Planet WSG-404 User manual

Hot Spot
Wireless Subscriber Gateway
WSG-404
User’s Manual

WSG-404 User Guide
2
Copyright
Copyright (C) 2007 PLANET Technology Corp. All rights reserved.
The products and programs described in this User’s Manual are licensed products of PLANET
Technology, This User’s Manual contains proprietary information protected by copyright, and this
User’s Manual and all accompanying hardware, software, and documentation are copyrighted.
No part of this User’s Manual may be copied, photocopied, reproduced, translated, or reduced to
any electronic medium or machine-readable form by any means by electronic or mechanical.
Including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, and without the prior express written permission of
PLANET Technology.
Disclaimer
PLANET Technology does not warrant that the hardware will work properly in all environments and
applications, and makes no warranty and representation, either implied or expressed, with respect
to the quality, performance, merchantability, or fitness for a particular purpose.
PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims
liability for any inaccuracies or omissions that may have occurred.
Information in this User’s Manual is subject to change without notice and does not represent a
commitment on the part of PLANET. PLANET assumes no responsibility for any inaccuracies that
may be contained in this User’s Manual. PLANET makes no commitment to update or keep current
the information in this User’s Manual, and reserves the right to make improvements to this User’s
Manual and/or to the products described in this User’s Manual, at any time without notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would
appreciate your comments and suggestions.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the Instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which
case the user will be required to correct the interference at his own expense.
CE mark Warning
The is a class B device, In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
Trademarks
The PLANET logo is a trademark of PLANET Technology. This documentation may refer to
numerous hardware and software products by their trade names. In most, if not all cases, these
designations are claimed as trademarks or registered trademarks by their respective companies.
WEEE Warning To avoid the potential effects on the environment and human health as a result of
the presence of hazardous substances in electrical and electronic equipment, end
users of electrical and electronic equipment should understand the meaning of the
crossed-out wheeled bin symbol. Do not dispose of WEEE as unsorted municipal
waste and have to collect such WEEE separately.
Revision
User’s Manual for PLANET Hot Spot Wireless Subscriber Gateway
Model: WSG-404
Rev: 1.0
Part No.: EM-WSG404v1 (2081-B41070-000)

Wireless Subscriber Gateway
3
Table of Contents
1. Introduction..............................................................................................................................5
1.1 Package Contents...............................................................................................................5
1.2 Features .............................................................................................................................6
1.3 Precautions.........................................................................................................................7
1.4 Outlook ...............................................................................................................................7
1.4.1 Top Panel....................................................................................................................7
1.4.2 Rear Panel..................................................................................................................8
1.5 Technical Specifications ....................................................................................................10
1.5.1 Hardware Specifications ...........................................................................................10
1.5.2 Software Specifications.............................................................................................11
2. Installation..............................................................................................................................13
2.1 Installation Requirements..................................................................................................13
2.1.1 System Requirements...............................................................................................13
2.1.2 ISP Requirements.....................................................................................................13
2.1.3 Your PC Requirements .............................................................................................14
2.2 Hardware Connection and Installation...............................................................................15
2.2.1 Physical Installation ..................................................................................................15
2.3 Software Configuration......................................................................................................16
2.3.1 Quick Configuration ..................................................................................................16
2.3.2 External Network Access ..........................................................................................24
3. Web Interface Configuration .................................................................................................27
3.1 System Configuration........................................................................................................28
3.1.1 Configuration Wizard ................................................................................................28
3.1.2 System Information...................................................................................................29
3.1.3 WAN Configuration ...................................................................................................31
3.1.4 LAN1 & LAN2 Configuration .....................................................................................33
3.1.5 LAN3 & LAN4 Configuration .....................................................................................36
3.1.6 Wireless Configuration..............................................................................................39
3.2 User Authentication...........................................................................................................45
3.2.1 Authentication Configuration .....................................................................................45
3.2.1.1 Authentication Method - Local User Setting ...........................................................66
3.2.1.2 Authentication Method - POP3...............................................................................71
3.2.1.3 Authentication Method - RADIUS...........................................................................72
3.2.1.4 Authentication Method - LDAP...............................................................................74
3.2.1.5 Authentication Method - NTDomain .......................................................................75
3.2.2 Black List Configuration ............................................................................................76
3.2.3 Policy Configuration..................................................................................................78
3.2.4 Guest User Configuration..........................................................................................82
3.2.5 Additional Configuration............................................................................................83
3.3 Network Configuration ....................................................................................................100
3.3.1 Network Address Translate .....................................................................................100

