GUESTGATE™ Hotspot Gateway USER MANUAL V 2.0 MODEL 523240 (For firmware version 1.
FCC Regulatory Statements Electromagnetic Compatibility (EMC) This equipment generates radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
Table of Contents INTRODUCTION 4 Function Description 4 Installation Examples 6 GuestGate Function Basics 8 INSTALLATION of GuestGate 9 Recommended Setup 9 Advanced Setup 14 CONFIGURATION OPTIONS of GuestGate 19 Status Screen 19 Guest Configuration Screen 20 Host Configuration Screen 23 Welcome Screen Configuration 26 Time / Scheduler Configuration 28 Device Settings Configuration 30 Firmware Upgrade Process 33 Exit Screen 34 QUESTIONS & ANSWERS 35 SERVICE & SUPPORT 38 SP
INTRODUCTION Congratulations on your purchase of the INTELLINET NETWORK SOLUTIONS GuestGate Hotspot Gateway. The GuestGate connects guests to your network, allowing them to access only the Internet (Web, Email, Chat and other applications). GuestGate protects your existing network from unauthorized access by the connected guest computers and, if required, even shields the guest computers among themselves.
Layer 3 Client Isolation Function In a public location with a public Wireless Access Point there are often concerns about security. GuestGate not only protects the Host Network from unauthorized access by your guests, it takes security one step further. When the “use separate random network for each client” option is activated, no guest computer can access any other guest computer. In this mode GuestGate randomly assigns each guest computer its own network. This option is activated by default.
Installation Examples GuestGate in a SOHO Network Environment This is a typical setup in which the Internet connection is established through an NAT router with an integrated firewall.
GuestGate in a SMB Environment In larger networks GuestGate connects to any available switch port behind the Firewall/Gateway/Router.
GuestGate Function Basics Ports GuestGate features a total of 5 10/100 RJ45 Ports. One port is for the connection of GuestGate to the Host Network (Host Port), 4 Ports are available for guest connections (Guest Ports). The Guest Ports can be connected to Hubs, Switches, Wireless Access Points, PCs or Notebooks. Host Port By default GuestGate obtains an IP Address from a DHCP Server already present in the network. GuestGate analyzes the network and obtains all information necessary for Internet Access.
INSTALLATION of GuestGate Recommended Setup This setup method assumes that a DHCP Server such as a router is present in your network. 1. Connection to the Host Network Connect standard RJ45 Network Cable to GuestGate’s HOST Port and to a RJ45 port on your existing network (Ethernet Switch Port, Router Switch Port, etc.). Turn on GuestGate and verify that the network connection is active (HOST LED must be lit on GuestGate).
3. Testing Internet Access Start a PC or Notebook which is connected to one of the Guest Ports. Launch a Web browser and open an Internet Web Site such as http://www.intellinet-network.com. You will then see GuestGate’s welcome page. Click “continue” and you will then be forwarded to the Web page you originally entered in the Web browsers address bar. Note: In order to get Internet Access you must first open a Web browser and open a Web page.
4. Accessing the Administrator Web Interface from the Host Network A. Connect to the router (DHCP Server) in your network and open the DHCP client log of the router. Connect GuestGate’s Host port to one of the router’s LAN ports and power-on GuestGate. Wait about 30 seconds, and then refresh the DHCP client log in the router. The last entry (the newest) belongs to GuestGate. Below is an example of a DHCP Log File: B. Launch your Web browser and open the IP Address shown in the DHCP client log.
5. Changing Administrator Password For security reasons it is recommended to change the administrator password of GuestGate. Follow the steps below to change the password. Click on “Device Settings”. “ Enter the old password 1234. Enter a new password (up to 20 characters long). Retype the new password. Click “Change”. Click on “Exit” (upper right corner).
Check “Save settings”. Check “Reboot device”. GuestGate now reboots. This step takes about 25 seconds. After the reboot you will be redirected to GuestGate’s Login Page. You can now login with the new password. NOTE: The interface is designed to let you make changes on all configuration screens without saving each change individually. Once you are done programming GuestGate, you need to click on “Exit” and reboot the device. The changes will only take effect after GuestGate has been rebooted.
Advanced Setup The standard installation of GuestGate bases on the assumption that a DHCP Server is present in your network. If this is not the case, you can still configure GuestGate manually. To do this you need to turn GuestGate on while it is disconnected from the network. If no DHCP Server can be found after 3 minutes, GuestGate will fall back to its default IP Address of 192.168.2.1.
