Nomadix Universal subscriber gateway User manual

Copyright © 2002 Nomadix, Inc. All Rights Reserved.
This product also includes software developed by: The University of California, Berkeley and its contributors; Carnegie Mellon
University, Copyright © 1998 by Carnegie Mellon University All Rights Reserved; Go Ahead Software, Inc., Copyright © 1999 Go
Ahead Software, Inc. All Rights Reserved; Livingston Enterprises, Inc., Copyright © 1992 Livingston Enterprises, Inc. All Rights
Reserved; The Regents of the University of Michigan and Merit Network, Inc., Copyright 1992 – 1995 All Rights Reserved; and
includes source code covered by the Mozilla Public License, Version 1.0.
Universal Subscriber Gateway
Part Number: 200-1000-002-G (October, 2002)

Trademarks
The symbol, , Universal Subscriber Gateway™, and
USG™ are trademarks of Nomadix, Inc. All other trademarks and brand names are marks
of their respective holders.
Product Information
Telephone: [phone]
Fax: [phone]
For technical support information, see the Appendix in this User’s Guide.
Write your product serial number in this box:
S/N
Written and Illustrated by Bill Wareing

This User’s Guide is protected by U.S. copyright laws. You may not transmit, copy,
modify, or translate this manual, or reduce it or any part of it to any machine readable
form, without the express permission of the copyright holder.
DISCLAIMER
Nomadix, Inc. makes no warranty, either express or implied, including but not limited to
any implied warranties of merchantability and fitness for a particular purpose, regarding
the product described herein. In no event shall Nomadix, Inc. be liable to anyone for
special, collateral, incidental, or consequential damages in connection with or arising from
the use of Nomadix, Inc. products.
NOTIFICATIONS
This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device
must accept any interference received, including interference that may cause undesired
operation. Also note that the communication connections for this device are not for use in
Telephone-Network Voltage (TNV) circuits.
This Class B digital apparatus meets all requirements of the Canadian Interference-
Causing Equipment Regulations.
Cet appareil numérique de la classe B respecte toutes les exigences du Réglement sur le
matériel brouilleur du Canada.
31355 Agoura Road, Westlake Village, CA 91361, USA (head office)
WARNING
Risk of electric shock; do not open;
no user-serviceable parts inside.
Risque de choc electrique; ne pas
ouvrir; ne pas tenter de démonter
l’appareil.
CAUTION
Read the instruction manual prior to
operation.
Lire le mode d’emploi avant
utilisation.

UNIVERSAL SUBSCRIBER GATEWAY™
Table of Contents i
Table of Contents
Introduction ..........................................................................................................9
About this User’s Guide ............................................................................................. 9
Organization................................................................................................................ 9
About the NOMADIX Network Service Engine (NSE)........................................... 10
Welcome to the Universal Subscriber Gateway™ ................................................... 12
Leveraging Services........................................................................................... 12
Product Overview ..................................................................................................... 13
Product Configurations and Licensing.............................................................. 13
Base USG ................................................................................................... 13
Credit Card Module.................................................................................... 14
PMS Module............................................................................................... 14
RADIUS Module........................................................................................ 14
Security Module ......................................................................................... 14
Product Features ....................................................................................................... 15
Transparent Connectivity .................................................................................. 15
Dynamic Address Translation™ ................................................................ 15
Transparent HTTP Proxy ........................................................................... 15
PPTP Support ............................................................................................. 16
E-mail Redirection...................................................................................... 16
DNS Redirection ........................................................................................ 16
Microsoft NetMeeting® Support ............................................................... 16
Authentication and Billing................................................................................. 17
SSL Support................................................................................................ 17
Authentication ............................................................................................ 17
AAA Passthrough Port ............................................................................... 17
Portal Page Parameter Passing ................................................................... 18
Cookie Placement (“Remember My Login”)............................................. 18
Dynamic Billing Selection ......................................................................... 18
XML Support.............................................................................................. 18
PMS Integration.......................................................................................... 19
PMS Query ................................................................................................. 19
Billing Records Mirroring .......................................................................... 20
RADIUS Support........................................................................................ 20
RADIUS Portal Redirect ............................................................................ 21
Automatic User Tracking, Billing, and Security........................................ 21
Port-Location Mapping .............................................................................. 22
In-Room Port Mapping............................................................................... 23
Serial Printing............................................................................................. 23
Local Service Presentation................................................................................ 23

