Intellinet GuestGate HotSpot Gateway
Contents
1. 3 Q How do l reset GuestGate to the factory default state A Press the reset button on the rear for 5 seconds while GuestGate is up and running 4 Q lhave changed some settings in the administrator Web interface but the changes show no effect Why A You may have forgotten to save the configuration through the EXIT page of the administrator Web interface 5 Q have a server in my network which my guests are not allowed to access Which settings do need to activate in GuestGate to prevent my guests from accessing this server A You do not need to activate any settings GuestGate provides this functionality by default Should a guest try to access a server or computer in your network GuestGate will deny the request displaying a warning message in the guest s Web browser window 6 Q What if want to allow my guests access to my network i e my Intranet Web server A Add the IP address of your Intranet server in GuestGate s Host configuration page under Permit Addresses and GuestGate will no longer block access to that server 7 Q Can I control the amount of bandwidth available for my guest network A Yes Upload and download bandwidth can be controlled in the guest configuration of the Administrator Web interface 8 Q lwish to display my own welcome page for my guests Can I change the default welcome page A Yes The welcome page can be changed in administrator Web interface You can change the welcome message and uplo2. Host is clicked Add Network Address Enter an IP address and a subnet mask to define a range of IP addresses permitted to your guests For example if you wish to allow access to the entire host network eae do that by quickly by using this function Permitted Addresses Add Host Address DO 4 Add Host mp Meter adde 192 168 2 1 255 255 255 0 0 Add Network The example above shows how to allow access s to the entire network range from 192 168 2 1 to 192 168 2 254 24 Walled Garden Addresses You can grant an unauthenticated user limited access to Web sites both external and internal using the Walled Garden function In a scenario where a password is required in order to access the Internet a guest normally would not be able to access any web site Any attempt of doing so would result in the display of the welcome page with the request to enter a valid password as shown below Welcome to aur Network Dear Guest We re happy to provide you with Internet amp ccess using the INTELLINET NETWORK SOLUTIONS GuestGate Hotspot Gateway You agree to comply with the company s terms of use In particular access to any illegal content is strictly prohibited Violation af this can result in legal prosecution By continuing you agree to those terms Password _ continue Using Walled Garden in combination with a custom welcome screen see next section you can now allow your guests to access web s
3. Network IP Gateway Host Network DNS Server s Host Interface Ethernet Address DO OE 2E F8 z6 04 Guest Interface Ethernet Address OO 0E 2E F8 26 05 Device Information Firmware Version 1 21 Uptime O day s 00 35 48 hh mm ss Time not available Device Status Password pratected Internet Access disabled Guest Internet Access enabled Connected Guest Computers Ethernet Address IP Address Logged In Copyright IHTELLIMET NETWORK SOLUTIONS 2009 www Click on Host Config 17 Host Configuration Configuration Host Device IP Address 132 158 2 1 IP Netmask 255 295 252 IP Gateway Administrator IP Address Use This Client s Address Configuration Host With the Configuration Host window displayed specify the device IP address IP netmask IP gateway Internet connection gateway router and DNS server Device IP Address A free IP Address in your network This is the IP Address you assign to GuestGate IP Netmask Enter the same netmask or subnet mask you use in your network IP Gateway The IP address of your Internet gateway such as a router DNS Server Domain name service as required by your ISP You can add multiple DNS servers by separating the different entries with a space Administrator IP Address When specified only this IP address is allowed to connect to the administrator interface of GuestGate The function Use this client s IP address automatically po
4. a DHCP Log File 192 166 0700 Dr SO fo be 46 56 169576 182 158 0 101 OO Of a d dia da 114748 B Launch your Web browser and open the IP Address shown in the DHCP client log You will then see the Administrator Web Interface The default password is 1234 gt INTELLINET Note lf this procedure does not work you can configure your PC with a static IP address of 192 168 2 xxx disconnect GuestGate from the router and connect your computer directly to the host port Power on GuestGate and wait about 1 minute until the Power LED stops blinking then open GuestGate s default IP address 192 168 2 1 with the Web browser Refer to the chapter Advanced Setup for more information 11 5 Changing Administrator Password For security reasons it is recommended to change the administrator password of GuestGate Follow the steps below to change the password E m A INTELLINET Sts TEIL ana E i Device Status Information Network Information Host Network IP Address 192 168 2 1 Host Network IP Netmask 255 255 255 0 Host Network IP Gateway Host Network DNS Serverts Hast Interface Ethernet Address OO 0E 2E F8 26 04 Guest Interface Ethernet Address OO 0E 2E F8 26 05 Device Information Firmware Version 1 21 Uptime 0 dayis 00 06 06 hh mm ss Time inot available Click on Device Settings P INTELLINET CESEN ACI gescesenes Device Settings Admin Password Old password TET New pa
5. is Delimited IF this is correct choose Next or choose the data type that best describes your data Original data type Bose the File tvm Ehat best describes your data Characters such as commas or tabs separate each Field Fields are aligned in columns with spaces between each Field 1 File origin Preview oF File C Documents and Settings aschlieck Desktopilog txt Fixed width Start import at row 437 OEM United States zx ogin dateOlogin timeDlogout dateDlogout timeDlIP addressOMac ad sa amp 1z 31DIl89 u 0n0z g 03 13D11 05D172 22 75 198D 00 18 de Od ed E 3 Hnppi 72 30 33 10000 23 4e 32 b4 39 Select Delimited and click Next gt 31 Tear luipore Wizard Siep 2 0f 9 This screen lets you set the delimiters your data contains You can see how your text is affected in the preview below Delimibers Tab L Semicolon L Comma e Other D Text qualifier v Treat consecutive delimiters as one Data preview gout time IP address EF ns s3 1z E 3 7E EZ 75 198 00 18 g Select Tab and click Next gt On the next screen you can assign different formats to the individual columns Tea gori Wizard Siep J of 3 i This screen lets vou select each column and set Column data format the Data Format Os General general converts numeric values to numbers date values to dates and all remaining values to text Date I Data preview oqout t
