Nomadix Access Gateway Manuel utilisateur

ACCESS GATEWAY

Access Gateway

This product also includes software developed by: The University of California,

Reserved; and includes source code covered by the Mozilla Public License, Version 1.0

and OpenSSL.

This User Guide is protected by U.S. copyright laws. You may not transmit, copy,

modify, or translate this manual, or reduce it or any part of it to any machine readable

form, without the express permission of the copyright holder.

ACCESS GATEWAY

Trademarks

The symbol, and Nomadix Service Engine™ are trademarks

of Nomadix, Inc. All other trademarks and brand names are marks of their respective holders.

Product Information

Telephone: +1.818.597.1500

Fax: +1.818.597.1502

For technical support information, see the Appendix in this User Guide.

Patent Information

Covered by one or more of the following U.S. and foreign patents: US6,130,892; AU740012,

中国发明专利 98805023.4, Israel 131831, Korea 528156, Mexico 222100, New Zealand

337772; US6,868,399; US7,117,526, EU1226687 (validated in: BE1226687, FI1226687,

FR1226687, DE60028229.5, GB1226687, IE1226687, NL1226687, ES1226687, SE1226687,

CH1226687); US7,197,556, EU1224788 (validated in: BE1224788, CH1224788,

DE60011799.5-08, ES1224788, FI1224788, FR1224788, GB1224788, NL1224788,

SE1224788); US6,636,894, EU1222791 (validated in: BE1222791, FI1222791, FR1222791,

DE60020588.6, GB1222791, NL1222791, ES1222791, SE1222791, CH1222791); SG88575,

中国发明专利 00815828.2, AU2006207853; US6,789,110, Japan 3880856, Korea 559357,

SG88483, 中国发明专利 00815982.3, EU1234425 (validated in: BE1234425, FI1234425,

FR1234425, DE60029819.1, GB1234425, IE1234425, NL1234425, ES1234425, SE1234425,

CH1234425); US7,088,727; US6,857,009; US7,194,554, AU779137, Korea 0687837,

SG88465, 中国发明专利 00815827.4; US7,554,995; US7,698,432, EU1232610 (validated in:

BE1232610, FI1232610, FR1232610, DE60041352.7, GB1232610, IE1232610, IT1232610,

NL1232610, ES1232610, SE1232610, CH1232610); and US7,689,716. European patents

(EU) only validated in the indicated states. Other U.S. and foreign patents pending or granted.

Disclaimer

Nomadix, Inc. makes no warranty, either express or implied, including but not limited to any

implied warranties of merchantability and fitness for a particular purpose, regarding the

product described herein. In no event shall Nomadix, Inc. be liable to anyone for special,

collateral, incidental, or consequential damages in connection with or arising from the use of

Nomadix, Inc. products.

Write your product serial number in this box:

ACCESS GATEWAY

WARNING

Risk of electric shock; do not open; no user-serviceable

parts inside.

AVERTISSEMENT

Risque de choc electrique; ne pas ouvrir; ne pas tenter de

demontre l’appareil.

WARNUNG

Nicht öffnen; elektrische Bauteile.

AVISO

Riesgo de shock eléctrico. No abrir. No hay piezas

configurables dentro.

CAUTION

Read the instruction manual prior to operation.

ATTENTION

Lire le mode d’emploi avant utilisation.

ACHTUNG

Lesen Sie das Handbuch bevor Sie das Gerät in Betrieb

nehmen.

PRECAUCIÓN

Leer el manual de instrucciones antes de poner en

marcha el equipo.

