SMC Networks EliteConnect SMCWHSG44-G User manual

SMCWHSG44-G

1

2
Copyright
Information furnished by SMC Networks, Inc. (SMC) is believed to be accu-
rate and reliable. How-ever, no responsibility is assumed by SMC for its use,
nor for any infringements of patents or other rights of third parties which
may result from its use. No license is granted by implication or otherwise
under any patent or patent rights of SMC. SMC reserves the right to change
specifications at any time without notice.
Copyright © 2004 by
SMC Networks, Inc.
38 Tesla
Irvine, California 92618
All rights reserved.
Trademarks
SMC is a registered trademark; and EliteConnect is a trademark of SMC
Networks. Other product and company names are trademarks or registered
trademarks of their respective holders.

3
LIMITED WARRANTY
Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products
to be free from defects in workmanship and materials, under normal use and
service, for the applicable warranty term. All SMC products carry a standard
90-day limited warranty from the date of purchase from SMC or its Authorized
Reseller. SMC may, at its own discretion, repair or replace any product not
operating as warranted with a similar or functionally equivalent product, during
the applicable warranty term. SMC will endeavor to repair or replace any product
returned under warranty within 30 days of receipt of the product. The standard
limited warranty can be upgraded to a Limited Lifetime* warranty by registering
new products within 30 days of purchase from SMC or its Authorized Reseller.
Registration can be accomplished via the enclosed product registration card
or online via the SMC Web site. Failure to register will not affect the standard
limited warranty. The Limited Lifetime warranty covers a product during the
Life of that Product, which is defined as the period of time during which the
product is an “Active” SMC product. A product is considered to be “Active”
while it is listed on the current SMC price list. As new technologies emerge,
older technologies become obsolete and SMC will, at its discretion, replace an
older product in its product line with one that incorporates these newer
technologies. At that point, the obsolete product is discontinued and is no
longer an “Active” SMC product. A list of discontinued products with their
respective dates of discontinuance can be found at:
http://www.smc.com/index.cfm?action=customer_service_warranty.
All products that are replaced become the property of SMC. Replacement
products may be either new or reconditioned. Any replaced or repaired product
carries either a 30-day limited warranty or the remainder of the initial warranty,
whichever is longer. SMC is not responsible for any custom software or
firmware, configuration information, or memory data of Customer contained
in, stored on, or integrated with any products returned to SMC pursuant to any
warranty. Products returned to SMC should have any customer-installed
accessory or add-on components, such as expansion modules, removed prior
to returning the product for replacement. SMC is not responsible for these
items if they are returned with the product. Customers must contact SMC for
a Return Material Authorization number prior to returning any product to
SMC. Proof of purchase may be required. Any product returned to SMC without a
valid Return Material Authorization (RMA) number clearly marked on the outside
of the package will be returned to customer at customer's expense. For warranty
claims within North America, please call our toll-free customer support number
at [phone].
Customers are responsible for all shipping charges from their facility to SMC.
SMC is responsible for return shipping charges from SMC to customer.

WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS
WARRANTED ABOVE, CUSTOMER'S SOLE REMEDY SHALL BE REPAIR OR
REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC'S OPTION. THE
FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN
LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED,
EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE,
INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. SMC NEITHER ASSUMES NOR
AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY
IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF
ITS PRODUCTS. SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS
TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE
PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER'S OR ANY
THIRD PERSON'S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING,
UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND
THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR
OTHER HAZARD. LIMITATION OF LIABILITY: IN NO EVENT, WHETHER BASED
IN CONTRACT OR TORT (INCLUDING NEGLIGENCE), SHALL SMC BE LIABLE
FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAM-
AGES OF ANY KIND, OR FOR LOSS OF REVENUE, LOSS OF BUSINESS, OR
OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE
SALE, INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE, OR
INTERRUPTION OF ITS PRODUCTS, EVEN IF SMC OR ITS AUTHORIZED
RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES
OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR
CONSUMER PRODUCTS, SO THE ABOVE LIMITATIONS AND EXCLUSIONS
MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL
RIGHTS, WHICH MAY VARY FROM STATE TO STATE. NOTHING IN THIS
WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS.
* SMC will provide warranty service for one year following discontinuance
from the active SMC price list. Under the limited lifetime warranty, internal
and external power supplies, fans, and cables are covered by a standard
one-year warranty from date of purchase.
SMC Networks, Inc.
38 Tesla
Irvine, CA 92618
Warranty in EMEA and Asia Pacific:
For details regarding warranty in EMEA and Asia Pacific, please contact your
country sales representative. All contact information can be found at
www.smc.com
4