WSG-404 User Guide
4
3.3.2 Privilege Configuration............................................................................................104
3.3.3 Monitor IP Configuration .........................................................................................105
3.3.4 Walled Garden List .................................................................................................107
3.3.5 Proxy Server Properties..........................................................................................108
3.3.6 Dynamic DNS .........................................................................................................109
3.4 Utilities............................................................................................................................110
3.4.1 Change Password ..................................................................................................110
3.4.2 Backup/Restore Settings ........................................................................................112
3.4.3 Firmware Upgrade..................................................................................................113
3.4.4 Restart....................................................................................................................113
3.5 Status..............................................................................................................................114
3.5.1 System Status.........................................................................................................114
3.5.2 Interface Status.......................................................................................................116
3.5.3 Concurrent Users....................................................................................................118
3.5.4 Traffic History..........................................................................................................118
3.5.5 Notify Configuration ................................................................................................120
3.6 Help ................................................................................................................................121
4. Appendix A --- Console Interface ........................................................................................122
5. Appendix B --- Configuration on Authorize.Net .................................................................125
6. Appendix C --- Proxy Setting for Hotspot...........................................................................130
7. Appendix D --- Proxy Setting for Enterprise.......................................................................133
8. Appendix E --- Disclaimer for On-Demand Users ..............................................................138

Wireless Subscriber Gateway
5
1. Introduction
The PLANET Wireless Subscriber Gateway WSG-404 is a compact intelligent gateway integrated
with a four-port port-based switch. It provides Plug & Play Internet access, advanced security and
network management.
The WSG-404 is designed for service providers, system integrator or hotspot venue operator
without backend-RADIUS-Server to have integrated solution for rapid deployment, which can start
hotspot service quickly and easily and enhance service performance.
The WSG-404 is an ideal solution for hotel lobbies, coffee bars, airport lounges, conference
facilities and other sites that commonly host business travelers, and offers instant high-speed
Internet connections. With its IP Plug and Play technology, it accepts any client configuration login,
when client open browser the WSG-404 immediately recognizes new end-user and redirects their
browser to customized Web pages. There’s no need for end-user to change any of their default
network (Static IP), e-mail (SMTP Server behind firewall), or browser settings (HTTP Proxy) or load
any special software to access hotspot service. It’s completely Plug’ Play with any browser.
1.1 Package Contents
Please inspect your package. The following items should be included in the WSG-404 packages:
1x WSG-404 unit
1x Power Adapter
1x User’s Manual CD
1x Quick Installation Guide
1x RJ-45 Cable
1x RS-232
2x Antenna
If any of the above items are damaged or missing, please contact your dealer immediately.
Optional Product that can co-work with WSG-404:
WSG-ACG4 Account Generator Printer
1x Power Adapter
1x RJ-11 Cable
1x Quick Installation Guide
This Account Generator is an optional device that can work with WSG-404. With this Account
Generator it is much easier for operator to create the accounts for any guests. Without the Account
Generator, all the account generation can be done through Administrator’s Web management page.
The demand of this Account Generator can vary on the install site

WSG-404 User Guide
6
1.2 Features
 Ideal Hot Spot solution
Via the integrated 802.11g wireless interface, mobile users can establish high speed Internet
access without any configuration.
 Zero configuration (Plug-n-Play) Internet access
WSG-404 translates proper IP address information for Internet access, all IP configurations,
either DHCP, Private IP or Static IP information will be turned into Internet-ready
configurations. Subscribers won’t feel the difference, and no need to face to the
inconvenience of IP reconfigurations.
 Built-in proprietary AAA mechanism and billing system
PLANET WSG-404 integrates Web-based Authentication (including subscriber SSL logon
page), selective Web-based Accounting, and proprietary billing mechanism, which can help
you to prepare a billing mechanism in a very short time and bring most convenience, the least
efforts for billing applications.
 RADIUS AAA support
WSG-404 provides standard based Radius Client to communicate with any standard based
Radius server, in order to support AAA (Authentication, Authorization and Accounting).
 Exclusive Printer Accounting (Optional)
Machine operators may customize the printout information for different billing application.
 Security and Firewall
With built-in 64/128-bit RC4 WEP Encryption, VLAN Security for Wireless, subscriber SSL
Login Page / Admin Page, VPN (IPSec/PPTP) Pass through…various security features,
PLANET WSG-404 bring you an ease-of-use and most comfort safe Internet access
environment.
 Ease-of-Use and Management
The built-in web management interface in WSG-404 brings most convenience to system
administrators or machine operators while configuring machine or setting up subscriber
privileges in movements. With time increments, clerks or machine operators may print out,
billing and other user information with time increments are conveniently printed on the
button-operated printer included with the PLANET WSG-404. Time increments may be
compiled simply by pressing the printer button multiple times. No computers or complex
back-end subscriber management systems are required for deployment.
 Virtual Server & DMZ Capability
The standard and user-defined Virtual server gives the WSG-404 has the most flexibility to
share local resources like Email, FTP or HTTP servers to the Internet in a more secure way.
The DMZ (De-Militarized Zone) capability helps LAN users to act like an independent Internet
node that communicates to the Internet in both directions while maintaining security for LAN
users.
Note:
The "PnP" Function only can be used with TCP/IP-based Network.