Right-click the “Local Area Connection” icon and select “Properties” from the context menu. In the “Local Area Connection Properties” window, highlight “Internet Protocol (TCP/IP)” and click on “Properties”. When the “Internet Protocol (TCP/IP) Properties” window opens, you need to make the changes as shown below.
Click “OK” when done. Close the previous Windows by clicking “OK” as well. The TCP/IP settings of your system are now compatible to GuestGate.
2. Connecting to GuestGate via a Web Browser Start your Web browser and open the address http://192.168.2.1. The Administrator Web Interface Login Screen then appears. Enter the password 1234 and click “login”. NOTE: At this point, it is recommended that you change the administrator password as described in the previous section. 3. Host Configuration Click on “Host Config”.
Configuration Host: With the Configuration Host window displayed, specify the device IP address, IP netmask, IP gateway (Internet connection gateway, router) and DNS server. Device IP Address: A free IP Address in your network. This is the IP Address you assign to GuestGate. IP Netmask: Enter the same netmask (or subnet mask) you use in your network. IP Gateway: The IP address of your Internet gateway (such as a router). DNS Server: Domain name service as required by your ISP.
CONFIGURATION OPTIONS of GuestGate Status Screen The Status Screen shows three types of information: 1. Network Information: Basic information about the host network interface. 2. Device Information: Display of the current firmware version, the system’s uptime and the system time. 3. Device Status Displays the status of the password-protected Internet access (“disabled” = no password required) and the status of the Internet access (“enabled” = access to the Internet is active). 4.
Guest Configuration Screen This page shows the configuration options for the connected guest computers. 1. Configuration Guest Option “separate network for each client (automatic)” This operational mode is called “Layer 3 Client Isolation”. If this option is activated, GuestGate randomly assigns different networks to each connected guest computer. This option should be activated if you want to prevent guest computers from seeing and accessing each other (Layer 3 Client Isolation = on).
2. Access Control: General Settings Control the bandwidth and trusted Ethernet addresses. Bandwidth Download Limit Control the maximum download speed available for the connected guest computers. Available options are from 32 kbps (kilo bit per second) up to 2048 kbps (= 2 Mega Bit per second). Default = unlimited. Bandwidth Upload Limit Bandwidth control for the upload speed (sending files to the Internet), with options the same as above.
Click on START -> RUN Type in: cmd Press Enter. At the DOS Command prompt type: ipconfig/all and press Enter. Example Output: The PHYSICAL ADDRESS is the MAC Address which needs to be entered in the configuration of GuestGate. The format is: xx:xx:xx:xx:xx:xx (not xx-xx-xx-xx-xx-xx) 3. Access Control: Welcome Screen Welcome Screen Enable or disable the welcome page for guests. (Default = enabled.) If this parameter is set to “disabled”, all guest users can access the Internet freely.
Host Configuration Screen This page shows the configuration options for the Host Interface of GuestGate. 1. Configuration Host Option “dhcp” GuestGate automatically receives the IP address, netmask, gateway and DdNS server information from the DdHCP server in your network, typically a router. Option “static” In larger networks, a manual configuration of the IP settings may be necessary. Select “static” and enter the IP address, netmask, gateway IP address and DNS server IP addresses manually.
2. Packet filter Blocked Addresses If you which to block certain IP Addresses, Domain Names or an entire network you can enter this here. “Add Host Address” is used to enter domain names such as guestgate.com or intellinet-network.com. Enter the domain name and click on “Add Host”. Repeat the steps to block additional domains. “Add Network Address” is used to enter an IP Address. To specify the range you can select the appropriate network mask from the drop down list.
Walled Garden Addresses You can grant an unauthenticated user limited access to Web sites, both external and internal, using the Walled Garden function. In a scenario, where a password is required in order to access the Internet, a guest normally would not be able to access any web site.
Welcome Screen Configuration This page shows the Welcome Screen configuration options of GuestGate. 1. Redirect first request to URL: When a guest connects to GuestGate for the first time, GuestGate can redirect the guest to a web page you want them to see, e.g., a page displaying special offers or advertising. The redirect URL is entered without HTTP://. Example: www.guestgate.com GuestGate redirects any guest to the GuestGate web page. 2.
Note: The banner image file type must be either JPG, GIF or PNG. The banner image size must not exceed 60 Kb. The banner image dimension is not limited, but the width should ideally not exceed 1024 pixel. The banner image only displays on the guest welcome screen. It does not replace the banner in the administrator Web interface. 4. Welcome Text You can overwrite the default text with your own custom text. GuestGate supports HTML tags to format your text.
