Many hotels that have been operating for many years face a common challenge in upgrading the wireless network: existing AC, AP, switchboards and other equipment may have been used for five to ten years, brand models are not available, solid versions are old, parts of equipment may be out of production, all of them will be cost-effective enough to replace them without replacement and fear that new certification systems will not be able to accommodate them.——To protect existing investments, the upgrading of certification capabilities is being progressively achieved.
Re-engineering principles: protecting stock investments from the exploitation of infrastructure
Wireless certification of old hotels should first establish a core principle: to protect stock investments from large-scale dismantling. Many hotels have invested heavily in wireless network equipment (AC, AP, switchboard, cabling, etc.) at the beginning of construction, which may not be up to date but may still meet demand for wireless signal coverage and basic access functions. If all equipment is replaced by upgrading the certification system, it will be costly, but with long construction cycles and significant impact on hotel normal operations (which require building in residential areas and may require temporary closure of WiFi)."incremental adaptation"——Without replacing existing equipment, additional certification control capabilities for the existing network will be introduced by adding Authentication Gateway or upgrading software. The gradual replacement will only be considered if the existing equipment is not able to meet the minimum WiFi standard (e.g. AP does not support a minimal WiFi standard, signal coverage is severely inadequate, equipment malfunctions are frequent). According to the Role-5 technical consultant rules, old network modifications must be surveyed first and all equipment cannot be assumed to support standard protocols; stock adaptation should be prudent and not directly stated."Smooth Migration", which may actually require dual network operation with a doubling of costs. Before retrofitting, a full field survey of the existing networks must be conducted, including: brand and solid AC versions; AP branding and number; number of brands and ports for exchange machines; network topping structures (accompaniment of AC and AP, location of core switches, export bandwidth and equipment); current authentication methods (whether there is an certification system, Portal or external certification); WiFi signal coverage in residential areas; malfunction history of existing networks; and transport pain points. Only on the basis of a full understanding of existing networks can reasonable rehabilitation programmes be developed to avoid blind decision-making.
Deployment strategy I: deployment of Authentication Gateway without modification of existing network
If a site survey confirms that existing AC supports external Portal functions (even if old equipment is used, some of the medium-high end AC solids may be upgraded to support external Portal), the preferred adaptation option is to deploy Authentication Gateway by side. The specific approach to deployment by way is to find an available port on the core switch in the hotel room and connect Authentication Gateway to this port; Authentication Gateway and RADIAS servers (which can be different functional modules of the same device or stand-alone) communicate with AC through a core switch; configure external Portal redirection on AC to redirect uncertified users' HTTP requests to the Portal page URL of Authentication Gateway; configure on AC the RADIUS server address and shared keys so that AAC can forward user authentication requests to the RadiUS server. The entire deployment process does not require changes to the existing network tops (no change in the AC, AP, switch-to-way connection), no replacement of any existing equipment, and only one port on the core switchboard and some configuration changes on the AC. The construction cycle usually takes 1 or 2 days, with minimal impact on hotel normal operations (the configuration changes can be made at a low dawn hours). The advantages of by-pass deployment are that the impact on the current network is minimal, deployment risks are lowest and costs are minimal (only additional NATSHEL_AUTH_GATEWAY equipment is required, there is no need to replace existing AC and AP), Authentication Gateway failures do not affect main network connectivity (because the gateway is off-line and the main path is off-link). The by-pass deployment prerequisite is for AAC to support external Portal functions. If AC does not support external Portal, a bypass deployment will not be complete Portal certification process, it will require a switch to a serial deployment programme. In actual projects, testing of the external Portal capabilities of AC is recommended first——A small pilot could be conducted in a laboratory environment or non-core region, confirming that the interface between AC and NATSHEL_AUTH_GATEWAY would work properly before deploying to the entire hotel.
