NetModule AG NB1600, NB2700, NB2710, NB3700, NB3710 User Manual

...
HOTSPOT Manual
NetModule Router How To
Hotspot Router Software Version 1.6
Manual Version 1.1
NetModule AG, Switzerland
April 5, 2017
The specications and information regarding the products in this manual are subject to change without notice. We would like to point out that NetModule makes no representation or warranties with respect to the contents herein and shall not be responsible for any loss or damage caused to the user by the direct or indirect use of this information This document may contain information about third party products or processes. Such third party information is generally out of inuence of NetModule and therefore NetModule shall not be responsible for the correctness or legitimacy of this information. Users must take full responsibility for their application of any products.
Copyright ©2017 NetModule AG, Switzerland All rights reserved
This document contains proprietary information of NetModule. No parts of the work described herein may be reproduced. Reverse engineering of the hardware or software is prohibited and protected by patent law. This material or any portion of it may not be copied in any form or by any means, stored in a retrieval system, adopted or transmitted in any form or by any means (electronic, mechanical, photographic, graphic, optic or otherwise), or translated in any language or computer language without the prior written permission of NetModule.
A large amount of the source code to this product is available under licenses which are both free and open source. Most of it is covered by the GNU General Public License which can be obtained from www.gnu.org. The remainder of the open source software which is not under the GPL, is usually available under one of a variety of more permissive licenses. A detailed license information for a particular software package can be provided on request.
NetModule is a trademark and the logo is a service mark of NetModule AG, Switzerland.
All other products or company names mentioned herein are used for identication purposes only and may be trademarks or registered trademarks of their respective owners. The following description of software, hard­ware or process of NetModule or other third party provider may be included with your product and will be subject to the software, hardware or other license agreements.
Contact
www.netmodule.com/support
NetModule AG Tel +41 31 985 25 10 Meriedweg 11 Fax +41 31 985 25 11 CH-3172 Niederwangen info@netmodule.com Switzerland http://www.netmodule.com
2
Contents
1 Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.1 Safety Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.2 Declaration of Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.3 Waste Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.4 National Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.5 Open Source Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2 About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.1 Supported NetModule Routers . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.2 Feature List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4 Detailed Feature Explanation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.1 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.2 Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.2.1 ToS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.2.2 RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
4.3 UAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4.4 Walled Garden . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5 Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5.1 Scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5.2 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5.3 Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
5.3.1 WLAN Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5.3.2 WLAN Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5.3.3 Hotspot Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5.4 Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
6 Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
3
List of Figures
4.1 Hotspot Feature Administration . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.2 ToS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.3 RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
4.4 UAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4.5 HotSpot Feature Walled Garden . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.1 Mobile WWAN conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
5.2 WLAN administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5.3 WLAN conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5.4 WLAN Access Point conguration . . . . . . . . . . . . . . . . . . . . . . . . . 19
5.5 HotSpot Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5.6 Client redirect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
5.7 Client ToS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
4
1 Conformity
This chapter provides general information for putting the router into operation.
1.1 Safety Instructions
NetModule routers must be used in compliance with any and all applicable national and international laws and with any special restrictions regulating the utilization of the commu­nication module in prescribed applications and environments.
We would like to point out that only the original accessories, shipping with the router, must be used in order to prevent possible injury to health or damage to appliances and to ensure that all the relevant provisions have been complied with. Unauthorized modications or uti­lization of unapproved accessories may void the warranty. The routers must not be opened. However, it is possible to replace any pluggable SIM cards even during operation.
All circuits connected to the interfaces of the router must comply with the requirements of Safety Extra Low Voltage (SELV) circuits and have to be designed for indoor use only. Inter­connections must not leave the building nor penetrate the body shell of a vehicle. Possible antenna circuits must be limited to over-voltage transient levels below 1 500 VDC (according to IEC 62368-1, TNV-1 circuit levels) by using safety approved components.
HotSpot routers shall only be used with a certied (CE or equivalent) power supply which must have a power limited and SELV circuit1output.
They are basically designed for indoor use. Do not expose the communication module to extreme ambient conditions and protect the communication module against dust, moisture and high temperature.
We remind the user of the duty to observe the restrictions concerning the utilization of radio devices at petrol stations, in chemical facilities or in the course of blasting works in which explosives are used. Switch off the communication module when traveling by plane.
You need to pay increased attention when using the communication module close to per­sonal medical devices, such as cardiac pacemakers or hearing aids. NetModule routers may also cause interference in the nearer distance of TV sets, radio receivers and personal com­puters.
Avoid any installation of the antenna during a lightning. Always keep a distance of more than 40 cm from the antenna in order to reduce exposure to electromagnetic elds below the legal limits. This distance applies to
λ
4
- and
λ
2
-antennas. Larger distances may apply to
antennas with higher gain. Any Ethernet cabling must be shielded, the Ethernet section of this manual provides more
information. Devices with a WLAN interface may be operated only with applicable Regulatory Domain
congured. Special attention must be paid to country, number of antennas and the antenna gain. A misconguration will lead to loss of the approval.
