PheeNet WAS-103R User Manual

Wireless Hot Spot Gateway

WA S-103R

User Manual Ve rsion 1.03

TableofContents

Chapter 1. Before You Start ................................................................................................................. 1

1.1 Preface ............................................................................................................................................ 1

1.2 Package Contents ........................................................................................................................... 1

Chapter 2. System Overview ............................................................................................................... 2

2.1 Introduction of WAS-103R ............................................................................................................ 2

2.2 System Concept .............................................................................................................................. 2

2.3 Hardware Descriptions ................................................................................................................... 3

2.4 Installation Steps ............................................................................................................................ 5

2.5 Instruction to Web Management Interface ..................................................................................... 6

Chapter 3. AP Mode Configuration ..................................................................................................... 8

3.1 Connect WAS-103R to the external Network ................................................................................ 9

3.1.1 Network Requirement ................................................................................................................. 9

3.1.2 Configure LAN IP ...................................................................................................................... 9

3.2 Create your Wireless LAN Network ............................................................................................ 12

3.2.1 Wireless General Setup ............................................................................................................. 12

3.2.2 Wireless Advanced Setup ......................................................................................................... 13

3.2.3 Create Virtual AP ...................................................................................................................... 15

3.2.3.1 Virtual AP General Configuration .......................................................................................... 16

3.2.4 Black Wireless Clients .............................................................................................................. 24

3.3 Expand your Wireless Network .................................................................................................... 25

3.4 Manage the system ....................................................................................................................... 27

3.4.1 Configure System Time ............................................................................................................ 27

3.4.2 Configure Management ............................................................................................................ 28

3.4.3 Configure SNMP ...................................................................................................................... 31

3.4.4 Backup / Restore and Reset to Factory ..................................................................................... 33

3.4.5 Firmware Upgrade .................................................................................................................... 34

3.4.6 Network Utility ......................................................................................................................... 35

3.4.7 Reboot ....................................................................................................................................... 36

3.5 Observer the Status ....................................................................................................................... 37

3.5.1 System Overview ...................................................................................................................... 37

3.5.2 Wireless Status .......................................................................................................................... 39

3.5.3 WDS List Status ....................................................................................................................... 40

3.5.4 Event Log ................................................................................................................................. 41

Chapter 4. Hotspot Mode Configuration............................................................................................ 42

4.1 Connect WAS-103R to the external Network .............................................................................. 43

4.1.1 Network Requirement ............................................................................................................... 43

4.1.2 Configure WAN Port ................................................................................................................ 43

4.1.3 Configure Dynamic DNS ......................................................................................................... 47

4.1.4 Configure VLAN IP ................................................................................................................. 48

4.2 Create your Wireless LAN Network ............................................................................................ 50

4.2.1 Wireless General Setup ............................................................................................................. 50

4.2.2 Wireless Advanced Setup ......................................................................................................... 51

4.2.3 Create Virtual AP ...................................................................................................................... 53

4.2.3.1 Virtual AP General Configuration .......................................................................................... 54

4.2.4 Block Wireless Clients .............................................................................................................. 62

4.3 Expand your Wireless Network .................................................................................................... 63

4.4 Manage the System ...................................................................................................................... 65

4.4.1 Configure System Time ............................................................................................................ 65

4.4.2 Configure Management ............................................................................................................ 66

4.4.3 Configure SNMP ...................................................................................................................... 69

4.4.4 Backup / Restore and Reset to Factory ..................................................................................... 71

4.4.5 Firmware Upgrade .................................................................................................................... 72

4.4.6 Network Utility ......................................................................................................................... 73

4.4.7 Reboot ....................................................................................................................................... 74

4.5 Access To External Network With HotZONE .............................................................................. 75

4.5.1 Generate Access Ticket ............................................................................................................. 75

4.5.2 Verify Access Ticket ................................................................................................................. 77

4.5.3 HotZONE Management ............................................................................................................ 79

4.5.3.1 HotZOME Authentication ...................................................................................................... 80

4.5.3.2 Bandwidth Control ................................................................................................................. 81

4.5.3.3 Customize HotZONE Login Page ......................................................................................... 82

4.5.4 User Login With HotZONE Authentication ............................................................................. 84

4.6 Restrain the Users ......................................................................................................................... 86

4.6.1 IP Filter ..................................................................................................................................... 86

4.6.2 MAC Filter ............................................................................................................................... 88

4.6.3 Routing ..................................................................................................................................... 89

4.7 Sharing your Internal Service ....................................................................................................... 90

4.7.1 V irtual Server ............................................................................................................................ 90

4.7.2 DMZ ......................................................................................................................................... 92

4.8 More System function .................................................................................................................. 93

4.8.1 Manage Ticket Database ........................................................................................................... 93

4.8.2 Notification ............................................................................................................................... 96

4.8.3 Walled Garden List ................................................................................................................... 98

4.8.4 View Online HotZONE User .................................................................................................... 99

4.9 Observer the Status ..................................................................................................................... 100

4.9.1 System Overview .................................................................................................................... 100

4.9.2 Wireless Status ........................................................................................................................ 103

4.9.3 DHCP Client Status ................................................................................................................ 104

4.9.4 WDS List Status ..................................................................................................................... 105

4.9.5 Extra Information ................................................................................................................... 106

4.9.5.1 Show NetStatus Information ................................................................................................ 106

4.9.5.2 Show Routes Information .................................................................................................... 107

4.9.5.3 Show ARP Table Information .............................................................................................. 108

4.9.5.4 Show Bridge Table Information ........................................................................................... 109

4.9.5.5 Show Bridge MACs Information ......................................................................................... 110

4.9.6 Event Log ................................................................................................................................ 111

Appendix A. Windows TCP/IP Settings ..................................................................................... 112

Appendix B. Windows VLAN Tag Settings ............................................................................... 114

Appendix C. Valid Characters for using WMI ............................................................................ 116

Appendix D. Allowing Pop-Up Window .................................................................................... 122

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Chapter1.BeforeYouStart

1.1Preface

PheeNet WAS-103R is the most economical Light-weight but feature p acked Wireless HotSpot Gateway, targeted for small venues, mini-size stores with user-friendly operation using industrial st andard hardware platform

Previously, business owner’s can make money from providing Wireless Internet Access. Nowadays, Wireless Internet Access is almost a kind of value added service. By taking the advantages of PheeNet WAS-103R, front desk operator does not have to have IT technology background, they just need to identify the customer grade, offer the appropriate Pre-set ticket, and then charge the money (or not).

With PheeNet WAS-103R, hotspot service is getting to a new generation, easier, more convenient, and more userfriendly.

1.2PackageContents

The standard package of WAS-103R includes:

z WAS-103R x 1 z Ethernet Cable x 1 z 5dBi Omni Antenna x 2 z Quick Installation Guide x 1 z CD-ROM (with User Manual and QIG) x 1 z Power Adapter (DC 12V) x 1

It is highly recommended to use all the supplies in the package instead of substituting any components by other suppliers to guarantee best performance.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Chapter2.SystemOverview

2.1IntroductionofWAS-103R

PheeNet WAS-103R is the most economical yet feature-rich Wireless Hotspot Gateway, targeting mini-size stores who want to provide small, single-point Wireless Internet access service. W A S-103R is a perfect choice for beginners to run hotspot businesses. It does not cost a fortune to buy pile of equipment, nor does it take the skills of an expert to glue multiple applications out of multiple freeware. Feature-packed for hotspot operation, WAS-103R comes with built-in 802.11 b/g, WEB server and WEB pages for clients to login, easy customization for

branding a hotspot store, simple user/visitor account management tool, payment plans, traffic logs, IP sharing and etc. WAS-103R also brings in an extra advantage – the wall-mountable, dust-proof (IP50) metal

housing.

2.2SystemConcept

The Wireless Hotspot Gateway provides authentication, authorization and accou nting for a wired or wireless network that enables easy user authentication and accounting in public or private, wired or wireless network. It serves and managers wireless Internet access from mini to small scale operations such as coff ee shops, motels and many more.

Hotspot technology allows Internet providers to offer Internet access to customers, while applying certain Internet rules and limitations. It is very convenient for Internet cafes, hotels, airports, schools and universities. The Internet provider gets a complete real-time accounting of each customer’s time spent on the network, data amount sent, received and more. To begin browsing, a client must go through simple registration process with the provider before login to Internet access.

Many cafés now feature a wireless network environment or hotspot, so that customers can sit leisurely , drink

coffee

and work on their laptops with full Internet access at their pleasure.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

2.3HardwareDescriptions

Front Panel

1. 12V DC Injector : Attach the power cable here.

2. Reset Button :

Î Press and hold the Reset button for 2 seconds to restart system. The LED except Power indicator will be off

before restarting.

Î Press and hold the Reset button for more than 10 seconds to reset the system to default configurations.