5
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are
designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiated radio
frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one of
the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: To assure continued compliance, (example - use only shielded
interface cables when connecting to computer or peripheral devices). Any
changes or modifications not expressly approved by the party responsible
for compliance could void the user's authority to operate this equipment.
This transmitter must not be co-located or operating in conjunction with
any other antenna or transmitter.
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated
with minimum distance 20 cm between the radiator & your body.
This device complies with Part 15 of the FCC Rules. Operation is subject to
the following two conditions: (1) This device may not cause harmful interference,
and (2) this device must accept any interference received, including interference
that may cause undesired operation.
Industry Canada - Class B
This digital apparatus does not exceed the Class B limits for radio noise
emissions from digital apparatus as set out in the interference-causing
equipment standard entitled “Digital Apparatus,” ICES-003 of Industry Canada.
Cet appareil numerique respecte les limites de bruits radioelectriques
applicables aux appareils umeriques de Classe B prescrites dans la norme
sur le material brouilleur: “Appareils Numeriques,” NMB-003 edictee par
l'Industrie.

6
EC Conformance Declaration
SMC contact for these products in Europe is:
SMC Networks Spain S.L.,
Edificio Conata II,
Calle Fructuós Gelabert 6-8, 2o, 4a,
08970 - Sant Joan Despí,
Barcelona, Spain.
Signed and dated Copy of the Declaration of Conformity can be found in the
product section of www.smc-europe.com
This RF product complies with R&TTE Directive 99/5/EC. For the evaluation
of the compliance with this Directive, the following standards were applied:
• Electromagnetic compatibility and radio spectrum matters (ERM)
EN300 328-1 (2001-12)
EN300 328-2 (2001-12)
• Electromagnetic Compatibility (EMC) Standard for radio equipment and services
EN301 489-1 V1.4.1 : 2002
EN301 489-17 V1.2.1 : 2002
•SafetyTest
EN60950-1 : 2001
The conformity assesment procedure referred to in Article 10 and detailed in
Annex IV of the Directive 1999/5/EC has been followed related to Articles
3.2 with the involvement of the following Notified Body:
BTS-ETZ Certification GmBH, Storkkower Strasser 38c, D-15562,
Reichenwalde B, Berlin, Germany
Identification Mark
Countries of Operation & Conditions of Use in the European Community
This device is intended to be operated in all countries of the European
Community. Requirements for indoor vs. outdoor operation, license requirements
and allowed channels of operation apply in some countries as described below:
Note: The user must use the configuration utility provided with this product
to ensure the channels of operation are in conformance with the spectrum
usage rules for European Community countries as described below.
• This device requires that the user or installer properly enter the current
country of operation in the command line interface as described in the
user guide, before operating this device.
• This device will automatically limit the allowable channels determined by
the current country of operation. Incorrectly entering the country of
operation may result in illegal operation and may cause harmful interference

to other system. The user is obligated to ensure the device is operating
according to the channel limitations, indoor/outdoor restrictions and
license requirements for each European Community country as described
in this document.
• This device may be operated indoors or outdoors in all countries of the
European Community using the 2.4 GHz band: Channels 1 - 13, except
where noted below.
• In Italy the end-user must apply for a license from the national spectrum
authority to operate this device outdoors.
• In Belgium outdoor operation is only permitted using the 2.46 - 2.4835 GHz
band: Channel 13.
• In France outdoor operation is only permitted using the 2.4 - 2.454 GHz
band: Channels 1 - 7
Notified Countries for intended use:
Austria, Belgium, Denmark, Finland, France, Germany, Italy, Luxembourg,
Netherlands, Norway, Spain, Sweden Switzerland, United Kingdom, Portugal,
Greece, Ireland, Iceland
Safety Compliance
Power Cord Safety
Please read the following safety information carefully before installing the switch:
WARNING: Installation and removal of the unit must be carried out by
qualified personnel only.
• The unit must be connected to an earthed (grounded) outlet to comply
with international safety standards.
• Do not connect the unit to an A.C. outlet (power supply) without an earth
(ground) connection.
• The appliance coupler (the connector to the unit and not the wall plug) must
have a configuration for mating with an EN 60320/IEC 320 appliance inlet.
• The socket outlet must be near to the unit and easily accessible. You can
only remove power from the unit by disconnecting the power cord from
the outlet.
• This unit operates under SELV (Safety Extra Low Voltage) conditions
according to IEC 60950. The conditions are only maintained if the
equipment to which it is connected also operates under SELV conditions.
France and Peru only
This unit cannot be powered from IT supplies. If your supplies are of IT type,
this unit must be powered by 230 V (2P+T) via an isolation transformer ratio
1:1, with the secondary connection point labelled Neutral, connected directly
to earth (ground).
† Impédance à la terre
7

