Captive portals provide a convenient method of controlling access to public and private networks by leveraging existing web technologies. Users simply “plug-in” and find themselves greeted with a web page prompting to provide a logon and password in order to access the network.

The main benefits of this solution come from not requiring additional customer knowledge, software or special configuration. Clients are able to quickly and easily gain access to the network regardless of the type of device or operating system used.

While the captive portals primary purpose is authentication they provide additional benefits such as the ability to direct new users to begin a sign-up process, fund an existing account or provide complimentary limited access to select services such as a company web site or information related to a particular venue.

Air Marshal is uniquely suitable for a wide range of environments including hotels, cyber cafes, universities, Internet HotSpots and guest networks. Comprehensive standards based RADIUS AAA support enables Air Marshal to seamlessly integrate with existing standards based billing and management platforms such as Emerald.

RADIUS/AAA Features

• RADIUS Authentication of User credentials and Device/MAC address
• RADIUS Accounting – detailed logging of IP, MAC, time and data usage, disconnect reason, etc.
• Interim Accounting status updates
• RFC3576 Mid-Session Disconnect
• Periodic Session Reauthorization
• Ascend Binary Data Filter VSAs
• MAC based Device Pre-Authentication
• WISPr Location, Redirect, Bandwidth control and Session limiting VSAs
• Startup device reboot indication
• Support for Backup RADIUS authentication and accounting servers

Network & Session Features

• Layer 3 IP Routing
• Private Address / NAT services
• Layer 2 transparent bridging
• TCP & UDP device authentication listeners
• IP or network layer session tracking
• Multiple networks and interfaces

Air Marshal General Features

• Single server supports thousands of concurrent sessions
• Browser based password encryption
• SSL Encryption
• Configurable Web HTML interfac
• User status display
• Integrated ADMIN interface
• Active session list
• Setup a walled garden
• Local account management
• Anonymous Access
• Client Data Mirroring
• Transparent web proxy
• Maximum UL/DL data rates per user
• Commercial session interruption

Specs

• Website:http://www.iea-software.com/products/airmarshal1.cfm
• Price:over 500$
• License:Commercial
• Operating System:Linux

Video

Screenshots

<TR><TD>Layer 3 IP Routing</TD>

<TD>This mode allows Air Marshal to control network access by routing managed IP subnets through it.</TD>

<TR><TD>Private Address / NAT services</TD>
<TD>NAT mode enables a single IP address to be used to provide network access to multiple clients.</TD>

<TR><TD>Layer 2 transparent bridging</TD>
<TD>Bridge mode allows Air Marshal to be seemlessly "plugged-in" to an existing network providing authentication services typically with no
external configuration changes on the network.</TD>

<TR><TD>TCP & UDP device authentication listeners</TD>
<TD>Air Marshal is able to detect and authenticate server devices and non-web based WiFi systems such as Nintendo DS.</TD>

<TR><TD>IP or network layer session tracking</TD>
<TD>Prevents abuse, determine if and how long users are active.  Air Marshal can be placed on the same physical network (recommended) or placed behind an IP router.</TD>

<TR><TD>Multiple networks and interfaces</TD>
<TD>A single Air Marshal server supports multiple managed subnets and network interfaces.</TD>

Related posts:

1. Emerald
2. RADIUS – definition from Wikipedia
3. Zeroshell
4. Aradial Hotspot
5. FirstSpot