2012/5/1

HSG260-WTG Wi-Fi Hotspot Solutionwith Wireless Ticket Generator Set

April 2012For authorized partners only

2012/5/1 4ipnet Confidential and Proprietary 2

Hotspot Gateway Family

2012/5/1 4ipnet Confidential and Proprietary 3

Hotspot Gateway Family

Wireless Hotspot Gateway

HSG200HSG260HSG1250HSG3200HSG5200

Network Ticket Generator

SDS100SDS200WPRT100

Built-in Billing, On-demand Instant Access…….Accounting and Billing10 configurable billing plans for on-demand accounts, RADIUS VSA implementation for traffic accounting and session control,Online payment with credit card via PayPal, Authorize.Net …and more

NetworkingRouter or NAT mode, IP Plug and Play (IP PnP), Cross-location account roaming,Built-in DHCP server and DHCP relay, Walled garden …and more

User ManagementSimultaneous support for multiple authentication methods (Local and on-demand accounts, POP3, LDAP, RADIUS, NT Domain), Policy-based access control, User session management …and more

2,000

500

1/2 FE

b/g/n

HSG200Capacity & Performance HSG260 HSG1250 HSG3250 HSG5200

Radio b/g/n -- -- --

WAN/LAN 1/4 GbE 2/8 GbE 2/4 GbE 2/4(SFP optional)

Local User Accounts 500 3,000 6,000 15,000

On-demand Accounts 2,000 3,000 6,000 15,000

Product datasheets available on www.4ipnet.com

2012/5/1 4ipnet Confidential and Proprietary 4

Hotspot Operation Challenges vs. HSG260 Benefits

Dedicated CPU inside can handle high-density users and process the requests from smart-devices ideally; 11n 300Mbps data-rate and GibabitEthernet ports realize high-speed surfing needed in a hotspot.

High Network SpeedWi-Fi users expect the network speed can support any application, including videos or games with smart devices smoothly

3 level administrator accounts allowing non-IT operator has partial right to manage the on-demand account creation or advertisement page update. Support individual bandwidth + session limit for service reliability in wired or wireless network!

Ease of OperationEasy setup and simple day-to-day operation by non-IT staff

Programmable billing plan profiles with built-in On-Demand accounts DB, online credit card payment for self-service and WTG ticket generator options for flexible accounting and billing.

Billing FlexibilityCreate differentiated services for clients and provide flexible payment plans

Wireless Layer 2 Firewall and other standards-grade security features provide top-tier wireless security and prevention against common public wireless attacks

SecurityPublic hotspot access comes with a host of security concerns and requires high-security deployment

HSG260 BenefitsChallenges

2012/5/1 4ipnet Confidential and Proprietary 5

Hotspot & Hospitality Features

Customizable web login/logout pagesWeb-based username & password authenticationAdvertisement and disclaimer pages prior loginLong-term accounts for permanent usersOn-Demand accounts with limited quota and privilege for visitorsTemporary free/trial accountUser bandwidth & session managementEasy billing & payment mechanisms Gateway, Firewall, IP sharing, DHCP, VLAN, AAA, RADIUSSupport WISPr account roaming (feature for ISP)Support VLAN, multiple SSID, WMM, QoSWireless security EAP, WAP, WAP2, 802.1XIPPnP, Transparent Proxy ……& many others

Internet

HSG260SSID1 SSID2

ISPISP

xDSL

AP1

AP2

WDS

Ticket Printer

2012/5/1 4ipnet Confidential and Proprietary 6

Application scenarios

HSG + WTG: Wi-Fi Hotspot DeploymentHSG + PRT: Wi-Fi Visitor Access Gateway

2012/5/1 4ipnet Confidential and Proprietary 7

Wi-Fi Hotspot Deployment

For Cafes, restaurants, libraries, exhibitions, or hotel lobby

Up to 10 wired or wireless IP connections of WTG to 1 gateway

[The Industry’s First: TAS button]

Press TAS button on SDS200W will be joined in HSG260 automatically!

Operator can choose billing plans (#0~9) on SDS200W, which will generate on-demand accounts and prints tickets with the PRT100 POS printer in a breeze.

HSG260-WTG (Wireless Ticket Generator)

2012/5/1 4ipnet Confidential and Proprietary 8

Wi-Fi Visitor Access Gateway

For small office, meeting room, and conferences

Direct console connect: HSG260--PRT100

HSG260’s “Quick Print”button can generate an on-demand account with 1 default plan, and let PRT100 print it out automatically.

HSG260-PRT (“Quick Print” button on HSG260)

Direct Console Connection!

2012/5/1 4ipnet Confidential and Proprietary 9

On-Demand Account Generation Tips

Step 123New feature on SDS200W: Multiplication Button

Accounting types introduction

2012/5/1 4ipnet Confidential and Proprietary 10

On-Demand Account Generation Steps

2012/5/1 4ipnet Confidential and Proprietary 11

SDS200W’s “X” Button“X” button can multiplex the billing plan unit, let the operator has more choices to issue account conveniently!

Example--Billing plan 1: 1 hour quota, $10. Click “1” “x” “6” “Enter”

= 6 hours quota, $60 new on-demand account created/printed.

The Industry’s First !

