-
Cisco BBSM 5.3 Configuration Guide
-
Index
-
1 - Overview
-
2 - Advanced Topics
-
3 - Getting Started
-
4 - Configuring Dual VLANs
-
5 - Running the BBSM Wizards
-
6 - Configuring DNS Forwarding
-
7 - Connecting the PMS or Local Printer
-
8 - Configuring the Network and Bandwidth Management Settings
-
9 - Changing the Internal Network IP Address Ranges
-
10 - Configuring BBSM Sites
-
11 - Configuring Routers
-
12 - Configuring Network Elements
-
13 - Configuring PMS or Print Billing
-
14 - Configuring RADIUS Billing
-
15 - Configuring Credit Card Billing
-
16 - Configuring Security and SSL
-
17 - Configuring Bandwidth Management
-
18 - Creating Custom Page Sets
-
19 - Configuring Walled Gardens
-
20 - Configuring the Port Hop Delay
-
21 - Configuring Alerts
-
A - Configuring Port Test Parameters
-
B - Changing Server Bandwidth Parameter Settings
-
Glossary
-
Preface
-
Table Of Contents
Transmission and Networking Options
Understanding the BBSM Dashboard
Overview
As a gateway server for public access networks, Cisco Building Broadband Service Manager (BBSM) enables high-speed Internet access. It enables simple "plug-and-play" access, self-provisioning of end-user services, multiple authentication and billing options, and web-based configuration, management, and reporting.
This chapter includes these sections:
•
Transmission and Networking Options
•
The BBSM server integrates and manages these key functions:
•
•
•
•
•
•
•
BBSM is available as a preloaded server appliance, or you can purchase the software separately and install it yourself. If you are installing the BBSM software, refer to the Cisco BBSM 5.3 Installation Guide for instructions on installing BBSM and for the minimum hardware and software requirements. For information on obtaining the installation guide and other documentation, refer to the "Obtaining Documentation" section in the preface to this user guide.
New in Software Release 5.3
This section briefly describes some of the new features added to the BBSM 5.3.
System Summary web page
The BBSM System Summary web page provides status details for the BBSM server and its services.
Enhanced system event monitoring and alerts
The BBSM server now issues system events such as error, warning, and informational events to the Windows system Event Log using the standard Windows 2000 process. The server can be configured to generate Simple Network Management Protocol (SNMP) traps when an event is written into the Event Log.
Dual VLAN support
A second VLAN is now supported as an Institute of Electrical and Electronics Engineers (IEEE) protocol 802.1Q trunk to network devices so BBSM supports the separation of client traffic from management traffic.
Support for duplicate IP addresses
BBSM now supports static clients that have duplicate IP addresses. This includes multiple static clients with the same static IP address or multiple static clients with an IP address that overlaps the DHCP range on BBSM. The BBSM server automatically maps clients with duplicate static IP addresses to different network address translation (NAT) IP addresses. The client browsers are automatically redirected to the appropriate Connect page and then prompted to authenticate. This feature requires that port protection is enabled on network devices to prevent duplicate IP clients from interfering with each other.
Access codes by duration
Customers can now create an access code by duration. These access codes can be used for any amount of time within a year until no time is left for the access code.
PMS or print billing configured per server
As of this release, PMS or print billing is configured for each server, not each site.
SSL page sets disabled when SSL certificate is not installed on the BBSM server
When an secure sockets layer (SSL) certificate is not installed on a BBSM server, the page sets that require SSL cannot be chosen.
Security hardening
As of BBSM 5.3, the BBSM appliances ship with security hardening. Hardening BBSM involves disabling unnecessary services, removing and modifying registry key entries, and applying appropriate restrictive permissions to files and services to prevent exploitation. In addition to the BBSM server being hardened, other devices on the network should also configured to ensure proper security. Examples include filtering on firewalls, access control lists, and intrusion detection systems. A BBSM white paper describes the procedure for hardening a BBSM server:
http://www.cisco.com/application/pdf/en/us/guest/products/ps533/c1244/cdccont_0900aecd80093fe0.pdf
Transmission and Networking Options
BBSM manages the delivery of broadband services and the associated network devices. You can transmit BBSM data across various media and using various network types.
