Proxim Orinoco AP-2500 User Manual page 15

Introduction
• VPN Passthrough: The AP-2500 can support multiple PPTP and IPsec VPN sessions for subscribers. See
VPN/iNAT (Intelligent Address Translation)
• Support for Application Level Gateways (ALGs): The AP-2500 supports Application Level Gateways (ALGs)
providing transparent access to subscribers for popular Web-based applications that do not work in typical
Network Address Translation (NAT) environments (see
provides support for the following protocols:
– H323 (protocol used by Microsoft NetMeeting)
– Real Audio
– SMTP
– FTP
– PPTP (for VPN connections)
– IPSec (for VPN connections)
• Multiple Authentication Options: To authenticate subscribers, you can use the Access Point's Internal Web
Server (IWS), an External Web Server (EWS), or RADIUS. See
• SSL Support: If using Internal authentication, you can copy your company's digital certificates to the AP-2500 to
create HTTPS pages that provide end-to-end encrypted links between the AP and subscribers. See
Layer (SSL) for details.
• "Remember My Login" Cookie: The Access Point can store a cookie in your subscriber's Web browser to
facilitate future logins by the customer. See
• Credit Card Module: Provides a secure interface over SSL to enable billing via a credit card. See
Layer (SSL) and Credit Card Services
• Billing Records Mirroring: Access Points can send copies of credit card billing records to a list of external
servers that you specify. The AP assumes control of billing transmissions and the saving of billing records. By
effectively "mirroring" the billing data, the AP can send copies of billing records to predefined servers. Additionally,
if the primary and secondary servers are not responding, the AP can store up to 2,000 billing records. The AP
regularly tries to connect with the primary and secondary servers. When a connection is reestablished with either
server, the AP sends the cached information to the server. Customers can be confident that their billing information
is secure and than no transaction records are lost. See
• Information and Control Console: The AP can open a pop-up window on your subscribers' Web browsers that
reports the amount of time remaining in the user's account (if paid for by credit card) or allows the user to logout (if
using RADIUS to manage users). Also, the ICC supports multiple advertising banners that you can customize for
your hotspot. See Information and Control Console (ICC)
• Logout Popup Window: An alternative to the Information and Control Console (ICC), the AP can provide an
HTML based pop-up window. This windows features include displaying a single logo, displaying the session's
elapsed/count-down time, and presenting an explicit Logout button. See
• Dynamic Billing Selection/Bandwidth Management: With ICC enabled, subscribers can dynamically switch
between billing plans to increase or decrease their own bandwidth. See
• Walled Garden: You can provide unauthenticated users with free access to a limited number of Web sites as a
promotional tool. See Passthrough Addresses
• Portal Page and Home Page Redirection: You can automatically redirect subscribers to the Web site of your
choice either before authentication (see
(HPR)).
• IP Upsell: You can configure the AP-2500 to offer public addresses to power users at a premium price. See
Server Configuration Options
• URL Filtering: You can prohibit your subscribers from accessing specific Web sites based on a blocked list of
sites or domains entered by the administrator. See
• International Language Support: Allows you to define the text displayed to your Subscribers. The language you
select also determines the language encoding the Internal Web Server instructs the browser to use. See
International Language Support
• Intelligent Network Address Translation (iNAT): supports multiple VPN connections to the same termination at
the same time. The same public IP address can be used as a source IP to support concurrent tunnels to different
termination devices, offering efficiency in the use of costly public IP addresses. See
Translation) for details.
for details.
Dynamic Address Translation (DAT)
Enabling Cookie Support
for details.
Credit Card Mirroring
for details.
for details.
Portal Page) and/or after authentication (see
for details.
URL Filtering
for details.
for details). The AP
AP-2500 Authentication Methods
for details.
for details.
Goodbye Page for details.
Session Rate Limiting
Home Page Redirection
for details.
INAT (Intelligent Address
for details.
Secure Socket
Secure Socket
for details.
DHCP
15