LevelOne AMG-2001 User manual

User’s Manual
AMG-2001 Access and AP Management Gateway
AMG-2001
Access and AP Management Gateway
User’s Manual V1.0

User’s Manual
AMG-2001 Access and AP Management Gateway
Table of ontents
1. Before You Start..........................................................................................................1
1.1 Preface .............................................................................................................................................1
1.2 Document Conventions..............................................................................................................1
1.3 Pac age Chec list ........................................................................................................................2
2. System Overview and Getting Start................................................................3
2.1 Introduction of AMG-2001........................................................................................................3
2.1.1 Key Features........................................................................................................................................3
2.1.2 Who Uses AMG-2001........................................................................................................................4
2.2 System Concept ...........................................................................................................................5
2.3 Hardware Description.................................................................................................................9
2.3.1 Front Panel ...........................................................................................................................................9
2.3.2 Real Panel.............................................................................................................................................9
2.4 Preparation before the Installation .....................................................................................10
2.5 Hardware Installation...............................................................................................................11
2.6 Accessing Web Management Interface..............................................................................13
3. Placing AMG 2001 in a Network Environment .......................................15
3.1 Networ Requirement ..............................................................................................................15
3.2 Setting up WAN1 Ports ............................................................................................................15
3.2.1 Static IP...............................................................................................................................................16
3.2.2 DHCP (Dynamic IP).........................................................................................................................17
3.2.3 PPPoE....................................................................................................................................................18
3.2.4 PPTP......................................................................................................................................................19
3.3 Configuring WAN2 Ports (optional).....................................................................................20
3.4 Other WAN Traffic Settings....................................................................................................23
3.4.1 WAN Failover .....................................................................................................................................24
3.4.2 Load Balance .....................................................................................................................................25
3.4.3 Internet Connection Detection ...................................................................................................26
3.4.4 WAN Bandwidth Control................................................................................................................27
3.5 LAN Partition -- Service Zone ...............................................................................................28
3.5.1 Planning your internal networ ..................................................................................................30
3.5.2 Configure Service Zone networ ...............................................................................................32
3.5.3 Tag Base and Port Base ................................................................................................................34
4. User Authentication and Grouping ................................................................38
4.1 Type of Users...............................................................................................................................38
4.1.1 Local .....................................................................................................................................................40
4.1.2 POP3 .....................................................................................................................................................43
4.1.3 RADIUS................................................................................................................................................44
4.1.4 LDAP .....................................................................................................................................................45
4.1.5 NT Domain .........................................................................................................................................47
4.1.6 On-Demand Users...........................................................................................................................48
4.2 Users Group .................................................................................................................................59
4.2.1 Assign users to a Group................................................................................................................60
4.2.2 Permission in Service Zone..........................................................................................................62
4.3 User Login.....................................................................................................................................65
4.3.1 Default Authentication...................................................................................................................67
4.3.2 Login with postfix ............................................................................................................................67
4.3.3 Disable Authentication in Service Zone...................................................................................68
5. Managing Wireless Network..............................................................................69
5.1 AMG-2001 with Multiple Type of AP ...................................................................................69
5.2 Configure AP Template ............................................................................................................70
5.3 Discovery AP................................................................................................................................73
5.4 AP with Service Zone................................................................................................................75

