|
|
| Datasheet |  |
| QIG | |
| Date | Model | Version | New Features and Enhancements | Download | | 2009-11-13 | WHG301 | v3.0 | This
firmware release has added managed AP types and support for WorldPay
payment gateway and hotel PMS, and enhanced billing plans. |
| WHG301 – Secure WLAN Controller |
The 4ipnet WHG301 Secure WLAN Controller
with built-in 1,000 local accounts, 2,000 on-demand accounts, is an
ideal security solution for small-scale WLAN deployments, including
enterprises, campuses, hotels, airport terminals, and MDUs/ MTUs. The
WHG301 integrates “secure access control”, “visitor account provisioning”, “flexible accounting and billing”, and “centralized WLAN management”
into one box to provide simplified manageability and instant mobility.
With more powerful hardware, WHG301 is capable of centrally managing 62
access points (50 x EAP700 + 12 x other 4ipnet single radio AP) to cover
a wider service area in a smaller network. |
| Secure Business Networking |
| WHG301 is suitable for business
in managing their wired and wireless network access uniformly. The
network access of users from different departments and the access of
guests can be segregated in different Service Zones. When needed,
WHG301’s Local, Site-to-Site and Remote VPN tunnels can be used to
further secure the information flows for business. Mobile workers on the
road or home-based teleworkers can securely access the office network
through remote VPN tunnels. |
| College Dormitories, Apartments or Hotels Networking |
For college dormitories, apartments or hotels
who want to cater for their tenants’ Internet access needs, WHG301
makes it easy to manage new tenant registrations and share bandwidth
equally among tenants. Also, it is convenient to set up WHG301 to offer
wireless Internet service at small events, such as conventions, trade shows, and student spring break gatherings.
Fig.1. WHG301 in a Business Headquarter
|
| Hotel with Property Management System (PMS) |
| For hotels using Property Management System (PMS) such as Micros Fidelio/Opera, WHG301 even enables Internet access charges to be incorporated into the room bill [1].
Moreover, customers are able to purchase Internet service in room
anytime or at the front counter. With a single account, a hotel guest
can log on the Internet in room through a wired Ethernet port or enjoy wireless access
throughout the hotel property. Before the account expires or the quota
purchased reaches its limit, the guest who wants to surf the Internet in
his/her room does not need to retype the password. WHG301 stands for
the most cost-effective and easy-to-setup Internet Access Controller for
hotels. Not only can WHG301 manage and bill both wireless and in-room
wired Internet services for properties that have adopted modern IP
network infrastructure, but it works for those who only utilize
traditional phone lines coupled with DSLAM and DSL modem equipments to
deliver Internet to each room. |
| Telcos or Large Hotspot Operators Networking |
| For Telcos or large hotspot operators,
WHG301 brings in a convenient and economical way to deploy distributed
hotspot services. While most of the operators prefer to use external
RADIUS servers as authentication database, WHG301 in this architecture
can play the role of a central RADIUS-NAS. For quick deployment, WHG301
supports two authentication methods: UAM and 802.1X. It is capable of
supporting customized web UAM pages uploaded locally as well as external
web UAM pages residing on external web servers. Furthermore, the
concept of Service Zones of WHG301 allows one Controller to manage
multiple franchised hotspots simultaneously.
In summary, the feature-rich WHG301 supports multiple business models
of Internet Access Services - be it for managing wireless or wired
clients. It can be configured to fit for private corporations,
government agencies, academic campuses, multi-tenant units (MTU),
hotels, WISP or telco’s hotspot operations. The 4ipnet WHG-series
products aim to offer the best price-performance among all access
controllers on nowadays market.
Fig.2. WHG301 in a Hotel – Capable of integrating with DSLAM and PMS
|
[1] WHG301 is capable of posting Internet access charges to various PMS
systems through a 3rd party middleware – NetRetriever, which is a
separate product made and sold by Votech.
| Simplified Deployment and Reliable Internet Connection |
- Easy to deploy, highly scalable platform allows overlay with existing wired/wireless infrastructure without disruption
- Load balancing and WAN failover enhance bandwidth utilization and provide more reliable Internet connection
|
| Powerful Network Security Capabilities for Enterprise Applications |
- Standards-based data encryption: WEP, WPA, WPA2, IEEE 802.1X, and IPSec VPN
- Secure guest and administrator access using web-based login and administration over SSL
- Diverse user authentication methods, including built-in Local and
On-demand database; supports external authentication servers including
POP3, LDAP, RADIUS, Windows Domain, and SIP registrar
- Built-in DoS protection keeps malicious hackers from collapsing the network
- Site-to-site VPN tunnels allow branch offices to securely connect with one another and share the same account database
|
| Comprehensive Access Control and User Management |
- Role-based access control and policy enforcement offer management of privileges for different user groups
- On-demand account generation provides secure and managed user accounts to visitors
- Service Zone function partitions a physical network into up to 9
virtual networks, each with its own definable access control and group
policy profiles. Allows hotspot owners to provide various levels of
customized services
- Individual user bandwidth limit enables flexible traffic control for different scenarios
|
| Centralized Access Point (AP) Management |
- Centralized remote control and automatic AP discovery
- Management and monitoring of managed APs via web-based
administration interface, including AP’s system settings, online status,
enabling/disabling, reset, and firmware upgrade
- Periodically monitors APs and notifies the administrator of problematic APs
|
| Flexible Accounting and Easy Billing |
- Configurable billing profiles allow operators to customize billing plans for on-demand users
- Support online payment with credit card through Authorize.net, PayPal, SecurePay, and WorldPay
|
| Support for Location-Based Hotspot Services and Customizable UAM Web Pages |
- The logical concept of Service Zone allows the Controller to
differentiate clients by locations and to provide different user
experiences (such as different login pages) and network policies
- When coupling with VLAN switches and DSLAM devices, the Controller
can use its Port Mapping feature to tell the location of each client and
therefore provide differentiated services. For example, a hotel guest
would not need to type in the password again every time when accessing
the Internet in room
- By setting up multiple Service Zones and utilizing customized pages
or external pages, a single Controller can serve multiple hotspot
franchises transparently to the clients
|
| PMS Integration for Hotel Applications |
- By interfacing the 3rd party middleware - NetRetriever, the
controller is able to post billing information to multiple kinds of
hotel PMSs, including Micros Fidelio/Opera, HiRUM, RMS, CMS Hospitality,
EzyRez, RoomMaster2000, Charts and etc
- A hotel guest can obtain an Internet access account at check-in
counter, or sign up for the Internet access service in room anytime
without the help of clerks. With PMS integration, the guest will receive
a single room bill
- With a single account, a guest will be able to access the Internet
by wire in room or by wireless connection anywhere within the service
range of APs connecting to the Controller
|
| Networking |
- Support NAT or Router mode
- Support Static IP, DHCP, PPPoE mode on WAN interfaces and PPTP (WAN 1 only)
- Choose freely which LAN is authentication-enabled LAN
- Support NAT:
- IP/Port destination redirection
- DMZ server mapping
- Virtual server mapping
- H.323 pass-through
- Supports email service via designated email server
- Built-in with DHCP Server and support DHCP relay
- Support walled garden (free surfing zone)
- Walled Garden Ad List that enables advertisement website links on user login portal page
- Support MAC-address and IP-address pass-through
- Support HTTP Proxy
- Support IP Plug and Play (IP PnP)
- Support configurable static routes
- Contain built-in hardware-based VPN accelerator
- Support dual uplinks, outbound load balancing and failover for more reliable Internet connection
- Support SIP pass-through NAT
- Support Ethernet connection to external terminal servers
- Port location mapping features for working with DSLAM and VLAN switches
|
| System Administration |
- Support web-based management user interface
- Provide customizable login and logout portal page
- SSH remote management
- Remote firmware upgrade
- NTP time synchronization
- Menu driven console management interface
- Utilities to backup and restore the system configuration
|
| Monitoring and Reporting |
- Status monitoring of on-line users
- IP-based monitoring of network devices
- Uplink (WAN) connection failure alert
- Support Syslog for diagnosis and troubleshooting
- User traffic history logging
- Traffic history report via email to administrator
- Users’ session log can be sent to FTP or Syslog server
|
| User Management and Access Control |
- Support 1,000 local accounts and 2,000 on-demand accounts
- Provide on-demand accounts for visitors
- Support Local user account roaming
- Authentication methods supported: Local and On-demand accounts, POP3, LDAP, RADIUS, Windows Domain, and SIP authentication
- Single-Sign-On for Windows Domain
- Allow MAC address and user identity binding for local user authentication
- Support MAC Access Control List
- Support auto-expired guest accounts
- Users can be divided into user groups, each user group has its own
network properties, including bandwidth, QoS, accessible service zones,
and other privileges
- Support QoS and WMM traffic types: Voice, Video, Best Effort and Background
- Each group (role) may get different network policies in different service zones
- Max concurrent user session (TCP/UDP) limit
- A setting for user-idle-timeout
- Configurable user Black List
- Export/Import local users list to/from a text file
|
| Security |
- Support local IPSec VPN tunnels
- Support PPTP VPN tunnels
- Support site-to-site VPN tunnels
- Support VPN pass-through (IPSec and PPTP)
- Built-in DoS attack protection
|
| Service Zones |
- The network is divided into maximum 9 Service Zones, each defined by a pair of VLAN tag and ESSID
- Each service zone has its own:
- login portal page
- authentication options
- LAN interface IP address
- DHCP address range
- Each service zone allows access to the selected groups
- Each service zone assigns a network policy to each user group
|
| Accounting and Billing |
- Support local on-demand and external RADIUS server
- Contain 10 configurable billing plans for on-demand accounts
- Support credit card billing system by Authorize.net, PayPal, SecurePay, and WorldPay
- Provide session expiration control for on-demand accounts
- Provide detailed per-user network traffic history for both local and on-demand user accounts
- 4ipnet RADIUS VSA implementation for volume-based session control using RADIUS server
- Support automatic e-mail to report network traffic history
- Support Net Retriever, the middleware connection to Property Management System (PMS)
|
| AP Management |
- Manage multiple types of 4ipnet APs: up to 50 x EAP700 + 12 x other 4ipnet single radio AP
- Monitor 3rd party non-integrated AP: up to 100
- Centralized remote management via HTTP/SNMP interface
- Auto discovery for managed APs
- Enable or disable APs easily via user interface
- Templates for managed APs
- Monitoring managed AP for its status, the number of associated clients, and RF information
- Upgrade managed APs centrally, including bulk upgrade
- Rogue AP detection and AP load balancing
|
| Hardware Specifications |
- WAN Ports: 2 x 10BASE-T/100BASE-TX RJ-45
- LAN Ports: 8 x 10BASE-T/100BASE-TX RJ-45
- Console Port: 1 x RJ-11
- LED Indicators: 1 x Power, 1 x Status, 2 x WAN, 8 x LAN
|
| Physical and Power |
- Power Adapter:
- Input: 100~240 VAC, 50/60 Hz
- Output: 12VDC, 2A
- Form Factor: Mini-desktop
- Dimensions (W x D x H): 9.6" x 5.9" x 1.8" (243 mm x 150 mm x 45.5 mm)
- Weight: 2.8 lbs (1.29 kg)
|
| Environment |
- Operating Temperature: 0 ~ 45 °C
- Storage Temperature: -25 ~ 55 °C
- Operation Humidity: 5% ~ 95% (Non-condensing)
- Storage Humidity: 5% ~ 95% (Non-condensing)
|
| Certifications |
|
| Package Contents |
- 4ipnet WHG301 x 1
- CD-ROM (User’s Manual and QIG) x 1
- Quick Installation Guide (QIG) x 1
- RS-232 DB9 to RJ-11 Console Cable x 1
- Straight-through Ethernet Cable x 1
- Power Adaptor (12VDC, 2A) x 1
|
** Specifications subject to change without notice** |
|
|
|