UNIVERSAL SUBSCRIBER GATEWAY™
ii Table of Contents
Information and Control Console (ICC)..................................................... 23
Selective Access Control (Walled Garden) ................................................ 23
Home Page Redirection.............................................................................. 23
IP Upsell ..................................................................................................... 24
URL Filtering ............................................................................................. 24
Nomadix Connection Screen & Partner Image .......................................... 24
Flexible Screen Size & JAVA Detect ........................................................ 24
Language Support....................................................................................... 24
Bandwidth Management .................................................................................... 25
Bandwidth Shaping (and Dynamic Bandwidth Management) ................... 25
Administration, Management, and Security ...................................................... 25
Nomadix Enterprise MIB ........................................................................... 25
Remote Administration .............................................................................. 26
License Key Server..................................................................................... 26
Secure Administration................................................................................ 26
Bridge Mode............................................................................................... 26
Optional Standalone Applications ............................................................................ 27
Meeting Room Scheduler (MRS) ....................................................................... 27
Centralized Management System (CMS) ........................................................... 27
Some Potential Applications for the USG ................................................................ 28
Product Specifications .............................................................................................. 29
Online Help (WebHelp)............................................................................................ 30
Notes, Cautions, and Warnings................................................................................. 30
Chapter 1: Installing the USG.......................................................................... 31
Unpacking the USG .................................................................................................. 32
Installation Workflow ............................................................................................... 33
Powering Up the System........................................................................................... 34
Logging In to the Command Line Interface ............................................................. 35
The Management Interfaces (CLI and Web) ............................................................ 36
Making Menu Selections and Inputting Data with the CLI ............................... 36
Menu Organization (Web Management Interface)............................................ 37
Online Documentation and Help....................................................................... 38
Quick Reference Guide............................................................................................. 38
Establishing the Start Up Configuration................................................................... 39
Assigning Login User Names and Passwords ................................................... 40
Setting the SNMP Parameters (optional) .......................................................... 41
Enabling the Logging Options (recommended)................................................. 42
Assigning the Location Information and IP Addresses ..................................... 43
Logging Out and Powering Down the System ......................................................... 45
Connecting the USG to the Customer’s Network..................................................... 46
Establishing the Basic Configuration for Subscribers .............................................. 47
Setting the DHCP Options................................................................................. 47
Setting the DNS Options .................................................................................... 50

UNIVERSAL SUBSCRIBER GATEWAY™
Table of Contents iii
Archiving Your Configuration Settings.................................................................... 51
Installing the Nomadix Enterprise MIB.................................................................... 52
Chapter 2: System Administration .................................................................. 53
Choosing a Remote Connection ............................................................................... 53
Using the Web Management Interface (WMI)................................................... 54
Using an SNMP Manager.................................................................................. 54
Using a Telnet Client......................................................................................... 55
Logging In................................................................................................................. 55
About Your Product License .................................................................................... 55
Configuration Menu.................................................................................................. 56
Defining the AAA Services {AAA} ..................................................................... 56
Enabling AAA Services with the Internal Web Server .............................. 59
Enabling AAA Services with an External Web Server .............................. 62
Establishing Secure Administration {Access Control}...................................... 63
Bandwidth Management {Bandwidth Management}......................................... 65
Establishing Billing Records “Mirroring” {Bill Record Mirroring}................ 66
Enabling Centralized Management (Centralized Management)....................... 68
Managing the DHCP Service Options {DHCP}................................................ 69
Managing the DNS Options {DNS} ................................................................... 72
Setting the Home Page Redirection Options {Home Page Redirect}................ 74
Establishing Your Location {Location}............................................................. 75
Managing the System and Billing Log Options {Logging}................................ 77
Enabling the Meeting Room Scheduler {Meeting Room Scheduler}................. 78
Defining Miscellaneous Settings {Misc}............................................................ 79
Assigning Passthrough Addresses (Passthrough Addresses)............................ 80
Assigning a PMS Service {PMS} ....................................................................... 81
Setting Up Port Locations {Port-Location}....................................................... 84
In Room Port Mapping............................................................................... 87
Defining the RADIUS Options {RADIUS Options}........................................... 89
Authentication ............................................................................................ 91
Accounting ................................................................................................. 92
Retransmission Options.............................................................................. 92
ISP Account Creation................................................................................. 93
Miscellaneous Options ............................................................................... 93
Managing SMTP Redirection {SMTP} .............................................................. 94
Managing the SNMP Communities {SNMP}..................................................... 95
Displaying Your Configuration Settings {Summary} ........................................ 97
Setting the System Date and Time {Time} ......................................................... 98
URL Filtering {URL Filtering}........................................................................ 100
Network Info Menu ................................................................................................ 101
Displaying ARP Table Entries {ARP} ............................................................. 101
Displaying DAT Sessions {DAT}..................................................................... 101
Displaying the Host Table {Hosts}.................................................................. 102