User’s Manual
AMG-2001 Access and AP Management Gateway
5.5 AP Security...................................................................................................................................77
5.6 Change managed AP settings ...............................................................................................78
5.7 AP Operations from AP List ....................................................................................................81
5.7.1 Reboot, Enable, Disable and Delete the AP...........................................................................81
5.7.2 Apply Template.................................................................................................................................82
5.7.3 Change Service Zone .....................................................................................................................83
5.7.4 AP Bac ground Discovery.............................................................................................................84
5.7.5 Manually add AP...............................................................................................................................86
5.7.6 Firmware management and upgrade.......................................................................................87
6. Policies and Access Control................................................................................88
6.1 Blac List.......................................................................................................................................88
6.2 MAC Address Control................................................................................................................90
6.3 Policy...............................................................................................................................................91
6.3.1 Firewall ................................................................................................................................................93
6.3.2 Routing ................................................................................................................................................96
6.3.3 Schedule .............................................................................................................................................98
6.3.4 Sessions Limit ...................................................................................................................................99
6.4 QoS Traffic Class and Bandwidth Control.......................................................................100
7. Users’ Login and Logout.....................................................................................101
7.1 Before User Login ....................................................................................................................101
7.1.1 Login with SSL ................................................................................................................................101
7.1.2 Internal Domain Name with Certificate.................................................................................102
7.1.3 Administrator Contact Information .........................................................................................104
7.1.4 Walled Garden.................................................................................................................................105
7.1.5 Walled Garden AD List .................................................................................................................106
7.1.6 Mail Message ...................................................................................................................................108
7.2 After User Login........................................................................................................................109
7.2.1 Browse which Home Page after login success....................................................................109
7.2.2 Idle Timer .........................................................................................................................................110
7.2.3 Multiple Login.................................................................................................................................. 111
7.2.4 DoS Attac er Denial Time .......................................................................................................... 111
7.2.5 Local Users Change Password Privilege ................................................................................ 112
7.2.6 On-demand Account Creation Privilege ................................................................................ 113
7.2.7 Proxy Server....................................................................................................................................115
8. Networking Features of a Gateway.............................................................120
8.1 DMZ...............................................................................................................................................120
8.2 Virtual Server ............................................................................................................................121
8.3 Privilege List...............................................................................................................................122
8.3.1 Privilege IP .......................................................................................................................................123
8.3.2 Privilege MAC ..................................................................................................................................124
8.4 IP Plug and Play........................................................................................................................125
8.5 Dynamic Domain Name Service.........................................................................................126
8.6 Port and IP Redirect................................................................................................................127
9. System Management and Utilities ...............................................................128
9.1 System Time..............................................................................................................................128
9.1.1 NTP......................................................................................................................................................128
9.1.2 Manual Settings..............................................................................................................................128
9.2 Management IP.........................................................................................................................129
9.3 Access History IP......................................................................................................................130
9.4 SNMP.............................................................................................................................................131
9.5 Three-Level Administration..................................................................................................132
9.6 Change Password.....................................................................................................................134
9.7 Bac up / Restore and Reset to Factory Default...........................................................135
9.8 Firmware Upgrade ...................................................................................................................136
9.9 Restart..........................................................................................................................................137

User’s Manual
AMG-2001 Access and AP Management Gateway
9.10 Networ Utility ..........................................................................................................................138
9.10.1 Wa e-on-LAN ..................................................................................................................................139
9.10.2 Ping .....................................................................................................................................................139
9.10.3 Trace Route ......................................................................................................................................139
9.10.4 Show ARP Table..............................................................................................................................139
9.11 Monitor IP Lin ..........................................................................................................................140
9.12 Console Interface.....................................................................................................................141
10. System Status and Reports..............................................................................144
10.1 View the status .........................................................................................................................144
10.1.1 System Status.................................................................................................................................145
10.1.2 Interface Status .............................................................................................................................147
10.1.3 Hardware Information .................................................................................................................149
10.1.4 Routing Table...................................................................................................................................150
10.1.5 Online Users ....................................................................................................................................151
10.1.6 User Logs ..........................................................................................................................................152
10.1.7 Local User Monthly Networ Usage ........................................................................................155
10.2 Notification .................................................................................................................................156
10.2.1 E-Mail .................................................................................................................................................157
10.2.2 SYSLOG .............................................................................................................................................158
10.2.3 FTP ......................................................................................................................................................158
11. Virtual Private Network (VPN).......................................................................159
11.1 Local VPN ....................................................................................................................................159
11.2 Remote VPN ...............................................................................................................................164
11.3 Site-to-Site VPN .......................................................................................................................165
12. Customization of Portal Pages .......................................................................167
12.1 Customizable Pages ................................................................................................................167
12.2 Loading a Customized Login Page.....................................................................................168
12.3 Load a Customized Logout Page........................................................................................172
13. Payment Gateways................................................................................................173
13.1 Payments via Authorize.Net ................................................................................................173
13.2 Payments via PayPal...............................................................................................................177
13.3 Payments via SecurePay.......................................................................................................180
13.4 Payments via World Pay........................................................................................................182
14. Additional Applications.......................................................................................185
14.1 Upload / Download Local Users Accounts ......................................................................185
14.2 Bac up and Restore On-demand Users Accounts.......................................................187
14.3 POP3 login with complete name format..........................................................................188
14.4 RADIUS Advance settings.....................................................................................................189
14.5 LDAP Advance settings - Attribute-Group Mapping....................................................190
14.6 NT Transparent Login.............................................................................................................191
14.7 Roaming Out..............................................................................................................................192
14.8 SIP Proxy.....................................................................................................................................193
Appendix A. Network Configuration on PC & User Login........................................195
Appendix B. Policy Priority (Global Policy, Service Zone Policy,
Authentication Policy and User Policy) .............................................................................208
Appendix C. Monitoring 3rd Party AP .................................................................................209
Appendix D. RADIUS Accounting...........................................................................................210
Appendix E. Net Retriever and Port Mapping ................................................................218

