Value Point Gateway controller Series User manual

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 1OF 124
G
GA
AT TE EW WA AY Y C
CO
ON NT TR RO OL LL LE ER R
3
35 56 60 0
USER MANUAL

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 2OF 124
© 2003 - 2011, ValuePoint Networks, Inc.
All written material and information in this manual is a copyright of ValuePoint Networks,
Inc. No part of this work may be reproduced, stored in a retrieval system, adapted or
transmitted in any form, by any means-electronic, mechanical, photographic, optical
recording or otherwise, for any purpose, without prior permission from ValuePoint
Networks, Inc.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 3OF 124
A
AB
BO OU UT T T TH HE E M
MA
AN NU UA AL L
Please read this manual before working with the Gateway Controller 3560. This manual is
intended to provide a basic understanding of the Gateway Controller.
Although utmost care has been taken to provide all the information in this manual that is
required to understand the functionality of the Controller, any additional inquiries can be
mailed to: [email protected]. Please also consult the latest release notes for your
firmware version for any changes or new features not covered in this manual.
U
US
SA AG GE E A AN ND D F
FE
EA AT TU UR RE ES S O OF F T TH HE E M
MA
AN NU UA AL L
To make it easy, this manual has a simple structure and the user can easily navigate
through the sections to understand the various features of the Gateway Controller. The first
section introduces the user to the Gateway Controller, its package contents, features and
precautions to take while using the Controller.
The second section describes the Installation Requirements and steps. Follow them carefully
for successful installation of the Gateway Controller.
The third section describes the Configuration details of the Gateway Controller.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 4OF 124
C
CO
ON NT TE EN NT TS S
1
1. .I IN
NT TR RO OD DU UC CT TI IO ON N
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..
.. . 5 5
2
2. .I IN
NS ST TA AL LL LA AT TI IO ON N
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .
1 11 1
3
3. .C CO
ON NF FI IG GU UR RA AT TI IO ON N
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 1 12
2
3.1.BASIC FUNCTIONS ..............................................12
3.2.USING THE WEB MANAGEMENT INTERFACE..................14
3.2.1.LOGGING INTO THE GATEWAY CONTROLLER .......................... 14
3.2.2.EXPRESS SETUP ............................................................. 18
3.2.3.NETWORKS .................................................................... 20
3.2.4.SECURITY ..................................................................... 40
3.2.5.CUSTOMIZATION ............................................................. 55
3.2.6.MANAGEMENT ................................................................ 72
3.2.7.ADVANCED .................................................................... 82
3.2.8.SYSTEM STATUS ............................................................. 97
3.2.9.SYSTEM TOOLS .............................................................107
3.2.10.HELP ........................................................................115
3.2.11.INDEX .......................................................................116
4
4. .T TR
RO OU UB BL LE E S
SH
HO OO OT TI IN NG G
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 1 11 17 7
4.1.TCP/IP SETTINGS PROBLEMS .............................. 118
4.2.OTHER PROBLEMS ............................................ 119
5
5. .A AP
PP PE EN ND DI IC CE ES S
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..
. 1 12 21 1
5.1.APPENDIX A: SYSLOG MESSAGES .......................... 121
5.2.APPENDIX B: RADIUS ACCOUNTING ATTRIBUTES....... 122
5.3.FCC REGULATORY STATEMENT .............................. 123
6
6. .L LI
IM MI IT TE ED D W
WA
AR RR RA AN NT TY Y
. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 1 12 24 4

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 5OF 124
1. INTRODUCTION
Overview
Valuepoint Networks developed the Gateway Controller to provide reliable and
secure high-speed access to the Internet for Public Networks. When deployed in a
broadband service network the Gateway Controller can recognize new users on the
network and redirect them to the appropriate connections. The subscriber can
access the Internet without changing configuration settings or needing technical
assistance with nearly any configuration. The many features of the Gateway
Controller support any combination of access models from free amenity to time
limited to pre or post paid.
Package Contents
The package contents of the Gateway Controller are:
1. One Gateway Controller
2. One AC Power Adapter
3. One CD containing user’s manual & Quick Start Guide
Features
Some key features of the Gateway Controller are:
Advanced Local Authentication
Totally control authentication the Gateway Controller using a local user database
of 2000 username/password accounts. Unlike the primitive Local Authentication
feature on most HotSpot Gateways, Gateway Controller local accounts are richly
manageable by account start and end dates, access time, login methodology,
bandwidth allowance and more.
Auto-IP Support of Subscriber IP Settings
The subscriber can access the Controller with no change to his existing IP
related settings, such as IP address, subnet mask, or default gateway IP address
in his notebook computer. No matter what network the subscriber is configured
for, the subscriber always can access the Controller.
Note: The ‘Auto-IP’ Function can only be used with TCP/IP-based Networks.
HTTP Auto-Proxy Support of Subscriber Browser Settings

