LevelOne WHG-1000 User manual

LevelOne
WHG-1000
300Mbps Wireless PoE Hotspot Gateway
User Manual
H/W Ver 2.0
2012/11/08

tents
Chapter 1. Before You Start...............................................................................................1
1.1 Preface........................................................................................................................................ 1
1.2 Package Contents....................................................................................................................... 1
Chapter 2. System Overview.............................................................................................2
2.1 Introduction of WHG-1000.......................................................................................................... 2
2.2 System Concept.......................................................................................................................... 2
2.3 Specification................................................................................................................................ 3
Chapter 3. Base Installations............................................................................................9
3.1 Installations................................................................................................................................. 9
3.1.1 System Requirements......................................................................................................... 9
3.1.2 Panel Function Descriptions............................................................................................... 9
3.1.3 Hardware Installation.........................................................................................................11
3.2 Software Configuration ............................................................................................................. 12
3.2.1 Getting Start...................................................................................................................... 12
3.2.2 Quick Configuration .......................................................................................................... 14
3.2.3 Access Internet................................................................................................................. 19
Chapter 4. Web Interface Configuration ........................................................................20
4.1 Connect WHG-1000 to the external Network......................................................................... 21
4.1.1 Network Requirement....................................................................................................... 21
4.1.2 Configure WAN Port.......................................................................................................... 21
4.1.3 Configure WAN Traffic ...................................................................................................... 24
4.1.4 Configure Dynamic DNS................................................................................................... 26
4.1.5 Configure Local(LAN/VLAN) Network .............................................................................. 27
4.2 Create Your Wireless Network.................................................................................................. 32
4.2.1 Configure Wireless General Setup................................................................................... 32
4.2.2 Configure Wireless Advanced Setup................................................................................ 34
4.2.3 Create Virtual AP............................................................................................................... 37
4.2.3.1 Configure Virtual AP.................................................................................................. 40
4.2.3.2 Block Wireless Clients .............................................................................................. 45
4.2.3.3 MonitorAssociated Wireless Clients......................................................................... 46
4.3 Expand Your Wireless Network ................................................................................................ 47
4.3.1 Create WDS Link.............................................................................................................. 47
4.3.2 View WDS Link Status.................................................................................................... 48
4.4 Manage the System.................................................................................................................. 49
4.4.1 Configure System Time..................................................................................................... 49
4.4.2 Configure Management.................................................................................................... 50
4.4.3 Configure SNMP............................................................................................................... 53
4.4.4 Backup / Restore and Reset to Factory............................................................................ 54
4.4.5 Firmware Upgrade............................................................................................................ 55

4.4.6 Network Utility................................................................................................................... 56
4.4.7 Format Database.............................................................................................................. 57
4.4.8 Reboot............................................................................................................................... 58
4.5 Access To External Network With Service Domain.................................................................. 59
4.5.1 Configure Service Domain................................................................................................ 60
4.5.2 Configure Authentication................................................................................................... 64
4.5.2.1 Authentication Management..................................................................................... 64
4.5.2.2 Configure Pregenerated Tickets............................................................................... 65
4.5.2.3 Configure On-Demand.............................................................................................. 72
4.5.2.3.1 Create Billing Plans........................................................................................... 73
4.5.2.3.2 Create On-Demand Users................................................................................ 75
4.5.2.3.3 Configure External Payment Gateway.............................................................. 79
4.5.2.3.4 Configure Thermal Printer................................................................................. 82
4.5.2.3.5 Billing Plan Report............................................................................................. 87
4.5.2.3.6 Ticket Customization......................................................................................... 89
4.5.2.4 Configure Local RADIUS Accounts .......................................................................... 90
4.5.2.5 Configure Remote RADIUS Server .......................................................................... 93
4.5.2.6 Configure LDAP Server ............................................................................................ 94
4.5.3 Configure Privilege List..................................................................................................... 95
4.5.4 Configure Walled Garden ................................................................................................. 96
4.5.5 Configure Blacklist............................................................................................................ 98
4.5.6 Configure Notification........................................................................................................ 99
4.5.7 Monitor Online Users...................................................................................................... 104
4.5.8 Log Information............................................................................................................... 105
4.6 Restrain the Users and Sharing Your Internal Service........................................................... 108
4.6.1 Configure Time Policy..................................................................................................... 108
4.6.2 IP Filter............................................................................................................................ 109
4.6.3 MAC Filter........................................................................................................................110
4.6.4 Virtual Server (Port/ IP Forwarding).................................................................................111
4.6.5 DMZ..................................................................................................................................112
4.7 Observer the Status.................................................................................................................113
4.7.1 Overview..........................................................................................................................113
4.7.2 Extra Info..........................................................................................................................114
4.7.3 Event Log.........................................................................................................................117
Appendix A. Web GUI valid Characters...................................................................118
Appendix B. System Manager Privileges................................................................123
Appendix C. Create PayPal Business Account.......................................................124
Appendix D. Examples of Making Payments for End Users..................................128
Appendix E. Issue Refund for PayPal......................................................................131