30851 Agoura Rd, Suite 102, Agoura Hills, CA 91301 USA (head office)

ACCESS GATEWAY

Table of Contents

Chapter 1: Introduction .................................................................................................. 1

About this Guide....................................................................................................................... 1

Organization.............................................................................................................................. 1

Welcome to the Access Gateway.............................................................................................. 2

Product Configuration and Licensing ............................................................................... 2

Key Features and Benefits ........................................................................................................ 3

Platform Reliability............................................................................................................ 3

Local Content and Services ............................................................................................... 3

Transparent Connectivity .................................................................................................. 4

Billing Enablement ............................................................................................................ 5

Access Control and Authentication.................................................................................... 5

Security .............................................................................................................................. 5

5-Step Service Branding .................................................................................................... 5

NSE Core Functionality............................................................................................................ 7

Access Control................................................................................................................... 8

Bandwidth Management .................................................................................................... 8

Billing Records Mirroring ................................................................................................. 9

Bridge Mode ...................................................................................................................... 9

Command Line Interface ................................................................................................. 10

Credit Card...................................................................................................................... 10

Dynamic Address Translation™...................................................................................... 10

Dynamic Transparent Proxy............................................................................................ 10

End User Licensee Count ................................................................................................ 11

External Web Server Mode.............................................................................................. 11

Home Page Redirect........................................................................................................ 11

iNAT™............................................................................................................................. 11

Information and Control Console.................................................................................... 12

Internal Web Server......................................................................................................... 13

International Language Support...................................................................................... 14

IP Upsell.......................................................................................................................... 14

Logout Pop-Up Window .................................................................................................. 14

MAC Filtering.................................................................................................................. 15

Multi-Level Administration Support................................................................................ 15

NTP Support .................................................................................................................... 15

Portal Page Redirect ....................................................................................................... 15

RADIUS-driven Auto Configuration................................................................................ 16

RADIUS Client................................................................................................................. 16

RADIUS Proxy................................................................................................................. 16

Realm-Based Routing ...................................................................................................... 17

ACCESS GATEWAY

Remember Me and RADIUS Re-Authentication............................................................... 17

Secure Management......................................................................................................... 17

Secure Socket Layer (SSL) ............................................................................................... 18

Secure XML API............................................................................................................... 18

Session Rate Limiting (SRL)............................................................................................. 19

Session Termination Redirect........................................................................................... 19

Smart Client Support........................................................................................................ 19

SNMP Nomadix Private MIB........................................................................................... 19

Static Port Mapping ......................................................................................................... 20

Tri-Mode Authentication.................................................................................................. 20

URL Filtering................................................................................................................... 20

Walled Garden ................................................................................................................. 20

Web Management Interface ............................................................................................. 21

Optional NSE Modules............................................................................................................ 22

Hospitality Module........................................................................................................... 22

High Availability Module................................................................................................. 22

Network Architecture (Sample) .............................................................................................. 23

Online Help (WebHelp) .......................................................................................................... 24

Notes, Cautions, and Warnings............................................................................................... 24

Chapter 2: Installing the Access Gateway.................................................................... 25

Unpacking the Access Gateway.............................................................................................. 26

Installation Workflow.............................................................................................................. 27

Powering Up the System......................................................................................................... 28

Logging In to the Command Line Interface............................................................................ 29

The Management Interfaces (CLI and Web)........................................................................... 31

Making Menu Selections and Inputting Data with the CLI.............................................. 31

Menu Organization (Web Management Interface) .......................................................... 32

Inputting Data – Maximum Character Lengths............................................................... 34

Online Documentation and Help...................................................................................... 35

Quick Reference Guide ........................................................................................................... 36

Establishing the Start Up Configuration.................................................................................. 36

Assigning Login User Names and Passwords.................................................................. 37

Setting the SNMP Parameters (optional)......................................................................... 38

Enabling the Logging Options (recommended) ............................................................... 39

Assigning the Location Information and IP Addresses.................................................... 42

Logging Out and Powering Down the System........................................................................ 44

Connecting the Access Gateway to the Customer’s Network................................................. 44

Establishing the Basic Configuration for Subscribers............................................................. 45

Setting the DHCP Options ............................................................................................... 45

DHCP Options from RFC 2132 ....................................................................................... 47

Setting the DNS Options................................................................................................... 50

ACCESS GATEWAY

vii

Archiving Your Configuration Settings.................................................................................. 51

