A CCESS GATEWAYIntroduction 19Static Port MappingThis feature allows the network administrator to setup a port mapping scheme that forwardspackets received on a specific port to a particular static IP (typically private andmisconfigured) and port number on the subscriber side of the NSE. The advantage for thenetwork administrator is that free private IP addresses can be used to manage devices (such asAccess Points) on the subscriber side of the NSE without setting them up with Public IPaddresses.Tri-Mode AuthenticationThe NSE enables multiple authentication models providing the maximum amount of flexibilityto the end user and to the operator by supporting any type of client entering their network andany type of business relationship on the back end. For example, in addition to supporting thesecure browser-based Universal Access Method (UAM) via SSL, Nomadix is the onlycompany to simultaneously support port-based authentication using IEEE 802.1x andauthentication mechanisms used by Smart Clients. MAC-based authentication is alsoavailable.See also: “Access Control and Authentication” on page 5 “Smart Client Support” on page 18URL FilteringThe NSE can restrict access to specified Web sites based on URLs defined by the systemadministrator. URL filtering will block access to a list of sites and/or domains entered by theadministrator using the following three methods: Host IP address (for example, 1.2.3.4). Host DNS name (for example, www.yahoo.com). DNS domain name (for example, *.yahoo.com, meaning all sites under theyahoo.com hierarchy, such as finance.yahoo.com, sports.yahoo.com, etc.).The system administrator can dynamically add or remove up to 300 specific IP addresses anddomain names to be filtered for each property.Walled GardenThe NSE provides up to 300 IP passthrough addresses (and/or DNS entries), allowing you tocreate a “Walled Garden” within the Internet where unauthenticated users can be granted ordenied access to sites of your choosing.