6. is called Layer 3 Client Isolation If this option is activated GuestGate randomly assigns different networks to each connected guest computer This option should be activated if you want to prevent guest computers from seeing and accessing each other Layer 3 Client Isolation on It is activated by default Option same network for all clients automatic GuestGate automatically assigns IP addresses to the guest computers All guest computers operate in the same network Layer 3 Client Isolation off Option same network for all clients enter manually If this option is enabled you can manually define the network for the connected guest computers Layer 3 Client Isolation off To do that you need to 20 2 Access Control General Settings Control the bandwidth and trusted Ethernet addresses Access Control General Settings Bandwidth Download Limit unlimited Bandwidth Upload Limit unlimited 16 kbitis 32 kbitis Be kbitis 128 kbit s 256 kbitls 812 kbit s 76S kbit s 1024 kbit s 2048 kbit s Bandwidth Download Limit Control the maximum download speed available for the connected guest computers Available options are from 32 kbps kilo bit per second up to 2048 kbps 2 2 Mega Bit per second Default unlimited Bandwidth Upload Limit Bandwidth control for the upload speed sending files to the Internet with options the same as above Trusted Ethernet Addresses If you wish to permanently au
7. only use power adapter supplied with product Host Port Connect this to your network e g the Guest Ports 1 4 for the connection of LAN switches Access Points Desktop PCs and Notebook computers 3 Testing Internet Access Start a PC or Notebook which is connected to one of the Guest Ports Launch a Web browser and open an Internet Web Site such as http www intellinet network com You will then see GuestGate s welcome page ah INTELLINET Welcome to our Network Dear Guest Were happy to provide you with Internet Access using the INTELLINET NETWORK SOLUTIONS GuestGate Hotspot Gateway You agree to comply with the company s terms of use In particular access to any illegal content is strictly prohibited Violation af this can result in legal prosecution By continuing you agree to those terms continue Copyright INTELLINET NETWORK SOLUTIONS 2009 www i Click continue and you will then be forwarded to the Web page you originally entered in the Web browsers address bar 10 4 Accessing the Administrator Web Interface from the Host Network A Connect to the router DHCP Server in your network and open the DHCP client log of the router Connect GuestGate s Host port to one of the router s LAN ports and power on GuestGate Wait about 30 seconds and then refresh the DHCP client log in the router The last entry the newest belongs to GuestGate Below is an example of
8. provide configuration free Internet access for your guests GuestGate uses the existing Internet connection of your network to provide Web and email access for computers connected in a conference room a hotel or a public place with wireless network connectivity GuestGate does not stop here however It addresses security related concerns of the network administrator by shielding the existing network from access attempts from the connected guests In short this means that guests can access the Internet but your own network i e your network file server email or application server is off limits Password Protected Internet Access for Guests The network administrator can make it mandatory for your guests to enter a password before Internet access is granted This is an important function in case you offer Internet access as a paid service or in situations where an open unprotected wireless access point is connected to GuestGate and you wish to keep unauthorized users from using your bandwidth Configurable Welcome Screen for your Guests You can set up your own welcome screen in seconds Change the wording and formatting and upload your own banner image The welcome screen is displayed when a guest connects to the Internet for the first time The welcome screen can be utilized to make the guest agree to your terms and conditions and can be completely deactivated if required IP PnP In many situations it is necessary for the network ad
9. the case you can still configure GuestGate manually To do this you need to turn GuestGate on while it is disconnected from the network If no DHCP Server can be found after 3 minutes GuestGate will fall back to its default IP Address of 192 168 2 1 Advanced setup requires A network adapter correctly installed in your computer User rights that allow manual configuration of TCP IP related settings on your PC and e GuestGate connected with an RJ 45 cable to the network adapter in your PC 1 Changing the IP Address of your PC Click on Start gt Settings gt Control Panel E Control Panel File Edit View Favorites Tools Help O Back 9 d pp Search lp Folders Address gem Control Panel 6 E Accessibility Add Hardware adrnistests Adobe Version Automattic b g Switch to Category View Options 3 Tools Cue Updates Configuration 0 2 amp Ze 9 See Also A L na Bluetooth Date and Time Display Folder Options Fonts Game Internet L Windows LIpdate Devices Controllers Options g Help and Support ii s e v z 2 a Keyboard Mail Mouse Network Phone and Power Options Connections Modem e 3 T Printers and QuickTime Regional and Scanners and Scheduled Security SigmaTel Faxes Language Cameras Tasks Center Audio 2 90 4d 5 Sony Sounds and Symantec Taskbar and UI Design Moteb Audio Devices LiveUpdate Start Menu Selector e2 C E User Accounts VAIO Windows Wireless Reco
10. 23240 1 22 img Click on Install to begin the upgrade process The Upgrade may take several minutes depending on your connection speed to GuestGate v INTELLINET Firmware is being upgraded The firmware is being Upgraded at the moment After the upgrade is complete the device will restart automatically Please be patient and do not restart the device before the upgrade is complete as this will destroy the device permanently pyright G INTELLINET NETWORK SOLUTIONS 2009 www GuestGate will emai restart after the upgrade process After you see the restart message you need to wait one minute before you can access GuestGate again 33 Exit Screen ET Tme Schetue E Exit Save settings Reboot device Copyright INTELLINET HETWORK SOLUTIONS 20059 www gi D cami This page lets you save the new configuration x Save Settings All changes you made to the configuration will only be memorized if you save the changes by activating this check box If you made changes in some of the configuration screens and fail to perform this step before closing the Web browser all changes will get lost x Reboot Device In order to activate the new configuration you must also check this box 34 QUESTIONS amp ANSWERS 1 Q What is the default IP Address of GuestGate A The default IP address is 192 168 2 1 2 Q What is the default administrator password of GuestGate A The default password is 1234
