Ovislink AirLive WIAS-1000G User manual

$LU/LYH:,$6*
0ESV,QWHUQHW$FFHVV6HUYHU


i
Copyright
The intellectual property rights and copyright of this manual belong to OvisLink Co., Ltd. and are protected by the
Taiwan, Republic of China (R.O.C.) copyright laws and international copyright laws. No part or entirety of this
manual may be transshipped, transmitted, duplicated, distributed, displayed, published, or broadcasted in any form
or by any means without the prior written permission of OvisLink Co., Ltd. The trademarks mentioned in the manual
belong to the owners of the respective registered companies or organizations.
Please contact OvisLink if you have any questions on copyright:
Tel.: [phone]
Fax: [phone]
E-mail: [email protected]

ii
FCC CAUTION
This equipment has been tested and proven to comply with the limits for a class B digital device, pursuant to part 15
of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation.
This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following measures:
---Reorient or relocate the receiving antenna.
---Increase the separation between the equipment and receiver.
---Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
---Consult the dealer or an experienced radio/TV technician for help.
Installation and use of this Wireless AP/ Router must be in strict accordance with the instructions included in the user
documentation provided with the product. Any changes or modifications (including the antennas) made to this device
that are not expressly approved by the manufacturer may void the user’s authority to operate the equipment. The
manufacturer is not responsible for any radio or television interference caused by unauthorized modification of this
device, or the substitution of the connecting cables and equipment other than manufacturer specified. It is the
responsibility of the user to correct any interference caused by such unauthorized modification, substitution or
attachment. Manufacturer and its authorized resellers or distributors will assume no liability for any damage or
violation of government regulations arising from failing to comply with these guidelines.
The device contains a low power transmitter which will send out Radio Frequency (RF) signal when transmitting.

iii
CE CAUTION
European standards dictate maximum radiated transmit power of 100mW EIRP and frequency range 2.400-2.4835
GHz; In France, the equipment must be restricted to the 2.4465-2.4835 GHz frequency range and must be restricted
to indoor use.
For the following equipment: Wireless AP/Router
!
098
4
is herewith confirmed to comply with the requirements set out in the Council Directive on the
Approximation of the Laws of the Member States relating to Electromagnetic Compatibility (89/336/EEC),
Low-voltage Directive (73/23/EEC) and the Amendment Directive (93/68/EEC), the procedures given in European
Council Directive 99/5/EC and 89/3360EEC.
The equipment was passed. The test was performed according to the following European standards:
y EN 300 328-2 V1.2.1 ( 2001-08)
y EN 301 489-17 V.1.2.1 (2002-04)
y EN 50371: 2002
y EN 60950: 2000

iv
Before You Read
Audience
This manual is intended for the system or network administrators with the networking knowledge to complete the
step by step instructions of this manual in order to use the OvisLink’s WIAS-1000G for a better manage of network
system and user data.
Document Signal
y For any caution or warning that requires special attention of readers, a highlight box with the eye-catching italic
font is used as below:
Warning: For security purposes, you should immediately change the Administrator’s password.
y indicates that clicking this button to go back the homepage of the section.
y indicates that clicking this button to go back the previous page.
y indicates that clicking this button to apply all of your settings.
y indicates that clicking this button to clear what you set before these settings are applied.

i
Table of Contents
1. Introduction ......................................................................................... 1
1.1 Package Contents..................................................................................... 1
1.2 Panel Function Descriptions ....................................................................... 2
1.3 Specification............................................................................................ 4
1.3.1 Hardware Specification .............................................................................4
1.3.2 Technical Specification..............................................................................4
2. Installation ........................................................................................... 6
2.1 System Requirements............................................................................... 6
2.2 Installation Steps ..................................................................................... 6
3. Configuration........................................................................................ 7
3.1 System Concept....................................................................................... 7
3.2 LAN Configuration on PC ........................................................................... 8
3.2.1 Internet Connection Setup ........................................................................9
3.2.2 TCP/IP Network Setup ............................................................................ 13
3.3 Quick Configuration ................................................................................ 22
3.4 External Network Access ......................................................................... 32
4. System Configuration ......................................................................... 35
4.1 System Configuration ............................................................................. 36
4.1.1 Configuration Wizard.............................................................................. 36
4.1.2 System Information ............................................................................... 37
4.1.3 WAN Configuration................................................................................. 39
4.1.4 LAN1 & LAN2 Configuration ..................................................................... 40
4.1.5 LAN3 & LAN4 Configuration ..................................................................... 44
4.1.6 Wireless Configuration............................................................................ 47
4.2 User Authentication ................................................................................ 53
4.2.1 Authentication Configuration ................................................................... 53
4.2.2 Black List Configuration .......................................................................... 69
4.2.3 Policy Configuration ............................................................................... 71
4.2.4 Guest User Configuration ........................................................................ 75
4.2.5 Roaming Configuration ........................................................................... 76
4.2.6 Additional Configuration.......................................................................... 77
4.3 Network Configuration ............................................................................ 84
4.3.1 Network Address Translation ................................................................... 84
4.3.2 Privilege List ......................................................................................... 87
4.3.3 Monitor IP List....................................................................................... 90
4.3.4 Walled Garden List................................................................................. 91
4.3.5 Proxy Server Properties .......................................................................... 92
4.3.6 Dynamic DNS........................................................................................ 92