Cellular antennas attached to the router must have an antenna gain of equal or less than 2.5 dBi. If an extension cable is used to attach the antenna, the antenna gain may be higher by
1
Note: Power supplies for routers with the Pb option (72-110 VDC) cannot be a SELV circuit, since the voltage is
greater than 60 VDC.
5
HOTSPOT Manual, Version 1.1
the amount of cable attenuation. The user is responsible for the compliance with the legal regulations.
We highly recommended creating a copy of a working system conguration. It can be down­loaded using the Web Manager and easily applied to a newer software release afterwards as we generally guarantee backward compatibility.
1.2 Declaration of Conformity
NetModule hereby declares that under our own responsibility that the routers comply with the relevant standards following the provisions of the RED Directive 2014/53/EU. The signed version of the Declarations of Conformity can be found on the NetModule web page.
1.3 Waste Disposal
In accordance with the requirements of the Council Directive 2002/96/EC regarding Waste Electrical and Electronic Equipment (WEEE), you are urged to ensure that this product will be segregated from other waste at end-of-life and delivered to the WEEE collection system in your country for proper recycling.
1.4 National Restrictions
This product may be generally used in all EU countries (and other countries following the RED Directive 2014/53/EU) without any limitation. Please refer to our WLAN Regulatory Database for getting further national radio interface regulations and requirements for a particular country.
6
HOTSPOT Manual, Version 1.1
1.5 Open Source Software
We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL)2, GNU Lesser General Public License (LGPL)3or other open-source licenses4. These licenses allow you to run, copy, distribute, study, change and improve any software covered by GPL, Lesser GPL, or other open-source licenses without any restrictions from us or our end user license agreement on what you may do with that software. Unless required by applicable law or agreed to in writing, software distributed under open-source licenses is distributed on an "AS IS" basis, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
To obtain the corresponding open source codes covered by these licenses, please contact our technical support at router@support.netmodule.com.
Acknowledgements
This product includes:
PHP, freely available from http://www.php.net
Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org)
Cryptographic software written by Eric Young (eay@cryptsoft.com)
Software written by Tim Hudson (tjh@cryptsoft.com)
Software written Jean-loup Gailly and Mark Adler
MD5 Message-Digest Algorithm by RSA Data Security, Inc.
An implementation of the AES encryption algorithm based on code released by Dr
Brian Gladman
Multiple-precision arithmetic code originally written by David Ireland
Software from The FreeBSD Project (http://www.freebsd.org)
CoovaChilli, freely available from https://coova.github.io/
2
Please nd the GPL text under http://www.gnu.org/licenses/gpl-2.0.txt
3
Please nd the LGPL text under http://www.gnu.org/licenses/lgpl.txt
4
Please nd the license texts of OSI licenses (ISC License, MIT License, PHP License v3.0, zlib License) under
http://opensource.org/licenses
7
2 About this Manual
This manual describes the features of the NetModule Hotspot Standalone Solution and gives at the end of the document a short conguration example.
8
3 Overview
3.1 Supported NetModule Routers
NB1600
NB2700
NB2710
NB2800
NB3700
NB3701
NB3710
NB3711
NB3720
NB3800
3.2 Feature List
1. Up to four different Hotspot interfaces
2. Administration
a) Network conguration b) Captive portal name
c) Logging d) Upload landing pages e) Pre-installed landing pages
3. Advanced
a) Terms only service
i. Bandwidth limitations
ii. Trac limitations
iii. Inactivity timeout
b) Radius
i. Radius conguration
ii. Accounting conguration
4. Walled Garden
9
4 Detailed Feature Explanation
4.1 Administration
Figure 4.1: Hotspot Feature Administration
Parameter Administration
Administrative status Enable or disable the Hotspot instance
Interface The interface which should be controlled by the Hotspot in-
stance
Network The network address
Netmask The netmask
Local address The local IP address
Portal name The captive portal name
Logging If enabled the Hotspot instance will show more logging
Status Indication if the landing page is installed or not
Upload landing page Upload customized landing pages
Default landing page Download a landing page example
10
HOTSPOT Manual, Version 1.1
4.2 Advanced Settings
Two operational modes are available. The terms-only service (ToS) mode shows a Terms of Service page and the user has to accept these terms before getting access to the Internet. The second mode is for using an RADIUS conguration, which requires an external RADIUS server. In this mode the user is getting an captive portal web page with user login and password eld before he can reach the Internet.
4.2.1 ToS
Figure 4.2: ToS
Parameter
Bandwidth Limitation This option limits the bandwidth (up and download) of each
user/device which is connected and authenticated to the Hotspot interface. This option is available with ToS only.
Trac Limitation With this option it is possible to limit the data consumption
per user/client. After reaching the given trac limitation the user/client will be redirected to the login page again. This op­tion is available. with ToS only.