User’s Manual
AMG-2001 Access and AP Management Gateway
General Public License
This product incorporates open source code into the software and therefore falls under the
guidelines governed by the General Public License (GPL) agreement.
Adhering to the GPL requirements the open source code and open source license for the source
code are available for free download at http://global.level1.com.
If you would like a copy of the GPL or other open source code in this software on a physical CD
medium LevelOne (Digital Data Communications) offers to mail this CD to you upon request for
a price of US$9.99 plus the cost of shipping.

User’s Manual
AMG-2001 Access and AP Management Gateway
1
1. Before You Start
1.1 Preface
This AMG-2001 User Manual is for WLAN service providers or networ administrators to set up a
networ environment using the AMG-2001 system. It contains step-by-step procedures and graphic
examples to guide MIS staff or individuals with basic networ system nowledge to complete the
installation.
Besides this document, there is a “Quic Installation Guide” (QIG), which is for starting up AMG-2001
quic ly. It is recommended to start with the QIG, and then refer to this manual for further details. Some
special topics are addressed separately in the Appendixes.
1.2 Document onventions
aution:
Represents essential steps, actions, or messages that should not be ignored.
Note:
Contains related information that corresponds to a topic.
Indicates that clic ing this button will apply all of your settings.
Indicates that clic ing this button will clear what you have set before the settings are applied.
The red asteris indicates that information in this field is compulsory.

User’s Manual
AMG-2001 Access and AP Management Gateway
2
1.3 Package hecklist
The standard pac age of AMG-2001 includes:
 AMG-2001 x 1
 CD-ROM (with User’s Manual and QIG) x 1
 Quic Installation Guide (QIG) x 1
 Console Cable x 1
 Ethernet Cable x 1
 Power Adaptor x 1
Caution:
It is highly recommended to use all the supplies in the package instead of substituting any
components by other suppliers to guarantee best performance.

