The Handlink ISS-6000 Internet Access Controller is a complete access solution for medium to large Hotels and Resorts. It can serve up to 1024 simultaneous users and is an ideal solution for deployment within the Hospitality and Accommodation industries, Apartment buildings - MDU, Student Accommodations, Retirement Villages and Airports and offers instant high-speed Internet connections. The ISS-6000 also acts as a Wireless Hotspot access controller and provides plug and play instant Internet access, advanced security & network management. Handlink Hotel Broadband Solution

1. ISS-6000 V3.00 Internet Subscriber Server III

2. ISS-6000 Internet Subscriber Server III The Internet Subscriber Server III is a free-standing or rack-mounted intelligent gateway with a LAN port, WAN port, a serial port for system management and administration, and Designed for use in the medium to large environment such as large hotels, university campuses and airports, the Internet Subscriber Server III acts as an hotspot access controller and provides instant Internet access, advanced security and network management. a dedicated PMS port for connecting the unit to a customer’s Property Management System, and capable of supporting up to 1024 simultaneous users. The Integrated Solution for medium to large HotSpots

3. IP Plug and Play Zero Configuration Outgoing E-mail Redirection Transparent HTTP Proxy AAA and Billing Web-based Internet Access RADIUS AAA Support 10 Billing Profiles On-line Selective Service Static Accounts Dynamic Accounts Security Layer 2 Isolation VPN Pass through Secure HTML Login Page Administration Access Control Pass through IP/MAC Address Management LAN Device Management Real-time Session List Syslog SNMP Miscellanies Pass Through IP/MAC Address Various WAN Connections Public/Private Service Marketing Service Customized Login Page Login Page Redirection Advertisement Link Walled Garden Manage Bandwidth Equal Bandwidth Class of Service Hotel PMS PMS Integration Port-Location Mapping Lowest Total Cost Ownership

4. IP Plug and Play “ Zero Configuration” Internet Access Outgoing Email Redirection Transparent HTTP Proxy

5. ” Zero Configuration” Internet Access Easy-to-Use, Plug-and-Play Internet Access Handlink’s unique IP Plug&Play (iPnP) technology allows subscribers to connect with ease for broadband access without having to re-configure any of their device IP settings including DHCP, DNS, Proxy and dynamic and static IP address assignments. Ethernet / VDSL / HomePNA Switch Dynamic IP Fixed Global IP Fixed Private IP DHCP Client HTTP Proxy ADSL Modem Wireless AP

7. Transparent HTTP Proxy Supports common proxies acting as a proxy server. This function could help subscribers without changing proxy settings to eliminate support calls related to client proxy settings. (only support HTTP proxy). Proxy Server Enable Proxy Server Disable HTTP Even subscriber’s browser has proxy server setting, the ISS-6000 could work as proxy server to serve this laptop. Subscriber do not need to change the proxy setting of his laptop.

8. AAA and Billing Web-based Internet Access RADIUS AAA Support Static Accounts Dynamic Account 10 Billing Profile On-line Selective Service

9. Web-based Internet Access The “Login page” displays prompting the subscriber to enter the username and password for the first time Internet access. Subscribers without valid username and password cannot access Internet. WITH valid credential WITH valid credential WITHOUT valid credential Blocked Login Page Login Page Login Page ADSL Modem Wireless AP

11. 10 Billing Profiles The administrator can define up to 10 billing profiles. The billing time base can be minute, hour, day, week, month and unlimited.

12. On-line Selective Service Subscribers can choose from the pre-defined service selections (billing profiles) when login if PMS implemented.

13. Static Accounts Static Accounts can be created and managed by a series of specific number like hotel rooms. Static Accounts can be used for PMS billing without 802.1Q tag-based VLAN infrastructure or Port-Location Mapping Infrastructure. You have three ways to create static accounts, batch create or import from the stored accounts or manually. Handlink Port-location mapping infrastructure General Infrastructure 802.1Q Tag-based VLAN Infrastructure

14. Dynamic Accounts 1. Clicking on the button on the Account Generator Printer connected with ISS-6000 LAN port. 2. Clicking on the 4 pre-defined buttons from the Web-based Dynamic Account Operator. You have two ways to operate the accounts: Click AG-200E Switch

15. AG-200E Account Generator Printer with Ethernet Port RJ-45/ POE Port AG-200E

16. Security Layer 2 Isolation VPN Pass through Secure HTML Login Page Administration Access Control Pass through IP/MAC Address

17. Layer 2 Isolation ADSL Modem This enables every wireless or wired subscriber to be not able to communicate with each other even they are within same subnet. That is the best solution for Hotspot security. Nobody allows his/her computer’s data to be shared with anyone else.

