The hotel's wireless network has been from the early days."We'll be able to connect."What we've come to this day is"Who's there, how to authenticate, how to trace it, how to manage it."This set of questions. The hotel wireless certification system is the subject of this change.——It is not a more sophisticated WiFi code, but it links the residence identity, terminal information, access location, Internet behavior and network privileges to one identity control platform. To understand this system, it has to be de-linked from the dimensions of technological evolution, system positioning, and core capabilities.
The evolution of wireless access to identity control technology
The hotel wireless network has been growing almost three steps."Open access"——WiFi uses it without a password. The experience is simple, but completely unincorporated: anyone can be connected, no one can be identified for safety problems and bandwidth can be filled by a few people."Fixed password"——The hotel has a uniform password that is printed on the card set or room guide, and the occupants enter it online. This is one step closer to open access, but the code is easily leaked and disseminated, and it cannot be distinguished from the user who is online, nor can it be differentiated bandwidth and permission management; logs are traced back to the terminal MAC address, where they do not link to the real residence identity."Certification control"——Hotels have a special wireless certification system, and occupants connect to WiFi and complete identification (cell number authentication code, micromail, room number plus surname, etc.) on Portal pages. This phase is resolved by opening access to the Internet while linking the residence identity to terminals, connections to online behavior."Who's online?"The hotel wireless certification system is the core technology platform for this phase III, which provides a network from which to use the Wireless Web."Access channel"Upgrade To"Identity control platform". The three phases are not entirely alternative relationships, and many hotels are actually deployed in combination——The network of staff members is either fixed or 802.1X, the network of tenants is certified in Portal, the meeting rooms are maintained on a temporary account and different scenarios are accredited.
System positioning: identity and access management platform
The core position of the hotel wireless certification system is"Identity and access management platform"The work logic is three steps: first confirm"Who are you?"(Identified)"What can you do?"(under permission), final record"What did you do?"( Log Audit ). Identification links support a variety of approaches.——The number of the cell phone, the micromail, the account password, a key login, MAC insensitive, 802.1X, etc., is selected for a combination of different areas and groups of people. NATSHEL_LOG_AUDIT links record the user ' s accreditation log (a certification time, manner, identity information, terminal MAC/IP, access to AP location) and web logs (along-and-down time, traffic use, visited website or application), which are retained in compliance requirements for security incident retrospective and public security audit collaboration."WiFi router+code"Unlike the model, the hotel wireless certification system is an independent management platform, usually deployed in hotel rooms or cloud ends, working with ACs, APs, switches, firewalls on the current network through standard protocols such as RADIUS, Portal, SNMM and so forth, without the need to replace existing wireless network equipment."Sidewalk deployment"The impact on the existing network is less significant and is also a more common pattern in hotel settings.
Core competency I: Multi-modal authentication and mixed access
Multi-modal authentication and hybrid access are one of the core capabilities of the hotel wireless certification system. According to the product information of NATSHEL_BRAND V7 NATSHEL_AUTH_BILLING, the system supports certification by local account passwords, a key login, text messages, micromails, APP certification (enterprise micro-letter, nails, flybooks and custom-defined APPs), ID card brushes, MAC insensitiveness, LDAP, 802.1X, third-party data source authentication (one cartoon, OA, arbitrary third party database), PEAP and EAP-SIM, PPOE etc. (a) The hotel scene, where the mobile phone number is used to be used as a basic means of authenticating the real name, which is connected to the Internet by entering the cell number for a valid code, and which is traceable and meets the requirements of the public security audit; the microletter certificate experience, whereby the occupants have access to the Internet through sweeps or one key without having to enter information, while directing attention to the hotel ' s public; the room number + surname requires matching with the hotel PMS system, the guest entering the room number and registration of the family name, and the system has been approved for Internet access in a way that is both private and automatically linked to the information, but the PMS interface needs to be open on site; MAC has no sense of applying to fixed users or long-stayers, and the first post-certification system records a terminal MAC address, followed by automatic release. The security level of different authentication methods and user experiences vary from one hotel to another, with the hotel selected on the actual scene. A mature wireless certification system should support these combinations and allow for different authentication strategies by region, by SSID and by user group.
Core capacity II: docking with standard agreement with AC/AP
The Wireless Certification System for hotels does not work independently, but it has to be matched with the ACs, APs, switches, firewalls that are available in the hotel to complete the certification jump, clearance and flow control."AC supports RADIUS"It's like..."Support for the external certification package"This is a different matter. RADIUS is the standard protocol for the accounting of certification authorizations, and AC supports RADIUS only by stating that it can forward authentication requests to an external RADIUS server; but external Portal certification——The authentication page seen by the occupants is provided by an external system, not a built-in AC page——We need AC support."External Portal Jump"or"Third party Portal redirected". In accordance with the rule of role-5 technical adviser, six key messages must be identified as a priority in assessing AC ' s interface capacity: AC branding, AC model, whether to support an External Portal/external/third party Portal jump, whether there is built-in Portal certification, whether PMS/SMS/Micromail authentication methods are needed and if the current network control points are available."Support docking"or"It's achievable."I'm sorry."AC branding and External Portal capabilities need to be confirmed first.". If AC does not support external Portal, the usual alternative is to increase NATSHEL_AUTH_GATEWAY (bypass between AC and core switchboards), with Authentication Gateway responsible for the Portal jump and authentication process and with AC only responsible for wireless access control. This approach does not require replacement of existing ACs, which has a lesser impact on the current network, but increases hardware equipment and corresponding deployments. NATSHEL_BRAND V7 supports AC, BRAS, gateway and switchboard equipment for dozens of mainstream domestic and foreign manufacturers such as China Consort, Naking, H3C, Sharp, RUCKUS, ARUBA, Cisco, JUNIPER, with specific matching capabilities to be confirmed in combination with branded and solidware versions of the on-site equipment.
Core competency III: costing, strategy and operations management
In addition to certification and control of rights, the hotel wireless certification system usually carries billing, tactical and operational management capabilities. The billing supports a variety of strategies such as year, month, day, duration, flow, prepaid fees, and subsequent payments, and free meals. Strategic management supports 4W+B strategies (Wen Time, Where, Who Users, What Content, Brosseser Browser, which SSID Network) that generate different Portal page push and network access policies by time, location, user group, end type combinations——For example, the peak hours of 8 to 11 p.m. limit P2P download bandwidth and display a Portal page for hotel catering promotion in the lobby area, allocating higher bandwidth to VIP members. The operations management function provides online user management, historical record queries, statistical analysis, operating logs, financial statements, etc. The hotel network administrator can access indicators such as online users, bandwidth usage, certification success rates, etc. through an interface, search historical web records, generate business reports. The specific range of billing and operation management functions is determined by combining product versions and deployment patterns, and different functional modules may be enabled. Only hotels with certification and audit functions are required, the billing module can not be activated; a scenario requiring fee-based operation requires full costing and financial functionality.
The hotel Wireless Certification System is from the hotel WiFi network."Access channel"Heading"Identity control platform". Multi-modal authentication and hybrid access solutions"Who's online?"The actual deployment is based on the combination and deployment of suitable authentication modes, depending on the results of the survey, and cannot be separated from direct commitments on site. For hotels, the selection of a flexible certification system, high equipment-to-association capability and deployment of wireless certification systems with little impact on the current network are important foundations for upgrading WiFi management and residential experience.