3. LAN1/ LAN2 (PoE) :

Î In AP Mode : The LAN1/LAN2 port are for connection to external network or POE switch. Î In Hotspot Mode :

9 The clients device with VLAN Tag(ID) connect to LAN1 or LAN2 port. The port will be used by LAN port.

Administrator can access the WMI (Web Management Interface) via this port

9 LAN1 or LAN2 port is connected to external network. For example, it may connect to the ATU-Router of an

ADSL, or the port of a Cable Modem. The port will be used by WA N port.

4. Console : The Serial RS-232 DB9 cable attaches here.

Rear Panel

¾ WAS-103R supports 1 RF Interface with 2 SMA connectors for Antenna connection.

LED Panel

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

1. WLAN : Green LED FLASH indicates Wireless ON, and FLASH quickly indicates Wireless Transmit quickly.

2. LAN1/LAN2 : Green LED ON indicates connection, OFF indicates no connection, and FLASH indicates the Port Transmit

3. PWR : Green LED ON indicates power on, and OFF indicates power off.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

2.4InstallationSteps

Please follow the steps mentioned below to install the hardware of WAS-103R

1. Place the WAS-103 R at a best location.

The best location for WAS-103R is usually at the center of your wireless network.

2. Connect W AS-103R to your external network device.

Connect one end of the Ethernet cable to the LAN1 port of WAS-103R on the front panel. In your environment, connect the other end of the cable to the external Internet. The LAN1 LED indicator should be ON to indicate a proper connection.

3. Connect W AS-103R to your network device.

Connect one end of the Ethernet cable to LAN2 port of WAS-103R on the front panel. Connect the other end of cable to a PC for configuring the system. The LAN2 LED indicator should b e ON to indicate a proper connection.

4. There are two ways to supply power over to WAS-103R

I. Connect the DC power adapter to the WAS-103R p ower socket one the front panel.

Please only use the power adapter supplied with the WAS-103R package. Using a different power adapter may damage this system

II. WAS-103R is capable of transmitting DC current via its LAN1/LAN2 PoE port. Connect an IEEE 802.3af-

compliant PSE device, e.g. A PoE Switch, to the LAN1/LAN2 port of WAS-103R with the Ethernet cable.

Now, the hardware installation is completed.

To double verify the wired connection between WAS-103R and your switch/router/hub, please check the LED status indication of these network devices.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

2.5InstructiontoWebManagementInterface

WAS-103R supports web-based configuration. Upon the completion of hardware installation, WAS-103R can be configured through a PC/NB by using its web browser such as Internet Explorer version 6.0.

z Default IP Address : 192.168.2.254 z Default IP Netmask : 255.255.255.0 z Default User Name and Password : admin/default

Step

1. IP Segment Set-up for Administrator's PC

Set the IP segment of the administrator's computer to be in the same range as WAS-103R for accessing the system. Do not duplicate the IP Address used here with IP Address of WAS-103R or any other device within the network

Example of Segment :

The value for underlined area can be changed as desired; the valid range is 1 ~ 254. However, 254 shall be avoided as it is already used by WAS-103R; use 10 as an example here.

Î IP Address : 192.168.2.10 Î IP Netmask : 255.255.255.0

2. Launch Web Browser

Launch as web browser to access the web management interface of system by entering the default IP Address, http://192.168.2.254

, in the URL field, and then press Enter.

3. System Login

The system manager Login Page then appears. Enter “admin” as User name and “default” as Password, and then click OK to login to the system.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4. Login Success

When administrator login successfully, the WAS-103R web management UI should be viewe d at the St atus section under the System Overview page

This section only used on AP Mode. If you access to system on Hotspot Mode, you need configure VLAN tag(ID) on your PC/NB. Follow the Appendix B Windows VLAN Tag Setting to setup your PC/NB and configure automatically IP address

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Chapter3.APModeConfiguration

When AP mode is activated, the system can be configured as an Acce ss Point. This section provides information in configuring the AP mode with graphical illustrations. WAS-103R prov ides functions as stated below where it can be configured via a user-friendly web based interface.

Option System Wireless Utilities Status

Functions

Operating Mode General Setup Profiles Settings System Overview

LAN Advanced Setup Firmware Upgrade Wireless Status

Management Virtual AP Setup Network Utility WDS List

Time Server WDS Setup Reboot Event Log

SNMP Setup

Table 3-1: AP Mode Functions

Figure 3-1: AP Mode Main Page

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.1ConnectWAS-103RtotheexternalNetwork

3.1.1NetworkRequirement

Basically, in general network environment, the main role of WAS-103R is an Access Point,. It manages the network from internal network to Gateway.

The first step is to get a Default Gateway IP Address from system manager and connect it to the LAN1 / LAN2 port of WAS-103R

3.1.2ConfigureLANIP

Below is the instruction for setting up the local IP Address and Netmask. Please click on System -> LAN and follow the below setting.

 Mode : Check either “Static IP” or “Dynamic IP” button as desired to set up the system IP of LAN port .

Î Static IP : The administrator can manually setup the LAN IP address when static IP is available/ preferred.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

9 IP Address : The IP address of the LAN port; default IP address is 192.168.2.254 9 IP Netmask : The Subnet mask of the LAN port; default Netmask is 255.255.255.0 9 IP Gateway : The IP address of the host router which resides on the external network and provides

the point of connection to the next hop towards the internet. This can be a DSL modem, Cable modem, or a WISP gateway router. WAS-103R will direct all the packets to the gateway if the destination host is not within the local network. Default Gateway is 192.168.2.1

Gateway IP address should be from the same address space (on the same network segment) as the WAS-103R's external network interface.

Î Dynamic IP : This configuration is applicable when WAS-103R is connected to a network with the

presence of a DHCP server; all related IP information will be provided by the DHCP server automatically.

9 Hostname : The Hostname of the LAN port

 DNS : Check either “No Default DNS Server” or “Specify DNS Server IP” button as de sired to set up the

system DNS.

Î Primary : The IP address of the primary DNS server. Î Secondary : The IP address of the secondary DNS server.

 Spanning Tree Protocol: The spanning tree network protocol provides a loop free topology for any bridged

LAN. The Spanning Tree Protocol, which is also referred to as STP, is defined in the IEEE St andard 802.1d.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Change these settings as described and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.2CreateyourWirelessLANNetwork

The system manager can configure related wireless settings, General Settings, Advanced Settings, Virtual AP Setting, Security Settings, and Access Control Settings.

3.2.1WirelessGeneralSetup

The administrator can change the data transmission, channel and output power settings for the system. Please click on Wireless -> General Setup and follow the below setting.

 MAC address : The MAC address of the Wireless interface is displayed here.  Band Mode : Select an appropriate wireless band; bands available are 801.11b, 802.11g and

802.11b+802.11g.

 Transmit Rate Control : Select the desired rate from the drop-down list; the options are auto or ranging from

1 to 54Mbps for 802.11g and 802.11b/g modes, or 1 to 11Mbps for 802.11b mode.

 Country : Select the desired country code from the drop-down list; the options are US, ETSI and Japan.  Channel : The channel range will be changed by selecting different country code. The channel range from 1 to

1 1 for US country code, or 1 to 13 for ETSI country code, or 1 to 14 for Japan.

 Tx Power : Y ou can adjust the output power of the system to get the appropriate coverage for your wireless

network. Select LEVEL 1 to LEVEL 9 needed for your environment. If you are not sure of whi ch setting to choose, then keep the default setting, LEVEL 9.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes. The items in this page are for AP's RF general settings and will be applied to all VAPs.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.2.2WirelessAdvancedSetup

The administrator can change the Slot Time, ACK/CTS Timeout, RTS threshold and fragmentation threshold settings for the system. Please click on Wireless -> Advanced Setup and follow the below setting.

 Slot Time : Enter the desired slot time for the AP.  ACK Timeout : The time interval for waiting the “ ACKnowledgment frame”. If the ACK is not received within

that timeout period then the packet will be re-transmitted. Higher ACK Timeout will decrease packet lost, at the expensive of throughput decreasing.

 CTS Timeout : Enter the desired CTS timeout for the AP.

Slot Time and ACK/CTS Timeout settings for long distance links. It is important to change the value to find the optimal setting. A value too low will give very low throughput, A high value may slowdown the link.

 RSSI Threshold : RSSI Threshold can be used to control the level of noise received by the device.

 Beacon Interval : Enter a value between 10 and 5000 msec. The default value is 100 milliseconds. The

entered time means how often the beacon signal transmission between the access point an d the wireless

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

network.

 DTIM Interval : Input the DTIM Interval that is generated within the periodic beacon at a specified frequency.

Higher DTIM will let wireless client save more energy, but the throughput will decrease consecutively.

 Fragment Threshold : The value specifies the maximum size of packet allowed before data is fragme nted into

multiple packets. Please use this value to tune the wireless connection if lots of retransmissi on happens. Enter a value ranging from 256 to 2346.

 RTS Threshold : Tuning the Request to Send, RTS threshold will help the system control its access to

medium and alleviate the hidden node problem. Enter a value ranging from 1 to 2346.

 Short Preamble : The short preamble provides 56-bit Synchronization field to improve WLAN transmission

efficiency. Check Enable button for using Short Preamble, and Disable for using the Long Preamble, 128-bit Synchronization field, option.