Time / Scheduler Configuration This page allows to set up the time-related settings of GuestGate. 1. Time Setup (time zone and update interval) Select the time zone in which you are located it. The update interval parameter defines, how often GuestGate re-synchronizes the internal time with the Internet time.
2. Reboot Device With this parameter you can set up GuestGate to perform a scheduled restart once per day at a time of your choosing. If you have a lot of users connected to GuestGate this feature will improve overall system stability. Furthermore, you can use this feature to force all users to re-authenticate at a defined time if you so desire. 3. Internet Access Time Schedules You can control whether Internet access is available all the time, or only at certain time, e.g., only during business hours.
Device Settings Configuration This page allows changing the administrator password, saving and restoring the configuration, upgrading the firmware and 1. Admin Password To change the Administrator Password you need to enter the old password and the new password. You also must confirm the new password by retyping it. Click on “Change” to save the changes. GuestGate's default password is: 1234 The password can be up to 20 characters in lengths. 2.
Select “Save File”. Specify the location and rename the file “config.cgi” into “log.txt”. Click “Save”. Start MS Excel and open the file log.txt. You’ll then be presented with the Excel’s Text Import Wizard. Select “Delimited” and click “Next >”.
Select “Tab” and click “Next >”. On the next screen you can assign different formats to the individual columns. Recommended values for the “login date” and “logout date” column are “Date YDM”. Click “Finish” and MS Excel proceeds to open the log file. 3. Configuration You can create a backup of the configuration by clicking the “download” button. Save the file “config.cgi” to your hard drive.
Firmware Upgrade Process Where to obtain a new firmware There are two ways to find out of a new firmware is available. a) Check Guest Gate's Status Page Guest Gate checks if a new firmware is available when you login to the Administrator menu. If a new version is found, a test message appears on the status screen. See example below: Click on the link "Click here for more information” and you are being taken to the web page that includes information about the new firmware.
Exit Screen This page lets you save the new configuration. [x] Save Settings All changes you made to the configuration will only be memorized if you save the changes by activating this check box. If you made changes in some of the configuration screens and fail to perform this step before closing the Web browser, all changes will get lost. [x] Reboot Device In order to activate the new configuration you must also check this box. Note: Saving the settings does not automatically activate them.
QUESTIONS & ANSWERS 1. Q: What is the default IP Address of GuestGate? A: The default IP address is: 192.168.2.1 2. Q: What is the default administrator password of GuestGate? A: The default password is: 1234 3. Q: How do I reset GuestGate to the factory default state? A: Press the reset button on the rear for 5 seconds while GuestGate is up and running. 4. Q: I have changed some settings in the administrator Web interface, but the changes show no effect.
10. Q: I have made edits to the welcome page in advanced mode and now the welcome page does not work correctly anymore. How do I restore the default welcome page? A: Open the welcome page configuration page and make sure the “Mode to customize welcome page” is set to “advanced”. Scroll down to the text box labeled “Welcome HTML Code” and click the button “Reset to default”. Save the configuration via the Exit page to activate the default welcome page. 11. Q: Does GuestGate support PHP, ASP or Perl? A: No.
14. Q: Some of my guests wish to play a network game, or share files and folders. But that does not work. How come that the connected guest computers cannot communicate with each other? A: That is because by default Layer 3 Client Isolation is activated. You need to disable it to allow network communication between the connected guest computers. See question 12. 15. Q: Can I access the administrator menu of GuestGate from one of the guest ports? A: No. For security reasons this is not possible.
SERVICE & SUPPORT Additional information about GuestGate is available on the Web at www.guestgate.com On this page you can: 1. Find answers to common questions (FAQ) 2. Obtain the latest Firmware Versions 3. Get in contact with our technical support team.
SPECIFICATIONS • • • • • • • • • Guest Network: 1 x 10/100Mbps RJ45 Port Host Network: 4 x 10/100Mbps RJ45 Ports Reset Button LEDs: 1 x Power, 1 x Link/Activity for Host Network, 4 x Link/Activity for Guest Ports AC Adapter 12V/1A Dimensions: H: 37mm, W: 187mm, D: 100mm Humidity : 0-90% (Non-Condensing) Temperature : 10~55 °C EMI Certification: FCC Class B, CE Mark, C-T - 39 -
APPENDIX Below you can find a list of common TCP/IP Service Ports. These ports can be entered in the HOST CONFIGURATION of GuestGate to block access to certain services.
INTELLINET NETWORK SOLUTIONS™ offers a complete line of active and passive networking products. Ask your local computer dealer for more information or visit www.intellinet-network.com Copyright © INTELLINET NETWORK SOLUTIONS All products mentioned are trademarks or registered trademarks of their respective owners.