UNIVERSAL SUBSCRIBER GATEWAY™
iv Table of Contents
Displaying ICMP Statistics {ICMP}................................................................ 102
Displaying the Network Interfaces {Interfaces} .............................................. 103
Displaying the IP Statistics {IP}...................................................................... 104
Displaying the Routing Tables {Routing}........................................................ 105
Displaying the Active IP Connections {Sockets}............................................. 106
Displaying TCP Statistics {TCP} .................................................................... 107
Displaying UDP Statistics {UDP}................................................................... 108
Port-Location Menu................................................................................................ 109
Adding and Updating Port-Location Assignments {Add} ............................... 109
Adding a Port-Location Assignment........................................................ 109
Updating a Port-Location Assignment ..................................................... 110
Deleting All Port-Location Assignments {Delete All}..................................... 111
Deleting Port-Location Assignments by Location {Delete by Location} ........ 111
Deleting Port-Location Assignments by Port {Delete by Port} ...................... 112
Exporting Port-Location Assignments {Export}.............................................. 113
Finding Port-Location Assignments by Description {Find by Description}... 114
Finding Port-Location Assignments by Location {Find by Location} ............ 115
Finding Port-Location Assignments by Port {Find by Port} .......................... 116
Importing Port-Location Assignments {Import}.............................................. 117
Viewing the “location.txt” File................................................................. 118
Creating a “location.txt” File.................................................................... 118
Displaying the Port-Location Mappings {List} ............................................... 119
Subscriber Administration Menu............................................................................ 120
Adding Subscriber Profiles {Add} ................................................................... 120
Displaying Current Subscriber Connections {Current}.................................. 122
Deleting Subscriber Profiles by MAC Address {Delete by MAC}................... 123
Deleting Subscriber Profiles by User Name {Delete by User} ....................... 124
Displaying the Currently Allocated DHCP Leases {DHCP Leases} .............. 125
Deleting All Expired Subscriber Profiles {Expired} ....................................... 125
Finding Subscriber Profiles by MAC Address {Find by MAC}....................... 126
Finding Subscriber Profiles by User Name {Find by User} ........................... 127
Listing Subscriber Profiles by MAC Address {List by MAC}.......................... 128
Listing Subscriber Profiles by User Name {List by User}............................... 128
Displaying Current Profiles and Connections {Statistics}.............................. 129
Subscriber Interface Menu...................................................................................... 130
Defining the Billing Options {Billing Options} ............................................... 130
Setting Up the Information and Control Console {ICC Setup}....................... 135
Assigning Buttons .................................................................................... 137
Assigning Banners.................................................................................... 138
Pixel Sizes ................................................................................................ 139
Time Formats............................................................................................ 139
Defining Languages {Language Support}....................................................... 140
Information and Control Console (Sample) ............................................. 141
Subscriber’s Login Page (Sample) ........................................................... 141