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 6OF 124
Some subscribers will have a HTTP Proxy configured in their web browser,
generally as part of their corporate configuration. The Controller can detect and
re-route these proxy HTTP requests to provide seamless connectivity to the
subscriber.
Secure Management via XML and SOAP
XML combined with SOAP allows rich, full featured and secure control and
monitoring of the Gateway Controller. The Gateway Controller SOAP interface
works today with Hampton Inn’s HSIA Authentication, with future releases
supporting more advanced functionality.
SMTP Redirection
Corporate and ISP mail servers often will not accept E-Mail from another
network. The Controller can redirect subscriber’s outgoing SMTP server requests
to a SMTP server specified by administrator, so the subscriber can send out their
email without changing the E-Mail configuration in their notebook computer.
Café Account
Give customers free access to the Network for a defined period, after which they
would have to purchase more time to continue to browse or access the network
from their laptop. This is ideal to allow free “use but don’t abuse” access to
draw customers into the venue and make room for new customers.
Remote Configuration
The Gateway Controller is easy for administrators to manage through the Web-
based interface. The Web-based management is client-independent and is done
by securely authenticating the administrator over SSL.
Custom Branding of Subscriber Experience
The venue owner or system integrator can customize the branding and
messaging for each HotSpot. Configure login pages, messages, and advertising
to match the Café, Hotel, or Airport experience.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 7OF 124
“Captured Portal” Home Page Redirection
The Gateway Controller allows the venue owner to redirect subscribers to a
corporate web site or custom portal with custom branding, login methodology,
billing, terms of service, and more.
Authenticated User Pass-through
After their initial login to validate their account, give subscribers access to the
network without needing to Login each time to their account. This means fewer
lost and forgotten passwords and account names.
Walled Garden
A walled garden provides pages or web sites to subscribers without requiring
authentication. The Controller allows up to 256 destination IP addresses and
URLs.
VPN (Virtual Private Network) Pass-through
The Gateway Controller allows subscribers to access their existing VPN network
at home or at the office. Unlike most public access gateways, the Controller
allows all VPN connections through NAT and multiple connections to the same
VPN server from a single venue.
Login Pass-through by IP or MAC Address
The Gateway Controller allows a list of client computers to access the Internet
without requiring authentication. The Controller allows up to 512 registered
MAC addresses.
Secure HTML Login Page (SSL)
Login Page utilizes SSL to protect username and password during Subscriber
login.
Hardware Heartbeat Monitor
This feature enables the Controller to continue functioning by resetting the
system if the device experiences any problems due to unusual network activity
(e.g. subscriber worms, viruses, or Denial of Service Attacks on the LAN or
WAN).