8
Important! Before making connections, make sure you have the correct cord
set. Check it (read the label on the cable) against the following:
Power Cord Set
U.S.A. and Canada The cord set must be UL-approved and CSA certified.
The minimum specifications for the flexible cord
are: - No. 18 AWG - not longer than 2 meters, or 16
AWG. - Type SV or SJ - 3-conductor
The cord set must have a rated current capacity
of at least 10 A
The attachment plug must be an earth-grounding
type with NEMA 5-15P (15 A, 125 V) or NEMA 6-
15P (15 A, 250 V) configuration.
Denmark The supply plug must comply with Section 107-2-
D1, Standard DK2-1a or DK2-5a.
Switzerland The supply plug must comply with SEV/ASE 1011.
U.K. The supply plug must comply with BS1363 (3-pin
13 A) and be fitted with a 5 A fuse which complies
with BS1362.
The mains cord must be <HAR> or <BASEC>
marked and be of type HO3VVF3GO.75 (minimum).
Europe The supply plug must comply with CEE7/7
(“SCHUKO”).
The mains cord must be <HAR> or <BASEC>
marked and be of type HO3VVF3GO.75 (minimum).
IEC-320 receptacle.
Veuillez lire à fond l'information de la sécurité suivante avant
d'installer le Switch:
AVERTISSEMENT: L'installation et la dépose de ce groupe doivent être
confiés à un personnel qualifié.
• Ne branchez pas votre appareil sur une prise secteur (alimentation électrique)
lorsqu'il n'y a pas de connexion de mise à la terre (mise à la masse).
• Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la
masse) afin de respecter les normes internationales de sécurité.
• Le coupleur d'appareil (le connecteur du groupe et non pas la prise murale)
doit respecter une configuration qui permet un branchement sur une
entrée d'appareil EN 60320/IEC 320.

9
• La prise secteur doit se trouver à proximité de l'appareil et son accès doit
être facile. Vous ne pouvez mettre l'appareil hors circuit qu'en débranchant
son cordon électrique au niveau de cette prise.
• L'appareil fonctionne à une tension extrêmement basse de sécurité qui est
conforme à la norme IEC 60950. Ces conditions ne sont maintenues que si
l'équipement auquel il est raccordé fonctionne dans les mêmes conditions.
France et Pérou uniquement:
Ce groupe ne peut pas être alimenté par un dispositif à impédance à la terre.
Si vos alimentations sont du type impédance à la terre, ce groupe doit être
alimenté par une tension de 230 V (2 P+T) par le biais d'un transformateur
d'isolement à rapport 1:1, avec un point secondaire de connexion portant l'ap-
pellation Neutre et avec raccordement direct à la terre (masse).
Cordon électrique- Il doit être agréé dans le pays d'utilisation
Etats-Unis et Canada: Le cordon doit avoir reçu l'homologation des
UL et un certificat de la CSA.
Les spe'cifications minimales pour un cable flexible
sont AWG No. 18, ouAWG No. 16 pour un cable de
longueur infe'rieure a` 2 me'tres. - type SV ou
SJ - 3 conducteurs
Le cordon doit être en mesure d'acheminer un
courant nominal d'au moins 10 A.
La prise femelle de branchement doit être du
type à mise à la terre (mise à la masse) et
respecter la configuration NEMA 5-15P (15 A, 125 V)
ou NEMA 6-15P (15 A, 250 V).
Danemark: La prise mâle d'alimentation doit respecter la
section 107-2 D1 de la norme DK2 1a ou DK2 5a.
Cordon électrique- Il doit être agréé dans le pays d'utilisation
Suisse: La prise mâle d'alimentation doit respecter la
norme SEV/ASE 1011.
Europe La prise secteur doit être conforme aux normes
CEE 7/7 (“SCHUKO”)
LE cordon secteur doit porter la mention <HAR>
ou <BASEC> et doit être de type HO3VVF3GO.75
(minimum).

