Colubris MultiService Gateways

Highly integrated to optimize operational costs and ensure reliability, Colubris MultiService Gateways (MGW) are purpose-built for specific enterprise and service provider distributed remote networking applications. Because they feature complete layer-3 IP networking services, Colubris gateways can connect directly to a backbone LAN/WAN network, and network administrators can manage them through a single interface for easy remote troubleshooting.

MGW-3500

MGW-3500 WLAN Access Controller

The MGW-3500 is a specialized 1U rack-mount controller designed specifically for large-scale public/guest Internet access services. It can be used to create a rich set of free or fee-based hotspot services within a public venue, or a guest network service enabling contractors, vendors, and other corporate visitors to access the Internet via an enterprise network. The MGW-3500 controls client devices that are connected via WLAN access points or directly to an Ethernet network, enabling both service providers and enterprises to authenticate users and control session operation.

The MGW-3500 is purpose-built for large campus and hotspot operator applications, offering:

Support for up to 1,000 simultaneous user sessions

The Colubris "Zero Configuration" service interface

Support for multiple services or providers (retail/wholesale) per hotspot

Ease of integration with back-end hotspot service partners

Per-user and per-service bandwidth management

Embedded stateful firewall, IP router, NAT, and DHCP services

Because the MGW-3500 features Colubris' "Zero Configuration" service interface - which includes automatic and dynamic support for any client IP configuration, including static IP addresses and web proxy servers - users can gain access to the service easily. To ensure seamless support for the applications demanded by business travelers and consumers, the MGW-3500 features Colubris' advanced IP networking, including Adaptive NAT™, SMTP redirect, and DHCP services. Per-user bandwidth controls enforce fair sharing of limited network bandwidth among the users in a hotspot or guest network.

With the MGW-3500, service operators have the flexibility to authenticate users locally, or by referencing a centralized remote AAA server. Its embedded web server supports user authentication with a range of mechanisms, including user name/password and single-use authorization codes. Session activity records include elapsed time and bulk data transfers. By redirecting users to a centralized captive portal, network operators can provide access to special content or login procedures, such as prompting users to read and accept a "terms of use agreement" before granting them access to the network. Users can be redirected to separate portal, AAA and DHCP server destinations based on the user's location or associated SSID, enabling a range of service customization. For example, employment application forms, phone directories, and product catalogs can be delivered in enterprise applications, and promotions and advertisements in hotspot services.

Service providers can directly connect the MGW-3500 to a broadband public Internet service to create a hotspot network. A rich feature set allows network administrators to manage hotspot venues centrally to ease administration and keep operating costs low. Alternatively, hotspot venue owners can outsource user authentication and billing functions using the MGW-3500's integrated support for leading third-party hotspot billing services. This flexibility allows hotspot operators to build and deliver a service offering that suits their business objectives and level of technical expertise.

MGW-1250

MGW-1250 Secure WLAN Gateway

The MGW-1250 is a specialized gateway designed for small offices and retail locations that require a turnkey WLAN networking solution. It integrates an InReach MAP with powerful VPN encryption and IP network services within a single, centrally-managed enclosure. The MGW-1250 aggregates local VPN traffic into an existing wide-area network for enterprise-class scalability.

With its full range of layer 3 VPN security mechanisms, the MGW-1250 enables WLAN clients to use VPN security to protect their wireless communication and integrate them into an existing enterprise VPN infrastructure. It features hardware-assisted IPSec encryption with a capacity to terminate 50 user tunnels per access point, as well as support for third-party VPN clients. Alternatively, tunnels may be forwarded to a VPN server located elsewhere in the network. For greater simplicity and scale, client tunnels may be aggregated into a single tunnel that connects to a remote VPN server.

The MGW-1250 includes a stateful firewall that filters packets sent via an upstream network to local WLAN clients. The firewall protects client devices from attacks launched via a WAN, enabling low-cost Internet transport to be used for connectivity.