UNIVERSAL SUBSCRIBER GATEWAY™
Table of Contents v
Web Management Interface (Sample)...................................................... 142
Defining the Subscriber’s Login UI {Login UI}.............................................. 143
Subscriber Login Screen (Sample)........................................................... 146
Defining Subscriber UI Labels {Subscriber Labels}....................................... 148
Defining Subscriber Error Messages {Subscriber Errors} ............................. 149
Defining Subscriber Messages {Subscriber Messages} .................................. 151
System Menu .......................................................................................................... 154
Adding an ARP Table Entry {ARP Add} ......................................................... 154
Deleting an ARP Table Entry {ARP Delete} ................................................... 155
Enabling the Bridge Mode Option {Bridge Mode} ......................................... 156
Exporting Configuration Settings to the Archive File {Export} ...................... 157
Importing the Factory Defaults {Factory} ...................................................... 158
Viewing the History Log {History}.................................................................. 159
Importing Configuration Settings from the Archive File {Import}.................. 160
Establishing Login Access Levels {Login} ...................................................... 161
Testing a Remote Host {Ping} ......................................................................... 163
Rebooting the System {Reboot} ....................................................................... 164
Adding a Route {Route Add} ........................................................................... 165
Deleting a Route {Route Delete} ..................................................................... 166
Updating the USG Firmware {Upgrade} ........................................................ 167
Chapter 3: The Subscriber Interface............................................................. 169
Overview................................................................................................................. 169
A Subscriber Interface Scenario ............................................................................. 170
The Subscriber’s Experience ........................................................................... 170
Creating an Account ........................................................................................ 171
Confirmation.................................................................................................... 172
Authorization and Billing ....................................................................................... 174
The AAA Structure ........................................................................................... 175
Process Flow (AAA) ........................................................................................ 177
Internal and External Web Servers.................................................................. 178
Language Support............................................................................................ 178
Home Page Redirection................................................................................... 178
Subscriber Management ......................................................................................... 178
Subscriber Management Models ..................................................................... 179
Configuring the Subscriber Management Models........................................... 180
Information and Control Console (ICC)................................................................. 181
ICC Pop-Up Window....................................................................................... 181
Chapter 4: Quick Reference Guide................................................................ 183
Web Management Interface (WMI) Menus............................................................ 183
Main Page........................................................................................................ 183
Configuration Menu Items............................................................................... 184

UNIVERSAL SUBSCRIBER GATEWAY™
vi Table of Contents
Network Info Menu Items................................................................................. 186
Port-Location Menu Items............................................................................... 187
Subscriber Administration Menu Items ........................................................... 188
Subscriber Interface Menu Items..................................................................... 189
System Menu Items .......................................................................................... 190
Alphabetical Listing of Menu Items (WMI)........................................................... 191
Default (Factory) Configuration Settings ............................................................... 193
Product Specifications ............................................................................................ 195
Sample AAA Log ................................................................................................... 196
Message Definitions (AAA Log) ...................................................................... 196
Sample SYSLOG Report ........................................................................................ 197
Sample History Log ................................................................................................ 197
Keyboard Shortcuts................................................................................................. 198
HyperTerminal Settings.......................................................................................... 198
RADIUS Attributes................................................................................................. 199
Authentication-Request.................................................................................... 200
Authentication-Reply (Accept)......................................................................... 200
Accounting-Request ......................................................................................... 201
Selected Detailed Descriptions........................................................................ 201
Nomadix Vendor Specific Attributes................................................................ 203
Setting Up the SSL Feature .................................................................................... 203
Prerequisites.................................................................................................... 203
Obtain a Private Key File (cakey.pem) ........................................................... 204
Installing Cygwin and OpenSSL on a PC........................................................ 204
Private Key Generation ................................................................................... 208
Create a Certificate Signing Request (CSR) File ............................................ 211
Create a Public Key File (server.pem)............................................................ 212
Setting Up USG™ for SSL Secure Login ........................................................ 215
Setting Up the Portal Page .............................................................................. 216
Mirroring Billing Records ...................................................................................... 216
Sending Billing Records .................................................................................. 217
XML Interface.................................................................................................. 217
Web Management Interface (WMI) ................................................................. 220
Chapter 5: Troubleshooting............................................................................ 223
General Hints and Tips ........................................................................................... 223
Power Loss.............................................................................................................. 223
Management Interface Error Messages .................................................................. 224
Replacing the Fuse.................................................................................................. 226
International Power Conversion ............................................................................. 227
Common Problems ................................................................................................. 228
Fault Light............................................................................................................... 229

UNIVERSAL SUBSCRIBER GATEWAY™
Table of Contents vii
Appendix: Technical Support......................................................................... 231
Contact Information................................................................................................ 231
Glossary of Terms ............................................................................................233
Index ..................................................................................................................245