2012/5/1 4ipnet Confidential and Proprietary 12

Accounting by Usage Time

2 hours of usage

Must be activated within 1 day

Expires in 3 days

Price: $100

2012/5/1 4ipnet Confidential and Proprietary 13

Accounting by Volume

50Mbs of Data

Must be activated within 5 days

Expires in 20 days

Price: $100

2012/5/1 4ipnet Confidential and Proprietary 14

Accounting by Cut-Off Time

Account is instantly activated and

remains valid until 12pm the next day

1-hour grace period after cut-off

Price: $200 per day

2012/5/1 4ipnet Confidential and Proprietary 15

Accounting by Valid Duration

Set begin and end times Immediately

activated

Account expires in 5

days 2 hours

Begin and End Time Elapsed Time

2012/5/1 4ipnet Confidential and Proprietary 16

Internet Access TicketTicket Generator Combo Set

printed ticket formatInternet access ticket format for browsers,

conventional printers, or online payment confirmations

OR

Customizable background and

header/footer fields

Customizable header/footer fields

2012/5/1 4ipnet Confidential and Proprietary 17

Advanced Features

Wireless Layer2 FirewallCaptive Portal

External Credit Card GatewaysWalled Garden Ads and Customizable Pages

4ipWES Press-n-Connect

2012/5/1 4ipnet Confidential and Proprietary 18

Wireless Layer2 Firewall4ipnet Wireless Layer 2 Firewall provides customizable service protocols and firewall rules for specific filtering requirements.ARP Inspection and DHCP snooping features protect users from two types of common public wireless attacks:

APR spoofing attacks that fools the victim’s ARP table in updating wrong information. This may result in 1) “Man in the middle”situation where victims credentials such as account and password are being sniffed out,2) Severing victims internet connection, 3) Redirects victim to a malicious DNS server, and etc.DHCP starvation attacks that depletes the DHCP server resources. The result is when a legitimate user makes connection, he/she will not be able to acquire a valid IP address from the resource depleted DHCP server.

2012/5/1 4ipnet Confidential and Proprietary 19

Single Captive PortalSingle, customizable access portal for all logins for uniform user experience

2012/5/1 4ipnet Confidential and Proprietary 20

External Credit Card GatewaysSupport for online credit card payment through external gateways(Authorize.net, WorldPay, SecurePay, and PayPal)

2012/5/1 4ipnet Confidential and Proprietary 21

Walled Garden Ads and Customizable Pages

Advertisement links during Walled Garden browsing

Customizable login/logout pages for branding and extra revenue streamsMultiple Customizable Login/Logout Pages Walled Garden Ads

2012/5/1 4ipnet Confidential and Proprietary 22

4ipWES Press-n-Connect

With a single push of the WES button, HSG200/HSG260 will automatically negotiate and establish a wireless/WDS link with 4ipnet APs

AES security over wireless/WDS link is automatically setup with 4ipWES to eliminate the possibility of link compromise

2012/5/1 4ipnet Confidential and Proprietary 23

Product Overview

HSG260 OverviewWTG Wireless Ticket Generator

Product Comparison

2012/5/1 4ipnet Confidential and Proprietary 24

HSG260 Overview

IEEE 802.11n/b/g 2x2 MIMO1 WAN + 4 LAN, all Gigabit portsAdvanced security features: Layer 2 isolation, VPN, DoS attack protection, MAC access control listSupport for authentication and billing via external RADIUS server (by volume and by time)Two internal servers for housing local and on-demand accountsStandards-based network security: WEP (64/128/152 bits), WPA/WPA2-PSK, IEEE 802.1X, and TKIP & AES Cipher auto negotiation and SSL login4ipnet's proprietary technologies:

Wireless Layer 2 Firewall 4ipWES Press-n-ConnectQuick Print button

Hotspot Ticket Generator Combo Set compatibility

2012/5/1 4ipnet Confidential and Proprietary 25

WTG Overview

SDS200WNumber of Ethernet Ports: 1 RJ-45Number off Serial Ports: 1Wireless Standard: IEEE 802.11b/g/nSerial Standard: RS-232 DB-9MWeb ManagementButtons: 0~9 number buttons, multiplication button, function button, TAS button, Reset buttonKingston’s lockDimensions: 165mm x 90mm x 30mmWeight: 400g

PRT100Print Method: Thermal Line PrintingPaper Width: 57.5mmInterface: Serial (RS-232C)Character:(1) ASCII code: 12*24 dots(2) Graphic font: 24*24 dots

Dimension: 185mm x 114mm x 90mmWeight: 900g

2012/5/1 4ipnet Confidential and Proprietary 26

Product Comparison Chart

2012/5/1 4ipnet Confidential and Proprietary 27

WISP Hotspot Franchise DeploymentA Telco’s hotspot – centralized forwarding approach

Franchised hotspot – distributed forwarding approach

2012/5/1 4ipnet Confidential and Proprietary 28

A Telo’s Hotspots (centralized)Centralized Traffic Forwarding (CTF)

Users’ traffics are routed back to data center before going on internet

2012/5/1 4ipnet Confidential and Proprietary 29

Franchised Hotspot (distributed)Distributed Traffic Forwarding (DTF)

Users’ traffics are going on internet locally after authentication

Internet

xDSLxDSL

EAP110

HSG260

Data Center

S2: A smaller hotspot with one gateway, such as a café

Broadband ISP

Network Ticket Generator (NTG) can be used in location where dynamic guest account is needed for pre-paid service

SSID1 = hotspot-slinasSSID2= staff-selinas

EAP110

HSG260

Broadband ISP

Broadband ISPWHG707/ WHG405 (available)

Or 4ipView (Q4, 2012)-- As the central account server

NTG

S1: A hotspot with one gateway and multiple APs

NTGMultiple SSIDs are broadcasted.One for the internal staff.One for the hotspot service.

2012/5/1 4ipnet Confidential and Proprietary 30

Email : sales@4ipnet.com

Website : www.4ipnet.com

Empower your business with 4ipnet