Captive Portal HotSpot Gateway (HSG)

RansNet HotSpot Gateway (HSG) is a high performance network appliance designed for enterprises, fully featured with all the advanced networking and security technologies, such as ethernet switching, TCP/IP routing, virtual private networking, stateful firewall inspection and user access control etc.
Running on hardened Linux kernel and Intel platform, HSG produces extremely high performance, manageability, reliability and security, all packed in a purpose-built industrial grade computing platform. Various models are available with different performance to handle different no. of concurrent devices, catered for different customers environments.

RansNet HotSpot Gateway (HSG) can easily overlay any existing or new Wi-Fi/WLAN infrastructure, without significant network changes, at minimum operational impact. All brands of WLAN products are supported, as long as network is properly provisioned to route user traffic to HSG.

Immediately HSG transforms any WLAN network to deliver intelligent guest Wi-Fi services, and venue owners can start to customize branding portals and preferred user sign-in options without the need of any html coding.

Today, good and free Wi-Fi is a default facility that venue owners are expected to provide to their end customers, and Wi-Fi is often perceived as a cost center by the business owners. Now with RansNet HotSpot Gateway (HSG), Wi-Fi is no longer a cost center, it is an investment. 

HSG provides many opportunities for venue owners to monetize free Wi-Fi throughout user Wi-Fi journey. Having all monetization capabilities built-in as standard features, venues can easily enable the desired options with intuitive web interface, make unlimited promotional updates and run unlimited campaigns without any hidden costs.

RansNet HotSpot Gateway (HSG) has builtin RADIUS/AAA server to authenticate user Internet access, either through captive portal or dot1x/EAP or MAC authentication. It comes with intuitive web interface for administrators to manage user accounts, create vouchers, defines access profiles and generate billing and analytics reporting.

HSG also integrates with many 3rd-party systems for flexible user sign-in options, including all common social-media providers, SMS providers, payment gateway providers, PMS vendors, etc. At the same time, HSG also has its own mboxapi which allows any 3rd-party system to integrate with HSG for user account management, apps sign-in and data retrieval for external analytics etc.

The HSG builtin AAA server comes with fully featured RADIUS authorization capabilities, and enforces user access control by speed, time, data volume etc. Business owners can easy define multi-tier privileges to offer differentiated user experience, or sell premium Wi-Fi with different billing plans, or whitelist special network devices or destinations etc.

In addition, RansNet patented adaptive bandwidth control feature allows venue owners to fully maximize their back-haul investment to provide best possible user experience.

Detail Access Logging and Reporting for Analytics and Compliance (Accounting)

Regulations, such as the Sarbanes-Oxley Act, PCI DSS, HIPAA, and many others, are requiring organizations to implement comprehensive security measures, which often include collecting and analyzing logs from many different sources.

RansNet HSG tracks all user connection sessions, login attempts and access logs, with detail timestamps and packet header information (source, destination, protocols, port no, etc). The logs are stored in local storage for immediate analysis and investigation, and can be archived out to external FTP servers for long-term retention.

These features provide venue owners full visibility on the traffic usage and comply to security regulations and audits.

ProcessorMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreDual CPUDual CPU
Gigabit Interface4 x GE4 x GE4 x GE4 x GE6 x GE6 x GE8 x GE8 x GE8 x GE8 x GE
10G Interface (fiber or copper)OptionalOptionalOptionalOptionalOptionalOptional
Dimensions (mm) (WxHxD)230 x 30 x 151.5231.9 x 44 x 152231.9 x 44 x 152231.9 x 44 x 152231 x 44 x 197231 x 44 x 197430 x 44 x 450430 x 44 x 450562 x 88 x 430562 x 88 x 430
Power Consumption< 18W< 18W< 18W< 18W< 60W< 60W< 230W< 230W< 420W< 420W
Redundant Power Supply------OptionalOptionalOptionalOptional
Design Form FactorDesktopDesktopDesktopDesktopDesktopDesktop1U rack1U rack2U rack2U rack
Operating Temperature0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C
Total HotSpot Instances (VLANs)10020020020030030050050020002000
- Max Throughput per HotSpot Instance100Mbps200Mbps200Mbps200Mbps1Gbps1Gbps1Gbps1Gbps1Gbps1Gbps
- Max Concurrent Devices per HotSpot
Total Throughput (w/ hotspot)250Mbps500Mbps500Mbps500Mbps2Gbps2Gbps2Gbps2Gbps5Gbps5Gbps
Total Current Devices (w/ hotspot)1001002004008001000200050001500025000
Total Throughput (w/o hotspot)800Mbps1.5Gbps1.5Gbps1.5Gbps2Gbps2Gbps3Gbps3Gbps5Gbps5Gbps
Total Concurrent Devices (w/o
Multi-WAN Link Balancing
(WAN Bonding)
Up to 3 WAN
Up to 3 WAN
Up to 3 WAN
Up to 3 WAN
Up to 7 WAN
Up to 7 WAN
Up to 15 WAN
Up to 15 WAN
Up to 28 WAN
Up to 28 WAN
Wireless AP management (MACC)
mfusion monitoring & management
Online Firmware Patching and
Stateful Firewall & DHCP Server
Static, Dynamic Routing (OSPF/
IPv4 and IPv6 Capable
VLAN, Trunking (802.1q), Bonding
HA w/ Stateful Failover
Login page templates and CMS
Bandwidth Control (Static/Dynamic)
Time/Data/Session/Device Control
Whitelist by URL/Domain/IP/MAC
Local Authentication (RADIUS)
SMS & Email Signup, Social Media,
PMS/API/payment gateway
Landing page and In-session ads
User log and data Analytics
RadioDual-radio dual-band
Radio 1: 2.4G 11ax/5G 11ax: 2x2 MIMO
Radio 2: 5G 11ax: 2x2 MIMO
Protocalstandard 802.11ax
dual-radio dual-band
concurrent 802.11ax and 802.11a/b/g/n/ac
Antenna Gain2.4G: 3dBi
5G: 3dBi
Spatial StreamsUp to 4: 2x~2:2 in 2.4GHz , 2x~2:2 in 5GHz
Max Throughout5G+5G mode: 2.4Gbps
Radio1:5G low band 1.2Gbps
Radio2:5G high band 1.2Gbps
2.4G+5G mode: 1.775Gbps
Radio1:2.4G 0.574Gbps
Radio2:5G 1.2Gbps
Transmit Power≤100mw(20dBm)
(vary depending on different countries)
Adjustable Power1dBm
Service Port1 10/100/1000BASE-T Ethernet uplink port
(supports PoE)
Management Port1 console port
LED indicator1 LED indicator (Supports red, green, blue,
orange and flashing mode, which indicates
device access. The indicator can be switched off to silent mode.)
IP RatingIP41
Safety StandardGB4943, EN/IEC 60950-1
EMC StandardGB9254, EN301 489
Health StandardEN 62311
Radio StandardSRRC, EN300 328, EN301 893
Dimensions (WxDxH)153mm x 193mm x 26mm
(Height of AP only, excluding case and mount kit)
Weight< 0.5kg (include mount kit)
Installation modeCeiling/wall-mountable
Power SupplyLocal power supply (DC 48V/1A) operation
PoE (802.3af) – full spectrum operation
Power Consumption<12.95W
Operating Temperature Range-10°C to 55°C
Storage Temperature Range-40°C to 70°C
Humidity (non-condensing)Operating: 5% to 95%
Storage: 5 to 95%
CertificationsWi-Fi CERTIFIEDTM a, b, g, n, ac, ax
Maximum stations per APUp to 1024
Virtual APUp to 32
5G Priority (Band Steering)Support
SSID hidingSupport
Configuration the authentication mode, encryption mechanism, and VLAN attributes for each SSIDSupport
Remote Intelligent
Perception Technology (RIPT)
Intelligent identification of smart deviceSupport
Intelligent load
balancing based on the number of users or traffic
STA ControlSSID / radio-based
Bandwidth controlSTA/SSID/AP-based speed control
PSK, Web, and 802.1x authenticationSupport
Data encryptionWPA(TKIP), WPA-PSK, WPA2(AES),
WPA3, WEP(64 or128 bits)
WeChat authenticationSupport
QR code authenticationSupport
SMS authenticationSupport
PEAP authenticationSupport
Data frame filteringWhitelist, static/dynamic blacklist
User isolationSupport
Rouge AP detection and counter measureSupport
Dynamic ACL assignmentSupport
CPU Protection Policy
Network Foundation Protection Policy (NFPP)Support
Remote ProbeSupport
IPv4 AddressStatic IP address or DHCP reservation
IPv6 CAPWAPSupport
IPv6 addressManual or automatic configuration
IPv6 tunnelManual or automatic configuration
MulticastMulticast to unicast conversion
Wireless Position TrackingSupport
Network ManagementSNMP v1/v2C/v3, Telnet, SSH, TFTP, FTP and
Web management
Fault detection and alarmSupport
Statistics and logsSupport

RansNet HotSpot Gateway (HSG) is designed for large Wi-Fi venues to offer guest Wi-Fi access for Hotels, malls, hospitals, airports, tourism places, F&B, retail chains, or enterprises offering Wi-Fi services to visitors.

Minimize investment cost, by fully utilizing RansNet complete Wi-Fi hotspot solutions, from gateway (integrated with WLAN controller), PoE switches up to Wi-Fi 6 Access points.

Maximize user experience, using dedicated computing appliance to manage user access and offload AP to guarantee end device wireless connection.

Monetize Wi-Fi infrastructure, with many opportunities to generate additional business incomes throughout user Wi-Fi journey.