 Tx Burst : Click Enable button to activate Tx Burst, and Disable to inactivate Tx Burst.  802.11g Protection Mode : Click Enable button to activate 802.11g Protection Mode, and Disable to

inactivate 802.11g Protection Mode.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes. Items in this page is for AP's RF advanced settings and will be applied to all VAPs.



User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.2.3CreateVirtualAP

The administrator can create Virtual AP via this page. Please click on Wireless -> Virtual AP Setup and follow the below setting.

 Enable : Click Enable button and Save button for creating Virtual AP  VAP : Display number of system's Virtual AP.  ESSID : Display Virtual AP's ESSID; default is AP00~AP07.  VLAN Tag(ID) : Display Virtual AP's VLAN Tag(ID) setting; default is disabled  Security : Display Virtual AP's Security Type; default is disabled.  ACL Mode : Display Virtual AP's ACL Mode; default is disabled.  ACL Setup : Click “Setup” button for configuring Virtual AP's Access Control List.  VAP Edit : Click “Edit” button for configu ring Virtual AP's settings and security type.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.2.3.1VirtualAPGeneralConfiguration

For each Virtual AP, administrators can configure general settings and security type. Click Wireless

-> Virtual AP, click “Edit” of Virtual AP List and then Virtual AP Configuration page appears.

 ESSID : Extended Service Set ID indicates the SSID which the clients used to connect to the VAP. ESSID will

determine the service type of a client which is assigned to the specified VAP.

 Hidden SSID : Select this option to enable the SSID to broadcast in your network. When configuring the

network, it is suggested to enable this function but disable it when the configuration is complete. With this enabled, someone could easily obtain the SSID information with the site survey sof t ware and get unauthorized access to a private network. With this disabled, network security is enhanced and can prevent the SSID from begin seen on networked.

 Client Isolation : Select Enable, all clients will be isolated from each other, that means all clients can not

reach to other clients.

 WMM : Select Enable, the packets with QoS WMM will has higher priority.  IAPP Support : Inter Access-Point Protocol is designed for the enforcement of unique association throughout

a ESS(Extended Service Set) and for secure exchange of station's security context between current access point (AP) and new AP during hand off period.

IAPP only used on WPA-PSK and WPA2-PSK security type. Only one of VAPs can be enabled

 Maximum Clients : Enter maximum number of clients to a desired number. For example, while the number of

client is set to 32, only 32 clients are allowed to connect with this VAP .

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 VLAN Tag(ID) : Virtual LAN, the system supports tagged VLAN. To enable VLAN function; valid values are

from 0 to 4094.

 Security Type : Select the desired security type from the drop-down list; the options are WEP, WPA-PSK,

WPA2-PSK, WPA-Enterprise, WPA2-Enterprise and WEP 802.1X.

Î Disable : Data are unencrypted during transmission when this option is selected. Î WEP : WEP, Wired Equivalent Privacy, is a data encryption mecha nism based on a 64-bit, 128-bit or 152-

bit shared key. Select WEP as the security type from the drop down list as desired.

9 Key Length : Select the desire option are 64 bits, 128 bits or 152 bits from drop-down list. 9 WEP auth Method : Enable the desire option among Open system or Shared. 9 Key Index : Select key index is used to designate the WEP key during data transmi ssion. 4 different

WEP keys can be configured at the same time, but only one is used. Effective key is set with a choice of WEP Key 1, 2, 3, or 4.

9 WEP Key : Enter HEX format WEP key value; the system support up to 4 sets of WEP keys.

Î WPA-PSK (or WPA2-PSK) : WPA (or WPA2) Algorithms, allows the system accessing the network by

using the WPA-PSK (WPA2-PSK) protected access.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

9 Cipher Suite : Check on the respected button to enable either AES or TKIP cipher suites; default is

TKIP.

9 Group Key Update Period : This time interval for re-keying GTK (broadcast/multica st encryption

keys) in seconds. Enter the time-length required; the default time is 600 seconds.

9 Master Key Update Period : This time interval for re-keying GMK (master key used internally to

generate GTKs) in seconds. Enter the time-length required; the default time is 83400 seconds.

9 Key Type : Check on the respected button to enable either ASCII or HEX format for the Pre-shared

Key.

9 Pre-shared Key : Enter the information for pre-shared key; the format of the information shall

according to the key type selected.

Pre-shared key can be either entered as a 256-bit secret in 64 HEX digits forma t, or 8 to 63 ASCII characters.

Î WPA-Enterprise (or WPA2-Enterprise): The RADIUS authentication and encryption will be both enabled

if this selected.

9 WPA General Settings :

• Cipher Suite : Check on the respected button to enable either AES or TKIP cipher suites.

• Group Key Update Period : This time interval for re-keying GTK (broadcast/ multicast

encryption keys) in seconds. Enter the time-length required; the default time is 600 seconds.

• Master Key Update Period : This time interval for re-keying GMK (master key used internally to

generate GTKs) in seconds. Enter the time-length required; the default time is 83400 seconds.

• EAP Reauth Period : EAP re-authentication period in se conds; default is 3600; 0 = disable re-

authentication.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

9 Authentication RADIUS Server Settings :

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

9 Secondary Authentication RADIUS Server Settings :

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î WEP 802.1X : When WEP 802.1x Authentication is enabled, please refer to the following Dynamic WEP

and RADIUS settings to complete the configuration.

9 Dynamic WEP Settings :

• WEP Key length : Check on the respected button to enable either 6 4bits or 128bits key length.

The system will automatically generate WEP keys for encryption.

• WEP Key Update Period : The time interval WEP will then be updated; the unit is in seconds;

default is 300 seconds; 0 = do not rekey.

• EAP Reauth Period : EAP re-authentication period in se conds; default is 3600; 0 = disable re-

authentication.

9 Authentication RADIUS Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Acc

ount ing Serv er Setti

ngs :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

9 Secondary Authentication RADIUS Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.2.4BlackWirelessClients

In this function, the administrator can be allow or reject clients to access V irtual AP. Please click on Wireless -> Virtual AP Setup -> ACL Setup , click “Setup” of Virtual AP List and then ACL List Configuration page appears.

Follow the below setting.

 Access Control Type : Select the desired access control type from the drop-down list; the options are Disable,

Allow or Reject. define certain wireless clients in the list which will have granted access to the Access Point while the access

will be denied for all the remaining clients – Access Control Type is set to Allow. define certain wireless clients in the list which will hav e denied access to the Access Point while the access will

be granted for all the remaining clients - Access Control Type is set to Reject.

 MAC Address : Enter MAC address in this field. There are maximum 20 clients users allowed in this MAC

address list.

The MAC Address of the wireless clients can be added and removed to the ACL List using the “Add” and “DEL” buttons. Click Reboot button to activate your changes

MAC Access Control is the weakest security approach. WPA or WPA2 security methods should be used when possible.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.3ExpandyourWirelessNetwork

The administrator can create WDS Links for expanding wireless network via this page. Please click on Wireless -> WDS Setup and follow the below setting.

 MAC address : The MAC address of the Wireless interface is displayed here.  WMM : Select Enable, the packets with QoS WMM has higher priority.  Security Type : Configure an appropriate security type for the WDS link, either Disabled or WEP; the type

needs to be the same as that configured on WDS peer.

9 Key Length : Select the desire option are 64 bits, 128 bits or 152 bits from drop-down list. 9 Key Index : Select key index is used to designate the WEP key during data transmi ssion. 4 different

WEP keys can be configured at the same time, but only one is used. Effective key is set with a choice of WEP Key 1, 2, 3, or 4.

9 WEP Key : Enter HEX format WEP key value; the system support up to 4 sets of WEP keys.

 Enable : Click Enable button to create WDS link.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 WDS Peer's MAC Address : Enter the MAC address of WDS peer.  VLAN Tag(ID) : Virtual LAN, the system supports tagged VLAN with WDS. To enable VLAN function; valid

values are from 0 to 4094; space is disabled.

 Description : Description of WDS link.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4Managethesystem

3.4.1ConfigureSystemTime

System time can be configured via this page where manual setting and NTP server configuration are both supported. Please click on System -> Time Server and follow the below setting.

 Local Time : Display the current time of the system.  Setup Time Use NTP : Enable Network Time Protocol, NTP, to synchronize the system time with NTP server.

Î Default NTP Server : Select the NTP Server from the drop-down list. Î Time Zone : Please set a time zone from where the accurate time can be supplied, (GMT+08:00) Taipei

for example.

Î Daylight saving time : Enable Daylight saving time from where the accurate time needed.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.2ConfigureManagement

The administrator can later obtain the geographical location of the system via th e information configured here. The administrator also can change system password and configure system login methods. Please click System -> Management and follow the below settings.

 System Information

Î System Name : Enter a desired name or use the default provided. Î Description : Denote further information of the system. Î Location : Enter related geographical location information of the system; administrator/manager will be

able to locate the system easily.

 Admin Password : The admin manager can change its respected password. Enter the new password, and

then verify the new password in the Check New Password filed. Click Save button to activate the new password.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î New Pass word : Please in put the new password of administrator . Î Check New Password : Please input again the new password of administrator.