UNIVERSAL SUBSCRIBER GATEWAY™
viii Table of Contents
This page intentionally blank

UNIVERSAL SUBSCRIBER GATEWAY™
Introduction 9
Introduction
About this User’s Guide
This User’s Guide was developed for system administrators. It provides information
and procedures that will enable you to install, configure, manage, and use the
Universal Subscriber Gateway™ (USG™) successfully and efficiently. Use this guide
to take full advantage of the USG’s functionality and features.
Organization
This User’s Guide is organized into the following chapters:
Chapter 1 – Installing the USG. This chapter provides instructions for installing the
USG and establishing the start-up configuration.
Chapter 2 – System Administration. This chapter provides all the instructions and
procedures necessary to manage and administer the USG on the customer’s network,
following a successful installation.
Chapter 3 – The Subscriber Interface. This chapter provides an overview and
sample scenario for the USG’s subscriber interface. It also includes an outline of the
authorization and billing processes utilized by the system, a section about the
Information and Control Console (ICC), and instructions for enabling the Meeting
Room Scheduler (MRS) application.
Chapter 4 – Quick Reference Guide. This chapter contains product reference
information, organized by topic and functionality. It also contains a full listing of all
product configuration elements, sorted alphabetically and by menu.
Chapter 5 – Troubleshooting. This chapter provides information to help you resolve
common hardware and software problems. It also contains a list of error messages
associated with the management interface.
Appendix – Technical Support. The appendix informs you how to obtain technical
support. You should refer to the troubleshooting procedures contained in Chapter 5
before contacting Nomadix, Inc. directly.
Glossary of Terms. The glossary provides an explanation of terms directly related to
the product technology. Glossary entries are organized alphabetically.
Index. The index is a valuable information search tool. Use the index to locate
specific topics and categories contained in this User’s Guide.

UNIVERSAL SUBSCRIBER GATEWAY™
10 Introduction
About the NOMADIX Network Service Engine (NSE)
More than 50 million mobile enterprise users carry laptops and hand-held computers
as they move about. Network equipment manufacturers must eliminate the concerns
of security and connectivity that are associated with a mobile workforce. Nomadix
developed an embedded software mobility solution called the Network Service
Engine (NSE), creating a robust networking environment where connectivity
problems and concerns about security are things of the past.
Some of the NSE’s key product offerings include:
!
!!
!Transparent Connectivity
Our patented Dynamic Address Translation™ (DAT™) technology provides
mobile users with transparent broadband network connectivity—no need for
changes to their computer's settings, and no need for any special client-side
software. By simply adapting to the user (instead of the user adapting to the
network), the NSE ensures that everyone gets effortless access to any
enterprise, residential, or public-access broadband network.
!
!!
!Policy-based Traffic Shaping
The NSE caps bandwidth usage on a per device basis ensuring equitable
distribution of bandwidth in networks that are heavily congested. The
bandwidth for each device can be defined asymmetrically for both upstream
and downstream data transmissions, allowing efficient bandwidth utilization
across the entire network.
!
!!
!Network-based Security
The NSE utilizes SSL to deliver Web-based user authentication that is
secure, efficient, transport agnostic (wireless and wired), and low cost. Our
Web-based model standardizes authentication across multiple vendors and
network types.
Nomadix licenses the NSE to makers of edge
networking devices such as wireless access points,
routers, switches, and residential gateways.