You can use existing phone lines, Ethernet, wireless LAN (WLAN), or cable to transmit or receive data using the BBSM server. For the Cisco Ethernet Catalyst switches, Cisco Aironet access points, and cable modem termination system (CMTS) that BBSM supports, refer to the Cisco BBSM Products Supported Network Devices Guide. The Cisco CMTS uses the coaxial cable that already exists in hotels, apartment buildings, and office buildings.
All traffic must pass through BBSM before it reaches the Internet. The BBSM server is assigned the predefined router number of 0 and always has an IP address of 127.0.0.1. This IP address is a loopback address that the BBSM server uses to communicate with itself. (Figure 1-1 shows a typical BBSM network.)
Figure 1-1 Typical BBSM Building Network
The BBSM system supports the following types of networks:
•
Figure 1-2 Basic Bridged BBSM Network
•
You must enter information in the BBSM WEBconfig about routers that act as a client's default gateway. For example, in Figure 1-3, you must specify routers 1 and 2, but router A does not need to be specified. Refer to "Configuring Network Elements." (This configuration is separate from configuring the routers themselves. To configure the router, refer to the product guide for the router.)
Figure 1-3 Basic Routed BBSM Network
•
Figure 1-4 Basic Mixed and Routed BBSM Network
Understanding the BBSM Dashboard
The BBSM Dashboard comprises three primary components—Administration, Operations, and Reports—that are based on user permissions. To perform system functions, select one of the sections under the components. These are the permissions of the corresponding user groups:
•
•
•
The Dashboard and its components are described in the sections that follow.
Dashboard
The Dashboard is the BBSM home page for accessing BBSM options. (See Figure 1-5.) You can access the Dashboard locally or remotely:
•
•
–
–
–
–
- Reports usernames are granted access to reports only.
- Operator usernames are granted access to reports and operations.
- Administrator usernames are granted access to all.
These usernames and passwords are created when a site is created. A site can be created in switch discovery or in WEBconfig during site configuration. (Refer to the "Running the Switch Discovery Wizard" section.)
Figure 1-5 Dashboard for Single Sites
If the BBSM system has multiple sites, the Dashboard contains a drop-down menu from which you select a site and then a Dashboard option.
Administration
The four Administration options enable you to perform all administrative tasks, including configuring the BBSM system. The Administration section requires that the user have the privileges of the Administrators user group, which is the default Windows 2000 Administrator group. Only users with full administrative rights can access these three options:
•
•
•
•
Figure 1-6 BBSM WEBconfig Default Web Page and Navigation Bar
Table 1-1 describes the WEBconfig web page options.
Operations
The following options are available under the Operations section of the Dashboard, which requires users to be in the Operators or Administrators user groups. Users in these groups can view all Operations reports and perform all Operations functions:
•
•
•
•
•
If you need to add Operator users, refer to your Windows 2000 documentation for instructions and then choose Start > Programs > Administrative Tools > Computer Management > Local Users and Groups to create the new users. After creating the users, add them to these two Windows groups:
•
•
Reports
The Reports option consists of the Reporting Pages section, which enables you to view BBSM operational data. Users can be in the Reports, Operators, or Administrator user group. The interface consists of seven web pages that are accessible from a toolbar at the top of the page. To close Reports and return to the Dashboard, click the Dashboard link in the upper right corner.
If you need to add Reports users, refer to your Windows 2000 documentation for instructions and then choose Start > Programs > Administrative Tools > Computer Management > Local Users and Groups to create the new users. After creating the users, add them to these two Windows groups:
•
•
Using Navigation Buttons
Use the BBSM web page navigation buttons to find the correct record before making changes. (See Table 1-2.)
When no records exist for that function, the button is disabled. For example, the First and Previous buttons are disabled when you are viewing the first record.
Connecting a Client to BBSM
To connect a client to BBSM, the client should meet minimum requirements to ensure successful operation. This section describes those requirements and how end users connect to the BBSM server. Table 1-3 shows the operating system and browser versions that have been tested and are supported for BBSM 5.3.
The page set that the BBSM administrator selects in the Switch Discovery Wizard or from the Page Set drop-down menu in the WEBconfig Network Element Port Settings pop-up window determines which Connect page the end user uses to connect to the Internet.
The following example demonstrates a general connection sequence for an end user.
A hotel has purchased a BBSM server, set it up, and selected the DailyHotel page set. After checking into a hotel room, an end user with a laptop computer might do the following:
1.
2.
3.
4.