 Admin Login Methods : The admin manager can enable or disable system login methods, it also can cha nge

services port. Click Save button to activate the admin login methods.

Î Enable HTTP : Select Enable HTTP to activate HTTP Service Î HTTP Port : Please input 1 ~ 65535 value to set HTTP Port; default value is 80 Î Enable HTTPS : Select Enable HTTP to activate HTTP Service Î HTTPS Port : Please input 1 ~ 65535 value to set HTTP Port; default value is 443

If you already have an SSL Certificate, please click “UploadKey” button to select the file and upload it.

Î Enable Telnet : Select Enable HTTP to activate HTT P Service Î Telnet Port : Please input 1 ~ 65535 value to set HTTP Port; default value is 23 Î Enable SSH : Select Enable HTTP to activate HTTP Service Î SSH Port : Please input 1 ~ 65535 value to set HTTP Port; default value is 22

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Click “GenerateKey” button to generate RSA private key. The “Display the host key footprint” gray blank will be show content of RSA key.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

Without a valid certificate, users may encounter the following problem in IE7 when they try to access WAS-103R's WMI (https://192.168.2.254

). There will be a “Certificate Error”, because the browser treats WAS-103R as an illegal

website.

Click “Con

tinue to this web site”

to acce ss the WAS

103R 's

WMI. The WAS-103R's Overview page will be appear.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.3ConfigureSNMP

SNMP is an application-layer protocol that provides a message of format for communication between SNMP managers and agents. By enabling SNMP function, the administrator can obtain the system information remotely. Please click on System -> SNMP Setup and follow the below setting.

 v

2 c :

C h e c

k v2c button to activate SNMP v2c agent or unchecked to deactivate this function.

Î ro community : Enter the community strings that allows read-only access to the system's SNMP

information.

Î rw community : Enter the community strings that allows read/write access to the system's SNMP

information.

 v3 : Check v3 button to activate SNMP v3 agent or unchecked to deactivate this function. SNMPv3 supports

the highest available levels of security for SNMP communication.

Î SNMP ro user : Enter the community strings that allows read-only access to the system's SNMP

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

information.

Î SNMP ro password : Enter the password that allows read-only access to the system's SNMP informatio n. Î SNMP rw user : Enter the community strings that allows read/write access to the system's SNMP

information.

Î SNMP rw password : Enter the password that allows read/write access to the system's SNMP

information.

 SNMP Trap : Events on cold start, interface up & down, and association & disassociation can be reported via

this function to an assigned server.

Î Community : Enter the community strings required by the remote host computer that will receive trap

messages or notices send by the system.

Î IP : Enter the IP address of the remote host computer that will receive the trap messages.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.4Backup/RestoreandResettoFactory

Current settings on the system can be backed up, or previous backed up settings can be restored as well as resetting the system back to factory default can be performed via this page. Please click on Utilities -> Profile Setting and follow the below setting.

 Save Settings to PC : Click Save button to save the current system settings to a local disk, i.e. the HDD of a

local computer or Compact Disc.

 Load Settings from PC : Click Browse button to search for a previously saved backup file, and then click

Upload button to upload the settings; the system will then be configured to the same settings as specified by

the backup file.

 Restore To Factory Default : Click Restore button to load the factory default settings of WAS-103R, and then

Success Message page appears. Click Reboot button to set default configuration.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.5FirmwareUpgrade

The administrator can download the latest firmware from website and upgrade the system. Click “Browser...” button to search for the firmware file and click “Upgrade” for firmware upgrade. It might take a few minutes before upgrade process completes and the system needs to be restarted to activate the new firmware.

1. To prevent data loss during firmware upgrade, please back up the current settings before proceeding to firmware upgrade.

2. Please restart the system after the upgrade. Do not interrupt the system, i.e. power on/off, during the upgrading process or the restarting process as this may damage system.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.6NetworkUtility

The administrator can diagnose the network connectivity via this function. Please click on Utilities -> Network Utility and follow the below setting.

 Ping : This utility will ping other devices on the network directly from the WAS-103R.

Ping utility should be used for the preliminary link quality and packet latency estimation between two network devices using the ICMP packets. Packet loss statistics and latency time evaluation is provided after the test is completed.

 Trace Route : Allows tracing the hops from the W AS-103R to a selected outgoing IP address. It should be

used for the finding the route taken by ICMP packets across the network to the destination host.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.4.7Reboot

This function allows the administrator to safely restart the WAS-103R. Click Reboot to restart the system immediately, and the whole process will take about three minutes to complete.

The Restart page as displayed below appears durin g the rebooting period. If turning off the power is necessary, please allow the restart process to be completed before turning off the system.

The System Overview page appears upon the completion of reboot.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.5ObservertheStatus

3.5.1SystemOverview

Detailed information on System and LAN Information can be reviewed via this page.

 System : Display the information of the system.

Î System Name : The name of the system. Î Operating Mode : The mode currently in service. Î Firmware Version : The current firmware version installed. Î Firmware Date : The build time of the firmware installed. Î Location : The reminding note on the geographical location of system. Î Description : The reminding note on the description of system. Î System Time : The current time of the system. Î System Up Time : The time period that the system has been in service since last boot-up.

 LAN Information : Display the information of the LAN interface.

Î MAC Address : The MAC address of the LAN port. Î Mode : The current mode of the LAN port. Î IP Address : The IP address of the LAN port. Î IP Netmask : The IP netmask of the LAN port. Î IP Gateway : The gateway IP address of the LAN port.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î Primary DNS : The current primary DNS server of the system. Î Secondary DNS : The current secondary DNS server of the system. Î Receive bytes :The current receive bytes of the LAN port. Î Receive packets : The current receive packets of the LAN port. Î Transmit bytes : The current transmit bytes of the LAN port. Î Transmit packets : The current transmit packet s of the LAN port.



User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.5.2WirelessStatus

The administrator can obtain detailed wireless information and all associ ated clients status via this page.

 Wireless Information : Display the Virtual AP configuration information of the system.

Î VAP : Display number of system's Virtual AP. Î ESSID : Extended Service Set ID of the Virtual AP. Î Status : Display Virtual AP statu s currently. Î Security Type : Security type activated by the Virtual AP. Î Clients : Number of clients currently associated to the Virtual AP.

 Associated Client Status : Display the Virtual AP configuration information of the system.

Î AP : Virtual AP which the device is associated with. Î ESSID : ESSID which the device is associated with. Î RSSI : Indicate the RSSI of the respective client's association. Î Last TX Time : Indicate the time (in seconds) since last packet was received from the particular station. Î Disconnect : Administrator can kick out a specific client, click “Kick” button to kick out specific client

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.5.3WDSListStatus

The administrator can obtain detailed Information such as WDS, Status, MAC Address, RSSI, and Last Tx Time of all WDS link via this page.

 WDS: WDS which the device is linked with.  Status: Display WDS status.  MAC Address: Display MAC address of WDS peer.  RSSI: Indicate the RSSI of the respective WDS linked.  Last TX time: Indicate the last receive packet of the respective WDS linked.

If RSSI display 0, you need check WDS configuration. Verify MAC Address, Channel and Security Type are the same; also adjust system's antenna angle. When WDS link used on long distance, you need adjust Transmit Rate Control, Slot Time and ACK/CTS Timeout.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

3.5.4EventLog

The reported system events can be reviewed here.

 Date/ Time: The date and time when the event occurred.  Hostname: The name of the host which records the event. It helps the administrator identify the source of the

reported events.

 Process name (with square brackets): Indicate the process with which the specific event is associated.  Description: Description of the event.

Click Refresh button to renew the log, or click Clear button to clear all the record.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Chapter4.HotspotModeConfiguration

When Hotspot mode is activated, the system can be configured as a Wireless Hotspot Gateway. This section provides information in configuring the Hotspot mode with graphical illustrations. WAS-103R provides functions as stated below where they can be configured via a user-friendly web based interface.

Option System HotZONE Wireless Advance Utilities Status

Functions

Operating

Mode

HotZONE

General

Setup

IP Filter

Profiles

Settings

System Overview

WAN Generate Ticket

Advanced

Setup

MAC Filter

Firmware

Upgrade

Wireless Status

VLAN Ticket List

Virtual AP

Setup

Virtual Server

Network

Utility

DHCP Client

DDNS Setup

Ticket

Management

WDS Setup DMZ Reboot WDS List

Management

Walled Garden

List

Routing Extra Info

Time Server Notification Event Log

SNMP Setup Online User

Table 4-1: Hotspot Mode Functions

Figure 4-1: Hotspot Mode Main Page

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.1ConnectWAS-103RtotheexternalNetwork

4.1.1NetworkRequirement

Basically, in general network environment, the main role of WAS-103R is a Gateway. It manages all the network from internal network to Internet.

Then, the first step is to prepare an Internet connection from your ISP and connect it to the LAN1 or LAN2 port of WAS-103R

4.1.2ConfigureWANPort

Here is instruction for how to setup the WAN. There are three connection types for the WAN port : Static IP, Dynamic IP and PPPoE, Please click on System -> WAN and follow the below setting.

