AP-5131 Access Point Product Reference Guide
5-40
5.3.1.4 Configuring WLAN Hotspot Support
The AP-5131 enables hotspot operators to provide user authentication and accounting without a
special client application. The AP-5131 uses a traditional Internet browser as a secure authentication
device. Rather than rely on built-in 802.11security features to control AP-5131 association privileges,
configure a WLAN with no WEP (an open network). The AP-5131 issues an IP address to the user
using a DHCP server, authenticates the user and grants the user to access the Internet.
When a user visits a public hotspot and wants to browse to a Web page, they boot up their laptop
and associate with the local Wi-Fi network by entering the correct SSID. They then start a browser.
The hotspot access controller forces this un-authenticated user to a Welcome page from the hotspot
Operator that allows the user to login with a username and password.
The AP-5131 hotspot functionality requires the following:
• HTTP Redirection - Redirects unauthenticated users to a specific page specified by the
Hotspot provider.
• User authentication - Au thenticates users using a Radius server.
• Walled garden support - Enables a list of IP a ddress (not domain names) to be accessed
without authentication.
• Billing system integration - Sends accounting records to a Radius accounting server.
To configure hotspot functionality for an AP-5131 WLAN:
1. Ensure the Enable Hotspot checkbox is selected from within the target WLAN screen, and
ensure the WLAN is properly configured.
Any of the sixteen WLANs on the AP-5131 can be configured as a hotspot. For hotspot
enabled WLANs, DHCP, DNS,HTTP and HTTP-S traffic is allowed (before you login to the
hotspot), while TCP/IP packets are redirected to the port on the subnet to which the WLAN
is mapped. For WLANs that are not hotspot-enabled, all packets are allowed.
2. Click the Configure Hotspot button within the WLAN screen to display the Hotspot
Configuration screen for that target WLAN.
CAUTION When using the AP-5131’s hotspot functionality, ensure MUs are re-
authenticated when changes are made to the characteristics of a
hotspot enabled WLAN, as MUs within the WLAN will be dropped
from AP-5131 device association.
!