18. VPN Pass through Mail FTP Mail FTP Secure Tunnel VPN Passthrough provides the subscribers who want to run his VPN or secure tunneling client software to connect to his/her company’s VPN server. Company A Company B The ISS-6000 supports only Encapsulating Security Payload (ESP) tunnel mode. This is the most common mode of establishing IPSec tunnels. In the rare case that a subscriber is using one of the other methods, then it would be necessary for this user to be given a public IP address. Other IPSec methods are Authentication Header (AH) transport and tunnel mode and ESP transport mode. IPSec VPN Server PPTP VPN Server IPSec VPN Client PPTP VPN Client

19. SSL Login Page/Administration We use Secure HTML Login Page through SSL to protect username and password while LAN users login. That enables security authentication within the network. ADSL Modem SSL Secure Login Page and Administrative Page Subscriber Login’s Username/Password are encrypted, therefore even the packets are captured ,hackers still uneasily to know the username/password. Username =???????? Password =????????? Wireless AP

20. Administration Access Control The ISS-6000 integrates a secure administration access control list that checks the source (IP address) of administrator logins. A login is permitted only if a match is made with the list contained on the ISS-6000. If a match is not made, the login is denied, even if a correct login name and password are supplied. Specified IP Address For Administration IP Address without in the list

21. Management LAN Device Management Real-time Session List Syslog SNMP

22. LAN Device Management The administrator can directly remote control the devices under the LAN via ISS-6000 and check the status (OK/Fail) of the LAN devices. Administrator http://210.66.37.22:60006 Global IP http://210.66.37.22 ADSL / Cable Modem Wireless AP Wireless Gateway

23. Real-time Session List Administrator Global IP 210.66.37.22 Wireless AP Wireless AP Network Management PC The remote site administrator could monitor the real time usage status of ISS-6000 via Session list page. HomePNA Switch

24. Syslog ISS-6000 provide 5 categories of logs which will send to specified Syslog server. Network manager can know the network status according to the following logs. 1. System Category System information System Boot Notice System Manager Activity information 2. Accounting Account Created Subscriber Trace Logged-in Users 3. Billing Billing Log Syslog Server ADSL / Cable Modem 4. LAN Devices Management LAN Devices Information LAN Devices Alarm 5. Alert Administration Access Fail E-mail Server

25. SNMP Management The ISS-6000 supports SNMP (Simple Network Management Protocol). Each unit acts as an SNMP agent so that the network connecting status and configuration information may be accessed remotely through the SNMP manager, which enables centralized traffic and fault monitoring. MIB Browser SNMP Agent SNMP Port 161 1. Get 2. Get Next 3. Get Bulk 4. Set Port 162 UDP Packet 1. Port Enable/Disable 2. Boot Up 3. Reset MIB-II Standard Support

26. Miscellanies Pass Through IP/MAC Address Various WAN Connections Public/Private Service

27. Pass Through IP/MAC Address Pass Through IP/MAC address is useful for VIP users without authentication and for devices that do not have a web browser (cash registers, for example) or that are connected with LAN port (wireless access points, for example). Guest or Subscriber Guest or Subscriber Guest or Subscriber Hotel Staff Hotel Manager VIP Guest or Subscriber ADSL Modem/ Cable Modem Built-in Auth./ RADIUS Auth. Enabled No Authentication

28. Various WAN Connections The system provides alternative WAN connection such as PPPoE, PPTP, DHCP Client or Static IP for service provider to establish their service networking quickly and easily. PPTP PPPoE DHCP Client Static IP

29. Public/Private Service DHCP Client xDSL/Cable Modem Wireless AP WAN IP: 211.21.1.1 Subnet: 255.255.255.0 Gateway: 211.21.1.20 LAN IP: 10.59.1.1 Subnet: 255.255.255.0 Use Public IP Use Private IP DHCP Client Public IP: 211.21.1.2~211.21.1.12

30. Marketing Service Customized Login Page Login Page Redirection Advertisement Link Walled Garden

31. Customized Login Page The ISS-6000 provides the standard login page for subscribers to input username and password. However, some service providers like hotels, coffee shops and airports may want to show their customized page or redirect their hosted page for promotion or corporate image, therefore ISS-6000 allows service provider or venue owner to specify or modify the login page. Standard Login Page Frame Login Page TOP Frame Bottom Frame

32. Login Page Redirection Login Page Web Server Login Page www.test.com/login.html

33. Advertisement Link The system allow service provider to input 10 URL links for advertisement link purpose. www.yahoo.com www.msn.com www.microsoft.com

34. Walled Garden We prepare ten URL links that allows subscriber to access the specific Web pages even they didn’t have a username or password. It’s free trying and can use for advertisement.

35. Manage Bandwidth Equal Bandwidth Class of Service

36. Equal Bandwidth Up=64kbps Down=256kpbs Up=64kbps Down=256kpbs Up=64kbps Down=256kpbs Up=64kbps Down=256kpbs ADSL/Cable Modem The function enables administrator to limit bandwidth usage on a per user basis (MAC address). That prevents users from consuming a disproportionately large amount of bandwidth so every user gets a fair share of the available bandwidth.