 Static IP : The administrator can manually setup the WAN IP address when static IP is available/ preferred.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î IP Address : The IP address of the WAN port; default IP address is 192.168.1.254 Î IP Netmask : The Subnet mask of the WAN port; default Netmask is 255.25 5.255.0 Î IP Gateway : The IP address of the host router which resides on the external network and provides the

point of connection to the next hop towards the internet. This can be a DSL modem, Cable modem, or a WISP gateway router . WAS-103R will direct all the packets to the gateway if the destination host is not within the local network. Default Gateway is 192.168.1.1

Gateway IP address should be from the same address space (on the same network segment) as the WAS-103R's external network interface.

 Dynamic IP : This configuration type is applicable when the WAS-103R is connected to a net work with the

presence of a DHCP server; all related IP information will be provided by the DHCP server automatically. If the IP Address do not assigned from DHCP server, the system need manual connect to DHCP server. Please refer to Section 4.9.1- System Overview (WAN Information)

Î Hostname : The Hostname of the WAN port

 PPPoE : This configuration type is applicable when the WAS-103R is connected to a network with the

presence of a PPPoE server.

Î User Name : Enter User Name for PPPoE connection

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î Password : Enter Password for PPPoE connection Î MTU : MTU stands for Maximum Transmission Unit. For PPPoE connections, you may need to set the

MTU setting in order to work correctly with your ISP. Default is 1492 bytes.

Î Idle Time : The time of inactivity before disconnecting your PPPoE session. Enter an Idle Time (in minutes)

to define a maximum period of time for which the Internet connect is maintained during inactivity. If the connection is inactive for longer than the defined Idle Time, then the connection will be dropped.

 DNS : Check either “No Default DNS Server” or “Specify DNS Server IP” button as de sired to set up the

system DNS.

Î Primary : The IP address of the primary DNS server. Î Secondary : The IP address of the secondary DNS server.

 MAC Address Clone : The MAC address is a 12-digit code assi gned to a unique piece of hardware for

identification, like a social security number . Some ISPs require you to register a MAC address in order to access the Internet. If you do not wish to re-register the MAC address with your ISP, you may assign the MAC address you have currently registered with your ISP to the system using the MAC Address Clone feature.

Î Keep Default MAC Address : Keep the default MAC address of WAN port on the system. Î Clone MAC Address : If you want to clone the MAC address of the PC you are currently using go

configure the system, then click the Clone MAC Address button. The system will automatically detect your PC's MAC address.

The Clone MAC Address field will display MAC address of the PC you are conn ected with the system currently.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î Manual Address : Enter the MAC address registered with your ISP.

 WAN Connection WatchDog : The administrator can enable this function, the system will try to access

remote IP Address. If the system can not reach these IP Address, system will be “Login Out” online users automatically with HotZONE authentication

Î Enable Detection : Click on “Enable Detection” to enable WAN Connection W a tchDog function, the

correlation setting should show-up

Î IP Address To Detect: Specify an IP Address of the target host which will detect by WAN Connection

WatchDog

Î Detection Interval: Specify time interval (in seconds) between 1 to 3600; default is 60 seconds Î Failure Count: Specify the number of failure response count between 1 to 99; default is 3 Î No Response To Active: Select “Online User Still Login” or “Online User Logout Automatically” for system

action after failure detect

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.1.3ConfigureDynamicDNS

Dynamic DNS allows you to make an assumed name as a dynamic IP address to a static hostname. Please click on System -> DDNS Setup and follow the below setting.

 Enabled: Select Enable for DDNS function, each time your IP address for WAN is changed, the information

will be updated to DDNS service provider automatically.

 Service Provider: Select the correct Service Provider from the drop-down list, here included are dyndns, dhs,

ods and tzo embedded in the WAS-103R.

 Hostname: This field represents the Host Name you register to Dynamic-DNS service and expect to export to

the world.

 User Name & Password: User Name and Password is used as an identity to login DDNS service.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.1.4ConfigureVLANIP

Here is the instruction for how to setup the local VLAN IP Address and Netmask. Please click on System -> VLAN , the VLAN List should be appear. Click “Edit” button on this page, the setup page should be appear. Follow the below setting.

 VLAN Tag(ID): Virtual LAN, the system supports tagged VLAN. To enable VLAN function; valid values are

from 0 to 4094.

 IP Address: The IP address of the VLAN port; default IP address is 192.168.100.1 to 192.168.107.1  IP Netmask: The Subnet mask of the VLAN port; default Netmask is 255.255.255.0  STP: The spanning tree network protocol provides a loop free topology for any bridged LAN. The Spanning

Tree Protocol, which is also referred to as STP, is defined in the IEEE St andard 802.1d.

 Start IP / End IP: Specify the range of IP addresses to be used by the DHCP server when assigning IP

address to clients.

 DNS1 / DNS2 IP: The Domain Name System (DNS) is an internet "phone book" which translates domain

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

names to IP addresses. These fields identify the server IP addre sses where the DNS requests are forwarded by the WAS-103R.

DNS1 server IP is mandatory. It is used by the DNS Proxy and for the device management purpose. DNS2 server IP address is optional. It is used as the fail-over in case the primary DNS server will become

unresponsive.

 WINS IP: Enter IP address of the Windows Internet Name Service (WINS) server; this is optional.  Domain: Enter the domain name for this network.  Lease Time: The IP addresses given out by the DHCP server will only be valid for the duration specified by

the lease time. Increasing the time ensure client operation without interrupt, but could introduce potential conflicts. Lowering the lease time will avoid potential address conflicts, but might cause more slight interruptions to the client while it will acquire new IP addresses from the DHCP server.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.2CreateyourWirelessLANNetwork

The system manager can configure related wireless settings, General Settings, Advanced Settings, Virtual AP Setting, Security Settings, and Access Control Settings.

4.2.1WirelessGeneralSetup

The administrator can change the data transmission, channel and output power settings for the system. Please click on Wireless -> General Setup and follow the below setting.

 MAC address : The MAC address of the Wireless interface is displayed here.  Band Mode : Select an appropriate wireless band; bands available are 801.11b, 802.11g and

802.11b+802.11g.

 Transmit Rate Control : Select the desired rate from the drop-down list; the options are auto or ranging from

1 to 54Mbps for 802.11g and 802.11b/g modes, or 1 to 11Mbps for 802.11b mode.

1 1 for US country code, or 1 to 13 for ETSI country code, or 1 to 14 for Japan.

 Tx Power : Y ou can adjust the output power of the system to get the appropriate coverage for your wireless

network. Select LEVEL 1 to LEVEL 9 needed for your environment. If you are not sure of whi ch setting to choose, then keep the default setting, LEVEL 9.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes. The items in this page is for AP's RF general settings and will be applied to all VAPs.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.2.2WirelessAdvancedSetup

 Slot Time : Enter the desired slot time for the AP.  ACK Timeout : The time interval for waiting the “ ACKnowledgment frame”. If the ACK is not received within

that timeout period then the packet will be re-transmitted. Higher ACK Timeout will decrease packet lost, at the expensive of throughput decreasing..

 CTS Timeout : Enter the desired CTS timeout for the AP.

 RSSI Threshold : RSSI Threshold can be used to control the level of noise received by the device.

 Beacon Interval : Enter a value between 10 and 5000 msec. The default value is 100 milliseconds. The

entered time means how often the beacon signal transmission between the access point an d the wireless

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

network.

 DTIM Interval : Input the DTIM Interval that is generated within the periodic beacon at a specified frequency.

Higher DTIM will let the wireless client save energy more, but the throughput will be growing worse.

 Fragment Threshold : The value specifies the maximum size of packet allowed before data is fragme nted into

multiple packets. Please use this value to tune the wireless connection if lots of retransmissi on happens. Enter a value ranging from 256 to 2346.

 RTS Threshold : Tuning the Request to Send, RTS threshold will help the system control its access to

medium and alleviate the hidden node problem. Enter a value ranging from 1 to 2346.

 Short Preamble : The short preamble provides 56-bit Synchronization field to improve WLAN transmission

efficiency. Check Enable button for using Short Preamble, and Disable for using the Long Preamble, 128-bit Synchronization field, option.

 Tx Burst : Click Enable button to activate Tx Burst, and Disable to inactivate Tx Burst.  802.11g Protection Mode : Click Enable button to activate 802.11g Protection Mode, and Disable to

inactivate 802.11g Protection Mode.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes. The items in this page is for AP's RF advanced settings and will be applied to all VAPs.



User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.2.3CreateVirtualAP

The administrator can create Virtual AP via this page. Please click on Wireless -> Virtual AP Setup and follow the below setting.