11. AN The two examples below illustrate how it works 1 Guest configuration set to same network for all clients automatic Guest computer 1 receives IP address 172 16 254 253 Guest computer 2 receives IP address 172 16 254 252 Guest computer 3 receives IP address 172 16 254 251 In this mode all guest computers operate in one network and are therefore able to access each other This is the standard mode of virtually any router and DHCP server on the market 2 Guest configuration set to separate network for each client automatic Guest computer 1 receives IP address 192 168 17 42 Guest computer 2 receives IP address 172 16 25 12 Guest computer 3 receives IP address 10 10 8 178 Guest computer 4 receives IP address 10 10 4 18 Guest computer 5 receives IP address 192 168 8 178 In this mode each guest computer operates in its own network and therefore can not access any other device except for the Internet Since this function is random it is next to impossible for an attacker to know or guess which IP addresses the other guests have been assigned making a hacking attempt more difficult If you are concerned with the security of your guests or are worried about potential liability issues you should activate this option it is activated by default Q How often does a guest need to authenticate at the welcome page A Only once As long as GuestGate is not restarted and the guest remains connected to GuestGate the g
12. GUESTGATE Hotspot Gateway USER MANUAL V 2 0 MODEL 523240 For firmware version 1 21 and higher O nn INTELLINET INT 523240 UM 0606 05 FCC Regulatory Statements Electromagnetic Compatibility EMC This equipment generates radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e Re orient or relocate the receiving antenna Increase the separation between the equipment and receiver e Connect the equipment to an outlet on a different circuit than the receiver Consult your dealer or an experienced radio TV technician for help e Check that shielded STP network cables are being used with this unit to ensure compliance with EMC standards This equipment has been tested and found to comply with the limits for a Class B computing device pursuant to Subpart B of Part 15 of FCC rules which are designed to provide reasonable protection against such interference when operated in a commercial environment Operation of this equipment in a residential area is likely to cause interference in which cas
13. INTELLIMET WETWORE SOLUTIONS GUESTGATE f submitti else return true X script lt head gt lt body form method GET gt lt EES 1 Reset tn default Inside the text box is the complete HTML code of the welcome page When you make changes you need to pay extra attention to variables like oo WELCOME MSG as well as all Java scripts and form elements Changing these can lead to unexpected results The default welcome page HTML code can be restored by clicking on the Reset to default button ed a Time Scheduler Configuration INTELLINET Ecc CS LLLI Time 7 Scheduler Time Setup o Timezone UTC GMT Update Interval every hour vi Reboot Device do not reboot device II Internet Access Time Schedules Internet 4ccess always on u all ZUN MON TUE WED THU FRI SAT Di Copyright INTELLINET NETWORK SOLUTIONS 2009 www This page allows to set up the time related settings of GuestGate 1 Time Setup time zone and update interval select the time zone in which you are located it The update interval parameter defines how often GuestGate re synchronizes the internal time with the Internet time 28 2 Reboot Device With this parameter you can set up GuestGate to de ot eect de i perform a scheduled restart once per day at a time of 0 00 12am Reboot Device i 1 00 1 arm your choosing rds iem 3 00 arm 14 00 lam If you have a lot of u
14. XX Not XX XX XX XX XX XX Access Control Welcome Screen Welcome Screen Enable or disable the welcome page for guests Default enabled If this parameter is set to disabled all guest users can access the Internet freely No welcome page is displayed even if a guest password is defined below Guest Password If you require your guests to enter a password to access the Internet you can define it here If left empty no password is required default no password This is the global password that can be used by any guest it is not an individual user password The password option is only active if the Welcome Screen is set to enabled see above Access Control Welcome Passwords oet up individual user passwords that are only valid for a certain time period and can be used by a defined number of computers simultaneously The example below shows a password test that is valid from 03 12 2009 12 pm until 03 13 2009 6 pm The password can be used by five users simultaneously Access Control Welcome Passwords Maximum Password Y alid From Valid Until numbers of users 031 2 2009 3n 3 2009 test ec 12 00 12pm Ed 18 00 Bpm E Up to nine users can use the same password The amount of user passwords is limited by available memory in GuestGate but should ideally not exceed 20 29 1 Host Configuration Screen Qm P INTELLINET Host Configuration Confi
15. You can replace the default Banner Image with your own image such as the Logo of your company Click on Browser to select the file you wish to upload Click on Upload to replace the default banner image After the upload the text Default Image changes into Custom Image 26 4 5 Note The banner image file type must be either JPG GIF or PNG The banner image size must not exceed 60 Kb The banner image dimension is not limited but the width should ideally not exceed 1024 pixel The banner image only displays on the guest welcome screen It does not replace the banner in the administrator Web interface Welcome Text You can overwrite the default text with your own custom text GuestGate supports HTML tags to format your text Below is a small selection lt strong gt bold text lt strong gt lt font color red gt red text lt font gt lt font color 400ff00 green text lt font gt lt u gt underlined text lt u gt lt u gt lt strong gt lt font color red gt red bold underlined text lt font gt lt strong gt lt u gt Other HTML commands such as TABLE lt tr gt lt td gt lt img gt tags and many more are also supported Welcome HTML Code When you enable the advanced mode a new text box will appear This function is designed for advanced users with knowledge about HTML programming We don t recommend using this function unless you know what you are doing Welcome HTML Cade zhtnl zhead ztitle