Installing the Nomadix Private MIB....................................................................................... 52

Chapter 3: System Administration............................................................................... 53

Choosing a Remote Connection.............................................................................................. 53

Using the Web Management Interface (WMI)................................................................. 54

Using an SNMP Manager................................................................................................ 54

Using a Telnet Client....................................................................................................... 55

Logging In............................................................................................................................... 55

About Your Product License................................................................................................... 55

Configuration Menu................................................................................................................ 56

Defining the AAA Services {AAA} ................................................................................... 56

Establishing Secure Administration {Access Control}.................................................... 67

Defining Automatic Configuration Settings {Auto Configuration} ................................. 70

Setting Up Bandwidth Management {Bandwidth Management}..................................... 73

Group Bandwidth Limit Policy........................................................................................ 74

Group Bandwidth Limit Policy – Operation.................................................................... 75

Group Bandwidth Limit Policy – Enable......................................................................... 76

Group Bandwidth Limit Policy – Current Table............................................................. 77

Establishing Billing Records “Mirroring” {Bill Record Mirroring}.............................. 77

Configuring Destination HTTP Redirect......................................................................... 79

Managing the DHCP service options {DHCP}............................................................... 82

Enabling DNSSEC Support ............................................................................................. 86

Managing the DNS Options {DNS}................................................................................. 87

Managing the Dynamic DNS Options {Dynamic DNS} .................................................. 88

GRE Tunneling {Gre Tunneling}..................................................................................... 90

Setting the Home Page Redirection Options {Home Page Redirect}.............................. 91

Enabling Intelligent Address Translation (iNAT™)........................................................ 92

Defining IPSec Tunnel Settings {IPSec}.......................................................................... 93

Establishing Your Location {Location}........................................................................... 99

Managing the Log Options {Logging}........................................................................... 102

Enabling MAC Authentication {MAC Authentication}.................................................. 107

Assigning Passthrough Addresses (Passthrough Addresses)........................................ 108

Assigning a PMS Service {PMS}................................................................................... 109

Setting Up Port Locations {Port-Location}................................................................... 115

Setting up Quality of Service {QoS} .............................................................................. 120

Defining the RADIUS Client Settings {RADIUS Client} ............................................... 121

Defining the RADIUS Proxy Settings {RADIUS Proxy}................................................ 126

Defining the Realm-Based Routing Settings {Realm-Based Routing}........................... 130

Managing SMTP Redirection {SMTP}.......................................................................... 139

Managing the SNMP Communities {SNMP}................................................................. 140

Enabling Dynamic Multiple Subnet Support (Subnets)................................................. 141

Displaying Your Configuration Settings {Summary} .................................................... 143

ACCESS GATEWAY

viii

Setting the System Date and Time {Time}...................................................................... 144

Setting up Traffic Descriptors........................................................................................ 146

Setting Up URL Filtering {URL Filtering}.................................................................... 147

Selecting User Agent Filtering Settings......................................................................... 148

Zone Migration............................................................................................................... 149

Defining IPSec Tunnel Settings...................................................................................... 151

Network Info Menu............................................................................................................... 153

Displaying ARP Table Entries {ARP}............................................................................ 153

Displaying DAT Sessions {DAT} ................................................................................... 153

Displaying the Host Table {Hosts} ................................................................................ 154

Displaying ICMP Statistics {ICMP}.............................................................................. 155

Displaying the Network Interfaces {Interfaces}............................................................. 155

Displaying the IP Statistics {IP} .................................................................................... 157

Viewing IPSec Tunnel Status {IPSec}............................................................................ 157

Displaying the Routing Tables {Routing}...................................................................... 157

Displaying the Active IP Connections {Sockets} ........................................................... 158

Displaying the Static Port Mapping Table {Static Port-Mapping} ............................... 159

Displaying TCP Statistics {TCP}................................................................................... 160

Displaying UDP Statistics {UDP} ................................................................................. 161

Port-Location Menu............................................................................................................... 161