Wichtige Sicherheitshinweise (Germany)
1. Bitte lesen Sie diese Hinweise sorgfältig durch.
2. Heben Sie diese Anleitung für den späteren Gebrauch auf.
3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verwenden
Sie keine Flüs-sigoder Aerosolreiniger. Am besten eignet sich ein ange-
feuchtetes Tuch zur Reinigung.
4. Die Netzanschlu ßsteckdose soll nahe dem Gerät angebracht und leicht
zugänglich sein.
5. Das Gerät ist vor Feuchtigkeit zu schützen.
6. Bei der Aufstellung des Gerätes ist auf sicheren Stand zu achten. Ein
Kippen oder Fallen könnte Beschädigungen hervorrufen.
7. Die Belüftungsöffnungen dienen der Luftzirkulation, die das Gerät vor
Überhitzung schützt. Sorgen Sie dafür, daß diese Öffnungen nicht
abgedeckt werden.
8. Beachten Sie beim Anschluß an das Stromnetz die Anschlußwerte.
9. Verlegen Sie die Netzanschlußleitung so, daß niemand darüber fallen
kann. Es sollte auch nichts auf der Leitung abgestellt werden.
10.Alle Hinweise und Warnungen, die sich am Gerät befinden, sind zu beachten.
11. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es
vom Stromnetz trennen. Somit wird im Falle einer Überspannung eine
Beschädigung vermieden.
12.Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder
Flüssigkeiten in das Gerät gelangen. Dies könnte einen Brand bzw. elek-
trischen Schlag auslösen.
13. Öffnen sie niemals das Gerät. Das Gerät darf aus Gründen der elek-
trischen Sicherheit nur von authorisiertem Servicepersonal geöffnet werden.
14.Wenn folgende Situationen auftreten ist das Gerät vom Stromnetz zu
trennen und von einer qualifizierten Servicestelle zu überprüfen:
a. Netzkabel oder Netzstecker sind beschädigt.
b. Flüssigkeit ist in das Gerät eingedrungen.
c. Das Gerät war Feuchtigkeit ausgesetzt.
d. Wenn das Gerät nicht der Bedienungsanleitung entsprechend funktion-
iert oder Sie mit Hilfe dieser Anleitung keine Verbesserung erzielen.
e. Das Gerät ist gefallen und/oder das Gehäuse ist beschädigt.
f. Wenn das Gerät deutliche Anzeichen eines Defektes aufweist.
15. Stellen Sie sicher, daß die Stromversorgung dieses Gerätes nach der EN
60950 geprüft ist. Ausgangswerte der Stromversorgung sollten die Werte
von AC 7,5-8V, 50-60Hz nicht über oder unterschreiten sowie den mini-
malen Strom von 1A nicht unterschreiten.
10

Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000
beträgt 70dB(A) oder weniger.
Stromkabel. Dies muss von dem Land, in dem es be-nutzt wird geprüft werden:
U.S.A und Canada Der Cord muß das UL gepruft und war das CSA
beglaubigt.
Das Minimum spezifikation fur der Cord sind:
- Nu. 18 AWG - nicht mehr als 2 meter, oder 16 AWG.
- Der typ SV oder SJ
- 3-Leiter
Der Cord muß haben eine strombelast-barkeit aus
wenigstens 10 A
Dieser Stromstecker muß hat einer erdschluss mit
der typ NEMA 5-15P (15A, 125V) oder NEMA 6-15P
(15A, 250V) konfiguration.
Danemark Dieser Stromstecker muß die ebene 107-2-D1, der
standard DK2-1a oder DK2-5a Bestimmungen
einhalten.
Schweiz Dieser Stromstecker muß die SEV/ASE
1011Bestimmungen einhalten.
Europe Das Netzkabel muß vom Typ HO3VVF3GO.75
(Mindestanforderung) sein und die Aufschrift
<HAR> oder <BASEC> tragen.
Der Netzstecker muß die Norm CEE 7/7 erfüllen
(”SCHUKO”).
11

