VP Networks NC-3620 User manual

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 1 OF 135
GA T E W A Y CO N T R O L L E R
N C - 3 6 2 0
U SER M ANUAL

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 2 OF 135
© ValuePoint (VP) Networks, Inc.
All ritten material and information in this manual is a copyright of VP Net orks, Inc. No
part of this ork may be reproduced, stored in a retrieval system, adapted or transmitted
in any form, by any means-electronic, mechanical, photographic, optical recording or
other ise, for any purpose, ithout prior permission from VP Net orks, Inc.

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 3 OF 135
CO N T E N T S
1 . IN T R O D U C T I O N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 . IN S T A L L A T I O N ................................................. 10
3 . CO N F I G U R A T I O N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1
3 . . B A S I C F U N C T I O N S .............................................
3 . 2 . U S I N G T H E W E B M A N A G E M E N T I N T E R F A C E . . . . . ... . . . . ... . . . 2
3 . 2 . 1 . L
O G G I N G I N T O T H E G A T E W A Y C O N T R O L L E R . . . . . . . . . . . . . . . . . . . . . . . . . 1 2
3 . 2 . 2 . N
E T W O R K S .................................................................. 16
3 . 2 . 3 . S
E C U R I T Y .................................................................... 37
3 . 2 . 4 . C
U S T O M I Z A T I O N ............................................................ 54
3 . 2 . 5 . M
A N A G E M E N T ............................................................... 73
3 . 2 . 6 . A
D V A N C E D ................................................................... 6
3 . 2 . 7 . S
Y S T E M S T A T U S ........................................................... 104
3 . 2 . . S
Y S T E M T O O L S ............................................................ 117
3 . 2 . 9 . H
E L P ......................................................................... 125
3 . 2 . 1 0 . I
N D E X ...................................................................... 126
3 . 3 . U S I N G T H E S E R I A L C O N S O L E I N T E R F A C E . . . . . .. .. . .. .. .. .. 2 7
3 . 3 . 1 . C
O N N E C T I I N G T O T H E S E R I A L C O N S O L E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 7
4 . TR O U B L E SH O O T I N G . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 9
4 . . T C P / I P S E T T I N G S P R O B L E M S .............................. 30
4 . 2 . O T H E R P R O B L E M S ............................................ 3
5 . AP P E N D I C E S .................................................. 132
5 . . A P P E N D I X A : S Y S L O G M E S S A G E S .......................... 32
5 . 2 . A P P E N D I X B : R A D I U S A C C O U N T I N G A T T R I B U T E S . .. .. .. 3 3
5 . 3 . F C C R E G U L A T O R Y S T A T E M E N T .............................. 34
6 . LI M I T E D WA R R A N T Y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 3 5

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 4 OF 135
. I N T R O D U C T I O N
Overview
VP Net orks developed the Gate ay Controller to provide reliable and secure high-
speed access to the Internet for Public Net orks. When deployed in a broadband
service net ork the Gate ay Controller can recognize ne users on the net ork and
redirect them to the appropriate connections. The subscriber can access the Internet
ithout changing configuration settings or needing technical assistance ith nearly
any configuration. The many features of the Gate ay Controller support any
combination of access models from free amenity to time limited to pre or post paid.
Package Contents
The package contents of the Gate ay Controller are:
1. One Gate ay Controller
2. One AC Po er Adapter
3. Gate ay Controller Serial Cable
Features
Some key features of the Gate ay Controller are:
 Advanced Local Authentication
Totally control authentication the Gate ay Controller using a local user database
of 2000 username/pass ord accounts. Unlike the primitive Local Authentication
feature on most Internet Gate ays, Gate ay Controller local accounts are richly
manageable by account start and end dates, access time, login methodology,
band idth allo ance and more.
 Auto-IP Support of Subscriber IP Settings
The subscriber can access the Controller ith no change to his existing IP related
settings, such as IP address, subnet mask, or default gate ay IP address in his
notebook computer. No matter hat net ork the subscriber is configured for, the
subscriber al ays can access the Controller.
Note: The ‘Auto-IP’ Function can only be used with TCP/IP-based Networks.
 HTTP Auto-Proxy Support of Subscriber Browser Settings