User’s Manual
AMG-2001 Access and AP Management Gateway
3
2. System Overview and Getting Start
2.1 Introduction of AMG-2001
AMG-2001 is an all-in-one product specially designed for wired and wireless data networ
environments in small-scaled Networ deployments. AMG-2001 is a high-performance industrial grade
networ appliance, capable of supporting the networ access management for a larger user base.
Access and AP Management Gateway products (AMG Series) feature integrated management, secured
data transmission, and enhanced accounting and billing. System administrators can effectively monitor
wired or wireless users, including employees and guest users via its user management interface.
Moreover, administrators can discover, configure, monitor, and upgrade all managed Access Points (APs)
from a single, centralized AP management interface.
2.1.1 Key Features
Li e other AMG Series products, AMG-2001 is designed to be a multi-service networ access controller
for enterprise or campus environment; it is also deployed as a hotspot subscriber gateway often. It is
a pre-integrated multi-function networ appliance, providing the following ey features:
 Standard based user authentications, including Web-based login and 802.1x (RADIUS)
 ustomizable login portal pages and walled gardens to simplify branding
 User groups (roles) and user management
 Supports for multiple authentication databases (Local, On-demand, RADIUS, POP3, LDAP, NTDS)
 Virtual service zones and policy management
 Simple visitor account provisioning and billing plans by time or traffic volume
 Payment gateway supports, including PayPal, Authorize.net, and SecurePay
 Account roaming across multiple sites (branches)
 AP management and wireless roaming across APs
 Virtual Private Network (VPN) tunnels.
 onverged network for Data, Voice and Video traffics
 Dual uplinks (WAN) for better reliability and load balancing
 Firewall and Denial of Service (DoS) attack prevention
 Monitoring, notification and reporting
 Network gateway features, including NAT, DH P, DMZ, firewall and port forwarding

User’s Manual
AMG-2001 Access and AP Management Gateway
4
2.1.2 Who Uses AMG-2001
Because of its well integrated rich access management features and high performance, academic
campuses, government agencies or enterprises’ IT departments will find AMG-2001 is a money
and time saver, sparing them from having to integrate multiple applications and multiple equipments
on their own in order to manage and secure the internet/networ access for both wired and wireless
clients.
With its billing plan and payment features, WISPs and hospitalities (such as hotels, conventions) will
find AMG-2001 is an instant revenue generator without requiring hefty equipment investment or long
term outsourcing service supports.
AMG Series products are most affordable, best price-performance appliances, comparing to the similar
equipments in the fields of Network Access ontrollers, Wireless ontrollers, lientless VPN
Gateway or Hotspot Subscriber Gateway.

User’s Manual
AMG-2001 Access and AP Management Gateway
5
2.2 System oncept
If you have experienced other AMG Series products before and are familiar with its system concept, you
may s ip the concept description below. Please proceed to the next section on (Hardware
Description).
AMG-2001 is capable of managing user authentication, authorization and accounting (AAA). The user
account information is stored in the local database or a specified external database server. Featured
with user authentication and integrated with external payment gateway, AMG-2001 allows users to
easily pay the fee and enjoy the Internet service using credit cards through Authorize.net, PayPal,
SecurePay, PayPal or WorldPay.
With centralized AP management feature, the administrator does not need to worry about how to
manage multiple wireless access point devices.
Furthermore, AMG-2001 introduces the concept of Service Zones - multiple virtual networ s, each with
its own definable access control profiles. This is very useful for hotspot owners see ing to provide
different customers or staff with different levels of networ services.
The following portion of this section explains the basic concepts of AMG-2001; the same concepts also
apply to the other AMG Series products. With the understanding of these concepts, the administrator
will be able to do more advanced networ planning and to manipulate the configurations of AMG-2001
to suit his own specific application. It is sufficient for most of administrators to use the default
configuration with minor WAN/DNS address changes for simple deployments.
Gateway is a networ node where a small networ attaches to a bigger networ . AMG-2001 is a ind
of gateway in a networ environment; hence it has those features a typical gateway has, such as NAT,
DHCP, DMZ, Firewall and etc. Conventionally, the bigger networ is referred as the gateway’s WAN
side or upstream networ , while the small networ is referred as the gateway’s LAN side. The Ethernet
ports leading to the WAN side networ is called WAN ports. The Ethernet ports leading to the LAN side
networ is called LAN ports.
Local User is a type of user with its account credential stored in a database named “Local” within
AMG-2001. The “Local” database of AMG-2001 allows local user accounts. A local user account does not
have an expiration date once they are created. If administrator wishes to terminate the account, he
must remove it. A local database can be used as an external RADIUS database to another AMG Series
product for account roaming.