Wireless Subscriber Gateway
7
1.3 Precautions
Never remove or open the cover. You may suffer serious injury if you touch these parts.
Never install the system in the wet locations.
Use only the original fitting AC power adapter otherwise there is a danger of severe electrical
shock.
Avoid exposing the WSG-404 to direct sunlight or another heat source.
Choose a well-ventilated area to position your WSG-404.
1.4 Outlook
Figure 1-1 WSG-404 Outlook
1.4.1 Top Panel
The top panel of the WSG-404 is shown below.
Figure 1-2 WSG-404 Top Panel

WSG-404 User Guide
8
LEDs Indication
LED Color Status Description
PWR Green
Off
On The device is turned off The device is turned on
WLAN Green
Off
On
Flashing
The wireless is not ready
The wireless is ready
The wireless data transmission
WAN Green
Off
On
Flashing
The WAN is not connected
The WAN has a successful (10/100Mbps)
Ethernet connection
The WAN is sending or receiving packet
LAN
1~4 Green
Off
On
Flashing
The LAN is not connected
The LAN has a successful (10/100Mbps)
Ethernet connection
The LAN is sending or receiving packet
Note:
1. Use only the bundled DC adapter for the power system, other power adapter could damage the
device permantly.
2. During the firmware upgrade process, please do not power off the device, otherwise it could
damage the device permantly.
1.4.2 Rear Panel
The rear panel of the WSG-404 is shown below.
12V DC
RESET
WAN ConsoleLAN
1 2 3 4

Figure 1-4 WSG-404 Rear Panel
Port Indication
Powe
r Reset
WAN LAN 1 LAN 2 LAN 3 LAN 4
Consol
e
Printed
on
Housin
g
12V
DC RESE T WAN 1 2 3 4 Consol e
Interfac
e Power
Button RJ-45 RJ-45 RJ-45 RJ-45 RJ-45 RJ-11

Wireless Subscriber Gateway
9
POWER:
The power adaptor plugs here.
RESET:
Used for restarting the system.
WAN:
One RJ-45 port is used for connecting xDSL or Cable Mode to the Internet/Intranet.
LAN1~2:
Used for Connecting to the public LAN. It can be chosen to require authentication to access
network resource and the Internet.
LAN3~4:
Used for Connecting to the private LAN. Authentication is not required to access the network
resource from here.
Console:
Used for configuring the system via Hyper Terminal or connecting to the WSG-ACG4 (Ticket
Printer).

WSG-404 User Guide
10
1.5 Technical Specifications
1.5.1 Hardware Specifications
LAN 4 x RJ45 (10Base-T/100Base-TX, Auto-Negotiation, Auto MDI/MDI-X)
1 x 802.11g wireless AP interface
WAN 1 x RJ45 (10Base-T/100Base-TX, Auto-Negotiation)
Ports
Console 1 x RJ11
Wireless Data rate Up to 54Mbps with Auto fall back with 802.11b
Wireless Encryption WEP 64/128 bit
WPA with TKIP
Wireless Authentication IEEE 802.1x (EAP-MD5, EAP-TLS, CHAP, PEAP)
WPA-PSK
Wireless Antenna Type 2dBi (Max) Dual detachable diversity antenna with reverse SMA
Wireless Operating Range Open Space: 100~300m
Indoors: 35~100m
LED Indicators 1 x POWER LED
1 x WLAN Link/Activity LED
1 x WAN Link/Activity LED
4 x LAN Link/Activity LEDs
Environmental Operating
Temperature: 5 ~ 45 °C
Relative Humidity: 10 ~ 80 % (non-condensing)
Storage
Temperature: - 25 ~ 55 °C
Relative Humidity: 5 ~ 90 % (non-condensing)
Electrical External Power Adaptor
Power Input: 12V DC, 1.5A
Regulatory Compliance FCC part 15 Class B
CE Mark Class B
Dimension 230 x 150 x 45.5 mm (W x D x H)
Weight 1.4 Kg