ii
4.4 Utilities................................................................................................. 93
4.4.1 Change Password .................................................................................. 94
4.4.2 Backup/Restore Strategy ........................................................................ 95
4.4.3 Firmware Upgrade ................................................................................. 96
4.4.4 Restart................................................................................................. 96
4.5 Status .................................................................................................. 97
4.5.1 System Status....................................................................................... 98
4.5.2 Interface Status .................................................................................... 99
4.5.3 Current Users...................................................................................... 102
4.5.4 Traffic History...................................................................................... 102
5. Technical Support ............................................................................. 105
6. Appendix -- Console Interface .......................................................... 106

1
1. Introduction
WIAS-1000G is an all-in-one product specially designed for Hotspot environment. It integrates “access control” and
“wireless network access” into one system to fulfill the needs in Hotspot. WIAS-1000G supports 802.11b and
802.11g dual wireless transmission mode, at the same time, it incorporates “convenience”, “efficiency”, “friendly” and
other useful characteristics for services.
Quick Installation Online Immediately
Θ
The installation and setup of WIAS-1000G are easy without changing the present existing network architecture. You
can install and log in the system within a short time and establish the security mechanism. With the protection by
WIAS-1000G, users must be authenticated before logging in the network, and the administrator can assign a
fine-grained priority to each user stratifying the scope and right of using network resources.
Friendly Management and Application Interfaces
WIAS-1000G is not only easy to install, but also has friendly multilingual management interface with operation logic.
You can use all the functions of the system with clicks. The full web-based management interface allows you to
operate and manage the system online via a browser. For users to get on the Public LAN (LAN1/LAN2) is also
easy to log in via the browser with any software installation.
Integrating the Existing User Password Database
In general, most organizations use specific database system to centralize and manage user passwords before
introducing the wireless network into the organization. WIAS-1000G supports Local, POP3 (+SSL), RADIUS and
LDAP external Public LAN (LAN1/LAN2) mechanisms, and allows you to integrate the current user password
database. This system also provides a built-in user database, so that the administrator can create or upload the
Public LAN (LAN1/LAN2) data by a batch processing.
1.1 Package Contents
The standard package of WIAS-1000G includes:
1. WIAS-1000G x 1
2. CD-ROM x 1
3. Quick Installation Guide x 1
4. Power Adaptor (DC 12V) x 1
5. Cross Over Ethernet Cable x 1
6. Console Cable x 1
7. 2dbi Omni-antenna x 2

2
1.2 Panel Function Descriptions
Front Panel

3
Back Panel
y DC IN: The power adaptor attaches here.
y RESET: Presses this button to restart the system. If your settings are applied or saved, the system will restore to
the factory defaults or the previous setting status.
y WAN: The WAN port is connected to a network which is not managed by the WIAS-1000G, and this port can be
used to connect the ATU-Router of ADSL, the port of Cable Modem, or the Switch or Hub on the LAN of a
company.
y LAN1/LAN2: The two LAN ports are connected to the managed network or WLAN. They can be selected to
require or not require authentication to access network resources and Internet.
y LAN3/LAN4: The two LAN ports are connected to a trustful network where the computer or users can use the
network resources without authentication. This port can be connected to a server such as File Server or a
Database Server, etc.
y Console: You can configure the system via HyperTerminal. For example, if you need to set the Administrator’s
Password, you can connect a PC to this port as a Console Serial Port via a terminal connection program (such
as the super terminal with the parameters of 9600, 8, N, 1, None flow control) to change the Administrator’s
Password.

4
1.3 Specification
1.3.1 Hardware Specification
y Dimensions: 14.9cm(W) x 4.7cm(H) x 24.8cm(L)
y Weight: 470g
y Power: DC12V/1A 5.5ĭ
y Operating Temperature: 5-45°C
y 5 Fast Ethernet RJ 45 Connectors
y 1 Console Port
y Supports 10/100Mbps Full / Half Duplex Transfer Speed
1.3.2 Technical Specification
y Standards
This system supports IEEE 802.1x, 802.11b and 802.11g
y Networking
WAN interface supports Static IP, DHCP client, and PPPoE client
Interface supports static IP
Supports NAT mode and router mode
Built-in DHCP server
Built-in NTP client
Supports Redirect of network data
Supports IPSec (ESP), PPTP and H.323 pass through (under NAT)
Customizable static routing table
Supports Virtual Server
Supports DMZ Server
Supports machine operation status monitoring and reporting system
Supports roaming across networks
y Firewall
Provides Several DoS protection mechanisms
Customizable packet filtering rules
Customizable walled garden (free surfing area)
y User Management
Supports at least 500 on-line users concurrently
Supports Local, POP3 (+SSL), RADIUS, and LDAP LAN1/LAN2 mechanisms
Supports LAN1& LAN2 mechanisms simultaneously
Can choose MAC address locking for built-in user database
Can set the time for the user to log in to the system
Can set the user’s idle time