16. ad your own banner image In advanced mode you have access to the complete HTML source code allowing you to change the appearance of the welcome page completely 9 Q Can Iuse HTML Code in my custom welcome page A Yes GuestGate does not limit you in any way If you are a HTML Web developer you can create an enhanced welcome page simply by pasting the HTML code into the welcome page configuration field In advanced mode you have access to the complete HTML source code 35 10 Q have made edits to the welcome page in advanced mode and now the welcome page does not work correctly anymore How do restore the default welcome page A Open the welcome page configuration page and make sure the Mode to customize welcome page is set to advanced Scroll down to the text box labeled Welcome HTML Code and click the button Reset to default Save the configuration via the Exit page to activate the default welcome page Q Does GuestGate support PHP ASP or Perl A No GuestGate does not support server side scripting Q What is the option separate network for each client automatic in the Guest Configuration Screen used for A This is the Layer 3 Client Isolation function of GuestGate If this option is activated GuestGate will prevent the connected guest computers from accessing each other by assigning random TCP IP network settings to the guest computers This way each Guest operates in its own Virtual L
17. d operation Table of Contents INTRODUCTION Function Description Installation Examples GuestGate Function Basics INSTALLATION of GuestGate Recommended Setup Advanced Setup CONFIGURATION OPTIONS of GuestGate Status Screen Guest Configuration Screen Host Configuration Screen Welcome Screen Configuration Time Scheduler Configuration Device Settings Configuration Firmware Upgrade Process Exit Screen QUESTIONS amp ANSWERS SERVICE amp SUPPORT SPECIFICATIONS APPENDIX O QO A FP co 14 19 19 20 23 26 28 30 33 34 35 38 39 40 INTRODUCTION Congratulations on your purchase of the INTELLINET NETWORK SOLUTIONS GuestGate Hotspot Gateway The GuestGate connects guests to your network allowing them to access only the Internet Web Email Chat and other applications GuestGate protects your existing network from unauthorized access by the connected guest computers and if required even shields the guest computers among themselves Furthermore GuestGate features enhanced IP PnP Plug and Play technology It automatically adjusts to the guest computer s TCP IP settings eliminating time consuming client IP reconfigurations GuestGate seamlessly integrates into your existing network and in many applications a configuration of GuestGate is not necessary GuestGate provides the core functionality right out of the box Function Description Internet Access for Guests GuestGate is primarily designed to
18. d system time The most likely cause for this problem is that a Firewall located in the Host network may be blocking outgoing Network Time Protocol NTP requests The system administrator must open the ports required for this service port 123 for both TCP and UDP It is important to take care of this problem especially if you use the Time Scheduler function to control when Internet access is allowed Q Does the bandwidth control limit the bandwidth per computer or does it limit the bandwidth GuestGate can consume in total A The bandwidth control limits to bandwidth that GuestGate can use regardless of how many guest users are connected to the device x r2 SERVICE amp SUPPORT Additional information about GuestGate is available on the Web at www guestgate com On this page you can 1 Find answers to common questions FAQ 2 Obtain the latest Firmware Versions 3 Get in contact with our technical support team 38 SPECIFICATIONS Guest Network 1 x 10 100Mbps RJ45 Port Host Network 4 x 10 100Mbps RJ45 Ports Reset Button LEDs 1 x Power 1 x Link Activity for Host Network 4 x Link Activity for Guest Ports AC Adapter 12V 1A Dimensions H 37mm W 187mm D 100mm Humidity 0 90 Non Condensing Temperature 10 55 C EMI Certification FCC Class B CE Mark C T 39 APPENDIX Below you can find a list of common TCP IP Service Ports These ports can be entered in the HOST CONFIGURATION of Gu
19. dresses to the connected guest computers IP PnP technology ensures that no configuration on the guest computer is necessary The default IP address range is 172 16 xxx Changing the guest IP settings is possible via the Web administration interface Guest Ports with Layer 3 Client Isolation enabled If the Layer 3 Client Isolation is enabled GuestGate assigns a different IP Network Subnet to each connected Guest Computer Since this assignment is random it makes it virtually impossible for a hacker to guess the other guest computer s IP settings to try to gain access This option is enabled by default It can be disabled in the guest configuration screen of the administrator Web interface The option is separate network for each client automatic Time Scheduler You can configure the time period in which GuestGate allows Internet access Possible values are always on or based on a schedule week day and time Accessing the Administrator Web Interface The configuration of GuestGate is entirely Web based Any standard Web browser is supported For security reasons GuestGate can only be configured from the host port GuestGate rejects all connection attempts which originate from the guest side Internet Access for Guests and Welcome Page When a guest computer tries to access the Internet for the first time a Welcome Page is being shown in the Web browser This welcome page can be configured and altered in the Administrator Web Interfac