Wireless Subscriber Gateway
11
1.5.2 Software Specifications
Network IEEE802.3 10BaseT Ethernet
IEEE802.3u 100BaseTX Fast Ethernet
IEEE802.11b 11Mbps
IEEE802.11g 54Mbps
Supports 50 Simultaneous Users
IP Plug and Play (IP PnP)
Supports External HTTP Proxy Servers; Built-in Proxy Server
WEP Data Encryption 64/128 bit
WPA with TKIP; Radius
SMTP Server Redirection
DHCP Server
DHCP Relay
NAT
IP Routing
Dynamic DNS
Walled Garden: Up to 20
Session Number: Max. 16384
Supports NTP (Network Time Protocol)
WAN Connection Type DHCP WAN Client
PPPoE WAN Client
PPTP WAN Client
Static IP WAN Client
AAA / Billing Built-in Authentication
Exclusive Printer Accounting without PC operating
Web-based Login Page Authentication
Web-based Accounting
Flexible Billing Profiles and Price Plan
Flexible Billing Mechanism
Flexible Time Mechanism (Time to Finish and Accumulation)
External DB25 Support (WSG-ACG4)
RADIUS Authentication
Credit Card Support (Authorize.net, *PayPal)
10 Customizable Billing Profile
Remaining Credit Reminder
Accumulation Billing
Account log
*Future feature
Security Layer 2 Isolation
SSL Login Page
SSL Administration
VPN Pass through (IPSec/PPTP)
Pass through Destination IP/URL
Pass through Source IP/MAC
Restricted Destination Filtering IP/URL
Share LAN Resources
Customize SSL Certificate
DoS Attack Protection
IEEE 802.1x (EAP-MD5, EAP-TLS, CHAP, PEAP)
Management Supports Multiple Authentication Methods (Local and On-
demand, LDAP,
POP3(s), RADIUS, NT Domain)

WSG-404 User Guide
12
Supports Multiple Logins with One Single Account
SSL Protected Login Portal Page
Administrator/Manager/Operator Management Access
Local Account: Max. 500
Supports Guest Accounts: Up to 10
Customize Login/Logout Page
Remote Browser-based Configuration and Management
Policy-based Access Control
IP-based/MAC-based Privilege List
Friendly Notification E-mail
Backup/Restore/Factory Default Setting
Remote Firmware Upgrade
System Information Table
Per-user Traffic History Log
Support External Syslog Server
Billing Report Summary
Bandwidth Control
Session Idle Timer
Session/Account Expiration Control
Secure Remote via PPTP VPN
Supports SNMP V2
SSL Certificate Upload

Wireless Subscriber Gateway
13
2. Installation
The followings are instructions for setting up the WSG-404. Refer to the illustration and follow the
simple steps below to quickly install your WSG-404.
2.1 Installation Requirements
Before installing the WSG-404, make sure your network meets the following requirements.
2.1.1 System Requirements
Cable modem or DSL/ADSL modem.
Network cables: Use standard 10/100Base-TX network (UTP) cables with RJ45 connectors.
Subscriber PC installed with Wireless adapter that complied with 802.11b, or 802.11g.
Workstations of subscribers running Windows 95/98/ME, NT4.0, 2000/XP, MAC OS9 or later,
Linux, UNIX or other platform compatible with TCP/IP protocols.
<Optional> Account generator (Model No.: WSG-ACG4).
2.1.2 ISP Requirements
Verify whether your ISP use fixed or dynamic IP. If it is a fixed IP, be sure to get the IP from your ISP.
For dynamic IP, which is mostly used, the PC will get the IP automatically whenever it hooks up on
the modem.
Dynamic IP
Dynamic IP Setting
Fixed IP
Your fixed IP address for the WSG-404
Your subnet mask for the WSG-404
Your default gateway IP address
Your DNS IP address
PPPoE
Your user name from your ISP
Your password from your ISP

WSG-404 User Guide
14
PPTP
PPTP Server IP Address from your ISP
PPTP Local IP address from your ISP
PPTP Local IP subnet mask from your ISP
Your user name from your ISP
Your password from your ISP
2.1.3 Your PC Requirements
The Static IP settings for the PC
Your PC’s fixed IP address
Your PC’s subnet mask
Your PC’s default gateway IP address
Your PC’s primary DNS IP address
Note:
1. The gateway’s default IP address setting is “LAN1&LAN2: 192.168.2.254, LAN3&LAN4:
192.168.1.254”
2. The gateway’s default subnet mask setting is “255.255.255.0”
The Dynamic IP settings for the PC
We recommend that you leave your IP settings as automatically assigned. By default, the
WSG-404 is a DHCP server, and it will give your PC the necessary IP settings.
Note:
Before turn on the WSG-404, make sure there is no other DHCP server in the LAN network;
otherwise it will influence the whole network operation.