Deployment strategy II: a series of deployments of Authentication Gateway, suitable for not supporting external Portal's old AC
If the on-site survey confirms that existing AC does not support external Portal functionality (many old low end or household level ACs only support built-in Portal or simple WEP/WPA encryption, and not external Portal redirection), the bypass deployment programme will not be able to meet demand and will need to shift to a combination deployment option. The specific approach for this combined deployment is to connect Authentication Gateway between AC and core switches (if AC directly links the Core Switch) or between core exchanges and export firewalls (if multiple ACs or certifications require coverage of the entire export). All occupants' network traffic passes Authentication Gateway, Authentication Gateway to re-direct Portal itself (no need for AC support from external Portal)——When the host ' s HTTP request arrives at Authentication Gateway, the gateway detects that the user is not authenticated and reoriented to its Portal page; after the customer has completed authentication on the Portal page, the gateway opens up access to the user and applies bandwidth restrictions, ACL, VLAN tags, etc. based on the user identity. The advantages of a cascade deployment are: not relying on the external Portal capabilities of AC, which applies to any branding AC (even the oldest equipment), Authentication Gateway can achieve full Portal authentication, micro-letter certification, SMS certification, bandwidth management, URL filtering. The disadvantages of a combination deployment are that: Authentication Gateway is connected to the main path and all passenger traffic passes through the gateways, requiring higher performance (tossing volume, co-routing links); Gateway failure may affect the connectivity of the entire network (although most products support bypass side protection)——The automatic switch to physical straight mode during a gateway failure, which ensures that network connectivity is not interrupted but the authentication function temporarily lapses; and the need to modify the physical connection of the current network at deployment (required by disconnecting the network between AC and the core exchange, connecting Authentication Gateway ) will result in short network interruptions (usually minutes to ten minutes, which can be done at low dawn hours). In selecting a serial deployment, the appropriate performance of NATSHEL_AUTH_GATEWAY, based on hotel export bandwidth and co-distribution of users, is required to ensure that the traffic volume of the gateway meets the demand for export bandwidth (e.g. 200Mbps for hotel export bandwidth, with residual capacity at least 500 Mbps). Meanwhile, it is recommended that the network be not completely disrupted when the switch fails.
Deployment strategy III: cloud-side deployment, adapted to centralized management of multi-storey chains
For the hotel chain (with dozens of hotels), if each doornose has an independent certification system, it is not only expensive for hardware but also difficult to manage its carriers (there may be inconsistent configurations in each gate, rigid versions and failure clearance needs to be on-site). Cloud end deployment is a suitable adaptation programme for the hotel chain. The specific approach to cloud-side deployment is to deploy the RADIUS server and management platform of the certification system on cloud (public or group-owned clouds), each store only needs to deploy lightweight Authentication Gateway (or direct use of AC supporting cloud-end RADIUS) and its accreditation request for authentication via Internet sent to a cloud-side RADIUS server. The IT administrator at Headquarters can centrally configure all store certification strategies (Portal page templates, authentication methods, bandwidth rules, security policies, etc.) on cloud management platforms, monitor WiFi active status (on-line number of users, bandwidth usage, authentication success rate, failure alerts, etc.) in all shops and perform a uniform solidware upgrade and configuration downlink. The advantages of cloud-side deployment are: centralized management (a platform at Headquarters runs all the doors, without shop-to-shop configuration and maintenance), flexible expansion (new door opens only need to install gateway equipment in the door, cloud automatic registration and configuration, fast opening), reduced costs (no separate RADIUS servers and management platforms are required for each gate, hardware and maintenance costs are reduced), data concentration (all store certified logs and online data are stored centrally on cloud ends to facilitate uniform audit and data analysis). The disadvantages of cloud end deployment are: higher reliance on Internet connectivity (where the door office's Internet is disrupted, cloud end authentication may not be normal and local cache strategies are needed to secure essential services), data security needs assessment (resident's identity information and access data stored at cloud end, need to confirm that cloud service providers have a safety compliance capability and geographical compliance with the regulatory requirements for data storage). Based on NATSHEL_BRAND V7 product information, the system supports cloud deployment and distribution deployment and any dynamic IP access (NAS equipment supporting any IP address when cloudy public site is deployed). For serial hotel groups, cloud deployment is an efficient and low-cost adaptation programme, but requires a comprehensive assessment of the group ' s IT architecture, data security requirements and doorpage Internet quality."Cloud Management+Local Authentication"Mixed mode of the——The management platform is on cloud, but the RADIUS certification is implemented at local gateways to ensure that local authentication remains available when Internet breaks.
