STATIC ROUTE ....................................................................................................................................................................17
4.2.B.2.1 STATIC ROUTING.............................................................................................................................................................17
4.2.B.2.2 ROUTING INFORMATION................................................................................................................................................17
4.2.C DDNS ....................................................................................................................................................................... 18
4.2.D NAT/ PORT FORWARDING ............................................................................................................................. 19
4.2.D.1 PORT FORWARDING ..........................................................................................................................................................19
4.2.D.2 DMZ HOST .........................................................................................................................................................................20
4.2.D.3 SRC NAT.............................................................................................................................................................................20
4.2.D.4 DST NAT ............................................................................................................................................................................21
4.3 FLOW CONTROL POLICY...................................................................................................................................... 21
4.3.1 SMART FLOW CONTROL .......................................................................................................................................................21
4.3.2 BANDWIDTH CONTROL.........................................................................................................................................................22
4.3.3 FREE FLOW CONTROL...........................................................................................................................................................22
4.4 AC MANAGEMENT.................................................................................................................................................. 23
4.4.1 AP LIST....................................................................................................................................................................................23
4.4.2 AP CONFIGURE TEMPLATE ..................................................................................................................................................25
4.4.3 AP UPGRADE ..........................................................................................................................................................................26

DG-WU2008 User Manual
4
4.5 AUTH INTERNET ACCESS .................................................................................................................................... 27
4.5.1 AUTH CONFIGURE..................................................................................................................................................................27
4.5.1.A PPPOEAUTHENTICATION................................................................................................................................................27
4.5.1.B PORTAL AUTHENTICATION...............................................................................................................................................29
4.5.1.C IP AUTHENTICATION .........................................................................................................................................................31
4.5.1.D MAC AUTHENTICATION ...................................................................................................................................................32
4.5.1.E RADIUS BILLING..................................................................................................................................................................32
4.5.1.F NOTIFY PAGE.......................................................................................................................................................................33
4.5.2 USER MANAGEMENT.............................................................................................................................................................33
4.5.2.A AUTH USER..........................................................................................................................................................................33
4.5.2.B AUTH USER STATUS...........................................................................................................................................................34
4.5.2.C DEPARTMENT/LEVEL DEFINITION ................................................................................................................................35
4.6 BEHAVIOR CONTROL............................................................................................................................................ 36
4.6.1 APPLICATION FIREWALL.......................................................................................................................................................36
4.6.2 URL REDIRECT ......................................................................................................................................................................37
4.6.3 DOMAIN REDIRECT................................................................................................................................................................37
4.6.4 MESSAGE PUSH CONFIGURE ................................................................................................................................................38
4.7 OBJECT MANAGEMENT ........................................................................................................................................ 39
4.7.1 BASIC OBJECT.........................................................................................................................................................................39
4.7.1.A TIME OBJECT.......................................................................................................................................................................39
4.7.1.B SOURCE IP OBJECT.............................................................................................................................................................39
4.7.1.C PORT OBJECT.......................................................................................................................................................................40
4.7.1.D DESTINATION IP OBJECT ..................................................................................................................................................40
4.7.2 APPLICATION OBJECT ...........................................................................................................................................................41
4.7.2.1 BUILT-IN APPLICATION OBJECT ......................................................................................................................................41
4.7.2.1.A BUILT-IN APP OBJECT UPGRADE .................................................................................................................................41
4.7.2.1.B BUILT-IN APP OBJECT....................................................................................................................................................41
4.7.2.2 CUSTOM APPLICATION OBJECT........................................................................................................................................42
4.7.2.2.A CUSTOMIZE APP OBJECT ...............................................................................................................................................42
4.7.2.2.B DEFINE APP BY DOMAIN ...............................................................................................................................................42
4.7.2.2.C DEFINE APP BY OBJECTIVE IP +PORT........................................................................................................................43
4.8 SAFETY PROTECTION........................................................................................................................................... 43
4.8.1 IP-MAC BINDING..................................................................................................................................................................43
4.8.2 CONNECTION QUANTITY LIMIT...........................................................................................................................................44
4.8.3 LAN ABNORMAL DETECTION..............................................................................................................................................44
4.8.4 LAN ATTACK PROTECTION .................................................................................................................................................45
4.8.5 WAN PING FORBID/WAN LOGIN ....................................................................................................................................45
4.9 LOG RECORD............................................................................................................................................................ 46
4.9.1 LOG PARAMETERS .................................................................................................................................................................46
4.9.2 USER AUTH LOG.....................................................................................................................................................................46
4.9.3 ONLINE USER LOG .................................................................................................................................................................47
4.9.4 INTERFACE FLOW LOG..........................................................................................................................................................47
4.9.5 SYSTEM LOG ...........................................................................................................................................................................48
4.10 VPN........................................................................................................................................................................... 48