Wireless Subscriber Gateway
15
2.2 Hardware Connection and Installation
2.2.1 Physical Installation
Physical connection of WSG-404
1. Ensure the WSG-404 and the Cable/DSL modem are powered OFF before commencing. Leave
your Cable/DSL modem connected to its wall socket (phone line or cable input).
2. Use Ethernet cables to connect to the LAN1/LAN2 port on the rear panel. Connect the other
end of the Ethernet cable to an AP or Switch. (Note: Authentication is required for the clients to
access the network via LAN1/LAN2 port. The LAN port with authentication function is referred
to as Public LAN).
3. Use Ethernet cables to connect to the LAN3/LAN4 port on the rear panel. Connect the other
end of the Ethernet cable to a PC. (Note: Authentication is NOT required for the clients to
access the network via LAN3/LAN4 port. The LAN port with authentication function is referred
to as Private LAN).
4. Connect your Cable/DSL Modem to the WAN port on the rear panel. Use the cable supplied
with your Cable/DSL modem. If no cable was supplied with your modem, use a standard
network cable. Please make sure the connection is established (LED is on).
5. Connect the Power Adapter. Use only the unit provided.
6. Power ON. The PWR LED should stay on (If your network is connected, the WAN/WLAN/LAN
LED will be on, too).
7. Power on the PC that connected to the WSG-404.

WSG-404 User Guide
16
2.3 Software Configuration
2.3.1 Quick Configuration
There are two ways to configure the system: using Configuration Wizard or change the setting by
demands manually. The Configuration Wizard has 7 steps providing a simple and easy way to guide
you through the setup of PLANET WSG-404. Follow the procedures and instructions given by the
Wizard to enter the required information step by step. After saving and restarting PLANET
WSG-404, it is ready to use. There will be 7 steps as listed below:
1. Change Admin’s Password
2. Choose System’s Time Zone
3. Set System Information
4. Select the Connection Type for WAN Port
5. Set Authentication Methods
6. Set Wireless – Access Point Connection
7. Save and Restart PLANET WSG-404
To access the web management interface, connect the PC and WSG-404 in advance via the Private
Port of WSG-404. Then, launch the web browser and enter the IP address of the gateway for that
port in the address field then pres Enter. Default IP address of the default gateway of the Private
Port is https://192.168.2.254 (Note: https is used for a secured connection).
The administrator login page will appear. Enter default username “admin” & default password
“admin” in the User Name and Password fields. Click Enter to login.

Wireless Subscriber Gateway
17
After successfully logging into WSG-404, a web management interface with a welcome message
will appear.
Click System Configuration to the System Configuration screen and run the Configuration
Wizard to help you complete the configuration.

WSG-404 User Guide
18
Click Run Wizard to begin the Configuration Wizard
After clicking Run Wizard, the Configuration Wizard will appear in a pop-up browser window.
Click “Next” to begin.
Step 1: Change Admin’s Password
Enter a new password for the admin account and retype it in the verify password field (Twenty
characters maximum and no spaces allowed).
Click “Next” to continue.

Wireless Subscriber Gateway
19
Step 2: Choose System’s Time Zone
Select a proper time zone via the drop-down menu.
Click “Next” to continue.
Step 3: Set System Information
Home Page: Enter the URL that users should be initially directed to when successfully
authenticated to the network.
NTP Server: Enter the URL of external time server for WSG-404 time synchronization or use the
default server.
DNS Server: Enter a DNS Server provided by your ISP. Contact the ISP if the DNS IP Address is
unknown.
Click “Next” to continue.

WSG-404 User Guide
20
Step 4: Select the Connection Type for WAN Port
Three are three types of WAN port to select from: Static IP Address, Dynamic IP Address and
PPPoE Client. Select a proper Internet connection type.
Click “Next” to continue.
Step 4(Cont): Set Static IP Address Information
Enter the IP Address, Subnet Mask and Default Gateway as the examples provided by the ISP.
Click “Next” to continue.