Chapter 1. Before You Start
1.1 Preface
The WHG-1000 is the most economical yet feature-rich Wireless Hotspot Gateway, targeting mini-size
stores who want to provide small, single-point wireless Internet access service. WHG-1000 is a perfect
choice for beginners to run hotspot businesses. It does not cost a fortune to buy a pile of equipment,
nor does it take the skills of an expert to glue multiple applications out of multiple freeware. Feature-
packed for hotspot operation, WHG-1000 comes with built-in 802.11n/b/g access point, web server
and web pages for clients to login, easy logo-loading for branding a hotspot store, simple
user/visitor account management tool, payment plans, PayPal credit card gateway, traffic logs,
IP sharing and etc.
1.2 Package Contents
It is highly recommended to use all the supplies in the package instead of substituting any components by
other suppliers to guarantee best performance.
Package Contents
• WHG-1000 x 1
• Quick Installation Guide x 1
• CD-ROM (with User Manual and QIG) x 1
• Console Cable x 1
• Ethernet Cable x 1
• PowerAdapter DC12V 1A x 1
• Antenna x 2
• Ground Cable x 1

Chapter 2. System Overview
2.1 Introduction of WHG-1000
The WHG-1000 – Wireless Hotspot Controller, built-in Wifi-N technology with data rate up to 300 Mbps,
applies to public access network such as WiFi-Hotspot, network management guest access, hospitality
deployments – which requires reliability, efficiency, and security. It combines an IP Router /Firewall,
Multi-WAN/ QoS enforcement andAccess Controller for use in wireless hotspot environments. One
single WHG-1000 can serve Suggest 100 simultaneous users, takes control over authentication,
authorization, accounting and routing to the Internet as well as to the operating central. Built-in AAA
system allows hotspot owners set up public access services without extra RADIUS server.
2.2 System Concept
WHG-1000 Wireless Hotspot Controller provides authentication, authorization and accounting for a
wired/or wireless networks. Hotspot technology allows Internet providers to offer Internet access to
customers, while applying certain Internet use rules and limitation. It is convenient for Internet cafes,
hotels, airports, schools and universities. The Internet provider gets complete tracking records of per
customer time spent on the network, data amount sent/ received, real-time accounting and more.
To begin browsing, a client must go through a registration process with the provider, then enter a
Passcode/Username of access ticket in a browser Login window that appears on the attempt to open a
webpage. Hotspot technology proposes providers to establish and administrate a user database, which
can be useful for enterprise such as airports, hotels or universities that offer wireless or Ethernet
Internet connectivity to employees, students, guests or other groups of users.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
6
2.3 Specification
Network
Support NAT or Router Mode
Support static IP, Dynamic IP(DHCP Client ), PPPoE and PPTP on WAN connection
DHCP Server Per VLAN; Multiple DHCP Networks
802.3 Bridging
Proxy DNS/Dynamic DNS
Support NAT
IP/Port destination redirection
DMZ server mapping
Virtual server mapping
Built-in with DHCP server
NTP Client
Binding VLAN with Ethernet and Wireless interface
H.323, SIP Pass-through
Support MAC Filter
Support IP Filter
Support URL Filter
Support Walled garden (free surfing zone)
Support MAC-address and IP-address pass through
IP Plug and Play (IP PnP)
User Management
Suggest 100 simultaneous authentication users
Max 3066 Accounts
Support Pregenerated Users, On-Demand Users and Local RADIUSAccounts.
Users Session Management
Configurable user Black list (with Time-based control)
Allows MAC address and user identity binding for local user authentication
SSL protected login portal page
Login Session idle time out setting
Session and account expiration control
User Log and traffic statistic notification via automatically email service
Login time frame control
Session limit
Real-Time Online Users Traffic Statistic Reporting
Support local account roaming

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
7
Seamless Mobility : User-centric networking manages wired and wireless users as they roam between
ports or wireless APs
Multiple Service Domain
The network is divided into maximum 8 group, each defined by a pair of VLAN tag and ESSID
Each Domain has its own (1) login portal page (2) authentication options (3) LAN interface IP
address range (4) Session number limit control (5) Traffic shaping (6) IP Plug and Play (IP PnP)
(7) Multiple Authentication
Enable DHCP or not, and DHCP address range
Enable authentication or not
Enable Guest service or not
Types of authentication options (Local RADIUS, Remote RADIUS, LDAP, On-Demand and Pregenerated)
Bandwidth (Distribution or Individual)
Scheduling authentication service control on different Service Domain
Authentication
Authentication: single sign-on (SSO) client with authentication integrated into the local authentication
environment through local/domain, LDAP, RADIUS, MAC authentication, and 802.1x
Customizable Login and Logout Portal Pages
Customizable Advertisement Links on Login Portal Page
User authentication with UAM (Universal Access Method), 802.1x /EAPoLAN ,MAC address
Allow MAC address and users identity binding for local user authentication
Support Multiple Login service on oneAccounts
Each group (role) may get different network policies in different Service Domain
Max simultaneous user session (TCP/UDP) limit
Configurable user black list
Export/Import local users list to/from a text file
Web-based Captive Portal for SSL browser-based authentication
Authentication Type
IEEE802.1X(EAP, EAP/TLS, EAP/TTLS, EAP/GTC, EAP/MD5, EAP/MSCHAP-V2)
RFC2865 RADIUS Authentication
RFC3579 RADIUS Support for EAP
RFC3748 ExtensibleAuthentication Protocol
MAC Address authentication
Web-based captive portal authentication

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
8
Accounting :
Provides billing plans for Pregenerated accounts
Provides billing plans for On-Demand accounts
Enables session expiration control for both Pregenerated tickets and On-Demand accounts by Time(Hours)
and Data Volume(MB)
Detailed per-user traffic history based on time and data volume for both Pregenerated tickets and On-
Demand accounts
Support Local RADIUS, Pregenerated, On-Demand and external RADIUS server
Contain 10 configurable billing plans for On-Demand accounts
Support credit card billing system by Papal
Support automatic email network traffic history
Security
Layer 2 User Isolation
Blocks client to client discovery within a specified VLAN
Setting for TKIP/CCMP/AES key’s refreshing periodically
Hidden ESSID support
Setting for “ DenyAny “ connection request
MAC Address Filtering (MAC ACL)
Support Data Encryption : WEP(64/128-bit), WAP, WAP2
Support various authentication methods : WPA-PSK, WPA-RADIUS, IEEE802.1X
No. Of Registered RADIUS Servers : 2
Support VPN pass-through
Encryption Type
WEP: 64, 128 and 152 bit
WAP-TKIP , WPA-PSK –TKIP, WPA-AES, WPS-PSK-AES
WAP2/802.11i :WPA2-AES, WAP2-PSK-AES, WAP2-TKIP, WPA-PSK-TKIP
Secure Socket Layer (SSL ) and TLS : RC4 128-bit and RSA1024-bit and 2048-bit
Dual WAN
Load Balancing
Outbound Fault Tolerance
Outbound load balance
Multiple Domain Support
By Traffic
Bandwidth Management by individual and distribution on different network(Service Domain)
WAN Connection Detection

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
9
QoS Enforcement
Packet classification via DSCP (Differentiated Services code Point )
Traffic Statistics
Diff/TOS
IEEE 802.1Q Tag VLAN priority control
IEEE 802.11e WMM
Automatic mapping of WMM priorities to 802.1p and IP DSCP
Upload and Download Traffic Management
Wireless
Transmission power control : 7 Levels
Channel selection : Manual orAuto
No. of associated clients per AP : 32
Setting for max no associated clients : Yes
No. of BBSID (VirtualAP) : 8
No. of Max. WDS setting : 4
Preamble setting : Short / Long
Setting for 802.11b/g/n mix, 802.11b only or 802.11 b/g only or 802.11n only
Setting for transmission speed
IEEE802.11f IAPP ( Inter Access Point Protocol ), hand over users to anotherAP
IEEE802.11i Preauth (PMSKA Cache)
IEEE802.11d Multi country roaming
Automatic channel assignment
CoordinatedAccess ensures optimal performance of nearbyAPs on the same channel
Secure wireless bridge connects access points without wire
Monitoring and reporting
System Administration
Intuitive Web Management Interface
Three administrator accounts
Provide customizable login and logout portal page
CLI access (Remote Management) via Telnet and SSH
Remote firmware upgrade (via Web)
Utilities to backup and restore the system configuration
Remote Link Test – Display connect statistics
Full Statistics and Status Reporting
Real time traffic monitor

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
10
Ping Watchdog
Traffic history report via email to administrator
Users’ session log can be sent by external Syslog Server or E-mail
Even Syslog
SNMP v1, v2c,v3
SNMP Traps to a list of IPAddress
Support MIB-II
Spanning Tree Protocol
NTP Time Synchronization
Customizable Time Display Format for System
Administrative Access : HTTP / HTTPS
WHG-1000 Hardware Specifications
Base Platform
AR7240+AR9283
CPU Clock Speed
400 MHz
Wireless Radio
802.11bgn
Serial Port
1 (DB-9)
USB Port (Optional)
1 (Optional 3G interface radio with major brands – ODM only)
Reset Switch Built-in
Push-button momentary contact switch
RF Channel Scan Hardware
Button
Hardware Push-button to scan for a better channel to use
Standards Conformance
IEEE 802.3 / IEEE 802.3u
Ethernet Configuration
10/100BASE-TX auto-negotiation Ethernet port x 3 (RJ-45 connector)
WAN * 2
LAN * 1
Auto MDI/MDI-X enabled , IEEE802.3af Power Over Ethernet Compatible ,
Auto Fail over
SDRAM
On board : 64 Mbytes
Flash
On board : 16 Mbytes
Built-In LED Indicators
1x Power, 2 x WAN ,1x LAN , 1x Status, 1x System, 1x Printer

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
11
Wireless Specifications
Network Standards
Conformance
IEEE802.11 b /g /n compliant
Data Transfer Rate
IEEE802.11b：1 / 2 / 5.5 / 11Mbps (auto sensing)
IEEE802.11g：6 / 9 / 12 / 18 / 24 / 36 / 48 / 54(auto sensing)
IEEE802.11n : 300 (auto sensing)
Frequency Range
IEEE802.11b/g：
2.412 ~ 2.462GHz (USA)
2.412 ~ 2.484GHz (Japan)
2.412 ~ 2.472 GHz (Europe ETSI)
2.457 ~ 2.462 GHz (Spain)
2.457 ~ 2.472 GHz (France)
Media Access Protocol
CSMA / CA with ACK
Modulation Method
IEEE802.11b：DSSS (DBPK,DQPSK,CCK)
IEEE802.11g/n：OFDM(64-QAM,16-QAM,QPSK,BPSK)
Operating Channels
802.11b/g/n : 11 for FCC,14 for Japan,13 for Europe, 2 for Spain, 4 for France
RF Output Power
100mW
Transmit Power Variation
802.11g/n : Up to 16 dBm
802.11b : up to 18 dBm
Frequency Response flatness
±1dB over operating range
Receiver Sensitivity
802.11b/g /n
-90dBm@1Mbps, -86dBm@6Mbps,-84dBm@11Mbps,-69dBm@54Mbps
Environmental & Mechanical Characteristics
Operating Temperature
-20 °C ~ 50 °C
Storage Temperature
-20 °C ~ 60 °C
Operating Humidity
10% to 80% Non-Condensing
Storage Humidity
5% to 90% Non-Condensing
Antenna Connector
SMA-Type Connector
Power Supply
110 – 220VAC Power ; 12 VDC, 1Ainput.
Support 802.3af Compliant , Power Over Ethernet (48V/0.3A)
Unit Dimensions
205 x 125 x 35 (mm) (Width x Depth x Height)
Unit Weight
600g
Form Factor
Wall Mountable , Metal case compliant with IP50 standard
Certifications
FCC,CE, IP50,ROHS compliant

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
12
Chapter 3. Base Installations
3.1 Installations
3.1.1 System Requirements
Standard 10/100Base T including five network cables with RJ-45 connectors
All PCs need to install the TCP/IP network protocol
3.1.2 Panel Function Descriptions
Front Panel
1. Power SOCKET (12V DC) : Attach the power socket here.
2. Reset : Press the Reset button once to restart the system, The LED except Power indicator will be off
before restarting.
3. LAN(POE) : Clients devices connect to WHG-1000 via LAN ports
4. WAN1/WAN2 : Two WAN ports are available on the system.
5. Console : The serial RS-232 DB9 cable attaches here.
6. Scan Button :
Press and hold the Scan button for 3seconds until STATUS LED FLASH and release to Scan New AP's
Channel.
Press and hold the Scan button for more than 10 seconds until SYSTEM LED FLASH to reset the
system to default configurations.
7. USB : (option)

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
13
Rear Panel
1. WHG-1000 supports 1 RF interface with 2 SMAconnectors for Antenna connection.
LED Panel
1. Power : LED ON indicates power on, OFF indicates power off.
2. WAN1/WAN2/LAN : LED ON indicates connection, OFF indicates disconnection, FLASH indicates packets
transmitting.
3. WLAN : LED ON indicates Wireless ready.
4. PRINT : LED ON indicatesDSA-1000 ready.
5. SYSTEM : LED ON/FLASH indicates Flash busy, OFF indicates Flash Idle
6. STATUS : LED ON indicates System up, OFF indicates down, FLASH indicates Scan button activated.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
14
3.1.3 Hardware Installation
Please follow the steps mentioned below to install the hardware of WHG-1000
1. Place the WHG-1000 at a best location.
The best location for WHG-1000 is usually at the center of your wireless network.
2. Connect WHG-1000 to your outbound network device.
Connect one end of the Ethernet cable to the WAN1/WAN2 port of WHG-1000 on the front panel. On your
environment, connect the other end of the cable to the external Internet . The WAN1/WAN2 LED indicator should be
ON to indicate a proper connection.
3. Connect WHG-1000 to your network device.
Connect one end of the Ethernet cable to LAN port of WHG-1000 on the front panel. Connect the other end of cable
to a PC for configuring the system. The LAN LED indicator should be ON to indicate a proper connection.
4. There are two ways to supply power over to WHG-1000
Connect the DC power adapter to the WHG-1000 power socket on the front panel.
Please only use the power adapter supplied with the WHG-1000
package. Using a different power adapter
may damage this system
WHG-1000 is capable of transmitting DC current via its LAN(PoE) port. Connect an IEEE 802.3af-
compliant PSE device, e.g.A PoE Switch, to the LAN(PoE) port of WHG-1000 with the Ethernet cable.
Now, the hardware installation is completed.
To double verify the wired connection between WHG-1000 and your switch/router/hub, please check the
LED status indication of these network devices.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
15
3.2 Software Configuration
3.2.1 Getting Start
Step :
1. Once the hardware installation is done, set DHCP in TCP/IP of the administrator's PC to get an IP address
automatically. Connect the PC to the LAN(PoE) port of WHG-1000. An IP address will be assigned to the
PC automatically via the WHG-1000.
2. Launch a web browser to access the web GUI of WHG-1000 by entering “http://192.168.2.254” in the
address field.
3. The followingAdministrator Login Page will appear. Enter “root” in the Username field, and “default” in the
Password field. Click OK button to login.
If you can't get the login screen, you may have incorrectly set your PC to obtain an IP address
automatically from LAN port or the IP address used does not have the same subnet as the URL.
Please use default IP address such as 192.168.2.xx in your network and then try it again.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
16
You can login as root, admin or operator. The default username and password as follows.
Root : The administrator can access all area of the WHG-1000
Username : root
Password : default
admin : The admin can access the area under Service Domain, Wireless and Advanced setting (Please see
Appendix B.)
Username : admin
Password : admin
operator : The operator only can access the area of On-Demand authentication to create, edit and print out
the new On-Demand user accounts. (Please see Appendix B.)
Username : operator
Password : 1234
4. After a successful login, the “Home Page” will appear on the screen.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
17
3.2.2 Quick Configuration
WHG-1000 provides wireless and wired network service with authentication required for clients in Service Domain.
Clients in the each Service Domain are isolated with each other. WHG-1000 supports 8 Service Domains, Domain-0
to Domain-7. Administrator can select authentication type on each Service Domain. If Authentication Required is
enabled, the clients are required to get authenticated successfully before access the Internet.
Configuration Steps :
Step 1 : Change Root's Password
Click System → Management, the Management Setup page will appear.
Enter a New Root Password for the Root account ad retype in the Check Root Password field. (4-30
alphanumeric and specific characters; not support Space)
Click Save button.
For security concern, it is strongly recommended to change the Root password.
Step 2 : Choose System's Time Zone
Click System → Time Server, the Time Server Setup page will appear.
Select the appropriate setting and click Save button.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
18
Before Hotspot service active, make sure the Local Time is correctly.
Step 3 : Select Connection Type for WAN1 Port and Set DNS Server
Click System → WAN, the WAN Setup page will appear.
Select the appropriate Connection Type for WAN1 port, there are four types of WAN1 connections to be
selected from: Static IP, Dynamic IP, PPPoE Client and PPTP Client.
Enter the IPAddress of a DNS Server provided by your ISP(Internet Service Provider). Contact the ISP if the
DNS IPAddress is unknown.
Click Save button.
Step 4 : Configure Wireless General Settings
Click Wireless → General Setup, the Wireless General Setup page will appear.
Select desired wireless Band, Channel.
Click Save button

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
19
Step 5 : Set Virtual AP and Select Authentication Type for Service Domain
Click Service Domain, the Service Domain Setup page will appear.
Double-click AP0 Icon, the VAP0 Setup page will appear.
Select desired wireless ESSID and related settings.
Click Tool Icon on Domain0 window, the Service Domain0 Setup page will appear. For each Service
Domain(by default, authentication type is none), authentication type can be selected in Pregenerated Ticket,
On-Demand, Local RADIUS, Remote RADIUS Server and LDAP Server, and select one authentication
type for Default Auth Type. Below depicts an example for Local RADIUS.

WHG-1000 300Mbps Wireless PoE Hotspot Gateway
User's Manual
20
Select Local RADIUS for Domain0's Authentication Type.
Enter the Redirect URL that users should be initially directed to when successfully authenticated to the
network.
Configure related settings for the selectedAuth Type.
Click Save button.