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 5 OF 135
Some subscribers ill have a HTTP Proxy configured in their eb bro ser,
generally as part of their corporate configuration. The Controller can detect and
re-route these proxy HTTP requests to provide seamless connectivity to the
subscriber.
 Secure Management via XML and SOAP
XML combined ith SOAP allo s rich, full featured and secure control and
monitoring of the Gate ay Controller. The Gate ay Controller SOAP interface
orks today ith Hampton Inn’s HSIA Authentication, ith future releases
supporting more advanced functionality.
 SMTP Redirection
Corporate and ISP mail servers often ill not accept E-Mail from another net ork.
The Controller can redirect subscriber’s outgoing SMTP server requests to a SMTP
server specified by administrator, so the subscriber can send out their email
ithout changing the E-Mail configuration in their notebook computer.
 Café Account


Give customers free access to the Net ork for a defined period, after hich they
ould have to purchase more time to continue to bro se or access the net ork
from their laptop. This is ideal to allo free “use but don’t abuse” access to dra
customers into the venue and make room for ne customers.
 Remote Configuration
The Gate ay Controller is easy for administrators to manage through the Web-
based interface. The Web-based management is client-independent and is done
by securely authenticating the administrator over SSL.
 Custom Branding of Subscriber Experience
The venue o ner or system integrator can customize the branding and messaging
for each HotSpot. Configure login pages, messages, and advertising to match the
Café, Hotel, or Airport experience.

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 6 OF 135
 “Captured Portal” Home Page Redirection
The Gate ay Controller allo s the venue o ner to redirect subscribers to a
corporate eb site or custom portal ith custom branding, login methodology,
billing, terms of service, and more.
 Authenticated User Pass-through
After their initial login to validate their account, give subscribers access to the
net ork ithout needing to Login each time to their account. This means fe er
lost and forgotten pass ords and account names.
 Walled Garden
A alled garden provides pages or eb sites to subscribers ithout requiring
authentication. The Controller allo s up to 256 destination IP addresses and
URLs.
 VPN (Virtual Private Network) Pass-through
The Gate ay Controller allo s subscribers to access their existing VPN net ork at
home or at the office. Unlike most public access gate ays, the Controller allo s
all VPN connections through NAT and multiple connections to the same VPN server
from a single venue.
 Login Pass-through by IP or MAC Address
The Gate ay Controller allo s a list of client computers to access the Internet
ithout requiring authentication. The Controller allo s up to 512 registered MAC
addresses.
 Secure HTML Login Page (SSL)
Login Page utilizes SSL to protect username and pass ord during Subscriber login.
 Hardware Watchdog Monitor
This feature enables the Controller to continue functioning by resetting the system
if the device experiences any problems due to unusual net ork activity (e.g.
subscriber orms, viruses, or Denial of Service Attacks on the LAN or WAN).

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 7 OF 135
 Sophisticated SysLog Monitoring
A detailed System Log (Sysco) server is built-in to log events and enable
automated monitoring. The System logs can be stored internally or events
broadcast to a local or remote SysLog client.
 RADIUS Authentication
Subscriber authentication on the Gate ay Controller can be configured for the
industry standard RADIUS AAA. RADIUS allo s you to control multiple sites from
a single NOC, or purchase authentication services from a third party billing
provider.
 Auto LAN Isolation
Subscribers and local net ork machines can be isolated from one another using
Auto LAN Isolation. This prevents subscribers from accessing or molesting each
other on the public net ork, accidentally sharing files, or accessing enterprise
hard are belonging to the venue.
 Time based authentication list upload
Security and Pass-through information for the entire enterprise can be centralized
and updated in each controller automatically on a schedule. This allo s for easy
synchronization of both authenticated and “blacklisted” subscriber information
bet een multiple venues.
 Terms of Service Based Authentication
Enforce agreement ith a customizable and branded terms of service page before
subscribers can access the service.
 Automatic Public Static IP Pass-through
Provision and distribute multiple Public Static IP addresses automatically to
subscribers. While preserving the authentication, security, and branding features
of the venue, these subscribers ill have full access to their public IP for more
sophisticated applications like VPN or online game consoles.
 Hours of Service
Disabled Subscriber Account Authentication based on time of day and day of eek
to limit net ork usage to business hours.