Adding and Updating Port-Location Assignments {Add}.............................................. 162

Deleting All Port-Location Assignments {Delete All} ................................................... 165

Deleting Port-Location Assignments by Location {Delete by Location}....................... 166

Deleting Port-Location Assignments by Port {Delete by Port}..................................... 167

Exporting Port-Location Assignments {Export}............................................................ 167

Finding Port-Location Assignments by Description {Find by Description} ................. 168

Finding Port-Location Assignments by Location {Find by Location}........................... 169

Finding Port-Location Assignments by Port {Find by Port}......................................... 170

Importing Port-Location Assignments {Import}............................................................ 171

Displaying the Port-Location Mappings {List}.............................................................. 173

Subscriber Administration Menu .......................................................................................... 173

Adding Subscriber Profiles {Add}.................................................................................. 173

Displaying Current Subscriber Connections {Current} ................................................ 179

Deleting Subscriber Profiles by MAC Address {Delete by MAC}................................. 180

Deleting Subscriber Profiles by User Name {Delete by User}...................................... 181

Displaying the Currently Allocated DHCP Leases {DHCP Leases}............................. 182

Deleting All Expired Subscriber Profiles {Expired}...................................................... 182

Finding Subscriber Profiles by MAC Address {Find by MAC} ..................................... 183

Finding Subscriber Profiles by User Name {Find by User}.......................................... 183

Listing Subscriber Profiles by MAC Address {List by MAC} ........................................ 184

Listing Subscriber Profiles by User Name {List by User}............................................. 185

Viewing RADIUS Proxy Accounting Logs {RADIUS Session History}......................... 186

Displaying Current Profiles and Connections {Statistics} ............................................ 187

ACCESS GATEWAY

Subscriber Interface Menu.................................................................................................... 187

Defining the Billing Options {Billing Options} ............................................................. 187

Setting Up the Information and Control Console {ICC Setup}..................................... 194

Defining Languages {Language Support}..................................................................... 201

Enable Serving of Local Web Pages {Local Web Server}............................................. 203

Defining the Subscriber’s Login UI {Login UI}............................................................ 205

Defining the Post Session User Interface (Post Session UI) ......................................... 209

Defining Subscriber UI Buttons {Subscriber Buttons}.................................................. 212

Defining Subscriber UI Labels {Subscriber Labels}..................................................... 213

Defining Subscriber Error Messages {Subscriber Errors} ........................................... 215

Defining Subscriber Messages {Subscriber Messages} ................................................ 217

System Menu......................................................................................................................... 220

Adding an ARP Table Entry {ARP Add}........................................................................ 220

Deleting an ARP Table Entry {ARP Delete} ................................................................. 221

Configurable Gateway ARP Refresh Interval................................................................ 221

Enabling the Bridge Mode Option {Bridge Mode}........................................................ 222

Exporting Configuration Settings to the Archive File {Export}.................................... 223

Importing the Factory Defaults {Factory} .................................................................... 224

Defining the Fail Over Options {Fail Over} ................................................................. 225

Viewing the History Log {History}................................................................................ 226

Establishing ICMP Blocking Parameters {ICMP}........................................................ 227

Importing Configuration Settings from the Archive File {Import}................................ 228

Establishing Login Access Levels {Login} .................................................................... 229

Defining the MAC Filtering Options {Mac Filtering}................................................... 232

Rebooting the System {Reboot} ..................................................................................... 233

Adding a Route {Route Add}.......................................................................................... 234

Deleting a Route {Route Delete} ................................................................................... 235

Establishing Session Rate Limiting {Session Limit}...................................................... 235

Adding Static Ports {Static Port-Mapping Add} ........................................................... 236

Deleting Static Ports {Static Port-Mapping Delete} ..................................................... 238

Blocking a Subscriber Interface {Subscriber Interfaces}.............................................. 239

Updating the Access Gateway Firmware {Upgrade}.................................................... 239

Chapter 4: The Subscriber Interface ......................................................................... 241

Overview............................................................................................................................... 241