User’s Manual
AMG-2001 Access and AP Management Gateway
6
On-demand User is a type of user with its account credential stored in a database named
“On-demand” within AMG-2001. The “On-demand” database of AMG-2001 allows on-demand account
records. On-demand User is used for short term usage purpose; it has an expiration period. An
on-demand account record will be recycled for creating new on-demand account if it has expired for
over certain days or has been modified by the Administrator/Manager manually.
External Authentication Database is a user account database that is not built inside AMG-2001.
Besides Local database and On-demand database, AMG-2001 allows up to three additional External
Authentication databases simultaneously. The types of external Authentication databases supported
are RADIUS, POP3, LDAP (including ActiveDirectory), and NTDomain (Win2K’s NTDS). The database of
another AMG Series device can be used as an external RADIUS database. External Authentication
Database is useful for implementing account roaming; for example, multiple AMG-2001 devices in
multiple campuses can share one common external database. A user needs only one account in the
common database to access the networ from different campuses.
Service Zone is a logic partition of AMG-200 ’s LAN network. The concept of Service Zone is similar to
the concept of virtual LAN (VLAN), which can be used to group the networ traffic or networ services
for clients on the same VLAN segment, regardless of the clients’ physical locations. That is, several
VLAN segments may be in service at one physical networ location while devices belonging to one VLAN
segment may appear in multiple physical locations.
Each Service Zone can also be viewed a virtual machine of AMG-200 because each Service Zone can
define its own customized login portal page, and its own gateway properties (such as LAN IP address,
DHCP on/off and address range). The feature of Multiple Service Zone is also useful to service multiple
hotspot franchises in shopping malls or airport terminals by a single AMG-2001.
A Service Zone is uniquely defined by a VLAN tag id and an associated SSID attribute. When a managed
access point (MAP) is added to a Service Zone through AMG-2001 by the administrator, the associated
SSID will be activated in the MAP along with the VLAN tag of the Service Zone.
For example, in the following Figure 2, the administrator plans three logical Service Zones for an
academic campus:
 The first Service Zone (with SSID=’Student”, and VLAN tag=1) is for students.
 The second (with SSID=”Faculty” and VLAN tag=2) for faculties.
 The third (SSID=”Guest” and VLAN tag=3) for guests.

User’s Manual
AMG-2001 Access and AP Management Gateway
7
A Service Zone may or may not require client authentication, depending on how the administrator sets
it up. If a Service Zone requires user authentication, the client will be prompted for the login in first
before using the networ services, no matter the client is connecting to its SSID wirelessly or a switch
port via wired line,.
Group is a group of user accounts sharing the same access privileges, QoS properties and networ
policies. Each client account belongs to a Group. Each Group may or may not have the access privilege
of a Service Zone, depending on the how the administrator define its policy. If the administrator does
not assign a new account to any specific Group, the account belongs to a catch-all group named
“None” by default.
Policy is for defining rules, privileges or properties for managing users. Each user group is bound by a
Policy within a given Service Zone. The same group may or may not be bound to the same policy in
different Service zones. There are two tiers of Policies. The first tier is a policy named ‘Global-Policy’.
The Global-Policy is a base policy which will be applied all users. The second tier is called ‘Group-Policy’
or simply ‘Policy’, which can be chosen to bound the networ behaviors of a Group. The administrator
can define the Firewall Profile, Route Profile, Schedule Profile and Max Sessions in a Policy.
The following Figure 1 depicts an example relationship of Service Zone, Group and Policy. In this
example, Students and faculties logging into Service Zone 1 will be governed by Policy-A. Guests only
have the access of Service Zone 3, and will be bounded by Policy-C. Faculties have the access to both
Service Zone 1 and Service Zone 2 under two different policies.
Figure : An example relationship of Service Zone, Group and Policy