 Enable : Click Enable button and Save button for creating Virtual AP  VAP : Display number of system's Virtual AP.  ESSID : Display Virtual AP's ESSID; default is AP00~AP07.  VLAN Port: Display which VLAN Port used on each VAP  Encryption : Display Virtual AP's Security Type; default is disabled.  ACL Mode : Display Virtual AP's ACL Mode; default is disabled.  ACL Setup : Click “Setup” button for configuring Virtual AP's Access Control List.  EDIT : Click “Edit” button for configuring Virtual AP's settings and security type.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.2.3.1VirtualAPGeneralConfiguration

For each Virtual AP, administrators can configure general settings and security type. Click Wireless

-> Virtual AP, click “Edit” of Virtual AP List and then Virtual AP Configuration page appears.

 ESSID : Extended Service Set ID indicates the SSID which the clients used to connect to the VAP. ESSID will

determine the service type of a client which is assigned to the specified VAP.

 Hidden SSID : Select this option to enable the SSID to broadcast in your network. When configuring the

 Client Isolation : Select Enable, all clients will be isolated from each other, that means all clients can not

reach to other clients.

 WMM : Select Enable, the packets with QoS WMM will has higher priority.  IAPP Support : Inter Access-Point Protocol is designed for the enforcement of unique association throughout

a ESS(Extended Service Set) and for secure exchange of station's security context between current access point (AP) and new AP during hand off period.

IAPP only used on WPA-PSK and WPA2-PSK security type. Only one of VAPs can be enabled

 Maximum Clients : Enter maximum number of clients to a desired number. For example, while the number of

client is set to 32, only 32 clients are allowed to connect with this VAP .

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 VLAN Port : Select the desired VLAN Port from the drop-down list; the options are VLAN0 to VLAN7. The

detailed VLAN Port setting need combine with section 4.1.3 Configure VLAN IP.

 Security Type : Select the desired security type from the drop-down list; the options are WEP, WPA-PSK,

WPA2-PSK, WPA-Enterprise, WPA2-Enterprise and WEP 802.1X.

Î Disable : Data are unencrypted during transmission when this option is selected. Î WEP : WEP, Wired Equivalent Privacy, is a data encryption mecha nism based on a 64-bit, 128-bit or 152-

bit shared key. Select WEP as the security type from the drop down list as desired.

9 Key Length : Select the desire option are 64 bits, 128 bits or 152 bits from drop-down list. 9 WEP auth Method : Enable the desire option among Open system or Shared. 9 Key Index : Select key index used to designate the WEP key during data transmissi on. 4 different

WEP keys can be configured at the same time, but only one is used. Effective key is set with a choice of WEP Key 1, 2, 3, or 4.

9 WEP Key : Enter HEX format WEP key value; the system support up to 4 sets of WEP keys.

Î WPA-PSK (or WPA2-PSK) : WPA (or WPA2) Algorithms, allows the system accessing the network by

using the WPA-PSK (WPA2-PSK) protected access.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

9 Cipher Suite : Check on the respected button to enable either AES or TKIP cipher suites; default is

TKIP.

9 Group Key Update Period : This time interval for re-keying GTK (broadcast/multicast encryption

keys) in seconds. Enter the time-length required; the default time is 600 seconds.

9 Master Key Update Period : This time interval for re-keying GMK (master key used internally to

generate GTKs) in seconds. Enter the time-length required; the default time is 83400 seconds.

9 Key Type : Check on the respected button to enable either ASCII or HEX format for the Pre-shared

Key.

9 Pre-shared Key : Enter the information for pre-shared key; the format of the information shall

according to the key type selected.

Pre-shared key can be either entered as a 256-bit secret in 64 HEX digits forma t, or 8 to 63 ASCII characters.

Î WPA-Enterprise (or WPA2-Enterprise): The RADIUS authentication and encryption will be both enabled

if this selected.

9 WPA General Settings :

• Cipher Suite : Check on the respected button to enable either AES or TKIP cipher suites.

• Group Key Update Period : This time interval for re-keying GTK (broadcast/ multicast

encryption keys) in seconds. Enter the time-length required; the default time is 600 seconds.

• Master Key Update Period : This time interval for re-keying GMK (master key used internally to

generate GTKs) in seconds. Enter the time-length required; the default time is 83400 seconds.

• EAP Reauth Period : EAP re-authentication period in se conds; default is 3600; 0 = disable re-

authentication.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

9 Authentication RADIUS Server Settings :

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

9 Secondary Authentication RADIUS Server Settings :

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î WEP 802.1X : When WEP 802.1x Authentication is enabled, please refer to the following Dynamic WEP

and RADIUS settings to complete the configuration.

9 Dynamic WEP Settings :

• WEP Key length : Check on the respected button to enable either 6 4bits or 128bits key length.

The system will automatically generate WEP keys for encryption.

• WEP Key Update Period : The time interval WEP will then be updated; the unit is in seconds;

default is 300 seconds; 0 = do not re-key.

• EAP Reauth Period : EAP re-authentication period in se conds; default is 3600; 0 = disable re-

authentication.

9 Authentication RADIUS Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Acc

ount ing Serv er Setti

ngs :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

9 Secondary Authentication RADIUS Server Settings :

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

• Authentication Server : Enter the IP address of the Authentication RADIUS server.

• Port : The port number used by Authentication RADIUS server. Use the default 1812 or e nte r

port number specified.

• Shared secret : The secret key for system to communicate with Authentication RADIUS server.

Support 1 to 64 characters.

• Accounting Server : Check on the respected button to enable either Enable or Disable

accounting RADIUS server .

9 Accounting Server Settings :

• Accounting Server : Enter the IP address of the Accounting RADIUS server.

• Port : The port number used by Accounting RADIUS server. Use the default 1813 or enter p ort

number specified.

• Shared Secret : The secret key for system to communicate with Accounting RADIUS server.

Support 1 to 64 characters.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.2.4BlockWirelessClients

Follow the below setting.

 Access Control Type : Select the desired access control type from the drop-down list; the options are Disable,

Allow or Reject. define certain wireless clients in the list which will have granted access to the Access Point while the access

be granted for all the remaining clients - Access Control Type is set to Reject.

 MAC Address : Enter MAC address in this field. There are maximum 20 clients users allowed in this MAC

address list.

The MAC Address of the wireless clients can be added and removed to the ACL List using the “Add” and “DEL” buttons. Click Reboot button to activate your changes

MAC Access Control is the weakest security approach. WPA or WPA2 security methods should be used when possible.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.3ExpandyourWirelessNetwork

The administrator can create WDS Links for expanding wireless network via this page. Please click on Wireless -> WDS Setup and follow the below setting.

 MAC

Address : The MAC address of the Wireless interface is displayed here.

 WMM : Select Enable, the packets with QoS WMM has higher priority.  Security Type : Configure an appropriate security type for the WDS link, either Disabled or WEP; the type

needs to be the same as that configured on WDS peer.

9 Key Length : Select the desire option are 64 bits, 128 bits or 152 bits from drop-down list. 9 Key Index : Select key index is used to designate the WEP key during data transmi ssion. 4 different

WEP keys can be configured at the same time, but only one is used. Effective key is set with a choice of WEP Key 1, 2, 3, or 4.

9 WEP Key : Enter HEX format WEP key value; the system support up to 4 sets of WEP keys.

 Enable : Click Enable button to create WDS link.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 WDS Peer's MAC Address : Enter the MAC address of WDS peer.  VLAN Port : Select the desired VLAN Port from the drop-down list; the options are VLAN0 to VLAN7. The

detailed VLAN Port setting need combine with section 4.1.3 Configure VLAN IP.

 Description : Description of WDS link.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4ManagetheSystem

4.4.1ConfigureSystemTime

System time can be configured via this page where manual setting and NTP server configuration are both supported. Please click on System -> Time Server and follow the below setting.

 Local Time : Display the current time of the system.  Setup Time Use NTP : Enable Network Time Protocol, NTP, to synchronize the system time with NTP server.

Î Default NTP Server : Select the NTP Server from the drop-down list. Î Time Zone : Please set a time zone from where the accurate time can be supplied, (GMT+08:00) Taipei

for example.

Î Daylight saving time : Enable Daylight saving time from where the accurate time needed.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.2ConfigureManagement

 System Information

able to locate the system easily.

 Admin Password : The admin manager can change its respected password. Enter the new password, and

then verify the new password in the Check New Password filed. Click Save button to activate the new password.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î New Pass word : Please in put the new password of administrator . Î Check New Password : Please input again the new password of administrator.

 Admin Login Methods : The admin manager can enable or disable system login methods, it also can cha nge

services port. Click Save button to activate the admin login methods.

If you already have an SSL Certificate, please click “UploadKey” button to select the file and upload it.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Click “GenerateKey” button to generate RSA private key. The “Display the host key footprint” gray blank will be show content of RSA key.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

Without a valid certificate, users may encounter the following problem in IE7 when they try to access WAS-103R's WMI (https://192.168.2.254

). There will be a “Certificate Error”, because the browser treats WAS-103R as an illegal

website.

Click “Con

tinue to this web site”

to acce ss the WAS

103R 's

WMI. The WAS-103R's Overview page will be appear.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.3ConfigureSNMP

 v

2 c :

C h e c

k v2c button to activate SNMP v2c agent or unchecked to deactivate this function.