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 8 OF 135
 Bandwidth limiting to insure Quality of Service for all subscribers
Throttle band idth usage by any single subscriber back to the configured bits-
per-second (bps). This prevents any one subscriber from monopolizing the
net ork.
 Custom Packet Filter
The packet filter checks every incoming and outgoing packet against a set of
custom rules. You can use this feature to block un anted traffic or subscribers in
very broad or very narro groups.
 Host local HTTP pages and images
This feature allo s you to upload up to 50 files totaling up to 2MB+ of file space.
You can customize the default pages used internally by the Controller or create
an entire custom eb site.
 File Sharing TCP Session Limiting
Limiting subscriber TCP sessions prevents spikes of activity by a single subscriber
ith a orm or virus, as ell as preventing subscribers from connecting to
excessive numbers of IP addresses, such as ith a file sharing application like
BitTorrent.
 Network Monitoring SNMP MIB-II support
Use the Simple Net ork Management Protocol (SNMP) to monitor and control the
Controller. The Gate ay Controller supports SNMP v2c and the SNMP variables
contained in the MIB-II specification.
 VPN and GRE Tunnels
Establish highly secure encrypted connections to another net ork using the GRE
and VPN tunnel standards.
 MICROS (Oracle) FIAS, Galaxy, and MSI 4700 PMS based Authentication
Authenticate and bill guest access at the hotel through the MICROS (Opera) FIAS,
Galaxy, or MSI 4700 (MICROS serial emulation) Property Management System.

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
VALUEPOINT (VP) NETWORKS, INC. ALL RIGHTS RESERVED P AGE 9 OF 135
 LAN Port Isolation
LAN port traffic can be isolated from other LAN ports. You can designate public
and private ports that cannot communicate to protect sensitive segments of the
LAN net ork.
 DMCA Safe Harbor and CALEA Connection Logging
Log every subscriber connection to track all activity on the site for legal, security,
or auditing purposes.
 VLAN Trunk for Subscriber Location Awareness
Using VLAN IDs, the net ork can trace every subscriber to a specific location,
room number, or access point.
Precautions
Please carefully read the follo ing precautions before using the Gate ay Controller:
 Do not remove or open the enclosure. You could damage the Controller or suffer
injury if you tamper ith the Controller hard are.
 The Gate ay Controller enclosure is not ater resistant. Avoid deploying the
Controller here it might get et.
 Only connect the supplied AC po er adapter, or an adapter of the exact same
configuration and po er characteristics. Using the rong adapter could cause
damage to the Controller or a dangerous electrical shock to the user.
 The Gate ay Controller enclosure is not heat resistant. Do not deploy the Gate ay
Controller in direct sunlight or in proximity to another heat source.
 Please deploy the Gate ay Controller here it is ell ventilated and the fan is not
blocked.

G ATEWAY C ONTROLLER S ERIES U SER M ANUAL
 VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED P AGE 10 OF 135
2 . I N S T A L L A T I O N
This section of the Manual gives information regarding the requirements and installation
procedures for a successful installation of the Gate ay Controller.
Requirements
Check the follo ing requirements for installing the Gate ay Controller.
1. S YS TE M R E Q U I R E M E N TS
Management System: Any computer ith eb bro ser and a connection via Ethernet
to the gate ay controller, either directly or through s itch or
through Wi-Fi device.
WAN Connection: Ethernet to ISP equipment.
Management Software: Web Bro ser
2. W AN N E TW O RK R E Q U I R E M E N T S
Find out from your ISP hether the Controller ill use a static or dynamic IP address. The
most common configuration is DHCP, hich assigns the IP addresses dynamically.
If you are using a static IP address, you ill need to get the full configuration from your ISP.
Dynamic IP Set Controller to DHCP Client
Static IP
Controller IP address
Controller subnet mask
Default gate ay IP address
Primary/Secondary DNS Server IP addresses
PPPoE
User name from your ISP
Pass ord from your ISP
Note:
1. The Controller’s de ault LAN IP address setting is ‘192.168.1.1’.
2. The Controller’s de ault LAN subnet mask setting is ‘255.255.255.0’.