User’s Manual
AMG-2001 Access and AP Management Gateway
8
The following Figure 2 depicts an example using AMG-2001 in managing networ /internet access in an
academic campus environment. Imagine the networ administrator may wish to set different privileges
and bandwidth limits for staff, students, and guests; he could use several Service Zones of AMG-2001 –
one for staff, one for students, and one for the guests. He also uses one zone for some shared servers
in the diagram.
The access points at a physical location such as the administration building may only allow the access
of faculties; hence, the access points there are only added to the second Service Zone, enabling only
the “Faculty” SSID. On the other hand, the access points in the Cafeteria may allow the access of all
groups; hence the APs at Cafeteria are added to all Service Zones, enabling SSID=”Student”,
SSID=”Faculty”, and SSID=”Guest”.
There traffic of students, faculties, and guests will be segregated by the three VLAN segments.
Figure 2: An example of managed network

User’s Manual
AMG-2001 Access and AP Management Gateway
9
2.3 Hardware Description
2.3.1 Front Panel
. LED Indicators: There are four inds of LED, Power, Status, WAN and LAN, to indicate
different status of the system.
2. WAN1/WAN2: Two WAN ports (10 Base-T / 100Base-TX RJ-45) are connected to a networ .
3. LAN1~LAN8: Client machines connect to AMG-2001 via 8 LAN ports (10 Base-T / 100Base-TX
RJ-45).
2.3.2 Real Panel
. Reset: Press this button to restart the system
2. onsole: The system can be configured via a serial console port. The administrator can use a
terminal emulation program such as Microsoft’s HyperTerminal to login to the configuration
console interface to change admin password or monitor system status, etc.
3. Power Socket: The power adapter attaches here.

User’s Manual
AMG-2001 Access and AP Management Gateway
10
2.4 Preparation before the Installation
Before you start the installation by following either this User Manual or the Quic Installation Guide,
below is a short preparation list to do.
) Unpac the AMG-2001 and go thorough the pac age chec list.
2) Review the front panel and the bac panel and identify each control and networ interface that is
described in the previous Hardware Description section.
3) Prepare a couple of CAT5 Ethernet cables with using RJ-45 connectors. The cables are for
connecting IP devices, including this AMG-2001, IP switches, and your PC.
4) Prepare a PC with Web browser for accessing the Web Management Interface.
5) Identify an upstream device to plug in AMG-2001 in your networ , such as ADSL, CABLE modem or
other edge devices. Collect the DNS server address provided by your ISP.
If this is your first time using AMG Series product, it is recommended that you follow the Quic
Installation Guide to start up the AMG-2001 in a near default state with minimum configuration
changes (such as WAN settings and admin password), then refer to this manual later when you want to
configure the system for specific application needs.
The recommended general steps for the configuration are:
 Set up system’s Time Zone, NTP server, DNS server and WAN1address
 Configure LAN address range for at least one Service Zone, and enable its authentication. The
Default Service
Zone is enabled by the factory default.
 Create user accounts to test the login page via wire line in the enabled Service Zone.
 Try to generate on-demand user and test the account.
 Configure Wireless environment of Service Zone, then add in AP
 Configure more Service Zones base on your application.
 Set up Group and Policy (including Firewall rules and Session Limit).
 Customize the portal login page and add walled garden Advertisement lin s if needed.
 Set up Payment gateway if you want to use credit card for the on-demand accounts.
 Load SSL certificate for the Web Server before operation.
 Monitor the status pages and reports generated.
 Perform other advanced setting for your specific application.