DG-WU2008 User Manual
5
4.10.1 PPTP.....................................................................................................................................................................................48
4.10.1.A PPTP VPN SERVER ........................................................................................................................................................48
4.10.1.B PPTP VPN ACCESS STATUS..........................................................................................................................................49
4.10.2 L2TP.....................................................................................................................................................................................50
4.10.2.A L2TP VPN SERVER ........................................................................................................................................................50
4.10.2.B L2TP VPN ACCESS STATUS ..........................................................................................................................................51
4.10.3 VTUNS.................................................................................................................................................................................51
4.10.3.1 VTUNS CONFIGURE .......................................................................................................................................................51
4.10.3.1.A PARAMETER SETTINGS ...............................................................................................................................................51
4.10.3.1.B TUNNEL MANAGEMENT..............................................................................................................................................52
4.10.3.2 VTUNS STATUS...............................................................................................................................................................53
4.11 BPN (THIS FEATURE IS FOR FUTURE USE)................................................................................................. 53
4.11.A BPN SERVER........................................................................................................................................................................53
4.11.B BPN ACCESS STATUS..........................................................................................................................................................54
4.12 DEVICE MAINTENANCE ..................................................................................................................................... 54
4.12.A FIRMWARE UPGRADE .........................................................................................................................................................54
4.12.B MODIFY PASSWORD............................................................................................................................................................55
4.12.C PING DETECTION .................................................................................................................................................................55
4.12.D CONFIGURE FILE MAINTENANCE .....................................................................................................................................56
4.12.E RESTART DEVICE................................................................................................................................................................57
4.12.F TIMED TASK ........................................................................................................................................................................58
4.12.G TIME SYNCHRONIZATION...................................................................................................................................................58
4.12.H CLOUD CONFIGURE (FOR FUTURE USE).........................................................................................................................59
CHAPTER 5 TROUBLESHOOTING.......................................................................................................................... 60
1WHY CAN’T ICONFIGURE THE CONTROLLER EVEN WHEN THE CABLE IS PLUGGED AND THE LED IS LIT?.................60
2WHAT CAN IDO IF MY ETHERNET CONNECTION DOES NOT WORK PROPERLY?..................................................................62

DG-WU2008 User Manual
6
Chapter 1 Introduction
1.1 Overview
DG-WU2008 is a CAPWAP based WLAN Controller with main functions as Router, AC
Controller, Management, VLAN Management functions.
When worked as a router, it can access into 512 end users, to do advertisement and
captive portal authentication.
When worked as a controller, it can manage 512 nos FIT wireless access points.
The network connectivity will be as shown below:
Acting as Router and Controller

DG-WU2008 User Manual
7
1.2 Get Familiar with your new Controller
1. Connect the controller with computer by wired connection.
2. The default IP address of this controller is 172.16.0.1. By default DHCP Server is enabled
only on LAN1 port (172.16.0.x/ 255.255.0.0).
This controller has individual IP address on each LAN port. For first time installation, connect
PC to LAN1 port of controller. Default username/ password is admin/ admin.
1.3 Package Content
DG-WU2008 WLAN Controller
Power Cable
Rack Mount Kit
QIG

DG-WU2008 User Manual
8
Chapter 2: Hardware Introduction
Hardware:
WAN1: WAN Port in Default mode.
WAN2/LAN5; WAN3/LAN4; WAN4/LAN3, LAN2: LAN Ports in default mode, but can set
up as WAN ports in gateway operation mode based on requirement.
LAN1: LAN Port as default
CONSOLE; Serial port
USB: Two for USB flash & USB keyboard, mainly to upgrade system.
Power: To power ON the device, Power LED indicator will be on;

DG-WU2008 User Manual
9
Chapter 3: Login Web Network Management
The default IP address of device is 172.16.0.1. Connect the PC to controller & PC will obtain
the IP address directly from AC controller DHCP server.
Input AC Controller’s IP address http://172.16.0.1:2011 into browser. It will display the
below page.
Input username/ password as admin/ admin.

DG-WU2008 User Manual
10
Chapter 4: WEB GUI Configuration
After logged into AC controller, following home page will be displayed:
4.1 System Status
4.1.a Device Info
Display general information of Controller.
Network Interface Status: It displays the active interface port connectivity status, Link Speed,
IP address, Mac Address, Receive/ Send speed.
Display Ports Status. Grayed out means nothing connected to above ports & green means
connected.
Device Basic Information: Displays Device ID along with max User/ AP support detail.
It shows Device Uptime, CPU & Memory utilization, Temperature, Connection monitoring,
online users, Device model & Firmware Version.

