Page 136 / 237 Scroll up to view Page 131 - 135
OxyGEN
mini
Office
Administrator’s Guide
2. Select GOLD, SILVER or BRONZE as the desired
Priority
category.
3. Select the desired traffic classification method under the
Filter
parameter. The OxyGEN miniOffice
offers four different methods for the classification of IP Traffic:
I DiffServ Value:
Based on the TOS/DSCP value of the IP header of the packets.
The
corresponding value is configured in the
DSCP
field.
II IP Addresses: Based on the source or destination IP address of the IP packets. The range of
valid IP addresses is defined using the
Start IP
and
End IP
parameters.
III Connection Bytes: Based on the amount of data transferred. The low limit is configured using
the
Begin after
parameter whereas the optional upper limit using the
Stop after
parameter.
IV Application/Service: Based on the application or service the IP packets belong to. This can be
one of the pre-defined protocols/applications appearing in the drop down list or CUSTOM for
explicitly defining the characteristics of the service. In the latter case, the
Type
of IP packets
(TCP, UDP or Both) and the corresponding
Port
numbers (valid ports are 1-65535) must be
configured. Port ranges can also be specified.
4. Click
Save
.
Gennet s.a.
136
Page 137 / 237
OxyGEN
mini
Office
Administrator’s Guide
Device Detection
This sub-menu allows the configuration of the automatic Set-Top Box (STB) or VoIP phone detection
mechanism supported by the OxyGEN miniOffice. With this provisioning mechanism, whenever a STB
is detected on the LAN served by the OxyGEN miniOffice, it is automatically placed on the Video
Interface Group and IP traffic to and from this device is treated as video traffic and routed accordingly.
Similarly, if a VoIP phone is detected, the corresponding LAN port is placed on the Voice Interface
Group and the VoIP phone is optionally provisioned for the embedded IP-PBX of the OxyGEN miniOffice
(refer to section
Local Extensions
on page 111).
Note
The STB detection mechanism is an optional feature and depends on the provision of a
Video Service by your Service Provider.
Detection of the STB or VoIP phone is based on the DHCP service, and the presence of a device is
identified by either of the following two information fields present in the broadcasted DHCP request:
The MAC address of the device (more specifically the first 3 bytes - the OUI part)
The Vendor Identifier string
Figure 11.12: STB Auto-detection
In order to configure the device auto-detection mechanism:
1. Select Enabled as
Status
.
2. Fill in either the
MAC Address OUI
or the
Vendor Identifier
values and the corresponding type of
device.
Gennet s.a.
137
Page 138 / 237
OxyGEN
mini
Office
Administrator’s Guide
3. For STBs, select the
Traffic Separation
mode.
L2 corresponds to layer-2 (Ethernet) separation
(Private VLANs) with Data and Video Interface Groups totally separated, whereas L3 corresponds
to layer-3 (IP) separation, with IP routing between the Data and Video Interface Groups.
4. Click
Apply
.
Note
The detection mechanism relies on the DHCP service. Therefore, if the target device
does not obtain its network settings from the embedded DHCP server of the OxyGEN
miniOffice, its automatic detection cannot be performed.
Gennet s.a.
138
Page 139 / 237
OxyGEN
mini
Office
Administrator’s Guide
Radius Server
Another advanced service offered by the OxyGEN miniOffice, is an embedded Radius server. Radius
(Remote Authentication Dial In User Service) is a networking protocol that provides centralized Au-
thentication, Authorization, and Accounting (AAA) management for computers to connect and use a
network service. Radius serves three functions:
1. to authenticate users or devices before granting them access to a network,
2. to authorize those users or devices for certain network services and
3. to account for usage of those services.
An example use of a Radius server is for the Authentication, Authorization and Accounting of WiFi users
in Hotspots (see section
Hotspot
on page 90).
The
Radius Server
sub-menu allows the configuration of usernames and allowed hosts/subnets for
the embedded Radius server of OxyGEN miniOffice. When entering the configuration page, a list of all
configured usernames is displayed.
Figure 11.13: Radius Usernames
You can Edit and Delete configured usernames by clicking on the icons
and
respectively of
Action
column.
In order to add a new Radius username, click
Add New
and the
Radius User
page appears.
Using the appropriate entry fields, enter the desired new
Username
and
Password
value. You can
also set values to a series of
Attributes
using the provided drop-down lists for Attribute and corresponding
entry fields for Value. Fianlly, click the
Save
key and the new username is added.
Apart from the list of remote usernames, it is also possible to configure the hosts and/or subnets
allowed to contact the embedded Radius server of OxyGEN miniOffice. To this end, follow the
Configure
Allowed Subnets
link and the
Allowed Subnets
screen appears.
In order to add a new remote host or subnet, enter the IP address of the host or subnet in the
Subnet
entry field. For a single host, enter its IP address, whereas for a subnet use the xxx.xxx.xxx.xxx/yy notation
Gennet s.a.
139
Page 140 / 237
OxyGEN
mini
Office
Administrator’s Guide
Figure 11.14: New Radius Username
Figure 11.15: Radius Subnet Configuration
(xxx.xxx.xxx.xxx is the network address and yy is the length of the mask in bits - see
Appendix B
on page
189). Add also a
Password
value, click the
Save
key and the new entry is added.
If, on the other hand, you wish to prohibit further access to a configured remote host/subnet, Revoke
them by clicking on the corresponding icon
of
Action
column in the list of allowed subnets.
Gennet s.a.
140

Rate

4.5 / 5 based on 2 votes.

Popular Gennet-OxyGEN Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top