User’s Manual
AMG-2001 Access and AP Management Gateway
11
2.5 Hardware Installation
Please follow the steps below to install the hardware of AMG-2001:
) Connect the 12V power adapter to the power soc et on the rear panel. The Power LED should be on
to indicate a proper connection.
2) Connect an Ethernet cable to the WAN1 Port on the front panel. Connect the other end of the
Ethernet cable to an xDSL/cable modem, or a switch/hub on the LAN of a company/organization.
The LED of this port should be on to indicate a proper connection.
3) Connect an Ethernet cable to one of the LAN1~LAN8 Ports on the front panel. Per your needs,
connect the other end of the Ethernet cable to an administrator PC for configuring the AMG-2001
system, an AP for extending wireless coverage, a switch for connecting more wired clients, or a
client PC. The LED of the connected port should be on to indicate a proper connection.
Caution:
AMG-200 supports Auto Sensing MDI/MDIX. You may use either a straight-through or a
cross-over Ethernet

User’s Manual
AMG-2001 Access and AP Management Gateway
12
Figure 3 below is a simple networ diagram for the initial installation and configuration. Start with this
simple networ topology to set up AMG-2001 for the first time; it helps to plan a more sophisticated
networ topology to suits your specific application needs later.
Figure 3: A simple network diagram for the initial setup

User’s Manual
AMG-2001 Access and AP Management Gateway
13
2.6 Accessing Web Management Interface
AMG-2001 supports web-based configuration. Upon the completion of hardware installation,
AMG-2001 can be configured via web browsers with JavaScript enabled such as Internet Explorer
version 6.0 and above or Firefox.
To access the web management interface, connect a PC to one of the LAN ports, and then launch a
browse. Make sure you have set DH P in T P/IP of your P to get an IP address dynamically.
Next, enter the gateway IP address of AMG-2001 at the address field. The default gateway IP address
from LAN Port is“https://192.168.1.254” (“https” is used for a secured connection).
If AMG-2001 is not using a trusted SSL certificate, there will be a “ ertificate Error”, because the
browser treats AMG-2001 as an illegal website. Please press “ ontinue to this website” to continue.
The default user login page will then appear in the browser.

User’s Manual
AMG-2001 Access and AP Management Gateway
14
The administrator login page will appear. Enter “admin”, the default username, and “admin”, the
default password, in the UserName and Password fields. Clic LOGIN to log in.
Caution:
If your PC is connecting to the Mgmt port, and you can’t get the Administrator’s login screen, the
reasons may be:
( ) The PC is set incorrectly so that the PC can’t obtain the IP address automatically from the Mgmt
port;
(2) The IP address and the default gateway are not under the same network segment.
Please use default IP address such as 92. 68. .xx in your network and then try it again. For the
configuration on PC, please refer to Appendix A. Network Configuration on PC.
After a successful login, a “Home” page will appear on the screen.

User’s Manual
AMG-2001 Access and AP Management Gateway
15
3. Placing AMG 2001 in a Network
Environment
3.1 Network Requirement
Typically, in a networ environment, AMG-2001 plays the role of a gateway. On a gateway device, a
networ port leading upstream to the Internet or the bac bone networ is called a ‘WAN port’ or an
uplin port, while a networ port used for branching out to the service the clients downstream is
referred as ‘LAN port’.
AMG-2001 consists of two WAN ports, which are normally lin ing up to another routers or modems
leading to ISP. A gateway needs one WAN port only, but if you want dual-homing or dual -uplin to add
reliability and throughput, the second WAN port let you achieve the goal.
AMG-2001 has two LAN ports. There could be other networ bridge devices, such as Layer-2 switches
or VLAN switches, between AMG-2001’s LAN ports and the client devices.
3.2 Setting up WAN1 Ports
AMG-2001’s two WAN ports are mar ed as WAN1 and WAN2 on the front panel. WAN1 port supports
four connection types: Static, Dynamic, PPPoE and PPTP. WAN2 port supports 3 connection types:
Static, Dynamic and PPPoE. These connection types are enough to support most ISP.
Depending on ISP or the upstream device the WAN port connects, you only need to select one
connection type for the port. For example, if your ISP is Cable modem issuing Dynamic address, then
you would select Dynamic connection when setting up the WAN ports.
Now, let us begin to configure WAN1 port:
Go to: System >> WAN1 .
On the WAN1 Configuration Web page, you can decide which of the four connection options (Static,
Dynamic, PPPoE and PPTP) to choose from.