UNIVERSAL SUBSCRIBER GATEWAY™
Introduction 11
The NSE is designed for the following critical application areas:
!
!!
!Enterprise
IT administrators can deploy NSE-enabled wireless Access Points to
enhance today’s security implementations (that focus on the privacy of the
data) by providing a Web-based, vendor and client-independent solution that
securely authenticates the user to the network over SSL. The NSE enables
the deployment of policy-based access and easily integrates into existing
centralized authentication databases, providing greater security to the
wireless LAN. The NSE also enables transparent subnet roaming, allowing
the deployment of multiple wireless subnets and limiting the available
bandwidth of users per Access Point—enabling a more cost effective,
scalable deployment of wireless LANs.
!
!!
!Public-LAN
By using an NSE-enabled edge networking device, service providers can
instantly deliver transparent broadband access to any customer at any public
access location—without requiring the user to reconfigure their computer or
use client-side software. Customers can create accounts at the public access
location in real time and receive local content and services from the service
provider or premise owner. The NSE can pass the necessary parameters for
authentication and billing to the service provider allowing settlement to
occur. The NSE provides the intelligence necessary to capture customers on-
site without the need for call center support functions or the provisioning of
expensive client-side software.
!
!!
!Residential
Providers of residential broadband Internet access can deploy an NSE-
enabled gateway in the home to deliver broadband access to any consumer.
Our patented Dynamic Address Translation™ technology means customers
won't need to reconfigure their computer or use any special client-side
software, dramatically reducing technical support costs and product return
rates. The NSE automatically redirects consumers to the service provider's
portal page to create accounts and receive local content and services
generating an immediate revenue stream. The NSE passes all necessary
parameters for authentication and billing back to the service provider's
infrastructure for settlement to occur.
The NSE is completely modular, allowing you to choose only those features needed
for your specific application.

UNIVERSAL SUBSCRIBER GATEWAY™
12 Introduction
Welcome to the Universal Subscriber Gateway™
In addition to licensing its NSE technology solution to makers of edge networking
devices, Nomadix has created its own robust platform for the NSE, called the
Universal Subscriber Gateway (USG). The USG is a stand-alone, turnkey networking
device that provides important user mobility and security enhancements to network
infrastructures.
The Universal Subscriber Gateway handles universal mobile connectivity, advanced
security, policy-based traffic shaping, and service placement supporting up to 2,000
users simultaneously in a broadband environment. Available in a variety of
configurations, the USG also offers a unique set of security and connectivity features
for deploying wireless 802.11 networks.
The USG yields a complete solution to a set of complex issues in the Enterprise,
Public-LAN, and Residential segments.
Leveraging Services
Resolving configuration conflicts is difficult and time consuming for network users
who are constantly on the move, and costly to the solution provider. In fact, most
users are reluctant to make changes to their computer’s network settings and won’t
even bother. This fact alone has prevented the widespread deployment of broadband
network services. Our patented Dynamic Address Translation (DAT) technology
provides transparent and seamless broadband connectivity to any user at any location,
without the need for configuration changes to the client computer or any client-side
software.
"In general, this User’s Guide refers to the Universal Subscriber
Gateway as the “USG” or the “system,” with occasional references to
the “product.”
Universal Subscriber Gateway

UNIVERSAL SUBSCRIBER GATEWAY™
Introduction 13
Product Overview
The Universal Subscriber Gateway is deployed in any wireless or wired broadband
service network. The USG immediately recognizes new users on the network (and
remembers returning users) and redirects their browser to a proprietary Web page
where they can purchase high speed Internet access and services from the network
solution provider. Users who choose to purchase network access and services are
known as “subscribers.”
The USG is a free-standing or rack-mounted unit with two Ethernet ports (network
and subscribers), a serial port for system management and administration, and a
dedicated PMS port for connecting the unit to a customer’s Property Management
System. After the initial setup and network configuration is established, the USG is
easily managed by a network administrator through a Telnet interface, Web
management interface, SNMP client, or the onboard serial port.
The USG is a multinational product that supports Asian and European languages.
Product Configurations and Licensing
The Universal Subscriber Gateway can be licensed for various configurations,
including custom configurations. The following product configurations are available:
Base USG
The base USG platform is targeted at any environment that needs to provide
broadband “plug-and-play” functionality, and includes:
!
!!
!Plug-and-play
!
!!
!Home page redirect
!
!!
!Walled garden
!
!!
!Access control
!
!!
!Bridge mode
!
!!
!Standard management
!
!!
!Multiple language support
!
!!
!PPTP
!
!!
!SNMP
!
!!
!URL filtering
!
!!
!Enabled for the Nomadix Meeting Room Scheduler (MRS) application
!
!!
!Enabled for the Nomadix Centralized Management System (CMS)
application
!
!!
!XML support
!
!!
!External Web Server