12

13
Table of Contents
1. Introduction 17
1.1. Overview 18
1.2. Features 18
1.2.1 Package Checklist 22
1.3. LED Definition 22
1.4. Rear Panel 22
1.5. Selecting a Power Supply Method 23
1.6. Mounting the SMCWHSG44-G on a Wall 24
1.7. Preparing for Configuration 25
1.7.1. Connecting the Managing Computer and the SMCWHSG44-G 25
1.7.2. Changing the TCP/IP Settings of the Managing Computer 25
1.8. Configuring the SMCWHSG44-G 26
1.8.1. Entering the Password 26
1.8.2. SETUP WIZARD Step 1: Selecting an Operational Mode 27
1.8.3. SETUP WIZARD Step 2: Configuring TCP/IP Settings 28
1.8.3.1. Router with a PPPoE-Based DSL/Cable Connection 28
1.8.3.2. Router with a DHCP-Based DSL/Cable Connection 29
1.8.3.3. Router with a Static-IP DSL/Cable Connection 29
1.8.3.4. Router with Multiple DSL/Cable Connections 30
1.8.4. SETUP WIZARD Step 3: Configuring DHCP Server Settings 31
1.8.5. SETUP WIZARD Step 4: Configuring IEEE 802.11 Settings 31
1.8.6. Configuring User Authentication Settings 32
1.8.6.1. Web Redirection 32
1.8.6.2. Local Authentication Sever 33
1.8.6.3. How to Setup the Mini-POS Ticket Printer 35
1.8.6.4. IEEE 802.1x 36
1.8.6.5 Configuring RADIUS Settings 37
1.9. Deploying the SMCWHSG44-G 38
1.10. Setting up Client Computers 38
1.10.1. Configuring IEEE 802.11-Related Settings 39

14
1.11. Confirming the Settings of the SMCWHSG44-G and Client Computers 40
2. Using Web-Based Network Manager 42
2.1. Overview 42
2.1.1. Menu Structure 42
2.1.2. Save, Save & Restart, and Cancel Commands 44
2.1.3. Home and Refresh Commands 44
2.2. Status 44
2.2.1. Associated Wireless Clients 44
2.2.2. Authenticated Users 45
2.2.3. Account Table 45
2.2.4. Session List 46
2.2.5. Managed LAN Devices 46
2.3. SYSTEM 47
2.3.1. Specifying Operational Mode 47
2.3.2. Changing Password 48
2.3.3. Managing Firmware 48
2.3.3.1. Upgrading Firmware by HTTP 49
2.3.3.2. Backing up and Restoring Configuration Settings by HTTP 49
2.3.3.3. Upgrading Firmware by TFTP 50
2.3.3.4. Backing up and Restoring Configuration Settings by TFTP 51
2.3.3.5. Resetting Configuration to Factory Defaults 53
2.3.4. Time Zone 53
2.4. Configuring TCP/IP Related Settings 53
2.4.1. Address 53
2.4.1.1. Router with a PPPoE-Based DSL/Cable Connection 53
2.4.1.2. Router with a DHCP-Based DSL/Cable Connection 54
2.4.1.3. Router with a Static-IP DSL/Cable Connection 55
2.4.1.4. Router with Multiple DSL/Cable Connections 56
2.4.2. DNS 56
2.4.2.1. DNS Proxy 56
2.4.2.2. Host Address Resolution 57
2.4.3. NAT 57

15
2.4.3.1. Basic 57
2.4.3.2. Virtual Server Mappings 58
2.4.4. DHCP Server 58
2.4.4.1. DHCP Server 59
i. Basic 59
ii. Static DHCP Mappings 59
2.4.4.2. DHCP Relay 60
2.4.5. Load Balancing 60
2.4.6. Zero Client Reconfiguration 61
2.5. Configuring IEEE 802.11-Related Settings 61
2.5.1. Wireless 61
2.5.1.1. Basic 61
2.5.1.2. Wireless Distribution System 62
2.5.2. Security 64
2.5.2.1. Basic 64
2.5.2.2. MAC-Address-Based Access Control 66
2.5.3. IEEE 802.1x/RADIUS 67
2.6. Configuring Authentication Settings 69
2.6.1. AAA 70
2.6.1.1. Basic 70
2.6.1.2. Unrestricted Clients 72
2.6.1.3. Walled Garden 73
2.6.2. RADIUS 73
2.6.2.1. Basic 73
2.6.2.2. Robustness 74
2.6.3. Authentication Session Control 75
2.6.4. Authentication Page Customization 75
2.6.4.1. Log-On, Authentication Success, and Authentication Failure Pages 75
2.7. DDNS 77
2.8. Configuring Advanced Settings 78
2.8.1. Filters and Firewall 78
2.8.1.1. Packet Filters 78