11
HOTSPOT Manual, Version 1.1
Parameter
Inactivity Timeout If a station does not send anything within this timeout the user
will be automatically logged out. This option is available with ToS only.
Access local interfaces If selected, the user can reach services which are connected
on a local interface of the router
4.2.2 RADIUS
Figure 4.3: RADIUS
Parameter
RADIUS Server The IP address of the radius server. This option is available
with RADIUS conguration only
Shared Secret This option denes the shared secret of the radius server (RA-
DIUS conguration only)
Authentication Port The authentication port of the radius server. This option is
available with radius only.
Accounting Port The authentication port of the radius server. This option is
available with radius only.
12
HOTSPOT Manual, Version 1.1
Parameter
Accounting Interval This interval species in which seconds the Hotspot process
will report accounting information to the radius server. This option is available with radius only.
Account external trac only
If enabled the Hotspot process will report external trac only. This means the internal trac like Walled Garden trac will be ignored. This option is available with radius only.
Access local interfaces If selected, the user can reach services which are connected
on a local interface of the router
4.3 UAM
With the Universal Access Method (UAM) settings it is possible to congure external services for hotspot e.g. external custom landing page.
Figure 4.4: UAM
Parameter
External UAM Server The URL of the web server for client authentication
13
HOTSPOT Manual, Version 1.1
Parameter
UAM Port If an unauthenticated client tries to access the internet the
client will be redirected to this port of the local IP address of the router
External UAM Homepage The URL of the homepage where unauthenticated clients were
redirected
UAM Secret The shared secret between external UAM server and hotspot
process.
Note: If not using an external UAM server or UAM hompage, leave the conguration param- eter empty to use the default values.
4.4 Walled Garden
Figure 4.5: HotSpot Feature Walled Garden
With the Walled Garden settings it is possible to offer free services like web pages to the customer/user without having an account or without accepting the ToS agreements. The services which are congured via an URL and a description will be ignored by the captive portal and the user will reach the services directly.
14
5 Example
This chapter describes how to congure the NetModule standalone hHotspot solution with a small example.
5.1 Scenario
WAN uplink via mobile interface
WLAN
2.4 GHz operation modeChannel 1SSID name Hotspotpublic wlan with no security option
Hotspot
Captive portal name: HotspotNetwork: 192.168.200.0/24Operational mode: terms-only service
5.2 Prerequisites
NetModule router with WLAN interface and supporting hotspots.
Ocial NetModule router with installed hotspot patch image.
Download here
The following congurations steps are made with the GUI of the NetModule router. There­fore access the IP-address of the router with an internet browser. The manual uses soft­ware version 4.0.0.105 with hotspot version 1.6 on a NetModule NB2800 router (screenshots might look different).
15
HOTSPOT Manual, Version 1.1
5.3 Conguration
(Mobile->Interfaces->Connection)
Figure 5.1: Mobile WWAN conguration
Congure mobile WWAN interface. For further information how to congure a WWAN uplink please refer to the router user manual.
16
HOTSPOT Manual, Version 1.1
5.3.1 WLAN Administration
(Interfaces->WLAN->Administration)
Figure 5.2: WLAN administration
Enable administration status and congure WLAN interface as follows:
Parameter Setting
Regulatory domain The country where the access point is used
Operation type To have optimal compatibility use 802.11n or 802.11ac if avail-
able
Radio band 2.4 GHz operation
Bandwidth 20Mhz
Channel 1 (2412 MHz)
17
HOTSPOT Manual, Version 1.1
5.3.2 WLAN Conguration
(Interfaces->WLAN->Conguration)
Figure 5.3: WLAN conguration
Press continue and follow up with access point conguration page. Add WLAN interface by clicking the edit-button.
18
HOTSPOT Manual, Version 1.1
Figure 5.4: WLAN Access Point conguration
Parameter Setting
SSID Hotspot
Security mode none
Apply conguration via Apply-button.
19
HOTSPOT Manual, Version 1.1
5.3.3 Hotspot Interface
(Services->Hotspot)
Add hotspot interface by clicking the +-button Enable administrative status and continue with following conguration:
Figure 5.5: HotSpot Conguration
Parameter Setting
Interface Choose WLAN1as interface
Portal name type Hotspotas portal name
Apply conguration: press Apply-Button
20
HOTSPOT Manual, Version 1.1
5.4 Results
Now the client will be redirected to the captive portal site rst.
Figure 5.6: Client redirect
21
HOTSPOT Manual, Version 1.1
Figure 5.7: Client ToS
22
6 Technical Support
NetModules mission statement includes a professional and friendly team of support engi­neers which will be pleased to offer consultancy, provide assistance and deliver solutions in case of technical issues. With their broad-based experience they will be able to narrow down your problem and thus prevent you from getting too much gray hair.
In case of support requests please use the form at our support page and submit a detailed description of your problem together with a tech-support le which contains all the neces­sary information to speed up the process of analyzing and resolving your problem.
The latest software and documentation material can found in the technical support area via the NetModule website.
23
Loading...