Overview of configuration steps

LAN configuration

Field Menu Value
IP Address / Netmask LAN -> IP Configuration -> Interfaces -> <en1-0> . e. g. 192.168.100.254
Interface Mode LAN -> IP Configuration -> Interfaces -> <en1-0> . Untagged:
Based on Ethernet Interface LAN -> IP Configuration ->Interfaces -> New en1-0
IP Address / Netmask LAN -> IP Configuration ->Interfaces -> New e. g. 192.168.15.254
Interface Mode LAN -> IP Configuration ->Interfaces -> New Tagged (VLAN)
VLAN ID LAN -> IP Configuration ->Interfaces -> New 15
Based on Ethernet Interface LAN -> IP Configuration ->Interfaces -> New en1-0
IP Address / Netmask LAN -> IP Configuration ->Interfaces -> New e. g. 192.168.16.254
Interface Mode LAN -> IP Configuration ->Interfaces -> New Tagged (VLAN)
VLAN ID LAN -> IP Configuration ->Interfaces -> New 16

Hotspot configuration

Field Menu Value
Authentication Type System Management -> Remote Authentication -> RADIUS -> New Accounting
Vendor Mode System Management -> Remote Authentication -> RADIUS -> New bintec HotSpot Server
Server IP Address System Management -> Remote Authentication -> RADIUS -> New e. g. 62.245.165.180
RADIUS Secret System Management -> Remote Authentication -> RADIUS -> New e. g. supersecret
Default User Password System Management -> Remote Authentication -> RADIUS -> New e. g. supersecret
Priority System Management -> Remote Authentication -> RADIUS -> New 0
Authentication Type System Management -> Remote Authentication -> RADIUS -> New Login Authentication
Server IP Address System Management -> Remote Authentication -> RADIUS -> New e. g. 62.245.165.180
RADIUS Secret System Management -> Remote Authentication -> RADIUS -> New e. g. supersecret
Default User Password System Management -> Remote Authentication -> RADIUS -> New e. g. supersecret
Priority System Management -> Remote Authentication -> RADIUS -> New 0

Set up Hotspot network

Field Menu Value
Interface Local Services -> Hotspot Gateway -> Hotspot Gateway -> New e. g. LAN_EN1-0
Domain at the HotSpot Server Local Services -> Hotspot Gateway -> Hotspot Gateway -> New e. g. trainingfec_1.de
Walled Garden Local Services -> Hotspot Gateway -> Hotspot Gateway -> New Enabled
Walled Network / Netmask Local Services -> Hotspot Gateway -> Hotspot Gateway -> New e. g. 62.146.53.196 and 255.255.255.255
Walled Garden URL Local Services -> Hotspot Gateway -> Hotspot Gateway -> New http://www.bintec-elmeg.com
Terms & Conditions Local Services -> Hotspot Gateway -> Hotspot Gateway -> New http://www.bintec-elmeg.com
Language for login window Local Services -> Hotspot Gateway -> Hotspot Gateway -> New e. g. German

DHCP configuration

Field Menu Value
IP Pool Name Local Services -> DHCP Server -> IP Pool Configuration -> New e. g. Assistant
IP Address Range Local Services -> DHCP Server -> IP Pool Configuration -> New e. g. 192.168.15.10 - 192.168.15.110
Interface Local Services -> DHCP Server -> DHCP Configuration -> New en1-0-1
IP Pool Name Local Services -> DHCP Server -> DHCP Configuration -> New e. g. Assistant
Pool Usage Local Services -> DHCP Server -> DHCP Configuration -> New Local
IP Pool Name Local Services -> DHCP Server -> IP Pool Configuration -> New e. g. Guests
IP Address Range Local Services -> DHCP Server -> IP Pool Configuration -> New e. g. 192.168.16.10 - 192.168.16.110
Interface Local Services -> DHCP Server -> DHCP Configuration -> New en1-0-2
IP Pool Name Local Services -> DHCP Server -> DHCP Configuration -> New e. g. Guests
Pool Usage Local Services -> DHCP Server -> DHCP Configuration -> New Local

WLAN Controller Wizard

Field Menu Value
Region Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard. Germany
Interface Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard. LAN_EN1-0
DHCP Server Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard. Internal
IP Address Range Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard. e. g. 192.168.100.10 - 192.168.100.110
Radio profile Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next 2.4 GHz Radio Profile
Network Name (SSID) Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next e. g. Employees
Security Mode Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next WPA-PSK
WPA Mode Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next WPA2
Preshared key Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next e. g. supersecret
VLAN Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next Enabled
VLAN ID Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next 15
Network Name (SSID) Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard -> Next-> Add e. g. Guests
Security Mode Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard -> Next-> Add Inactive
VLAN Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard -> Next-> Add Enabled
VLAN ID Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard -> Next-> Add 16
Location Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next e. g. 1:Office
Active Radio Profile Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard ->Next 2.4 GHz Radio Profile
Assigned Wireless Networks (VSS) Wireless LAN Controller -> Wizard -> Wireless LAN Controller Wizard -> Next e. g. vss-1:Employees and vss-2:Guests

Add firewall rules

Field Menu Value
Description Firewall -> Services -> Groups -> New e. g. Internet
Members Firewall -> Services -> Groups -> New e. g. http , http (SSL)
Description Firewall -> Services -> Groups -> New e. g. Local Services
Members Firewall -> Services -> Groups -> New e. g. http , http (SSL)

Restrict local services

Field Menu Value
Source Firewall -> Policies -> Filter Rules -> New LEASED_EN1-0-1
Destination Firewall -> Policies -> Filter Rules -> New LOCAL
Service Firewall -> Policies -> Filter Rules -> New local services
Action Firewall -> Policies -> Filter Rules -> New Access
Source Firewall -> Policies -> Filter Rules -> New LEASED_EN1-0-2
Destination Firewall -> Policies -> Filter Rules -> New LOCAL
Service Firewall -> Policies -> Filter Rules -> New local services
Action Firewall -> Policies -> Filter Rules -> New Access
Source Firewall -> Policies -> Filter Rules -> New LAN_EN1-0-1
Destination Firewall -> Policies -> Filter Rules -> New LAN_EN1-0-1
Service Firewall -> Policies -> Filter Rules -> New any
Action Firewall -> Policies -> Filter Rules -> New Deny
Source Firewall -> Policies -> Filter Rules -> New LAN_EN1-0-2
Destination Firewall -> Policies -> Filter Rules -> New LAN_EN1-0-2
Service Firewall -> Policies -> Filter Rules -> New any
Action Firewall -> Policies -> Filter Rules -> New Deny

Copyright© Version 08/2020 bintec elmeg GmbH