16
2.8.1.2. VLAN 79
2.8.1.3. Firewall 79
2.8.1.4. URL Filters 80
2.8.2. Management 80
2.8.2.1. Basic 80
2.8.2.2. UPnP 81
2.8.2.3. System Log 81
2.8.2.4. SNMP 82
2.8.3. Access Rules 82
2.8.4. LAN Device Management 83
Appendix A 85
A-1: Default Settings 85
A-2: LED Definitions 86
Appendix B: Troubleshooting 86
B-1: TCP/IP Setting Problems 87
B-2: Wireless Settings Problems 89
B-3: Other Problems 89
Appendix C: Distances and Data Rates 90
Appendix D: Technical Specifications 91
D-1: SMCWHSG44-G 91
D-2: SMCWHS-POS 92
D-3: Keypad 92
Glossary 93

1. Introduction
The EliteConnect 2.4GHz 802.11g Wireless Hotspot Gateway (SMCWHSG44-G)
enables VARs, WISPs and System Integrators to install secure, easy to manage
Hotspots as a one-box solution. The features of the SMCWHSG44-G support
applications that are well suited for Hotspot environments such as coffee
shops and hotel lobbies as well as small to midsized transportation hubs
such as harbors, regional airports, train stations or bus stations where
Internet Access can be an added value for guest-services.
The SMCWHSG44-G Wireless Hotspot Gateway provides up to 4 DSL/CATV
connections, so it can support out-bound load-balancing and bandwidth
aggregation. The multiple WAN connections provide fail-over and connection
back-up capability to guarantee 'always-on-line' connections.
AP/WDS: The SMCWHSG44-G comes with a built-in 2.4GHz 802.11g 54Mbps
Access Point. WDS (Wireless Distribution System) provides a standard static
bridging function to extend wireless coverage within a LAN or to join LAN
segments that are physically separated(e.g., two or more buildings). Up to 6
WDS bridge links work with AP function simultaneously.
Radius and Local Authentication: For wireless service, SMCWHSG44-G
provides 2 kinds of user authentication methods: 802.1x/RADIUS and Local
Authentication Database. Authentication, Authorization and Accounting
(AAA) services are supported via 802.1x/RADIUS client and server devices,
while the Local Authentication Database provides more flexible authentication
procedure that allows non-802.1x wireless users to be authenticated.
SMCWHSG44-G also provides the capability to allow operators or venue
owners to display their Web or advertisement contents during the user login
period. For some unauthorized wireless users who want to access the
Internet, the venue owners can also limit such users to access certain levels
of Internet resources.
Ticket Printing: The SMCWHSG44-G Hotspot Gateway supports an external
ticket printer/keypad, so a Hotspot Venue can print a ticket that shows the
clients available access time, price and a username and password to log-on
to the Internet. SMC provides the Mini-POS Ticket Printer (SMCWHS-POS - sold
separately outside the US and Canada) for ticket printing and device control.
POE: For environments where power outlets are difficult to access due to
location or distance, the SMCWHSG44-G supports 802.11af compliant Power
over Ethernet. With the application of the SMCPWR-INJ3 Power Injector,
(sold separately) the Wireless Hotspot Gateway can be powered via CAT 5
Ethernet cable.
Detachable Antenna: The flexible R-SMA detachable antennas can be
replaced with high-gain directional/omni-directional antennas to increase
wireless signal range and coverage.
17