37. Class of Service The function enables administrator to limit bandwidth usage according to the RADIUS vendor-specific attribute or billing profile setting (Built-in authentication). This allows every user to have a different service quality for Internet bandwidth . Up=16kbps Down=64kpbs Up=16kbps Down=64kpbs Up=128kbps Down=128kpbs Up=512kbps Down=512kpbs ADSL /Cable Modem

38. Hotel PMS PMS Integration Port-Location Mapping Lowest Total Cost Ownership

39. PMS Integration The ISS-6000 support the major brand PMS system ( Micros Fidelio, Marriott and Spectrum MK II) and Proprietary PMS system , to enable Hotels to perform in-room billing. Proprietary PMS TM

40. Port-Location Mapping The ISS-6000 supports 802.1Q Tag-based VLAN infrastructure. The ISS-6000 uses a Port-Location Mapping table to manage the assigned ports and ensure accurate billing for service used by a particular port. In-Room port-location mapping can be achieved by defining what Location/VLAN ID’s to listen for and what billing profile to associate with it. It is used to have the ISS-6000 automatically identify what port a machine is connecting on. ADSL /Cable Modem Port 1 Ethernet / VDSL / HomePNA Switch Port 2 Port 3 Room 1001 Room 1002 Room 1003 Room 1004 Port 4 Port (VLAN ID) Location Port-Location Mapping Table PMS

41. Lowest Total Cost Ownership In general, the high-costly 802.1Q Tag-based VLAN infrastructure is a MUST to be accompanied with other ISS-6000-like products. However, ISS-6000 also can work with PMS without costly 802.1Q Tag-based VLAN infrastructure. Handlink’s VDSL / HomePNA / Ethernet product series are port-location mapping infrastructure, which are the best and lowest TCO and partner with ISS-6000, to replace the costly 802.1Q Tag-based VLAN infrastructure. In conclusion, the ISS-6000 is the most flexible access controller with PMS and infrastructure in the world. Handlink Port-location mapping infrastructure General Infrastructure 802.1Q Tag-based VLAN Infrastructure Scenario B Scenario A Scenario A

42. User Experience Scenario A Scenario B Scenario C

43. Scenario A- Subscriber Login Login Page Popup Information Window after login successfully Information Window Subscriber Login

44. Scenario A Hotel PMS ADSL/Cable Modem RADIUS Server Network Operating Center Billing Server E-mail Server Network Management HANDLINK ISS-6000 Guest Room Floor Room #201 Room #202 Hotel Front Desk Operater Account Assign Account Printout Lobby,Café,Restaurant Floor Access Point Ethernet Switch Home PNA/VDSL Switch Login Page RS-232 Line RJ-11 Telephone Line RJ-45 CAT5 Line

45. Scenario B - Subscriber Login Login Page Information Window Subscriber Login Popup Information Window after login successfully

46. Scenario B Hotel PMS Ethernet Switch ADSL/Cable Modem RADIUS Server Network Operating Center Billing Server E-mail Server Network Management HANDLINK ISS-6000 Guest Room Floor Room #201 Room #202 Room #301 Account Generator Printer AG-200E Home PNA/VDSL Switch Login Page Assign IP address Enable PMS Support RS-232 Line RJ-11 Telephone Line RJ-45 CAT5 Line Port-Location Mapping VLAN Tag

47. Scenario C - Subscriber Login Login Page Information Window Subscriber Login Popup Information Window after login successfully

48. Scenario C Guest Room Floor Lobby,Café,Restaurant Floor Hotel PMS ADSL/Cable Modem RADIUS Server Network Operating Center Billing Server E-mail Server Network Management HANDLINK ISS-6000 Room #201 Room #202 Account Assign Account Printout Access Point Ethernet Switch Home PNA/VDSL Switch Login Page Create Dynamic Accounts Room #301 Define Billing Profile Hotel Front Desk Operater

49. Conclusion ISS-6000 can help you…

52. Wi-Fi Hot Spot Large Scale Hotspot Solution Ethernet Switch / PoE Switch ADSL / Cable Modem Network Operation Center RADIUS Server Billing Server Service Server Wireless STA Wireless AP

53. Hotel VDSL Phoneline Solution VDSL infrastructure ADSL / Cable Modem Control Center 1F Open Area VDSL Modem Hotel PMS System 2F Room201 VDSL Modem Notebook with Ethernet Interface Wireless AP RS-232 Line RJ-11 Telephone Line RJ-45 CAT5 Line Guest Room Lobby Pool Coffee shop Restaurants Gardens…… DSLAM/PBX Wireless STA Enjoy Internet with freedom RADIUS Server VDSL Switch

54. Hotel HomePNA Phoneline Solution HomePNA infrastructure ADSL / Cable Modem Control Center 1F Open Area Hotel PMS System 2F Room201 HomePNA Converter Notebook with Ethernet Interface Wireless AP Guest Rooms Lobby Pool Coffee shop Restaurants Gardens…… DSLAM/PBX Wireless STA Enjoy Internet with freedom HomePNA Converter RS-232 Line RJ-11 Telephone Line RJ-45 CAT5 Line RADIUS Server HomePNA Switch