20. e Guests have to accept the terms and conditions in order to access the Internet If the Guest Password option is enabled a password must be provided by the guest to gain Internet access This authorization procedure is only required once GuestGate memorizes all authorized Guest computers until GuestGate is restarted After a restart of GuestGate guests again will be shown the welcome page If a guest computer is disconnected from GuestGate for more than 10 minutes the welcome page is also shown again INSTALLATION of GuestGate Recommended Setup This setup method assumes that a DHCP Server such as a router is present in your network 1 Connection to the Host Network Connect standard RJ45 Network Cable to GuestGate s HOST Port and to a RJ45 port on your existing network Ethernet Switch Port Router Switch Port etc Turn on GuestGate and verify that the network connection is active HOST LED must be lit on GuestGate NOTE The startup process takes up to 60 seconds if no DHCP Server is present it may take as long as 300 seconds 2 Connection of Guests Using standard RJ45 Network Cable you can now connect PCs Notebooks Ethernet owitches Hubs or Wireless Access Points to the Guest Ports of GuestGate Each Port has its own Status LED Verify that the network connection is active on each port you connect Hear View Heset Switch Hold down for 5 seconds to perform a reset of the IP settings 12V DC power input
21. e the user at his own expense will be required to take whatever measures may be required to correct the interference This digital equipment fulfills the requirements for radiated emission according to limit B of EN55022 1998 and the requirements for immunity according to EN55024 19968 residential commercial and light industry Safety This equipment complies with EN 60950 Safety of Information Technology equipment Radio Transmission Regulatory Information This equipment generates and radiates radio frequency energy and must be installed and operated while maintaining a minimum distance of 20 cm between the radiator and your body Tested to comply with FCC Standards FOR HOME OR OFFICE USE This product must be installed and used in strict accordance with the instructions given in the user documentation This product complies with the following radio frequency and safety standards Europe EU Declaration of Conformity This device complies with the requirements of the R amp TTE Directive 1999 5 EC with essential test suites as per standards EN 301489 General EMC requirements for radio equipment and ETS 300328 Technical requirements for radio equipment USA Federal Communications Commission FCC This device complies with Part 15 of FCC Rules Operation of the device is subject to the following two conditions 1 This device may not cause harmful interference 2 This device must accept any interference that may cause undesire
22. ently upgrade firmware of GuestGate with the Web browser of your choice Installation Examples GuestGate in a SOHO Network Environment This is a typical setup in which the Internet connection is established through an NAT router with an integrated firewall Internet WAN GuestGate Guest Network PCs Wireless Access Point Wireless Guest Network GuestGate in a SMB Environment In larger networks GuestGate connects to any available switch port behind the Firewall Gateway Router Internet WAN LAN Switch Wireless Access Point GuestGate Host Network PCs amp Servers Wireless Guest Network Guest Network PCs GuestGate Function Basics Ports GuestGate features a total of 5 10 100 RJ45 Ports One port is for the connection of GuestGate to the Host Network Host Port 4 Ports are available for guest connections Guest Ports The Guest Ports can be connected to Hubs Switches Wireless Access Points PCs or Notebooks Host Port By default GuestGate obtains an IP Address from a DHCP Server already present in the network GuestGate analyzes the network and obtains all information necessary for Internet Access The DHCP Server Log reveals the HOST IP Address of GuestGate In the event that no DHCP Server is present GuestGate reverts to its default IP Address 192 168 2 1 In this case a manual configuration of the HOST IP settings is necessary Guest Ports GuestGate assigns IP ad
23. estGate to block access to certain services Port Number 137 138 139 143 161 194 6665 6669 9000 5001 5100 5190 5191 5192 5193 5554 5800 5900 12345 2 374 Service Name Description FTP SSH Secure Shell Telnet SMTP Outgoing Mail Sendmail Server Port TFTP Trivial File Transfer Protocol Gopher Finger HTTP Standard Web Port for Web Sites POPS Incoming Mail SFTP Simple File Transfer Protocol NNTP Newsgroups NTP Network Time Protocol RPC service used for NET SEND command NETBIOS Filesharing MS Windows Network IMAP Interim Mail Access Protocol SNMP Simple Network Management Protocol IRC Internet Relay Chat HTTS Secure Web transfer used by SSL SHELL LPR Line Printer Remote LPD Line Printer Daemon IPP Internet Printing Protocol Trojan Used by MyDoom PPTP used for VPN Connections MSN Messenger Trojan Used by Beagle Windows XP Remote Desktop Port Trojan OptixPro also used by NetworkLens SSL Event ITUNES by Apple DAAP RADMIN Remote Control YAHOO Messenger Voice Chat YAHOO Messenger Video Webcam AOL America On Line via TCP Trojan Sasser Family also used for SGI ESP HTTP VNC Trojan Used by Netbus also used by Italk Chat System and TrendMicro OfficeScan antivirus Trojan Used by SubSeven 40 INTELLINET BRINGING Networks To LIFE INTELLINET NETWORK SOLUTIONS offers a complete line of active and passive
24. guration Host Device IP Address IP Netmask IP Gateway DNE Server Administrator IP Address Use This Client s Address Packetfilter Blocked Addresses Add Host Address Add Host Add Network Address F 255 255 255 0 Add Network Blocked Ports Add Port Number Permitted Addresses MI Remove Add Host Address Add Netwark Address 255 255 2550 E Walled Garden Addresses M Remov Add Host Address Add Network Address 2552552550 E page shows the configuration options for the Host Interface of GuestGate Configuration Host Option dhcp GuestGate automatically receives the IP address netmask gateway and DdNS server information from the DdHCP server in your network typically a router Option static In larger networks a manual configuration of the IP settings may be necessary Select static and enter the IP address netmask gateway IP address and DNS server IP addresses manually Multiple DNS Servers can be entered by separating them with a space i E 111 222 333 444 999 888 777 666 Administrator IP Address Restrict access to GuestGate s administration menu to the IP address you enter in this field This can be any local or public IP address 23 2 Packet filter Blocked Addresses If you which to block certain IP Addresses Domain Names or an entire network you can enter this here Add Host Address is used to enter domain names such as guestgate com or intellinet