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 8OF 124
Sophisticated SysLog Monitoring
A detailed System Log (Sysco) server is built-in to log events and enable
automated monitoring. The System logs can be stored internally or events
broadcast to a local or remote SysLog client.
RADIUS Authentication
Subscriber authentication on the Gateway Controller can be configured for the
industry standard RADIUS AAA. RADIUS allows you to control multiple sites
from a single NOC, or purchase authentication services from a third party billing
provider.
Auto LAN Isolation
Subscribers and local network machines can be isolated from one another using
Auto LAN Isolation. This prevents subscribers from accessing or molesting each
other on the public network, accidentally sharing files, or accessing enterprise
hardware belonging to the venue.
Time based authentication list upload
Security and Pass-through information for the entire enterprise can be
centralized and updated in each controller automatically on a schedule. This
allows for easy synchronization of both authenticated and “blacklisted”
subscriber information between multiple venues.
Terms of Service Based Authentication
Enforce agreement with a customizable and branded terms of service page
before subscribers can access the service.
Automatic Public Static IP Pass-through
Provision and distributed multiple Public Static IP addresses automatically to
subscribers. While preserving the authentication, security, and branding
features of the venue, these subscribers will have full access to their public IP
for more sophisticated applications like VPN or online game consoles.
Hours of Service
Disabled Subscriber Account Authentication based on time of day and day of
week to limit network usage to business hours.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 9OF 124
Bandwidth limiting to insure Quality of Service for all subscribers
Throttle bandwidth usage by any single subscriber back to the configured bits-
per-second (bps). This prevents any one subscriber from monopolizing the
network.
Custom Packet Filter
The packet filter checks every incoming and outgoing packet against a set of
custom rules. You can use this feature to block unwanted traffic or subscribers
in very broad or very narrow groups.
Host local HTTP pages and images
This feature allows you to upload up to 50 files totaling up to 2MB+ of file space.
You can customize the default pages used internally by the Controller or create
an entire custom web site.
File Sharing TCP Session Limiting
Limiting subscriber TCP sessions prevents spikes of activity by a single
subscriber with a worm or virus, as well as preventing subscribers from
connecting to excessive numbers of IP addresses, such as with a file sharing
application like BitTorrent.
Network Monitoring SNMP MIB-II support
Use the Simple Network Management Protocol (SNMP) to monitor and control the
Controller. The Controller supports SNMP v2c and the SNMP variables contained
in the MIB-II specification.
VPN and GRE Tunnels
Establish highly secure encrypted connections to another network using the GRE
and VPN tunnel standards.
Micros FIAS PMS based Authentication
Authenticate and bill guest access at the hotel through the Micros Fidelio
Property Management System.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 10 OF 124
LAN Port Isolation
LAN port traffic can be isolated from other LAN ports. You can designate public
and private ports that cannot communicate to protect sensitive segments of the
LAN network.
DMCA Safe Harbor and CALEA Connection Logging
Log every subscriber connection to track all activity on the site for legal,
security, or auditing purposes.
VLAN Trunk for Subscriber Location Awareness
Using VLAN IDs, the network can trace every subscriber to a specific location,
room number, or access point.
Precautions
Please carefully read the following precautions before using the Gateway Controller:
Do not remove or open the enclosure. You could damage the Controller or suffer
injury if you tamper with the Controller hardware.
The Gateway Controller enclosure is not water resistant. Avoid deploying the
Controller where it might get wet.
Only connect the supplied AC power adapter, or an adapter of the exact same
configuration and power characteristics. Using the wrong adapter could cause
damage to the Controller or a dangerous electrical shock to the user.
The Gateway Controller enclosure is not heat resistant. Do not deploy the
Gateway Controller in direct sunlight or in proximity to another heat source.
Please deploy the Gateway Controller where it is well ventilated and the fan is
not blocked.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 11 OF 124
2. INSTALLATION
This section of the Manual gives information regarding the requirements and installation
procedures for a successful installation of the Gateway Controller.
Requirements
Check the following requirements for installing the Gateway Controller.
1
1. . S
YSTEM REQUIREMENTS
Management System: PC with Ethernet or network connection
ISP Connection: xDSL modem, Cable modem, or T1 Router.
Management Software: Web Browser (Internet Explorer or Firefox, other browsers may
not work as expected)
Others: Network Cable with a RJ-45 connector
2
2. . WAN NETWORK REQUIREMENTS
Find out from your ISP whether the Controller will use a static or dynamic IP address. The
most common configuration is DHCP, which assigns the IP addresses dynamically.
If you are using a static IP address, you will need to get the full configuration from your ISP.
Dynamic IP Set Controller to DHCP Client
Static IP Controller IP address
Controller subnet mask
Default gateway IP address
Primary/Secondary DNS Server IP addresses
PPPoE User name from your ISP
Password from your ISP
Note:
1. The Controller’s default LAN IP address setting is ‘192.168.1.1’.
2. The Controller’s default LAN subnet mask setting is ‘255.255.255.0’.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 12 OF 124
3. CONFIGURATION
This section of the Manual will give you information regarding access, login and usage of all
the features of the Gateway Controller.
3.1. BASIC FUNCTIONS
The screen below shows the type of options the user will come across frequently while
configuring the system. Description about the use of each part is available in next section
along with the instructions on its usage.
Screen 1 Basic functionality
1
1. . C
HANGING GUI SETTINGS
ENTERING DATA IN A TEXT BOX
To enter a data value in a text box click inside the text box and start typing. If the text box
already contains some value, click at the end of the written text value and delete it with the
backspace key. If the text box is grayed-out, this means the text is not editable.
SELECTING A VALUE FROM DROPDOWN LIST BOX
Command Buttons
Radio
Buttons Text Box
Dropdown List Box
Help