Î ro community : Enter the community strings that allows read-only access to the system's SNMP

information.

Î rw community : Enter the community strings that allows read/write access to the system's SNMP

information.

 v3 : Check v3 button to activate SNMP v3 agent or unchecked to deactivate this function. SNMPv3 supports

the highest available levels of security for SNMP communication.

Î SNMP ro user : Enter the community strings that allows read-only access to the system's SNMP

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

information.

Î SNMP rw password : Enter the password that allows read/write access to the system's SNMP

information.

 SNMP Trap : Events on cold start, interface up & down, and association & disassociation can be reported via

this function to an assigned server.

Î Community : Enter the community strings required by the remote host computer that will receive trap

messages or notices send by the system.

Î IP : Enter the IP address of the remote host computer that will receive the trap messages.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.4Backup/RestoreandResettoFactory

 Save Settings to PC : Click Save button to save the current system settings to a local disk, i.e. the HDD of a

local computer or Compact Disc.

 Load Settings from PC : Click Browse button to search for a previously saved backup file, and then click

Upload button to upload the settings; the system will then be configured to the same settings as specified by

the backup file.

 Restore To Factory Default : Click Restore button to load the factory default settings of WAS-103R, and then

Success Message page appears. Click Reboot button to set default configuration.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.5FirmwareUpgrade

The administrator can download the latest firmware from website and upgrade the system here. Click “Browser...” button to search for the firmware file and click “Upgrade” for the firmware upgrade. It might take a few minutes before the upgrade process completes and the system needs to be restarted to activate the new firm ware.

1. To prevent data loss during firmware upgrade, please back up the current settings before proceeding to

firmware upgrade.

2. Please restart the system after the upgrade. Do not interrupt the system, i.e. power on/off, during the

upgrading process or the restarting process as this may damage system.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.6NetworkUtility

The administrator can diagnose the network connectivity via this function. Please click on Utilities -> Network Utility and follow the below setting.

 Ping : This utility will ping other devices on the network directly from the WAS-103R.

 Trace Route : Allows tracing the hops from the WAS-103R device to a selected outgoing IP address. It should

be used for finding the route taken by ICMP packets across the network to the destination host.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.4.7Reboot

This function allows the administrator to safely restart the WAS-103R. Click Reboot to restart the system immediately, and the whole process will take about three minutes to complete.

The Restart page as displayed below appears durin g the rebooting period. If turning off the power is necessary, please allow the restart process to be completed before turning off the system.

The System Overview page appears upon the completion of reboot.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5AccessToExternalNetworkWithHotZONE

4.5.1GenerateAccessTicket

This section is for administrators to pre-built authentication ticket for entire external Network. There are three types of time policy ticket can be generated (One Time, Multiple Times and Unlimited Until Lifetime). Please click on HotZONE -> Generate Ticket and follow the below setting.

 Passcode Type: There are different passcode type of ticket for the ticket database s: All Digit, All Letters,

Mix Letter Digit. Select All Letters o r Mi x Letter Digit, the sub-item should be shown-up. Select desired

excluding letters for passcode of ticket databases.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 Passcode Length: Specify desired passcode length between 8 to 32 for the ticket databases  Time Policy: There are different timing policy of ticket for the ticket databases: One Time, Multiple Times and

Unlimited Until Lifetime. Select One Time or Multiple Times, the sub-item should be shown-up. Fill desired service time on this blank field for the ticket databases. Default is 60 minutes, 527040 minutes is maximum

 Effective Starting Time: Specify desired effective starting time for generated ticket databases  Effective Ending Time: Specify desired effective en ding time for generated ticket databases  Price: The unit price of ticket databases  Currency: Select currency from drop-down list for generated ticket databases  Description: Enter the ticket databases description  File ID: Enter the 8 hex digit number for identifying ticket databases  Quantity of Tickets: Specify desired quantity of tickets for databases

Click Generate button for generate ticket databases. Click Reboot button to activate your changes.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5.2VerifyAccessTicket

After generating access tickets data bases, the administrator can verify information of ticket databases on “Ticket List” page. Click on HotZONE -> Ticket List, the Ticket List Page should be appear. Below depicts an example

for Ticket List.

Click “Info” button to view information of each ticket databases, and click “Del” button to remove ticket dat abases on system. Below depicts an example for information of ticket databases.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 File ID: Identifying ticket databases  Description: Denote information of the ticket databases  Effective Starting Time: Denote effective starting time of the ticket databases  Effective Ending Time: Denote effective ending time of the ticket databases  Time Policy: Denote time policy of the ticket databases  Passcode Type: Denote passcode type of the ticket databases  Passcode Length: Denote ticket's passcode length  Quantity: Denote ticket's quantity in databases  Price: Denote ticket's unit price and currency  Passcode: User can used passcode for access HotZONE Network  Available Time: The ticket can available to use  Open Time: The ticket used for the first time  Last Login Time: Denote the ticket last login time

Click “Refresh” button to renew this page.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5.3HotZONEManagement

After generating the ticket databases, the administrator can configure HotZONE authentication with ticket databases. Click HotZONE, the HotZONE Management Page should be app ear.

 VLAN Port: Here should show VLAN0 to VLAN7. It indicates the system bind HotZONE to VLAN setting.

(Section 4.1.3 Configure VLAN IP)

 Auth Type: There should show “none” or “passcode DB”. The “none” indicate the VLAN without HotZONE

authentication. The “passcode DB” indicate the VLAN with HotZONE authentication

 Redirect URL: Here is the URL of a Web site as the homepage for each HotZONE authentic ation. Once

logged in successfully, users will be directed to this homepage.

 Login Page: Here should be show “template” or “upload”. The “template” indicates the administrator use

system's template for HotZONE Login Page. The “upload” indicate the administrator upload customization HotZONE Login Page .

 Edit: Click “Edit” button to edit each HotZONE. The HotZONE Setup page will be appear.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5.3.1HotZOMEAuthentication

The administrator can create HotZONE with authentication. The default HotZONE is without authentication.

 Auth Type: Select “Auth Type” in “HotZONE With Tickets DB”, the “Ticket DB“ setting should show-up

 Tickets DB: This field should be display “Generate Ticket” setting link and ticket databases.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

If administrator select “HotZONE with Tickets DB” in “Auth Type” and without ticket DB selected. The users can not connect this HotZONE, because the passcode of ticket databases is not on this HotZONE. About generate ticket setting, please go to section 4.5.1 Generate Access Ticket

 Login Timeout: If user has idled with no network activities, the system will automatically kick out the user. The

 Redirect URL: Set the URL of a Web site as the homepage for each HotZONE authentication. Once logged in

successfully, users will be directed to this homepage.

4.5.3.2BandwidthControl

The administrator can control upload and download bandwidth with each HotZONE.

 Upload: Specify the maximum bandwidth value (in kilobit s pe r second) for traffic passing from VLAN to W A N.

The upload bandwidth can be set between 0 to 102400 kbs, and the default valu e is 0, 0 is unlimited.

 Download: Specify the maximum bandwidth value (in kilobits per second) for traffic passing from WAN to

VLAN. The download bandwidth can be set between 0 to 102400 kbs, and the default value is 0, 0 is unlimited.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5.3.3CustomizeHotZONELoginPage

Here are several user's login and logout pages that can be customized by administrator. Administrator can select Template Page or Upload Customize Page.

 Template Page:

Choose Template Page to make a customized login page. Click select to pick up a color and then fill in all of the banks. You also can use Color Template for your template. If you use Color Template, please click “Apply” button to change all color. You can change the text as your wish. After finishing the setting, Click “Save” button and “Preview” button to see the result.

 Upload Page:

Choose the Upload Page selection and click “Upload” button to upload the designated page and photo. The upload files will be listed on the File List field. Below depicts an example for upload File List.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

If administrator select “Upload Page” in “Login Page Setting”, the Login.html and Logout.html must included in File List. The errormsg.html is optional

The User-defined Login and Logout page must include the following HTML codes with red light to provide the necessary fields for Passcode, Effective Time Informations and ERROR Messages.

Î Login Page: The file name is “Login.html”

<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <title>Login page</title> </head> <body> <form action="/login/login.cgi" method="post">

P ASSCODE : <input type="text" name="username" value="" size="30" max l ength="32"> <input type="submit" name="submit" value="Login"> </form>

</body> </html>

Î Logout Page: The file name is “Logout.html”

<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <title>Timer page</title> <?timer> </head> <body> <form action="/login/logout.cgi" method="post"> <input type="submit" name="submit" value="Logout"> </form> <div id="msg"></div> </body> </html>

Î Login Error Page: The file is “errormsg.html”

<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <title>error page</title> </head> <body> <?errormsg> </body> </html>

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.5.4UserLoginWithHotZONEAuthentication

 An Example of User Login with HotZONE

Normally, users will be authenticated before they get network access through WAS-103R. This section presents the authentication flow for end users. Please make sure that the WAS-103R is configured properly and network related setting are done.