5
Can specify the MAC addresses to enter the managed network without authentication
Can specify the IP addresses to enter the managed network without authentication
Supports the setting to pass or block all the connections when the WAN interface failed
Supports web-based login
Supports several friendly logout methods
Supports RADIUS accounting protocol to generate the billing record on RADIUS server
y Administration
Provides online status monitoring and history traffic
Supports SSL encrypted web administration interface and user login interface
Customizable user login & logout web interface
Customizable redirect after users are successfully authenticated during login & logout
Supports Console management interface
Supports SSH remote administration interface
Supports web-based administration interface
Supports SNMP v2
Supports user’s bandwidth restriction
Supports remote firmware upgrade
y Accounting
Supports built-in user database and RADIUS accounting

6
2. Installation
2.1 System Requirements
y Standard 10/100BaseT including five network cables with RJ-45 connectors
y All PCs need to install the TCP/IP network protocol
2.2 Installation Steps
Please follow the following steps to install WIAS-1000G :
1. Connect the DC power adapter to the Power Connector on the rear panel. Plug the other end of the power
adapter to a socket. If the connection is lived, the Power LED will be on.
2. Connect the straight-through Ethernet cable to the WAN Port on the rear panel. Connect the other end of the
Ethernet cable to ADSL modem, cable modem or a switch/hub of the internal network. If the connection is lived,

7
the WAN LED will be on.
3. Connect a cross over Ethernet cable to the LAN3/LAN4 Port on the rear panel. Connect the other end of the
Ethernet cable to a client’s PC. The LED of LAN3/LAN4 should be on to indicate a proper connection. All users
connected to the LAN3 or LAN4 Port may access the network without authentication.
4. Connect a straight-through Ethernet cable to the LAN1/LAN2 Port on the rear panel. Connect the other end of
the Ethernet cable to an AP or switch. The LED of LAN1/LAN2 should be on to indicate a proper connection. All
users connected to the LAN1 or LAN2 Port must be authenticated before accessing the network.
3. Configuration
3.1 System Concept
WIAS-1000G is responsible for user authentication, authorization and management. The user account information is
stored in the local database, or a specified external databases server. The user authentication is processed via the
SSL encrypted web interface. This interface is compatible to most desktop devices and the palm computers. The
following figure for example, WIAS-1000G is set to control a part of the company’s intranet. The whole managed
network includes the cable network users and the wireless network users.

8
The user located at the managed network is unable to access the network resource without permission. The user
attempt to connect a website with a browser, such as Internet Explorer, will be redirected to the user log in webpage.
The user must enter a username and password to log in on the LAN1/LAN2. After being authenticated, the user will
gain the proper access rights.
After the hardware of WIAS-1000G is installed completely, the system is ready to configure in the following sections.
We will guide you step by step to set up the system consist of a single WIAS-1000G to manage the network.
3.2 LAN Configuration on PC
After WIAS-1000G is installed, the following must be set up for the PC within the LAN1/LAN2 and the LAN3/LAN4
sections:
y Internet Connection Setup
y TCP/IP Network Setup

9
3.2.1 Internet Connection Setup
y Windows 9x/2000
1. Choose Start > Control Panel > Internet Options.
2. Choose the “Connections” label, and then click
“Setup”.
3. Choose “I want to set up my Internet connection
manually, or I want to connect through a local
Area network (LAN)”, and then click “Next”.

10
4. Choose “I connect through a local area network
(LAN)” and click “Next”.
5. DO NOT choose any option in the following LAN
window for Internet configuration, and just click
“Next”.
6. Choose “No”, and click “Next”.

11
7. Finally, click “Finish” to exit the Internet
Connection Wizard. Now, you have completed the
setup.
y Windows XP
1. Choose Start > Control Panel >Internet Option.
2. Choose the “Connections” label, and then click
“Setup”.

12
3. Click “Next” when Welcome to the New
Connection Wizard screen appears.
4. Choose “Connect to the Internet” and then click
“Next”.
5. Choose “Set up my connection manually”, and
then click “Next”.

13
6. Choose “Connect using a broadband
connection that is always on”, and then click
“Next”.
7. Finally, click “Finish” to exit the Connection
Wizard. Now, you have completed the setup.
3.2.2 TCP/IP Network Setup
If the operating system of your PC is Windows 95/98/ME/2000/XP, then you just need to keep the default setting
without any change to directly start/restart the system. With the factory default settings, during the process of
starting the system, WIAS-1000G with DHCP function will automatically assign an appropriate IP address and
related information for each PC. If the Windows operating system is not a server version, the default settings of the
TCP/IP will regard the PC as a DHCP client, and this function is called “Obtain an IP address automatically”.
If you want to check the TCP/IP setup or to use the static IP in the LAN1/LAN2 or LAN3/LAN4 section, please follow
the following steps.
y Check the TCP/IP Setup of Window 9x/ME