12
Guest Internet AccessIn a campus, there are various types of end devices like PCs, smartphone and tablets that require Internet access, and some peripherals like printers or fax machines that don’t support Web authentication also need network connection. In addition to the devices, there are also many user types in a campus: students, teachers, roaming academic network users and guests. All the roles result in a complicated matrix in which different users and devices need to be flexibly authenticated to get proper privileges toward the network resources.
Solution Wi-Fi Wireless Access
Wireless is now the majority and the first choice for students
and guests alike to connect to the network. The ZyXEL
WLAN controller function supports multiple SSID and can
be mapped with different settings with VLAN, Wi-Fi security
and authentication options. For example, students, teachers
and other academic users can authenticate with the
regional central server to obtain resources even when they
are traveling; the smart phones or tablets with awkward
screen keyboards can adopt MAC authentication to simplify
the process. With these features, ZyXEL solutions can realize
comprehensive access management of Wi-Fi users.
Peripherals and Equipment
Devices like printers, IP phones and IP cameras should not
be simply connected to the IP network without proper
management. Instead, traffic hacking and data leaking from
these devices should be prevented. Take IP camera as an
example: as it uses multicast to deliver traffic and could be
hacked from the LAN, access policy for those devices should
be enforced on the switches they connect to. To solve the
difficulty that these devices don’t support Web-based
authentication, MAC authentication provided by ZyXEL
switches ease the concerns by allowing only the devices
matching the stored MAC addresses to connect.
Guest Users
For guest visitors who mostly use Wi-Fi to temporarily access
the network, the Wi-Fi controller can generate dynamic
guest accounts to grant temporary access. In addition the
controller has a Web-based authentication portal for guest
users to log in. Guest list and activities can also be logged for
monitoring and management.
Application Benefits Providing easy steps to setup and create guest accounts
and to manage and store identification information Regulating guest traffic through the internal network Auditing and monitoring guest usage and activities,
including login and logout times
13
QR Code Authentication
Captive Portal
NWA5123-AC802.11ac Dual-Radio Uni�ed Access Point
GS2210-24HPLayer 2 Managed Switch
GS2210-24Layer 2 Managed Switch
GS2210-48Layer 2 Managed Switch
GS2210-8HPLayer 2 Managed Switch
GS3700-48Layer 2+ Managed Switch
NXC5500Wireless LAN ControllerPublic Area
Computer Lab
Administrative O�ce
NWA5123-AC802.11ac Dual-Radio Uni�ed Access Point
MACAuthentication
MACAuthentication
Dynamic Guest Account
802.1x
51
49
PWR1
PWR2
SYS
ALM
MAST
GS3700-48
10/100/1000Base-T Port (1-48)
12 3
4 56 7
8 91110
12 13 14 1516 17
18 1920 21
2322
2415 26 27
28 2930 31
32 333534
3637 38 39
40 4142 43
44 4547
4648
1G SFP Port (49-52)
5052
MGMT
CONSOLE
STACK ID
Fax/Printer
AAA Servers