25. ime IP address 92 22 75 198 0 18 g Recommended values for the login date and logout date column are Date YDM Click Finish and MS Excel proceeds to open the log file Configuration You can create a backup of the configuration by clicking the download button Save the file config cgi to your hard drive If you wish to reload the configuration at a later time click Browse select the previously saved file config cgi and click open Finally click on Load to restore the configuration data Firmware Refer to the next section Firmware Upgrade Process 89 Firmware Upgrade Process Where to obtain a new firmware There are two ways to find out of a new firmware is available a Check Guest Gate s Status Page Guest Gate checks if a new firmware is available when you login to the Administrator menu If a new version is found a test message appears on the status screen oee example below Device Status Information New firmware version available Version 1 42 Date 2006 09 28 1 Click here for mare information Click on the link Click here for more information and you are being taken to the web page that includes information about the new firmware b Check the download section on http www guestgate com manually Upgrade Process Open the Device Settings screen of the Administrator menu Click on Browse to select the new firmware Image e g 5
26. ion you must make sure that GuestGate has access to an NTP server You need to check the status page to make sure that GuestGate has retrieved a proper time If GuestGate has not obtained a time there will be no Internet access for any user while the scheduler is activated 29 Device Settings Configuration 2 INTELLINET TIT LENT Wevicesennes Device Settings Admin Password Old password Mew password Retype new password enabled hi Configuration Load Configuration Firmware Upgrade Firmware Install Copyright INTELLINET NETWORK SOLUTIONS 2009 www gi This page allows changing the administrator password saving and restoring the configuration upgrading the firmware and 1 Admin Password To change the Administrator Password you need to enter the old password and the new password You also must confirm the new password by retyping it Click on Change to save the changes GuestGate s default password is 1234 The password can be up to 20 characters in lengths 2 Log GuestGate can maintain a protocol that includes information such as the login date and time the logout time the IP address and the MAC address of the connected guest computer The function must first be enabled by settings the parameter enabled to the value you guessed it enabled You can download the log at any time by clicking the download button When you do you are being presented with the following
27. ites of your choosing without providing a password The welcome page could look like this Welcome to aur Network Dear Guest We re happy to provide you with Internet Access using the INTELLINET NETWORK SOLUTIONS GuestGate Hotspot Gateway You agree to comply with the company s terms of use In particular access to any illegal content is strictly prohibited Violation af this can result in legal prosecution By continuing you agree to those terms As password is required in order to access the Internet You can obtain the password at the reception desk In the meantime you are welcome to browse through our special offers and services Hotel Service Numbers How to obtain Internet Access Our special offers You need to enter the URLs and IP addresses your guests can access without providing a password in the Walled Garden configuration Walled Garden Addresses Add Hast Address gaagle cam Add Host Add Network Address 0 8552552550 E Add Network Add Host Address Enter any web site URL you wish to include in the Walled Garden Click Add Host to add the URL to the setup Add Network Address In addition to URLs you can also add IP addresses to the Walled Garden setup Specify the IP address and the subnet mask and click on Add Network to add the IP address range to the setup In order to remove a Walled Garden address select the URL from the drop down list and click Remove 25 Welcome Screen Co
28. ministrator to change the TCP IP settings of guest computers because the existing settings are not compatible or your network has advanced requirements GuestGate eliminates this step completely GuestGate automatically adjusts to the guest computer s TCP IP settings providing a true zero guest configuration Bandwidth Control GuestGate controls how much of your Internet connection speed is dedicated to the guest network Upload and download bandwidth can be configured individually 4 Layer 3 Client Isolation Function In a public location with a public Wireless Access Point there are often concerns about security GuestGate not only protects the Host Network from unauthorized access by your guests it takes security one step further When the use separate random network for each client option is activated no guest computer can access any other guest computer In this mode GuestGate randomly assigns each guest computer its own network This option is activated by default Packet Filter Block access to certain Web sites or entire IP ranges 4 Port 10 100 Auto Sensing LAN Switch GuestGate provides four 10 100 Mbps LAN switch ports for the connection of PCs notebooks or other switches or wireless access points Web Based Administrator Interface The configuration is fully Web browser based For security reasons the Web administrator menu is only accessible from the host network Firmware Updates via Web Browser Quickly and conveni
29. network com Enter the domain name and click on Add Host Repeat the steps to block additional domains Blocked Addresses ioe Add Host Address mininova org Add Host Hast Add Network Address is used to enter an IP Address To specify the range you can select the appropriate network mask from the drop down list If you wish to delete a blocked address select it from the drop down list and click Remove Blocked Ports This option lets you specify which outgoing TCP IP Ports you wish to block Enter the port number and click on Add Port GuestGate blocks both TCP and UDP protocols A list of common service ports can be found in chapter gt APPENDIX at the end of the document If you wish to remove a port simply select the desired port from the drop down list and click on Remove Note You can only add and remove single ports Port ranges are not supported Permitted Addresses By default GuestGate blocks access to all PCs in the Host network This function lets you define exceptions Add Host Address Enter a single IP Address e g the IP address of your Intranet Web server and click on Add Host Repeat this step if you wish to enter more IP addresses Permitted Addresses 192 168 2 50 S Remove Add Hast Address 97 158 2 51 Add Host The example above shows that access to IP addresses 192 168 2 50 is allowed IP address 192 168 2 51 will be allowed as soon as Add
30. networking products Ask your local computer dealer for more information or visit www intellinet network com Copyright INTELLINET NETWORK SOLUTIONS All products mentioned are trademarks or registered trademarks of their respective owners 44
31. nfiguration E ox P INTELLINET welcome Screen Configuration Redirect first request to URL Mode to customize welcome page simple B Banner Graphic Banner Default Image Upload your own Banner Image Browse Upload Welcome Text Welcome to our Network Dear Guest We re happy to provide you with Internet Access using the INTELLINET You agree to comply with the company s terms of use In particular access to any illegal content is strictly prohibited Violation of this can result in legal prosecution By continuing you agree to those terms pyright INTELLINET NETWORK SOLUTIONS 2009 www This page shows the Welcome Screen contiduratieh options of GuestGate 1 Redirect first request to URL When a guest connects to GuestGate for the first time GuestGate can redirect the guest to a web page you want them to see e g a page displaying special offers or advertising The redirect URL is entered without HTTP Example www guestgate com GuestGate redirects any guest to the GuestGate web page 2 Mode to customize welcome page There are two values to choose from simple and advanced In simple mode you can change the welcome text and replace the default banner graphic in advanced mode you have access to the entire HTML source code of the welcome page Once you enable the advanced mode an additional text box appears on the bottom of the page see below Welcome HTML Code 3 Banner Graphic
32. pop up window 30 Opsning sunia egy You have chosen to open config cgi which is a CGI file From http 57 111 35 58 What should Firefox do with this File O cent save File Da this automatically For Files like this From now on Select Save File Elites nui uf file tu 3 42 tU Save in re My Recent Documents 3 Desktop My Documents D My Computer B Desktop g oem Name Hmy Doc 1 My Co My Net E Adobe S Inter T Wi ipcam SM ipcam H Launch amp Map Dr E mozilla ns IS saP Lo E Skype EE Sothink a Winac T Type System Folder System Folder System Folder Shortcut Shortcut Shortcut Shortcut Shortcut VBScript Script File Shortcut Shortcut Shortcut Shortcut Shortcut Date Modified 7 10 2008 1 54 PM 2 27 2009 8 02 AM 11 19 2008 4 36 PM 11 19 2008 4 37 PM 3 3 2009 4 51 PM 10 4 2005 8 58 AM 7 10 2008 3 15 PM 7 10 2008 3 17 PM 11 17 2008 7 54 AM 1 27 2009 5 50 PM 7 10 2008 3 09 PM 12 1 2008 9 16 AM 50369 eEnlder J Save Cancel l Specify the location and rename the file config cgi into log txt Click Save File name My Network Save as type Start MS Excel and open the file log txt You ll then be presented with the Excel s Text Import Wizard eat import Wizard step uf z The Text Wizard has determined that your data
33. pulates the field with the IP address of the computer currently used to connect to the administrator menu When you are done click on Exit upper right corner Em E INTELLINET Save settings Reboot device puright INTELLINET NETWORK SOLUTIONS 2009 www Click on Exit to save the configuration End restart GuestGate 18 CONFIGURATION OPTIONS of GuestGate Status Screen E ed P INTELLINET EEn a Ce ESEG Device Status Information Network Information Host Network IP Address 192 158 2 1 Hast Network IP Netmask 255 255 255 0 Host Network IF Gateway Host Network DNS Serveris Host Interface Ethernet Address 00 0E 2E F8 26 04 Guest Interface Ethernet Address O0 0E 2E F8 26 05 Device Information Firmware Version 1 21 Uptime 0 day s 00 35 48 hhimmiss Time Thu Mar 12 14 14 43 2009 Device Status Password protected Internet Access disabled Guest Internet Access enabled Connected Guest Computers Ethernet Address IP Address Logged In Copyright INTELLINET NETWORK SOLUTIONS 2009 www The Status Screen shows three types of information 1 Network Information Basic information about the host network interface 2 Device Information Display of the current firmware version the system s uptime and the system time 3 Device Status Displays the status of the password protected Internet access disabled no password required and the status of the Interne
34. se the following DNS server addresses Altemate DNS server re 1 l Advanced 15 nternet Protocol Gry Propennes General fou can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address IP address 132 158 2 100 Subnet mask 255 255 465 Default gateway Obtain ONS server address automatically Use the following DNS server addresses Prefered DNS server Alternate DNS server Advanced Click OK when done Close the previous Windows by clicking OK as well The TCP IP settings of your system are now compatible to GuestGate 16 2 Connecting to GuestGate via a Web Browser Start your Web browser and open the address http 192 168 2 1 The Administrator Web Interface Login Screen then appears P INTELLINET Enter your password to login Copyright INTELLINET NETWORK SOLUTIONS 2009 www i Enter the password 1234 and click login NOTE At this point it is recommended that you change the administrator password as described in _the previous section 3 Host Configuration wv INTELLINET sums ETEDT LIED oe oom p eed Device Status Information Network Information Host Network IP Address 192 168 2 1 Host Network IP Netmask 255 255 255 0 Host
35. sers connected to GuestGate Gb tos M Hr F0 am this feature will improve overall system stability Exod 9 00 Bam 10 00 dam Furthermore you can use this feature to force all 11 00 01am users to re authenticate at a defined time if you so Meade desire 14 00 2pm 15 00 3pm 15 00 pm 1177 00 ai 3 Internet Access Time Schedules Internet Access Time Schedules Internet Access Pas is scheduled below dd as scheduled below anonanndk e L1 EI DJ EJ DJ EJ DJ El 8 ooo000004 NOOOOOOO a d d LI d LI LI You can control whether Internet access is available all the time or only at certain time e g only during business hours Parameter value always on Internet access is possible at any time and any day There are no restrictions Parameter value as scheduled below When you select this option you can specify the days and hours at which Internet service is provided You can click the individual fields to activate or deactivate Internet access at that time and day or you can click on the buttons SUN MON etc to toggle access for that day The same is possible using the buttons in front of each row Click 4 h to toggle Internet access for each day during the hour from 4 am to 5 am Click on 19 h to toggle Internet access for each day during the hour from 7 pm to 8 pm The button all activates or deactivates all fields Note When using the scheduler funct