Authorization and Billing...................................................................................................... 242

The AAA Structure......................................................................................................... 243

Process Flow (AAA)....................................................................................................... 246

Internal and External Web Servers................................................................................ 247

Language Support.......................................................................................................... 247

Home Page Redirection................................................................................................. 247

Subscriber Management........................................................................................................ 248

Subscriber Management Models ................................................................................... 248

ACCESS GATEWAY

Configuring the Subscriber Management Models ......................................................... 249

Information and Control Console (ICC)................................................................................ 250

ICC Pop-Up Window ..................................................................................................... 250

Logout Console .............................................................................................................. 251

Chapter 5: Quick Reference Guide............................................................................. 253

Web Management Interface (WMI) Menus .......................................................................... 253

Configuration Menu Items ............................................................................................. 254

Network Info Menu Items............................................................................................... 256

Port-Location Menu Items ............................................................................................. 256

Subscriber Administration Menu Items.......................................................................... 258

Subscriber Interface Menu Items ................................................................................... 258

System Menu Items......................................................................................................... 259

Alphabetical Listing of Menu Items (WMI) ......................................................................... 262

Default (Factory) Configuration Settings.............................................................................. 264

Product Specifications........................................................................................................... 266

Sample AAA Log.................................................................................................................. 277

Message Definitions (AAA Log)..................................................................................... 277

Sample SYSLOG Report....................................................................................................... 278

Sample History Log............................................................................................................... 279

Keyboard Shortcuts............................................................................................................... 280

HyperTerminal Settings......................................................................................................... 280

RADIUS Attributes............................................................................................................... 281

Authentication-Request .................................................................................................. 282

Authentication-Reply (Accept) ....................................................................................... 282

Accounting-Request........................................................................................................ 283

Selected Detailed Descriptions ...................................................................................... 284

Nomadix Vendor Specific Attributes .............................................................................. 285

Setting Up the SSL Feature................................................................................................... 287

Prerequisites................................................................................................................... 287

Obtain a Private Key File (cakey.pem).......................................................................... 287

Installing Cygwin and OpenSSL on a PC ...................................................................... 288

Private Key Generation.................................................................................................. 291

Create a Certificate Signing Request (CSR) File........................................................... 294

Create a Public Key File (server.pem)........................................................................... 295

Setting Up Access Gateway for SSL Secure Login......................................................... 298

Setting Up the Portal Page............................................................................................. 299

Mirroring Billing Records..................................................................................................... 300

Sending Billing Records................................................................................................. 300

XML Interface ................................................................................................................ 301

Autres manuels pour Access Gateway

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Nomadix Porte

Nomadix

Nomadix AG 2100 Manuel utilisateur

Nomadix

Nomadix AG-2000W+ Manuel utilisateur

Nomadix

Nomadix AG5800 Manuel utilisateur

Nomadix

Nomadix AG-2000W Manuel utilisateur

Nomadix

Nomadix Universal subscriber gateway Manuel utilisateur

Nomadix

Nomadix AG 3100 Manuel utilisateur

Nomadix

Nomadix AG2500 Manuel utilisateur

Nomadix

Nomadix HotSpot Manuel utilisateur

Nomadix

Nomadix AG 2400 Manuel utilisateur

Nomadix

Nomadix AG 3000 Manuel utilisateur

Nomadix

Nomadix AG 5500 Manuel utilisateur

Nomadix

Nomadix AG 3100 Manuel utilisateur

Nomadix

Nomadix EG 1000 Manuel utilisateur

Nomadix

Nomadix AG 2100 Manuel utilisateur

Nomadix

Nomadix NWCG Manuel utilisateur

Nomadix

Nomadix AG 5000 Manuel utilisateur

Nomadix

Nomadix EG 6000 Manuel utilisateur

Nomadix

Nomadix HotSpot Gateway HSG Manuel utilisateur

Nomadix

Nomadix Access Gateway Manuel utilisateur

Nomadix

Nomadix Access Gateways Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur