Wlan Controller WHG707

The 4ipnet WHG707 Secure WLAN Controller in Gigabit Ethernet with built-in 15,000 local accounts, 15,000 on-demand accounts, is an ideal security solution for large-scale WLAN deployments, including enterprises, campuses, hotels, airport terminals, and MDUs/ MTUs.

The WHG707 integrates “secure access control”, “visitor account provisioning”, “flexible accounting and billing”, and “centralized WLAN management” into one box to provide simplified manageability and instant mobility. With more powerful hardware, WHG707 is capable of centrally managing 500 Layer 2/Layer 3 4ipnet access points to cover a wider service area in a larger network.

Secure Business Networking

WHG707 is suitable for business in managing their wired and wireless network access uniformly. The network access of users from different departments and the access of guests can be segregated in different Service Zones. When needed, WHG707’s Local, Site-to-Site and Remote VPN tunnels can be used to further secure the information flows for business. Mobile workers on the road or home-based teleworkers can securely access the office network through remote VPN tunnels.

College Dormitories, Apartments or Hotels Networking

For college dormitories, apartments or hotels who want to cater for their tenants’ Internet access needs, WHG707 makes it easy to manage new tenant registrations and share bandwidth equally among tenants. Also, it is convenient to set up WHG707 to offer wireless Internet service at large events, such as conventions, trade shows, and student spring break gatherings.

WHG707 in a Business Headquarter

Hotel with Property Management System (PMS)

For hotels using Property Management System (PMS) such as Micros Fidelio/Opera, WHG707 even enables Internet access charges to be incorporated into the room bill [1]. Moreover, customers are able to purchase Internet service in room anytime or at the front counter. With a single account, a hotel guest can log on the Internet in room through a wired Ethernet port or enjoy wireless access throughout the hotel property.

Before the account expires or the quota purchased reaches its limit, the guest who wants to surf the Internet in his/her room does not need to retype the password. WHG707 stands for the most cost-effective and easy-to-setup Internet Access Controller for hotels. Not only can WHG707 manage and bill both wireless and in-room wired Internet services for properties that have adopted modern IP network infrastructure, but it works for those who only utilize traditional phone lines coupled with DSLAM and DSL modem equipments to deliver Internet to each room.

Telcos or Large Hotspot Operators Networking

For Telcos or large hotspot operators, WHG707 brings in a convenient and economical way to deploy distributed hotspot services. While most of the operators prefer to use external RADIUS servers as authentication database, WHG707 in this architecture can play the role of a central RADIUS-NAS. For quick deployment, WHG707 supports two authentication methods: UAM and 802.1X (including EAP-SIM and EAP-TTLS and etc). It is capable of supporting customized web UAM pages uploaded locally as well as external web UAM pages residing on external web servers. Furthermore, the concept of Service Zones of WHG707 allows one Controller to manage multiple franchised hotspots simultaneously.

In summary, the feature-rich WHG707 supports multiple business models of Internet Access Services - be it for managing wireless or wired clients. It can be configured to fit for private corporations, government agencies, academic campuses, multi-tenant units (MTU), hotels, WISP or telco’s hotspot operations. The 4ipnet WHG-series products aim to offer the best price-performance among all access controllers on nowadays market.

WHG707 in a Hotel – Capable of integrating with DSLAM and PMS

WHG707 – Secure WLAN Controller

Simplified Deployment and Reliable Internet Connection

    Gigabit Ethernet to meet higher data rate demands of larger networks
    Easy to deploy, highly scalable platform allows overlay with existing wired/wireless infrastructure without disruption
    Load balancing and WAN failover enhance bandwidth utilization and provide more reliable Internet connection