1. Open an Internet browser and try to connect to any website.

9 When the system enable secure HTTPS for Web server.

A.) For the first time, if the WAS-103R is not using trusted SSL Certificate, there will be a “Certificate

Error”, because the browser treats WAS-103R as an illegal website.

B.) Please press “Continue to this website” to continue. C.) The HotZONE Login Page will appear in the browser.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

If HotZONE Login Page doesn't appear in the browser, please “Turn Off Pop On Blocker”. More detailed see Appendix D Allowing Pop-Up Window

9 When the system disable secure HTTPS for Web server, the HotZONE Login Page will appear in the

browser.

2. Enter the Passcode of ticket and then click “Login” button. Below depicts all error message s o n Login Page.

Î Ticket ERROR: No match passcode on this HotZONE Î Time is running out: The ticket is run out of time Î Time expired: The ticket exceeded effective ending time Î Current time before effective starting time: The eff ective starting time not arrival Î WAN connection failed: System detect connection failure for WAN port. Please check WAN connection

setting of system.

Î Maximum connections reached: Over the system's login with HotZONE authentication (Maximum is 200)

3. Successful! The Timer Page should display connection information and “Logout” button

If Timer Page doesn't appear in the browser, please enter “http(s)://gateway_ip/login/timer.cgi” to open Timer Page.You can type ipconfig command to get gateway_ip on windows terminal

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.6RestraintheUsers

4.6.1IPFilter

The administrator can setting IP Filter via this page, Please click on Advance -> IP Filter and follow the below setting.

 Source Address/Mask : Enter the desired source IP address and netmask; the mask must be a plain number,

i.e. 192.168.100.10/32

 Source Port : The source port(s) required for this rule. A single port may be given, or a range may be given as

start:end , which will match all ports from start to end, inclusive.

 Destination Address/Mask : Enter the desired destination IP address and netmask; the mask must be a plain

number, i.e. 192.168.1.10/32

 Destination Port : The destination port(s) required for this rule. A single port may be given, or a range may be

given as start:end , which will match all ports from start to end, inclusive.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

 In/Out : This option used for specialized packet alteration. The system support In (I NP UT : for packets comi ng

into the interface itself) or Out (FORWARD : for altering packets being routed throug h the interface)

 Protocol : This option allows you to select protocol type. The system support TCP, UDP or ICMP.  Listen : Enable Yes to match TCP packets only with the SYN flag.  Active : Enter Deny to DROP specialized packet; Pass to ACCET the specialized packet  Side : Select specified interface where filtering of the incoming /passing-through packets is processed

Click “Add” button to add IP filter rule to List. There are 20 rules maximum allowed in this IP Filter List. All rules can be edited or removed on the List. Click Reboot button to activate your changes.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.6.2MACFilter

The administrator can setting MAC Filter via this page, Please click on Advance -> MAC Filter and follow the below setting.

 Action : Select the desired access control rule; the options are “Deny list” or “Disable”. Select “Deny list”, all

of the MAC Address will be controlled in the MAC Filter List.

 MAC Address : Enter MAC address in this field. The acceptable format are xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx

12 hex digit number

Click “Add” button to add MAC filter rule to List. There are maximum 20 rules allowed in this MAC Filter List. All rules can removed on the List. Click Reboot button to activate your changes.



User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.6.3Routing

The administrator can set Static Routing Table via this page, Please click on Advance -> Routing and follow the below setting.

Î Mode: Select desired status in “Enable” or “Disable” for routing rule Î Destination Net/Mask: Specify the destination network or IP address with netmask; the mask must be a

plain number, i.e. 192.168.1.10/32

Î Via: Select “Gateway” or “Interface” for going to the destination.

Click “Add” button to add Static Routing Table. There are 10 rules maximum allowed in this Routing Table. All rules can be edited or removed on the List. Click Reboot button to activate your changes.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.7SharingyourInternalService

4.7.1VirtualServer

A certain area in the network can be exposed to the Internet in a limited and controlled way for on-line game or video conferencing via this page. Please ensure the internal port to be used is not occupied by other applications. Please click on Advance -> Virtual Server and follow the below setting.

 Virtual Server : Check Enable button to activate this rule, and Disable to deactivate.  Description : Enter appropriate text to denote name of the Virtual server.  Private IP : The corresponding IP address of the LAN port used for the respected service. Enter the LAN IP

address of the assigned host.

 Protocol Type : The communication pr otocol of session. Select an appro priate protocol type, either TCP or

UDP protocol.

 Private Port : The private port(s) required for this rule. A single port may be given, or a range may be given as

start:end , which will match all ports from start to end, inclusive.

 Public Port : The public port(s) required for this rule. A single port may be given, or a range may be given as

start:end , which will match all ports from start to end, inclusive.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

The Private Port and Public Port can be different, but the port range need the same. example : Public Port is 10 to 20, the Private Port can be 30 to 40 or other 10 ports range.

Click “Add” button to add Virtual Server rule to List. There are maximum 20 rules allowed in this List. All rules can be edited or removed on the List. Click Reboot button to activate your changes.



User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.7.2DMZ

The Demilitarized zone (DMZ) can be enabled and used as a place where service s ca n be placed such as Web Servers, Proxy Servers, and E-mail Servers such that these services can still serve the local network and are at the same time isolated from it for additional security. DMZ is commonly used with the NAT functio nality as an alternative for the Virtual Server (IP / Port Forwarding) while makes all the ports of the host network device be visible from the external network side. Please click on Advance -> DMZ and follow the below setting.

 DMZ : Check Enable button to activate this function, and Disable to deactivate.  IP Address : Enter the IP address of the computer or server to be used as DMZ host; only one DMZ host can

be activate at any time period.

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.8MoreSystemfunction

4.8.1ManageTicketDatabase

The administrator can manage ticket's databases via this section. It let the administrator to initialization, import and export ticket databases. Please click on HotZONE -> Ticket Management and follow the below setting.

 Initialization Tickets: Click “Init” button, the alert window should be pop-on. Click “OK” button to start clearing

passcode data of all ticket databases. When system finish initialization, it will show “Success” message.

Before initialization Tickets, please Export your ticket databases for backup.

 Export Tickets: There are three methods to backu p your information of ticket databases

Î Export Ticket: The administrator can backup ticket database or copy to other WAS-103R. Select desired

export Ticket DB and click “Export” button, the ticket datab ases (FileID_passcode.bin) will b e download from system

Î Generate List: There are three type of file list: XML, CSV and TXT(only Passcode). Select the desired

Ticket DB and click “Generate” button. The passcode list of ticket databases will be download from system.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

Î Printable: The selected ticket databases can be previewed on the screen. Select the desired Ticket DB

and click “Print” button, the tickets will be shown including the information of Passcode, Effective Starting Time, Effective Ending Time, Price and Available SSID on the screen. Administrator can print ticket on the screen for customer.

Below depicts an example for printable tickets

 Import Tickets: Administrator can import other WAS-103R's ticket databases to system. Click “Import” to

upload ticket databases

Passcode Number

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

If you import ticket databases to system, the system show “The FileID already exist” error m essage. Please check the FileID of ticket databases on your system, maybe this dat abases' FileID already on your system

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

4.8.2Notification

WAS-103R can automatically send the notification of Users Log to 3 particular E-mail addresses. A trial email is provided by the system for validation

 Enabled: Click Enabled option to enable Notification E-mail  Receiver E-mail Address (es): Up to 3 E-mail address can be set up to receive the notification. These are the

receiver's E-mail address.

 Sending Interval: The time interval (in hour) to send the E-mail report. (Default is 24 hours; the range is

between 1 to 999 hours)

 Sender E-mail Address: The E-mail address of the administrator in charge of monitoring. This will show up as

the sender's E-mail.

 Outgoing(SMTP) Server: The IP address / Domain of the sender's SMTP server.  Outgoing SMTP Server Port: The port of the sender's SMTP server. (Default is 25)  Use SMTP Auth: Some SMTP server need authentication username and password for sending E-mail. The

system provides authentication for sender's SMTP server

 SMTP Auth Username: The sender's authentication username for STMP server  SMTP Auth Password: The sender's authentication password for STMP server

Change these settings as described here and click Save button to save your changes. Click Reboot button to activate your changes.

User Manual

WAS-103R Wireless Hotspot Gateway ENGLISH

After clicking “Save” button, you need to click “Send” button for verify your setting correctly. The system will show correlation message. Below depicts an exam ple for success sending test.

After Sending Interval, the system will send E-mail to receiver's E-mail address. Below depicts an example for Email's content of user log

 Date: Display the date of user log.  Type: There will show 5 type of status: LOGIN, LOGOUT, TIMEOUT, USE UP and WLOGOUT

Î LOGIN: Indicate the user login HotZONE Î LOGOUT: Indicate the user logout HotZONE Î TIMEOUT: Indicate the user idle time is over timeout setting of system, the system will logout user

automatically

Î USE UP: Indicate the user's service time is done

Î WLOGOUT: When WAN connection failed, the system will be logout user automatically.  Passcode: Indicate the user's passcode  IP: Indicate the user's IP address  MAC: Indicate the user's MAC address

PheeNet WAS-103R User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual