GUESTGATE™ MK II Wireless 300N Hotspot Gateway USER MANUAL MODEL 524827 INT-524827-UM-0710-02
SAFETY AND REGULATORY NOTICES This equipment has been tested and found to comply with the limits for a Class B computing device pursuant to Subpart B of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference when operated in a commercial environment. Operation of this equipment in a residential area is likely to cause interference, in which case the user, at his own expense, will be required to take whatever measures may be required to correct the interference.
TABLE OF CONTENTS SAFETY AND REGULATORY NOTICES ............................................................................................................. 2 TABLE OF CONTENTS ........................................................................................................................................ 3 INTRODUCTION .................................................................................................................................................... 4 Function Description ..........
INTRODUCTION Congratulations on your purchase of the INTELLINET NETWORK SOLUTIONS GuestGate™ MK II Hotspot Gateway. GuestGate connects guests to your network, allowing them to access only the Internet (Web, Email, Chat and other applications). GuestGate protects your existing network from unauthorized access and, if required, even shields the guest computers among themselves.
Bandwidth Control GuestGate controls how much of your Internet connection speed is dedicated to the guest network. Upload and download bandwidth can be configured individually. Layer 3 Client Isolation Function In a public location with a public Wireless Access Point there are often concerns about security. GuestGate not only protects the Host Network from unauthorized access by your guests, it takes security one step further.
Installation Examples GuestGate in a SOHO Network Environment This is a typical setup in which the Internet connection is established through an NAT router with an integrated firewall.
GuestGate in an SMB Environment In larger networks GuestGate connects to any available switch port behind the Firewall/Gateway/Router.
GuestGate Function Basics Ports GuestGate features a total of five 10/100 RJ45 ports. One port is for the connection of GuestGate to the host network (Host Port), four ports are available for guest connections (guest ports). The guest ports can be connected to hubs, switches, wireless access points, PCs or notebooks. Host Port By default GuestGate obtains an IP address from a DHCP server already present in the network. GuestGate analyzes the network and obtains all information necessary for Internet access.
INSTALLATION Recommended Setup This setup method assumes that a DHCP Server such as a router is present in your network. 1. Connection to the Host Network Connect standard RJ45 network cable to GuestGate’s Host Port and to a RJ45 port on your existing network (Ethernet switch port, router switch port, etc.). Turn on GuestGate and verify that the network connection is active (Host LED must be lit on GuestGate).
3. Testing Internet Access Start a PC or notebook which is connected to one of the guest ports. Launch a Web browser and open an Internet Web site such as http://www.intellinet-network.com. You will then see GuestGate’s welcome page. Click “continue” and you will then be forwarded to the Web page you originally entered in the Web browser’s address bar. Note: In order to get Internet access you must first open a Web browser and open a Web page.
4. Accessing the Administrator Web Interface from the Host Network A. Connect to the router (DHCP server) in your network and open the DHCP client log of the router. Connect GuestGate’s host port to one of the router’s LAN ports and power on GuestGate. Wait about 30 seconds, and then refresh the DHCP client log in the router. The last entry (the newest) belongs to GuestGate. Below is an example of a DHCP log file: B. Launch your Web browser and open the IP address shown in the DHCP client log.
5. Changing Administrator Password For security reasons it is recommended to change the administrator password of GuestGate. Follow the steps below to change the password. Click on “Device Settings.” Enter the old password: 1234. Enter a new password (up to 20 characters long). Retype the new password. Click “Change.” Click on “Exit.
Check “Save settings.” Check “Reboot device.” The reboot takes about 25 seconds, after which you will be redirected to GuestGate’s login page when the reboot is completed. NOTE: The interface is designed to let you make changes on all configuration screens without saving each change individually. Once you are done programming GuestGate, you need to click “Exit” and reboot the device. The changes will only take effect after GuestGate has been rebooted.
Advanced Setup The standard installation of GuestGate is based on the assumption that a DHCP Server is present in your network. If this is not the case, you can still configure GuestGate manually. To do this you need to turn GuestGate on while it is disconnected from the network. If no DHCP Server can be found after 3 minutes, GuestGate will fall back to its default IP address of 192.168.2.1.
Right-click the “Local Area Connection” icon and select “Properties” from the context menu. In the “Local Area Connection Properties” window, highlight “Internet Protocol (TCP/IP)” and click on “Properties.” When the “Internet Protocol (TCP/IP) Properties” window opens, you need to make the changes as shown below.
Click “OK” when done. Close the previous Windows by clicking “OK” as well. The TCP/IP settings of your system are now compatible to GuestGate.
2. Connecting to GuestGate via a Web Browser Start your Web browser and open the address http://192.168.2.1. The Administrator Web Interface Login Screen then appears. Enter the password 1234 and click “login.” NOTE: It is recommended that you change the administrator password as described in the previous section. 3. Host Configuration Click on “Host Config.
Configuration Host: With the Configuration Host window displayed, specify the device IP address, IP netmask, IP gateway (Internet connection gateway, router) and DNS server. Device IP address: A free IP address in your network. This is the IP address you assign to GuestGate. IP Netmask: Enter the same netmask (or subnet mask) you use in your network. IP Gateway: The IP address of your Internet gateway (such as a router). DNS Server: Domain name service as required by your ISP.
CONFIGURATION OPTIONS Status Screen 1. Network Information: Basic information about the host network interface. 2. Device Information: Display of the current firmware version, the system’s uptime and the system time. 3. Device Status Displays the status of the password-protected Internet access (“disabled” = no password required) and the status of the Internet access (“enabled” = access to the Internet is active). 4.
Guest Configuration Screen This page shows the configuration options for the connected guest computers. 1. Configuration Guest Option “separate network for each client (automatic)” If this option is activated, GuestGate randomly assigns different networks to each connected guest computer. This option should be activated if you want to prevent guest computers from seeing and accessing each other (Layer 3 Client Isolation = on). It is activated by default.
2. Access Control: Wireless LAN Wireless LAN Allows activating or deactivating the WLAN function of GuestGate. SSID Define the name of the Wireless network, e.g., “free wifi,” “guest wireless,” “hotelwifi,” etc. Operational Mode Here you can select which wireless modes are supported by GuestGate. The standard mode is 802.11 B/GN. It supports legacy Wireless B and Wireless G connections as well as the new Wireless N standard at 300 Mbps. For best compatibility, we recommend using the default B/G/N mode.
Bandwidth Upload Limit Bandwidth control for the upload speed (sending files to the Internet), with options the same as above. Trusted Ethernet Addresses If you wish to permanently authenticate a guest computer, you can add its MAC address to GuestGate’s configuration. GuestGate will not show the welcome page to any computer that has been entered here. Enter the MAC address of the computer as shown above. The syntax is xx:xx:xx:xx:xx:xx. Click “Add Address” to save the MAC address.
4. Access Control: Welcome Screen Welcome Screen Enable or disable the welcome page for guests. (Default = enabled.) If this parameter is set to “disabled,” all guest users can access the Internet freely. No welcome page is displayed, even if a guest password is defined below. Global Guest Password If you require your guests to enter a password to access the Internet, you can define it here. If left empty, no password is required (default = no password).
Host Configuration Screen 1. Configuration Host Option “dhcp” GuestGate automatically receives the IP address, netmask, gateway and DNS server information from the DHCP server in your network, typically a router. Option “static” In larger networks, a manual configuration of the IP settings may be necessary. Select “static” and enter the IP address, netmask, gateway IP address and DNS server IP addresses manually. Multiple DNS Servers can be entered by separating them with a space, i.e., 111.222.333.
2. Packet filter Blocked Addresses If you wish to block certain IP addresses, domain names or an entire network, you can enter this here. “Add Host Address” is used to enter domain names such as guestgate.com or intellinet-network.com. Enter the domain name and click “Add Host.” Repeat the steps to block additional domains. “Add Network Address” is used to enter an IP address. To specify the range you can select the appropriate network mask from the drop-down list.
Walled Garden Addresses You can grant an unauthenticated user limited access to Web sites, both external and internal, using the Walled Garden function. You can define external and internal addresses to which every user, logged in or not, has access. This area is called the Walled Garden. As soon as the user tries to connect to a Web page that is outside the walled garden, GuestGate requires authentication, as shown below.
Using Walled Garden in combination with a custom welcome screen (see next section), you can allow guests access to Web sites of your choosing without providing a password. The welcome page could look like this: You need to enter the URLs and IP addresses your guests can access without providing a password in the Walled Garden configuration. Add Host Address: Enter any Web site URL you wish to include in the Walled Garden. Click “Add Host” to add the URL to the setup.
Welcome Screen Configuration 1. Redirect first request to URL: When a guest connects to GuestGate for the first time, GuestGate can redirect the guest to a Web page you want them to see, e.g., a page displaying special offers or advertising. 2. Mode to customize welcome page: There are two values to choose from: “simple” and “advanced.” In simple mode you can change the welcome text and replace the default banner graphic. In advanced mode, you have access to the entire HTML source code of the welcome page.
4. Welcome Text You can overwrite the default text with your own custom text. GuestGate supports HTML tags to format your text. Below is a small selection: bold text red text green text underlined text red bold underlined text Other HTML commands such as
![]() tags and many more are also supported. 5.Time / Scheduler Configuration 1. Time Setup (Time Zone and Update Interval) Select the time zone in which you are located. The update interval parameter defines how often GuestGate re-synchronizes the internal time with the Internet time. 2. Reboot Device With this parameter, you can set up GuestGate to perform a scheduled restart once per day at a time of your choosing. If you have a lot of users connected to GuestGate, this feature will improve overall system stability. Furthermore, you can use this feature to force all users to re-authenticate at a defined time if you so desire. 3. Internet Access Time Schedules You can control whether Internet access is available all the time or only at certain times, e.g., only during business hours. Device Settings Configuration This page allows changing the administrator password, saving and restoring the configuration as well as upgrading the firmware. 1. Admin Password To change the administrator password, you need to enter the old password and the new password. You also must confirm the new password by retyping it. Click “Change” to save the changes. GuestGate's default password is 1234 The password can be up to 20 characters in length. Select “Save File.” Specify the location and rename the file from “config.cgi” to “log.txt.” Click “Save.” Start MS Excel and open the file log.txt. You’ll then be presented with the Excel’s text import wizard. Select “Delimited” and click “Next >. Select “Tab” and click “Next >.” On the next screen, you can assign different formats to the individual columns. Recommended values for the “login date” and “logout date” column are “Date YDM.” Click “Finish” and MS Excel will open the log file. 3. Configuration You can create a backup of the configuration by clicking the “download” button. Save the file “config.cgi” to your hard drive. If you wish to reload the configuration at a later time, click “Browse …,” select the previously saved file “config. Firmware Upgrade Process Where to obtain a new firmware There are two ways to find out if a new firmware is available. a) Check GuestGate's Status Page GuestGate checks if a new firmware is available when you log in to the Administrator menu. If a new version is found, a text message appears on the status screen. See example below: Click on the link "Click here for more information” and you will be taken to the Web page that includes information about the new firmware. Exit Screen This page lets you save the new configuration. [x] Save Settings All changes you made to the configuration will only be remembered if you save the changes by activating this check box. If you made changes in some of the configuration screens and fail to perform this step before closing the Web browser, all changes will be lost. [x] Reboot Device In order to activate the new configuration, you must also check this box. Note: Saving the settings does not automatically activate them. QUESTIONS & ANSWERS 1. Q: What is the default IP address of GuestGate? A: The default IP address is: 192.168.2.1 2. Q: What is the default administrator password of GuestGate? A: The default password is: 1234 3. Q: How do I reset GuestGate to the factory default state? A: Power on GuestGate, wait 5 seconds and then press the reset button on the back panel for 10 seconds. 4. Q: I have changed some settings in the administrator Web interface, but the changes show no effect. 9. Q: Can I use HTML code in my custom welcome page? A: Yes. GuestGate does not limit you in any way. If you are an HTML Web developer you can create an enhanced welcome page simply by pasting the HTML code into the welcome page configuration field. In advanced mode, you have access to the complete HTML source code. 10. Q: I have made edits to the welcome page in advanced mode and now the welcome page does not work correctly. 12. Q: Does GuestGate support PHP, ASP or Perl? A: No. GuestGate does not support server-side scripting. 13. Q: How often does a guest need to authenticate on the welcome page? A: Only once. As long as GuestGate is not restarted and the guest remains connected to GuestGate, the guest will never again be prompted to enter the password and agree to your terms and conditions. 19. Q: Some of my guests wish to play a network game, or share files and folders. But that does not work. How come the connected guest computers cannot communicate with each other? A: That is because Layer 3 Client Isolation is activated by default. You need to disable it to allow network communication between the connected guest computers. See question 11. 20. Q: On the status page of the Web administration interface the time is displayed as “(not available). APPENDIX Below you can find a list of common TCP/IP service ports. These ports can be entered in the host configuration of GuestGate to block access to certain services. WARRANTY INFORMATION Deutsch Garantieinformationen finden Sie hier unter www.intellinet-network.com/warranty. English For warranty information, go to www.intellinet-network.com/warranty. Español Si desea obtener información sobre la garantía, visite www.intellinet-network.com/warranty. Français Pour consulter les informations sur la garantie, rendezvous à l’adresse www.intellinet-network.com/warranty. Italiano Per informazioni sulla garanzia, accedere a www.intellinet-network.com/warranty. - 43 - INTELLINET NETWORK SOLUTIONS™ offers a complete line of active and passive networking products. Ask your local computer dealer for more information or visit www.intellinet-network.com Copyright © INTELLINET NETWORK SOLUTIONS All products mentioned are trademarks or registered trademarks of their respective owners. |