UNIVERSAL SUBSCRIBER GATEWAY™
14 Introduction
In addition to the base USG platform, the following additional modules can be
licensed from Nomadix:
!
!!
!Credit card module
!
!!
!PMS module
!
!!
!RADIUS module
!
!!
!Security module
Credit Card Module
This module provides the following additional functionality:
!
!!
!Port location
!
!!
!Information & Control Console (ICC)
!
!!
!Bandwidth management
!
!!
!Usage (billing) mirroring
!
!!
!IP upsell
!
!!
!Credit card billing
PMS Module
This module provides all the functionality contained in the credit card module, but
substitutes credit card billing with a PMS billing interface. It also offers 2-way PMS
support.
RADIUS Module
This module provides all the functionality contained in the PMS module, but
substitutes the PMS billing interface with a RADIUS interface. It also offers a
“remember my login” feature.
Security Module
This module provides SSL, 802.1x, Smart Client, IPSec, and proxy ARP support for
additional security.
For a detailed listing of the features that are available for licensing with the Universal
Subscriber Gateway platform, refer to “Product Features” on page 15.
"New features are constantly being added to our products. For a
complete and up-to-date list of features, contact our technical support
team at ++1.818.575.2590 or email [e-mail].

UNIVERSAL SUBSCRIBER GATEWAY™
Introduction 15
Product Features
Transparent Connectivity
Dynamic Address Translation™
The USG offers plug-and-play, transparent broadband network connectivity covering
every PC configuration (static IP, DHCP, DNS) and performs standard network and
port address translation—supporting Application Level Gateways (ALGs) for
protocols such as FTP, H.323, PPTP, and IPsec. The USG’s transparent proxy feature
also resolves all proxy issues within the browser.
Whenever a subscriber logs in, the USG automatically translates their computer’s
network settings to provide them with seamless access to the broadband network. Our
patented Dynamic Address Translation (DAT) technology eliminates the need for
subscribers to alter their computer’s settings.
Transparent HTTP Proxy
The USG directs all HTTP and HTTPS proxy requests through an internal proxy
which is transparent to the subscriber (no need for users to perform any
reconfiguration tasks)—see note.
"When AAA is enabled, proxy subscribers are redirected to the login
page when they attempt to go to a routable DNS address.
End User
Dynamic Address Translation (DAT)
USG
Translates End-User
Network Settings
Router
Port
Switching Public
Internet

UNIVERSAL SUBSCRIBER GATEWAY™
16 Introduction
PPTP Support
The USG fully supports PPTP (Point-to-Point Tunneling Protocol) so that
misconfigured users (DHCP private or statically misconfigured) can use PPTP VPNs
through the USG’s Dynamic Address Translation (DAT) function. Our patented DAT
technology ensures that this feature is “transparent” to users. The USG supports a
maximum of 500 simultaneous PPTP sessions. See also, “Misconfigured User” on
page 238.
E-mail Redirection
Today’s increasingly sophisticated computer users are mobile and demanding. They
want more than simple Internet access. When they “plug in” they not only expect a
reliable and fast connection, they need to be able to make full use of their normal Web
and business applications (for example, E-mailing).
System administrators can set the USG to pass all SMTP traffic through the SMTP
relay server independent of a PC’s settings.
With the USG’s outgoing E-mail Redirection feature, the system allows
misconfigured users to send E-mail without the need for complex reconfiguration
tasks. For example, if you are connected to a broadband network via the USG in a
hotel and you want to send E-mail, the USG rewrites your original message according
to SMTP rules and sends it out via its E-mail server. The recipient of your E-mail sees
the message as if you sent it from your local Internet Service Provider, not from the
hotel.
DNS Redirection
The Domain Name System (DNS) maps a host name with its IP address on the
Internet. DNS runs over UDP (User Datagram Protocol) which is not a reliable
protocol, and it is up to the application to retransmit requests if the DNS requests are
lost or no reply is sent. Subscribers may also have their laptop configured for a DNS
server which exists on an enterprise network behind a firewall. To improve reliability
and to ensure that a DNS server is always available to subscribers, the USG can
redirect requests to a local DNS server on behalf of subscribers. This improves the
response time and enables true plug-and-play access when the subscriber’s
configured DNS server is behind a firewall or located on a private Intranet.
Microsoft NetMeeting® Support
Our patented Dynamic Address Translation (DAT) plug-and-play technology
supports the Microsoft NetMeeting® product.