Inventory compatibility: ACV assessment of the benefits of AP, switch and cabling
Wireless certification adaptations at old hotels involve not only AC and Authentication Gateway, but also an assessment of the existing possibilities for AP, switchboard and cabling. With regard to AP, the main function is to provide wireless signal coverage and terminal access, with a low degree of compatibility with authentication systems (certification mainly involves AC and NATSHEL_AGATEWAY, where AP is responsible only for receiving and sending wireless signals). Thus, as long as the current AP signal cover meets the user needs (signal strength, coverage, supporting WiFi standards), it can normally continue to be profitable and need no replacement. It should be noted that if the existing AP only supports old WiFi standards (e.g. 802.11g, maximum speed of 54 Mbps), it may not be possible to meet the high-speed Internet access needs of current occupants (high-resolution video, large file downloads, etc.), which may require a gradual replacement of AP. Furthermore, if the existing AP is fat (independent work, not managed through AC) and the hotel wishes to achieve centralized management and uniform certification, the Fat AP may need to be replaced by thin AP (managed through AC) or an additional AAC will manage the existing Fat AP (if currently APA supports managed by AC). With regard to the trade-offs, the main function of the switch is to provide cable network connections and VLAN divisions with lower couplings to authentication systems. The current switchboard usually continues to be useful as long as basic VLAN functionality and port speeds are supported by existing switches that meet demand. It needs to be noted that if the certification system requires VLAN dynamic distribution based on ports (RADIUS returns VLAN-ID properties), the switch will need to confirm whether the switchboard supports VLAN dynamic allocation functions authorized by RADIUS, depending on return value dynamics. If the switch is not supported, VLAN distribution based on AC (VLAN markings are handled by AC and transect only) or static VLAN division (ports in different regions are pre-defined to different VLAN). The cabling of hotel lines (net wires, fibre optics, scaffolding etc.) is usually prearranged during renovation, with high costs of rewiring (retweet damage required, long construction cycles, impact on occupants). Therefore, retrofitting should be as beneficial as possible.——If the super-five type of network (Cat5e) is not sufficient, it usually supports a gigabyte network (up to 100 metres), and meets most APA and terminal access needs; if an older five type of network (Cat5) is possible, only a megabyte net may be supported, which may not be enough for APs requiring high speed connectivity. If the existing layout is not specified to meet demand, alternative options such as wireless Mesh (wire-to-AP, no cabling required) or power line communication (link transmission through wire), could be considered, but their performance and stability are less linear than that of cable and need to be assessed on a case-by-case basis."It's good for the old. It has to be replaced."(b) Progressively upgrade the network while protecting existing investments.
Phased implementation: reduced retrofit risk and operational impact
Wireless certification of old hotels is not recommended."One step at a time."The full-scale conversion should be implemented in a phased manner to reduce the risk of adaptation and the impact on hotel normal operations. Phase I: site survey and programme design. A comprehensive field survey of existing networks (AC/AP/exchange branding, network topping, signal coverage, current authentication methods, failure history etc.) is conducted, based on survey results (selection of bypass or collusive deployments, determination of performance specifications for Authentication Gateway, design certification strategy and Portal page, planning implementation schedule). This phase does not require changes to the existing network, but only technical staff to conduct on-site surveys and tests, without any impact on hotel operations. Phase II: pilot deployment. Select a non-core area (e.g. part of a floor room or conference room area) for a small pilot deployment to verify that NATSHEL_AUTH_GATEWAY interface with the current AC is normal, that certification process is smooth, that guest experience is satisfactory, and that system stability is compliant."Double Track Run"——The pilot cycle recommends a minimum of one to two weeks, covering workdays and weekends, peaks and low-rise periods, to fully validate the performance of the system in various settings. Phase III: Full rollout. After the pilot validation has been completed, deployment will be phased over the entire hotel in accordance with the implementation plan developed. Extension can take place on floor or at regional level, with one to two days ' observation after the deployment is complete, and the next batch will be confirmed as no problems. The configuration changes and physical connection changes (e.g., the need to break network links when deployed in a series of deployments) should be performed at early hours (e.g. 2-5 a.m.) to minimize the impact on occupants. Phase IV: optimization and wiring. Once full deployment is complete, the continuous optimization and wiring phase begins. Optimizing the authentication strategy and bandwidth rules based on actual operating data (certification success rates, online user numbers, bandwidth usage, resident complaints etc.); regularly checking system performance to process malfunctions and alerts in a timely manner; periodic backup configurations and log data; adjusting the configuration of the certification system to changes in hotel operations (e.g., new areas, replacement PMS systems, upgrade bandwidth, etc.)."Check and promote, run fast, and back at any time."——Each phase has clear certification criteria and a retreat programme to ensure that the rehabilitation process can be quickly resumed even if problems arise, without having long-term effects on the normal operation of hotels.
The wireless certification of old hotels requires a pragmatic strategy, the core principle being to protect stock investments and avoid large-scale dismantling. Before retrofitting, comprehensive on-site surveys must be conducted, without assuming that all equipment supports standard protocols. Depending on the capabilities of existing ACs, three options are available for bypass deployment (with minimal impact on the network when it supports external Portal), co-deployment (with an increase in NATSHEL_AUTH_GATEWAY strings on main routes) or cloud deployment (a centralized chain hotel group). The existing AP, switch and cabling are as easy as possible to meet demand and only gradually replace when it is not really possible.——On-site survey and programme design, pilot deployment, full rollout, optimization and wiring with validation standards and retreat programmes at each stage to reduce the risk of adaptation and the impact on hotel operations."Push it backwards."But..."Gradual upgrading from existing"• Selecting suitable deployment programmes and implementation strategies that will enable the upgrading of certification capabilities while protecting investments.