DG-WU2008 User Manual
11
4.1.b Interface Status
Displays controller LAN/ WAN interface detail (Upstream/ Downstream bandwidth(KB), IP
Address, Status, total Upstream/ downstream speed(KB/S), Flow(MB)
If you click Operation icon, it will display the respective interface detail as shown below:
Line Detection
You can check the configured WAN connectivity under this option

DG-WU2008 User Manual
12
4.1.c LAN IP Flow
You can view the connected User sessions under this option.
Click on desired User IP address to view the session logs:
4.1.d Application Flow
Display the user running applications flow chart.

DG-WU2008 User Manual
13
4.2 Network Configure
4.2.a Interface Configure
Under this tab you can configure WAN settings, DHCP Server configuration on each LAN port
(172.x.x.x), Configurable WAN/ LAN port as per requirement & sub-interface for VLAN
configuration. This tab options are described as below:-
4.2.a.1 WAN Configure
LAN1 & WAN1 are by default ports & rest all configurable into WAN/LAN ports as per
customer requirement.
You can configure WAN1 in ADSL/ PPPoE, Static IP or DHCP mode as per settings provided
by ISP to use it in Gateway mode.

DG-WU2008 User Manual
14
4.2.a.2 LAN/ DHCP
You can configure DHCP Server for respective LAN port under this tab. Every LAN port have
different IP network. By default DHCP Server is enabled only on LAN1 interface.
Similarly, you can enable/ disable DHCP Server for other LAN interface if required.
You can view the DHCP Client list of Respective LAN interface under “DHCP Allocation
Status”.

DG-WU2008 User Manual
15
4.2.a.3 Physical Port Definition
LAN1 & WAN1 are default ports. Rest all are configurable into LAN/ WAN port as per the
requirement. You can set desired LAN & WAN port combination under this tab.
4.2.a.4 Subinterface Configure
You can use this option to create different VLAN for connected AP or Wi-Fi Users. We can
connect controller’s LAN port with VLAN switch’s trunk port, configure the VLAN id and
associated parameters on both the devices so that the controller can manage the wireless
AP under particular VLAN.
You can create sub-interface for every LAN port on this controller. Once you
click Add tab, it will display following page:-
If you are using a switch with controller, you can add Subinterface type as 802.1Q else
select MAC-VLAN if AP is directly terminated on controller& define VLAN ID.

DG-WU2008 User Manual
16
4.2.b Route Rule
4.2.b.1 Multi-line Deversion Rules
You can use this option if multiple WAN is terminating on controller. You can set session shunt,
source IP shunt and source IP +destination IP for some specific network traffic depending on
desired WAN connection to minimize the internet utilization.
You need to create Source IP, Destination IP object under “Object Management” tab &
map the defined object traffic to selected WAN interface.
Session Shunt:
It will divide the user’s internet bandwidth as per the number of WAN terminated on
controller by using this option.
Source + Destination address shunt
You can bind the source/ destination IP address to specific WAN interface to constraint
the bandwidth congestion by using this option.
Source IP Shunt Line Selection:
You can route the user traffic through specific WAN interface by using this option.

DG-WU2008 User Manual
17
4.2.b.2 Static Route
4.2.b.2.1 Static Routing
You can manually add static route to this device to define the path selection of traffic from
one interface to another.
4.2.b.2.2 Routing Information
Displays the routing rule enabled on the controller under this tab.

DG-WU2008 User Manual
18
4.2.c DDNS
Dynamic DNS (DDNS) is an Internet service that allows controller with varying
public IP addresses to be located using Internet domain names . To use DDNS,
you must setup an account with a DDNS provider such as DynDNS.org,etc. When
you set up an account with a DDNS service, the host & domain name, username,
password detail will be provided by the account provider.

DG-WU2008 User Manual
19
4.2.d NAT/ Port forwarding
By default, the firewall of a controller blocks all connection attempts by devices on the
Internet to devices in your local network. This is called inbound traffic. If you want devices
on the Internet to connect to devices on your local network (for example, you have an IP
Camera or an FTP server that you want to be accessible via the Internet), you will have to
open the desired ports on controller.
4.2.d.1 Port forwarding
Also called inbound firewall rules. You can create port forwarding rules that look into the
header of each inbound packet, and either block it or forward it to specified devices on you
local network, based on the source IP address, LAN/ WAN TCP port number, and other
characteristics of the packet. Packets with different characteristics can be forwarded to
different devices on your local network.

DG-WU2008 User Manual
20
4.2.d.2 DMZ Host
If you use a DMZ to forward all inbound traffic to a device in you local network, that device
loses all the protection of the device's firewall & It is totally exposed to the Internet.
4.2.d.3 Src NAT
You can add a Source NAT rule under this tab.