Scenario 5: Wholesaling With Vpns; How It Works; Configuration Roadmap - Colubris Networks CN3000 Administrator's Manual

Chapter 4 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Scenarios - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 4

Scenario 5: Wholesaling with VPNs

This scenario illustrates how to use IPSec and multiple SSIDs to share an access point
between multiple WISPs.

How it works

In this scenario, the CN3000 controls access to the public access network. A separate
WLAN profile is defined for each WISP and is mapped to an IPSec tunnel that
terminates at the appropriate NOC. Each WISP must provide a RADIUS server at the
NOC to handle accounting and authentication duties. In addition, a web server is
required to host the customized public access interface.
Customers can choose which WISP to use by selecting the appropriate SSID when they
start their wireless client software.
In this scenario, all customers use HTML-based login.
Configuration On the RADIUS server
roadmap
Define RADIUS accounts for the CN3000 and all customers that will use the public
access network on the RADIUS servers in each NOC.
Install the CN3000
1. Install the CN3000 as described in
2. Connect the Internet port to the broadband modem and then restart it.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 87 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
WISP #1
NOC
IPSec VPN 1
Internet
IPSec VPN 1
SSID=WISP1
WISP #2
NOC
IPSec VPN 2
IPSec VPN 2
SSID=WISP2
Chapter 3.