Secure WLAN Controller WHG401
Contents
1. e The logical concept of Service Zone allows the Controller to differentiate clients by locations and to provide different user experiences such as different login pages and network policies e When coupling with VLAN switches and DSLAM devices the Controller can use its Port Mapping feature to tell the location of each client and therefore provide differentiated services For example a hotel guest would not need to type in the password again every time when accessing the Internet in room e By setting up multiple Service Zones and utilizing customized pages or external pages a single Controller can serve multiple hotspot franchises transparently to the clients PMS Integration for Hotel Applications e By interfacing the 3 9 party middleware NetRetriever the controller is able to post billing information to multiple kinds of hotel PMSs including Micros Fidelio Opera HiRUM RMS CMS Hospitality EzyRez RoomMaster2000 Charts and etc e Ahotel guest can obtain an Internet access account at check in counter or sign up for the Internet access service in room anytime without the help of clerks With PMS integration the guest will receive a single room bill e With a single account a guest will be able to access the Internet by wire in room or by wireless connection anywhere within the service range of APs connecting to the Controller All contents are Copyright 2009 4IPNET INC All rights reserved v1 2 100813 SPECIFICATIONS N2. Also it is convenient to set up WHG401 to offer wireless Internet service at medium events such as conventions trade shows and student spring break gatherings uan oe Modem WHG303 External apap a ISP a Autheniica f DParabase L a Ss tian Server f ue Salant _ internet sk bhp tional ils ens Firewall Modem A z I Switc vPN T Switch amp Li Managed AP LLa to hea be Managed AP Di oS Q ia amy O PS A Mall Server 6 a EN 6 5 S Web Serv Ph S if sepsis oe oO w POM Tone PAN Staff Customer Area Access to Internal Network amp Internet Access to Internet Only Location One Fig 1 WHG401 in a Business Headquarter All contents are Copyright 2009 4IPNET INC All rights reserved v1 2 100813 4ipnet WHG401 Hotel with Property Management System PMS For hotels using Property Management System PMS such as Micros Fidelio Opera WHG401 even enables Internet access charges to be incorporated into the room bill Moreover customers are able to purchase Internet service in room anytime or at the front counter With a single account a hotel guest can log on the Internet in room through a wired Ethernet port or enjoy wireless access throughout the hotel property Before the account expires or the quota purchased reaches its limit the guest who wants to surf the Internet in his her room does not need to retype the password WHG401
3. Secure WLAN Controller WHG401 The 4ipnet WHG401 Secure WLAN Controller in Gigabit Ethernet with built in 4 000 local accounts 3 000 on demand accounts is an ideal security solution for medium scale WLAN deployments including enterprises campuses hotels airport terminals and MDUs MTUs The WHG401 integrates secure access control visitor account provisioning flexible accounting and billing and centralized WLAN management into one box to provide simplified manageability and instant mobility With more powerful hardware WHG401 is capable of centrally managing 200 4ipnet single radio and 50 4ipnet multi radio access points to cover a wider service area in a medium network Secure Business Networking WHG401 is suitable for business in managing their wired and wireless network access uniformly The network access of users from different departments and the access of guests can be segregated in different Service Zones When needed WHG401 s Local Site to Site and Remote VPN tunnels can be used to further secure the information flows for business Mobile workers on the road or home based teleworkers can securely access the office network through remote VPN tunnels College Dormitories Apartments or Hotels Networking For college dormitories apartments or hotels who want to cater for their tenants Internet access needs WHG401 makes it easy to manage new tenant registrations and share bandwidth equally among tenants
4. detection and AP load balancing VVVV VV v Vv Hardware Specifications WAN Ports 2 x 10 100 1000 BASE T RJ 45 LAN Ports 2 x 10 100 1000 BASE T RJ 45 Management Port 1 x 10 100 BASE T RJ 45 Console Port 1 x RJ 45 LED Indicators 1 x Power x Link Status 5 x Ethernet Connect LCD Display VVVV VV Physical and Power gt Power Adapter 100 240 VAC 50 60 Hz gt Form Factor 19 1U Rack Mount gt Dimensions W x D x H 16 77 x 10 63 x 1 75 426 mm x 270 mm x 44 4 mm gt Weight 13 2 Ibs 6 kg Environment gt Operating Temperature 0 40 C gt Storage Temperature 20 70 C gt Operation Humidity 5 95 Non condensing gt Storage Humidity 5 95 Non condensing Certifications gt CE FCC gt ROHS compliant Package Contents Aionet WHG401 x 1 CD ROM User s Manual and QIG x 1 Quick Installation Guide QIG x 1 RS 232 DB9 to RJ45 Console Cable x 1 Crossover Ethernet Cable x 1 straight through Ethernet Cable x 1 Power Cord x 1 Rack Mounting Bracket with Screws x 1 VVVVVV VV Specifications subject to change without notice v1 2 100813
5. etworking gt Support NAT or Router mode gt Support Static IP DHCP PPPoE mode on WAN interfaces and PPTP WAN 1 only Choose freely which LAN is authentication enabled LAN support NAT 1 IP Port destination redirection 2 DMZ server mapping 8 Virtual server mapping 4 H 323 pass through supports email service via designated email server Built in with DHCP Server and support DHCP relay support walled garden free surfing zone Walled Garden Ad List that enables advertisement website links on user login portal page support MAC address and IP address pass through Support HTTP Proxy support IP Plug and Play IP PnP support configurable static routes support dual uplinks outbound load balancing and failover for more reliable Internet connection support SIP pass through NAT Support Ethernet connection to external terminal servers Port location mapping features for working with DSLAM and VLAN switches VVV VV VV VV Vv VV Vv System Administration support web based management user interface Provide customizable login and logout portal page SSH remote management Remote firmware upgrade NTP time synchronization Menu driven console management interface Utilities to backup and restore the system configuration VVVVVVV Monitoring and Reporting status monitoring of on line users IP based monitoring of network devices Uplink WAN connection failure alert support Syslog for diagnosis and troubleshooting User traffic histo
6. imum 9 Service Zones each defined by a pair of VLAN tag and ESSID gt Each service zone has its own 1 login portal page 2 authentication options 3 LAN interface IP address 4 DHCP address range gt Each service zone allows access to the selected groups gt Each service zone assigns a network policy to each user group Accounting and Billing gt Support local on demand and external RADIUS server gt Contain 10 configurable billing plans for on demand accounts gt Support credit card billing system by Authorize net PayPal securePay and WorldPay gt Provide session expiration control for on demand accounts gt Provide detailed per user network traffic history for both local and on demand user accounts gt Aipnet RADIUS VSA implementation for volume based session control using RADIUS server gt Support automatic e mail to report network traffic history gt Support Net Retriever the middleware connection to Property Management System PMS AP Management Manage multiple types of 4ipnet APs up to 200 x 4ipnet single radio AP 50 x 4ipnet multi radio AP Monitor 3 party non integrated AP up to 200 Centralized remote management via HITP SNMP interface Auto discovery for managed APs Enable or disable APs easily via user interface Templates for managed APs Monitoring managed AP for its status the number of associated clients and RF information Upgrade managed APs centrally including bulk upgrade Rogue AP
7. ows Domain and SIP registrar e Built in DoS protection keeps malicious hackers from collapsing the network e Site To site VPN tunnels allow branch offices to securely connect with one another and share the same account database Comprehensive Access Control and User Management e kole based access control and policy enforcement offer management of privileges for different user groups e On demand account generation provides secure and managed user accounts to visitors e Service Zone function partitions a physical network into up to 9 virtual networks each with its own definable access control and group policy profiles Allows hotspot owners to provide various levels of customized services e individual user bandwidth limit enables flexible traffic control for different scenarios Centralized Access Point AP Management e Centralized remote control and automatic AP discovery e Management and monitoring of managed APs via web based administration interface including AP s system settings online status enabling disabling reset and firmware upgrade e Periodically monitors APs and notifies the administrator of problematic APs Flexible Accounting and Easy Billing e Configurable billing profiles allow operators to customize billing plans for on demand users e Support online payment with credit card through Authorize net PayPal SecurePay and WorldPay Support for Location Based Hotspot Services and Customizable UAM Web Pages
8. price performance among all access controllers on nowadays market Ream S01 eee j Telephone line RJ 45 Etheeneet cable ri Lounge Bar amp Lobby Computer Facilities i TE Het Retriever PMS ToT pe T rr i wo LIVLAN Switch ADSL Fibre ar f iia F m IP OSLAM ti EAP100 We t Access Point oh Cashber MDF PBX 1 WHG401 is capable of posting Internet access charges to various PMS systems through a 3 4 party middleware NetRetriever which is a separate product made and sold by Votech All contents are Copyright 2009 4IPNET INC All rights reserved v1 2 100813 4ipnet WHG401 FEATURES amp BENEFITS Simplified Deployment and Reliable Internet Connection e Gigabit Ethernet to meet higher data rate demands of larger networks e Easy to deploy highly scalable platform allows overlay with existing wired wireless infrastructure without disruption e Load balancing and WAN failover enhance bandwidth utilization and provide more reliable Internet connection Powerful Network Security Capabilities for Enterprise Applications e Standards based data encryption WEP WPA WPA2 IEEE 802 1X and IPSec VPN e Secure guest and administrator access using web based login and administration over SSL e Diverse user authentication methods including built in Local and On demand database supports external authentication servers including POP3 LDAP RADIUS Wind
9. ry logging Traffic history report via email to administrator Users session log can be sent to FIP or Syslog server VVVVVVV User Management and Access Control Support 4 000 local accounts and 3 000 on demand accounts Provide on demand accounts for visitors support Local user account roaming Authentication methods supported Local and On demand accounts POP3 LDAP RADIUS Windows Domain and SIP authentication single Sign On for Windows Domain Allow MAC address and user identity binding for local user authentication Support MAC Access Control List support auto expired guest accounts Users can be divided into user groups each user group has its own network properties including bandwidth QoS accessible service zones and other privileges gt Support QoS and WMM traffic types Voice Video Best Effort and Background Each group role may get different network policies in different service zones Max concurrent user session TCP UDP limit A setting for user idle timeout Configurable user Black List Export Import local users list to from a text file VV VV v v VV yv v vyv yv Security Support local IPSec VPN tunnels Support PPTP VPN tunnels Support site to site VPN tunnels support VPN pass through IPSec and PPTP Built in DoS attack protection VVV VV All contents are Copyright 2009 4IPNET INC All rights reserved 4ipnet WHG401 Service Zones gt The network is divided into max
10. stands for the most cost effective and easy to setup Internet Access Controller for hotels Not only can WHG401 manage and bill both wireless and in room wired Internet services for properties that have adopted modern IP network infrastructure but it works for those who only utilize traditional phone lines coupled with DSLAM and DSL modem equipments to deliver Internet to each room Telcos or Large Hotspot Operators Networking For Telcos or large hotspot operators WHG401 brings in a convenient and economical way to deploy distributed hotspot services While most of the operators prefer to use external RADIUS servers as authentication database WHG401 in this architecture can play the role of a central RADIUS NAS For quick deployment WHG401 supports two authentication methods UAM and 802 1X including EAP SIM and EAP ITTLS and etc It is capable of supporting customized web UAM pages uploaded locally as well as external web UAM pages residing on external web servers Furthermore the concept of Service Zones of WHG401 allows one Controller to manage multiple franchised hotspots simultaneously In summary the feature rich WHG401 supports multiple business models of Internet Access Services be it for managing wireless or wired clients It can be configured to fit for private corporations government agencies academic campuses multi tenant units MTU hotels WISP or telco s hotspot operations The 4ionet WHG series products aim to offer the best
Download Pdf Manuals
Related Search