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 13 OF 124
To select a value from a list, first click on the arrow that is found on the right side of this list
box and then select a value desired from the displayed list.
RADIO BUTTONS
To select a radio button simply click on the desired radio button.
COMMAND BUTTONS
To perform the actions as captioned on the button simply click on the button. For example
in the screen above, to apply the changes, simply click Apply to implement the changes
made.
HELP
To view the help for some menus, click on the Help icon displayed on the right top pane of
the menu.
2
2. . R
ESETTING TO FACTORY DEFAULTS
SOFT RESET
Connect to the Controller WEB GUI and navigate to System Tools – Factory
Settings and select Reset Factory Defaults.
HARD RESET
Once the unit has booted and the “System” light is flashing slowly or solid, press
the button labeled “Rest” on the face of the Controller until the Ready light goes out
(15 seconds). After rebooting, the Controller will be accessible at the default LAN
IP Address of 192.168.1.1.
READY/SYSTEM LIGHT
The state of the Controller hardware can be determined from the Ready light.
Unlit: Booting first phase
Fast Blink: Loading firmware
Slow Blink: Firmware loaded, resolving DHCP or PPPoE WAN address.
Solid: Boot complete
Note: If the Ready light stays unlit when the device is powered there is a serious error.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 14 OF 124
3.2. USING THE WEB MANAGEMENT INTERFACE
To access the Gateway Controller and utilize its menus enter the WAN or LAN IP address in
the browser and press ‘Enter’.
3.2.1. LOGGING INTO THE GATEWAY CONTROLLER
On performing the above steps, the Gateway Controller Home Page will appear on the
screen as shown below. Through this Home page, you can access the Gateway Controller by
providing the correct Login Name and Password. The password protection insures only
authorized users can access the Controller. We recommend that you change the default
username/password. You can restore the factory default password with a hard reset if you
forget your password.
Screen 2 Login Screen
Login Name Enter a valid Login Name here. The default Login is “root”.
Password Enter the password in this field. The characters keyed-in will be
displayed as asterisks (*) to maintain the secrecy of the
password. The password entered in this field is specific to the
user name entered above. The default password is “root”.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 15 OF 124
After entering the user name and password, click on the OK button. The Controller
will validate the user name and password. If a correct user name and password has
been supplied you will gain access to the Controller; otherwise an error message
will be displayed.
After successful login, the Controller displays the following screen, which gives the
Controller status and allows the user to navigate to different menus of the Gateway
Controller.
Screen 3 Home Page
Configuration Menus The Gateway Controller has ten menus.
1. Express Setup
2. Networks
Navigation Menu to sub-
menus of the selected Menu
Configuration
M
e
n
us

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 16 OF 124
3. Security
4. Customization
5. Management
6. Advanced
7. System Status
8. System Tools
9. Help
10. Index
These menus allow the user to configure the settings. To access
the menu, click on the respective menu button. The ninth menu
is Help. It contains Frequently Asked Questions to help the user
to understand the system better.
The tenth menu is the index. This menu contains quick links to
other menus and sub-menus, to navigate through the interface.
The final option is Apply Changes/Restart. Click this from
any menu to implement the changes made to the settings. This
restarts the controller immediately. You must select OK on
each page that you wish to configure to load those changes.
Navigation Menu The Navigation Menu is available on the top pane of every
menu as tabs for accessing different sub-menus of the
respective menu. To access the sub-menus, click on the
respective sub-menu name.
Status Bar The Status Bar below the screen will indicate the actions
performed.
Cancel and OK
You will see the command buttons Cancel and OK many menus of the Controller.
In all the menus, the functionality of these commands is the same.
Cancel Click this button to cancel any changes on the current
page.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 17 OF 124
OK Clicking this button causes the settings configured by the
user to be saved. New settings may take effect
immediately or on the next reboot. The Controller
prompts you to reboot if necessary.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 18 OF 124
3.2.2. EXPRESS SETUP
This menu allows the user to configure the basic settings for accessing the Internet.
Screen 4 Express Setup
WAN Port Mode
In this section, select DHCP Client, Static IP or PPPoE setting options.
1. To connect via a Cable Modem or Local LAN select DHCP
Client setting. This configures the device to obtain the IP
address and other TCP/IP settings from your ISP.
2. To use a static IP address assigned by your ISP, or use local
LAN settings, select Static IP and perform the following
steps:
1. Type the IP Address provided by your ISP.
2. Type the Subnet Mask Address provided by your ISP.
3. Type the Gateway Address provided by your ISP.
4. Type the Primary and Secondary DNS server
addresses provided by your ISP.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 19 OF 124
3. To use PPPoE protocol to connect to your ISP, select PPPoE
and perform the following steps:
1. Type the User Name for PPPoE protocol to connect the
ISP.
2. Type the correct Password for the above User Name.
3. Select either Enable to activate Auto Connection or
Disable to deactivate the Auto connection option.
4. Select the Number of Minutes for Auto Disconnection
from the drop-down list box.

GATEWAY CONTROLLER SERIES USER MANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED PAGE 20 OF 124
3.2.3. NETWORKS
The Networks menu tabs control basic configuration of the gateway along with IP
addressing, DHCP, and other features that affect customer network access.
1
1. . S
YSTEM
This section of the Controller allows you to configure the System Settings. The
following screen shows the System Settings menu.
Screen 5 System Settings