1.1. Overview
1.2. Features
• User Authentication, Authorization, and Accounting (AAA)
•Web redirection - When an unauthenticated wireless user is trying to
access a Web page, he/she is redirected to a logon page for entering the
user name and password. Then, the user credential information is sent
to a back-end RADIUS server for authentication or via the Local
Authentication Database.
• Local pages or external pages - The SMCWHSG44-G can be configured
to use log-on, log-off, authentication success, and authentication failure
pages, which are stored internally or stored in an external Web server
maintained by the WISP. The contents of the local authentication
pages can be customized.
•Advertisement links - The log-off authentication page can be configured
to show a sequence of advertisement banners.
•Unrestricted clients - Client computers with specific IP addresses or
MAC ad-dresses can bypass the Web redirection-based access control.
• Walled garden. Some specific URLs can be accessed without authentication.
These URLs can be exploited by WISPs or Hotspot Venues for adver-
tisement purposes.
•IEEE 802.1x - If a wireless client computer supports IEEE 802.1x Port-
Based Network Access Control, the user of the computer can be authen-
ticated by the Wireless Hotspot Gateway and wireless data can be encrypted
by 802.1x EAP authentication method combined with WEP encryption.
•RADIUS client - The SMCWHSG44-G communicates with a back-end
RADIUS server for wireless user authentication, authorization, and
accounting. Authentication methods, including EAP-MD5, EAP-TLS/EAP-
TTLS, PAP, and CHAP are supported.
•Internal Database - The Wireless Hotspot Gateway also supports an
Internal Database of users so that you do not have to add an additional
Radius Server. The Internal Database supports up to 2,000 user accounts.
•Robustness - To enhance AAA integrity, the Wireless Hotspot Gateway
can be configured to notify the RADIUS server after it reboots.
•Authenticated users - Shows the status and statistics of every
authenticated user. And an authenticated user can be terminated at
any time for management purposes.
•Authentication session control - Several mechanisms are provided for
the network administrator to control user authentication session lifetimes.
• IEEE 802.11b/g Compliant
• Wireless Operation
• Access Point - The AP enables IEEE 802.11 Stations (STAs) to automatically
associate with it via the standard IEEE 802.11 association process. In
addition, the IEEE 802.11 WDS (Wireless Distribution System) technology
can be used to manually establish wireless links between two APs.
18

• 64-bit and 128-bit WEP (Wired Equivalent Privacy) - For authentication
and data encryption.
• Enable/Disable SSID broadcast - The user can enable or disable the
SSID broadcasts functionality for security reasons. When the SSID
broadcast functionality is disabled, a client computer cannot associate
with the wireless AP with an “any” network name (SSID, Service Set
ID); the correct SSID has to be specified on client computers.
• MAC-address-based control - Blocks unauthorized wireless client
computers based on MAC (Media Access Control) addresses.
• Repeater - A wireless AP can communicate with other wireless APs via
WDS (Wireless Distribution System). Therefore, the wireless AP can
wirelessly forward packets from wireless clients to another wireless
AP, and then the later wireless AP forwards the packets to the
Ethernet network.
• Wireless client isolation - Wireless-to-wireless traffic can be blocked
so that the wireless clients cannot see each other. This capability can
be used in Hotspot applications to prevent wireless hackers from
attacking other wireless user´s computers.
• Transmit power control - Transmit power of the wireless AP's RF module
can be adjusted to change RF coverage of the wireless AP.
• Associated wireless clients - Shows the status of every wireless client
that is associated with the built in wireless AP.
• Replaceable antenna - The factory-mounted antenna can be replaced
with high-gain antennas for extending range or increasing wireless
coverage to a particular area.
• Internet Connection Sharing
• DNS proxy - The SMCWHSG44-G can forward DNS (Domain Name
System) requests from client computers to DNS servers on the Internet.
And DNS responses from the DNS servers can be forwarded back to the
client computers.
• Static DNS mappings - The network administrator can specify static
FQDN (Fully Qualified Domain Name) to IP address mappings.
Therefore, a host on the internal network can access a server also on
the intranet by a registered FQDN.
• DHCP server - The SMCWHSG44-G can automatically assign IP addresses
to client computers by DHCP (Dynamic Host Configuration Protocol).
• Static DHCP mapping capability - The network administrator can specify
static IP address to MAC address mappings so that the specified IP
addresses are always assigned to the hosts with the specified MAC
addresses.
• Current DHCP mappings - Shows which IP address is assigned to
which host identified by a MAC address.
•NATFeatures- Client computers share a public IP address provided by
an ISP (Internet Service Provider) by NAT (Network Address Translation).
Our NAT server functionality supports the following:
19