36. ssword HITTT Retype new password ILLET enabled E Enter the old password 1234 Enter a new password up to 20 characters long Retype the new password Click Change Click on Exit upper right corner 12 v INTELLINET Em CSC CECT Coe Device Settings Exit Save settings Reboot device Copyright INTELLINET NETWORK SOLUTIONS 2009 www gi Check Save settings Check Reboot device o INTELLINET Restarting The device is restarting After 25 seconds you will be automatically redirected to the login screen 10 Sec REMAINING puright i INTELLINET NETWORK SOLUTIONS 2009 www GuestGate now reboots This step takes about 25 seconds After the reboot you will be redirected to GuestGate s Login Page You can now login with the new password NOTE The interface is designed to let you make changes on all configuration screens without saving each change individually Once you are done programming GuestGate you need to click on Exit and reboot the device The changes will only take effect after GuestGate has been rebooted Closing the Web browser without saving the configuration changes will result in a loss of the changed configuration If you have successfully performed the above steps you can skip the next section 249 Advanced Setup The standard installation of GuestGate bases on the assumption that a DHCP Server is present in your network If this is not
37. t access enabled access to the Internet is active 4 Connected Guest Computers GuestGate shows all of the connected guest computers including the MAC address the assigned IP address and the connection time Click on Details to view individual statistics for each connected PC including the bandwidth consumed Mbytes Click on Disconnect to terminate the connection of the selected computer Connected Guest Computers Ethernet Address IP Address Logged In D 18 d2 7b db fO 10 69 23 10 redi aca 00 23 4e 92 04 39 10 196 249 130 Disconnect Guest Configuration Screen E ul INTELLINET ETTTI Guesicontis Device semings Guest Configuration Configuration Guest separate network far each client automatic a Device IP Address IP Netrmask Dynamic Range L1 thraugh Access Control General Settings Bandwidth Download Limit unlimited d Bandwidth Upload Limit unlimited E Trusted Ethernet Addresses E dd Ethernet Address Add Address Access Control Welcome Screen Welcome Screen enabled d Guest Password LIT leave empty for no password Access Control Welcome Passwords Maximum Password Valid From V alid Until numbers of onze E ooo E io pyright INTELLINET NETWORK SOLUTIONS 2009 www This page shows the configuration options for the connected guest computers 1 Configuration Guest Option separate network for each client automatic This operational mode
38. thenticate a guest computer you can add its MAC address to GuestGate s configuration GuestGate will not show the welcome page to any computer that has been entered here Trusted Ethernet Addresses Add Ethernet Address 00 18 8B B8 8F F3 Add Address Enter the MAC address of the computer as shown above The syntax is XX XX20 Xx xx xx Click Add Address to save the MAC Address Repeat these steps for additional MAC addresses In order to delete a MAC address from the configuration select the entry from the drop down list and click on Remove Trusted Ethernet Addresses 00 18 8B B8 3F F3 E Remove Add Ethernet Address m Add Address You can obtain the MAC Address of a connected computer from the GuestGate Status screen or you can perform the following steps example Windows 2000 XP Vista 24 Click on START gt RUN Type in cmd Press Enter At the DOS Command prompt type ipconfig all and press Enter Example Output Ethernet adapter Local Area Connection Connection specific DNS Suffix Description HE BH2 11g Wireless CardBus HH HF AS 1D AS DA Dhep Enabled Yes Autoconfiguration Enabled Yes ddress n 18 18 18_ 89 Subnet Mask 255 255 252 0 Default Gateway E 1H 8 DHCP Server E DHS Servers i 1 8_21 The PHYSICAL ADDRESS is the MAC Address which needs to be entered in the configuration of GuestGate The format iS XOCXX20CXX20C
39. uest will never again be prompted to enter the password and agree to your terms and conditions If the guest disconnects from GuestGate for a period of 10 minutes or more the welcome page will be displayed again the next time the guest tries to access the Internet 36 14 15 16 17 18 19 Q Some of my guests wish to play a network game or share files and folders But that does not work How come that the connected guest computers cannot communicate with each other A That is because by default Layer 3 Client Isolation is activated You need to disable it to allow network communication between the connected guest computers oee question 12 Q Can access the administrator menu of GuestGate from one of the guest ports A No For security reasons this is not possible Access to the administrator menu can only be gained through the host port Q Can access any guest computer from the host network A No Opening ports to connected computer as you can do with any standard router virtual server port forwarding is not possible with GuestGate for security reasons Q Can I open ports in GuestGate to allow access to a connected guest computer A No that is not possible See the previous question Q On the status page of the Web administration interface the time is displayed as not available why A GuestGate cannot access the pool time servers on the Internet and is therefore unable to receive a vali
40. w Firewall Network Set Double click the Network Connections icon 14 Metwork Connechons File Edit View Favorites Tools Advanced Help Back 3 d P Search Wee Folders Hab Address e Network Connections 1A LAN or High Speed Internet ai Network Tasks Y 1394 Connection Wireless Network Connection 2 Create a new Connected Firewalled Disabled Firewalled connection p 1394 Net Adapter tp 802 119 Wireless CardBus 2 eI Change Windows Firewall settings Jii ocal Area Connection Connected Firewalled eee Disable Status R Control Panel Repait aj My Network Places Bridge Connections El My Documents X My Computer Other Places Create Shortcut Delete Rename 2 items selected Right click the Local Area Connection icon and select Properties from the context menu In the Local Area Connection Properties window highlight Internet Protocol TCP IP and click on Properties When the Internet Protocol TCP IP Properties window opens you need to make the changes as shown below ut2rust Toco CTEPIIP Ero pennies General Alternate Configuration You can get IP settings assigned automatically i your network supports this capability Othenwse vau need to ask pour network administrator for the appropriate IP settings C3 Use the following IP address IP address Subnet mask Detault gateway Obtain ONS server address automatically C3 U
Download Pdf Manuals
Related Search