The 4ipnet WHG311 Secure WLAN Controller with built-in 3,000 local accounts, 3,000 on-demand accounts, is an ideal security solution for small-scale WLAN deployments, including enterprises, campuses, hotels, airport terminals, and MDUs/ MTUs. The WHG311 integrates “secure access control”, “visitor account provisioning”, “flexible accounting and billing”, and “centralized WLAN management” into one box to provide simplified manageability and instant mobility. With more powerful hardware, WHG311 is capable of centrally managing 30 4ipnet access points though Layer 2 deployment or through the Cloud to cover a wider service area in a smaller network.
Networking
•Support NAT or Router mode
•Support Static IP, DHCP, PPPoE mode on WAN interfaces and PPTP (WAN 1 only)
•Choose freely which LAN is authentication-enabled LAN
•Support NAT:
1.IP/Port destination redirection
2.DMZ server mapping
3.Virtual server mapping
4.H.323 pass-through
•Supports email service via designated email server
•Built-in with DHCP Server and support DHCP relay
•Support walled garden (free surfing zone)
•Walled Garden Ad List that enables advertisement website links on user login portal page
•Support MAC-address and IP-address pass-through
•Support HTTP Proxy
•Support IP Plug and Play (IP PnP)
•Support configurable static routes
•Support dual uplinks, outbound load balancing and failover for more reliable Internet connection
•Support SIP pass-through NAT
•Support Ethernet connection to external terminal servers
•Port location mapping features for working with DSLAM and VLAN switches
•Dynamic Routing Protocol: RIP, OSPF, IS-IS
•Seamless L2/L3 roaming
System Administration
•Support web-based management user interface
•Provide customizable login and logout portal page
•SSH remote management
•Remote firmware upgrade
•NTP time synchronization
•Menu driven console management interface
•Utilities to backup and restore the system configuration
•built-in root CA feature to issue self-signed certificates for internal network security validation
Monitoring and Reporting
•Status monitoring of on-line users
•IP-based monitoring of network devices
•Uplink (WAN) connection failure alert
•Support Syslog for diagnosis and troubleshooting
•User traffic history logging
•Traffic history report via email to administrator
•Users’ session log can be sent to FTP or Syslog server
•Graphical system report
User Management and Access Control
•Support 3,000 local accounts and 3,000 on-demand accounts
•Provide on-demand accounts for visitors
•Support Local user account roaming
•Authentication methods supported: Local and On-demand accounts, POP3, LDAP, RADIUS, Windows Domain, and SIP authentication
•Single-Sign-On for Windows Domain
•Allow MAC address and user identity binding for local user authentication
•Support MAC Access Control List
•Support auto-expired guest accounts
•Users can be divided into user groups, each user group has its own network properties, including bandwidth, QoS, accessible service zones, and other privileges
•Support QoS and WMM traffic types: Voice, Video, Best Effort and Background
•Each group (role) may get different network policies in different service zones
•Max concurrent user session (TCP/UDP) limit
•A setting for user-idle-timeout
•Configurable user Black List
•Export/Import local users list to/from a text file
Security
•Support local IPSec VPN tunnels
•Support PPTP VPN tunnels
•Support site-to-site VPN tunnels
•Support VPN pass-through (IPSec and PPTP)
•Built-in DoS attack protection
Service Zones
•The network is divided into maximum 9 Service Zones, each defined by a pair of VLAN tag and ESSID
•Each service zone has its own:
1.login portal page
2.authentication options
3.LAN interface IP address
4.DHCP address range
•Each service zone allows access to the selected groups
•Each service zone assigns a network policy to each user group
•WISPr support per service zone
Accounting and Billing
•Support local on-demand and external RADIUS server
•Contain 10 configurable billing plans for on-demand accounts
•Support credit card billing system by Authorize.net, PayPal, SecurePay, and WorldPay
•Provide session expiration control for on-demand accounts
•Provide detailed per-user network traffic history for both local and on-demand user accounts
•4ipnet RADIUS VSA implementation for volume-based session control using RADIUS server
•Support automatic e-mail to report network traffic history
AP Management
•Manage up to 30 x 4ipnet AP in both Local and Wide Areas AP management totally
•Monitor 3rd party non-integrated AP: up to 100
•Centralized remote management via HTTP/SNMP interface
•Auto discovery for managed APs
•Enable or disable APs easily via user interface
•Templates for managed APs
•Monitoring managed AP for its status, the number of associated clients, and RF information
•Upgrade managed APs centrally, including bulk upgrade
•Rogue AP detection and AP load balancing
•Tunneled AP management over internet for 4ipnet EAP110, EAP200, EAP300 Aps
•Graphical AP statistics display
Hardware Specifications
•WAN Ports: 2 x 10/100/1000 Base-T RJ-45
•LAN Ports: 8 x 10/100/1000 Base-T RJ-45
•SD card Slot x 1
•USB Port: 1 x USB2.0
•Console Port: 1 x DB9
•LED Indicators: 1 x Power, 1 x Status, 3 x Rev., 2 x WAN, 8 x LAN
•Buttons: 1 x Reset, 3 x Rev
Physical and Power
•Power Adapter:
1.Input: 100~240 VAC, 50/60 Hz
2.Output: 12VDC, 2A
•Form Factor: Mini-desktop
•Dimensions (W x D x H): 13″ x 7.1″ x 1.8″ (330 mm x 180 mm x 45.5 mm)
•Weight: 2.8 lbs (2.10 kg)
Environment
•Operating Temperature: 0 ~ 45 °C
•Storage Temperature: -25 ~ 55 °C
•Operation Humidity: 5% ~ 95% (Non-condensing)
•Storage Humidity: 5% ~ 95% (Non-condensing)
Certifications
•CE, FCC
•RoHS compliant
