A CCESS G ATEWAY24 IntroductionStatic Port MappingThis feature allows the network administrator to setup a port mapping scheme that forwardspackets received on a specific port to a particular static IP (typically private and misconfigured)and port number on the subscriber side of the NSE. The advantage for the networkadministrator is that free private IP addresses can be used to manage devices (such as AccessPoints) on the subscriber side of the NSE without setting them up with Public IP addresses.Tri-Mode AuthenticationThe NSE enables multiple authentication models providing the maximum amount of flexibilityto the end user and to the operator by supporting any type of client entering their network andany type of business relationship on the back end. For example, in addition to supporting thesecure browser-based Universal Access Method (UAM) via SSL, Nomadix is the onlycompany to simultaneously support port-based authentication using IEEE 802.1x andauthentication mechanisms used by Smart Clients. MAC-based authentication is also available.See also: Access Control and Authentication Smart Client SupportURL FilteringThe NSE can restrict access to specified Web sites based on URLs defined by the systemadministrator. URL filtering will block access to a list of sites and/or domains entered by theadministrator using the following three methods: Host IP address (for example, 1.2.3.4). Host DNS name (for example, www.yahoo.com). DNS domain name (for example, *.yahoo.com, meaning all sites under theyahoo.com hierarchy, such as finance.yahoo.com, sports.yahoo.com, etc.).The system administrator can dynamically add or remove up to 300 specific IP addresses anddomain names to be filtered for each property.Walled GardenThe NSE provides up to 300 IP passthrough addresses (and/or DNS entries), allowing you tocreate a “Walled Garden” within the Internet where unauthenticated users can be granted ordenied access to sites of your choosing.