Powerful Network Security Capabilities for Enterprise Applications

    Standards-based data encryption: WEP, WPA, WPA2, IEEE 802.1X, and IPSec VPN
    Secure guest and administrator access using web-based login and administration over SSL
    Diverse user authentication methods, including built-in Local and On-demand database; supports external authentication servers including POP3, LDAP, RADIUS, Windows Domain, and SIP registrar
    Built-in DoS protection keeps malicious hackers from collapsing the network
    Site-to-site VPN tunnels allow branch offices to securely connect with one another and share the same account database

Comprehensive Access Control and User Management

    Role-based access control and policy enforcement offer management of privileges for different user groups
    On-demand account generation provides secure and managed user accounts to visitors
    Service Zone function partitions a physical network into up to 9 virtual networks, each with its own definable access control and group policy profiles. Allows hotspot owners to provide various levels of customized services
    Individual user bandwidth limit enables flexible traffic control for different scenarios

Centralized Access Point (AP) Management

    Centralized remote control and automatic AP discovery
    Management and monitoring of managed APs via web-based administration interface, including AP’s system settings, online status, enabling/disabling, reset, and firmware upgrade
    Periodically monitors APs and notifies the administrator of problematic APs
    Secure tunneled AP management to extend corporate network over the Internet.

Flexible Accounting and Easy Billing

    Configurable billing profiles allow operators to customize billing plans for on-demand users
    Support online payment with credit card through Authorize.net, PayPal, SecurePay, and WorldPay

Support for Location-Based Hotspot Services and Customizable UAM Web Pages

    The logical concept of Service Zone allows the Controller to differentiate clients by locations and to provide different user experiences (such as different login pages) and network policies
    When coupling with VLAN switches and DSLAM devices, the Controller can use its Port Mapping feature to tell the location of each client and therefore provide differentiated services. For example, a hotel guest would not need to type in the password again every time when accessing the Internet in room
    By setting up multiple Service Zones and utilizing customized pages or external pages, a single Controller can serve multiple hotspot franchises transparently to the clients

PMS Integration for Hotel Applications

    By interfacing the 3rd party middleware - NetRetriever, the controller is able to post billing information to multiple kinds of hotel PMSs, including Micros Fidelio/Opera, HiRUM, RMS, CMS Hospitality, EzyRez, RoomMaster2000, Charts and etc
    A hotel guest can obtain an Internet access account at check-in counter, or sign up for the Internet access service in room anytime without the help of clerks. With PMS integration, the guest will receive a single room bill
    With a single account, a guest will be able to access the Internet by wire in room or by wireless connection anywhere within the service range of APs connecting to the Controller

Networking

    Seamless Roaming
    IAPP Support
    Support NAT or Router mode
    Support Static IP, DHCP, PPPoE mode on WAN interfaces and PPTP (WAN 1 only)
    Choose freely which LAN is authentication-enabled LAN
    Support NAT:
    IP/Port destination redirection
    DMZ server mapping
    Virtual server mapping
    H.323 pass-through
    Supports email service via designated email server
    Built-in with DHCP Server and support DHCP relay
    Support walled garden (free surfing zone)
    Walled Garden Ad List that enables advertisement website links on user login portal page
    Support MAC-address and IP-address pass-through
    Support HTTP Proxy
    Support IP Plug and Play (IP PnP)
    Support configurable static routes
    Support dual uplinks, outbound load balancing and failover for more reliable Internet connection
    Support SIP pass-through NAT
    Support Ethernet connection to external terminal servers
    Port location mapping features for working with DSLAM and VLAN switches

System Administration

    Support web-based management user interface
    Provide customizable login and logout portal page
    SSH remote management
    Remote firmware upgrade
    NTP time synchronization
    Menu driven console management interface
    Utilities to backup and restore the system configuration

Monitoring and Reporting

    Status monitoring of on-line users
    IP-based monitoring of network devices
    Uplink (WAN) connection failure alert
    Support Syslog for diagnosis and troubleshooting
    User traffic history logging
    Traffic history report via email to administrator
    Users’ session log can be sent to FTP or Syslog server
    Graphical system report

User Management and Access Control

    Support 15,000 local accounts and 15,000 on-demand accounts
    Provide on-demand accounts for visitors
    Support Local user account roaming
    Authentication methods supported: Local and On-demand accounts, POP3, LDAP, RADIUS, Windows Domain, and SIP authentication
    Single-Sign-On for Windows Domain
    Allow MAC address and user identity binding for local user authentication
    Support MAC Access Control List
    Support auto-expired guest accounts
    Users can be divided into user groups, each user group has its own network properties, including bandwidth, QoS, accessible service zones, and other privileges
    Support QoS and WMM traffic types: Voice, Video, Best Effort and Background
    Each group (role) may get different network policies in different service zones
    Max concurrent user session (TCP/UDP) limit
    A setting for user-idle-timeout
    Configurable user Black List
    Export/Import local users list to/from a text file

Security

    Support local IPSec VPN tunnels
    Support PPTP VPN tunnels
    Support site-to-site VPN tunnels
    Support VPN pass-through (IPSec and PPTP)
    Built-in DoS attack protection

Service Zones

    The network is divided into maximum 9 Service Zones, each defined by a pair of VLAN tag and ESSID. Each service zone has its own:
        login portal page
        authentication options
        LAN interface IP address
        DHCP address range
        Each service zone allows access to the selected groups
        Each service zone assigns a network policy to each user group
        WISPr support per service zone

Accounting and Billing

    Support local on-demand and external RADIUS server
    Contain 10 configurable billing plans for on-demand accounts
    Support credit card billing system by Authorize.net, PayPal, SecurePay, and WorldPay
    Provide session expiration control for on-demand accounts
    Provide detailed per-user network traffic history for both local and on-demand user accounts
    4ipnet RADIUS VSA implementation for volume-based session control using RADIUS server
    Support automatic e-mail to report network traffic history
    Support Net Retriever, the middleware connection to Property Management System (PMS)

AP Management

    Manage up to 500 x 4ipnet AP in both Local and Wide Areas AP management totally
    Monitor 3rd party non-integrated AP: up to 500
    Centralized remote management via HTTP/SNMP interface
    Auto discovery for managed APs
    Enable or disable APs easily via user interface
    Templates for managed APs
    Monitoring managed AP for its status, the number of associated clients, and RF information
    Upgrade managed APs centrally, including bulk upgrade
    Rogue AP detection and AP load balancing
    Tunneled AP management over internet for 4ipnet EAP110, EAP200, EAP300 APs

Hardware Specifications

    WAN Ports: 2 x 10/100/1000 BASE-T RJ-45, 2 x Combo SFP
    LAN Ports: 4 x 10/100/1000 BASE-T RJ-45, 2 x SFP
    Management Port: 1 x 10/100 BASE-T RJ-45
    Console Port: 1 x RS-232 DB9
    LED Indicators: 2 x WAN (SFP) status, 2 x LAN (SFP) status, 1 x Power, 1 x Status, 1x HDD

Physical and Power

    Power Adapter: 100~240 VAC, 50/60 Hz
    Form Factor: 19" 1U Rack Mount
    Dimensions (W x D x H): 16.7" x 15.6" x 1.75" (426 mm x 396 mm x 44.4 mm)
    Weight: 18.1 lbs (8.2 kg)

Environment

    Operating Temperature: 0 ~ 40 °C
    Storage Temperature: -20 ~ 70 °C
    Operation Humidity: 5% ~ 95% (Non-condensing)
    Storage Humidity: 5% ~ 95% (Non-condensing)

Certifications

    CE, FCC
    RoHS compliant

Package Contents

    4ipnet WHG707 x 1
    CD-ROM (User’s Manual and QIG) x 1
    Quick Installation Guide (QIG) x 1
    RS-232 DB9 Console Cable x 1
    Crossover Ethernet Cable x 1
    Straight-through Ethernet Cable x 1
    Power Cord x 1
    Rack Mounting Bracket (with Screws) x 1