1. Scenario 1 Internet WAN LAN1 LAN2 LAN3 LAN4
Laptop
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Guest LAN (authentication required)
DSL Modem
Terminal
Terminal
Terminal
Terminal

2. Scenario 2 Internet WAN LAN WAN LAN1 LAN2 LAN3 LAN4
Laptop
Router
WAN
LAN
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Guest LAN (authentication required)
DSL Modem
Terminal
Terminal
Terminal
Terminal

3. Scenario 3 Internet WAN LAN WAN LAN1 LAN2 LAN3 LAN4
Laptop
Router
WAN
LAN
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Guest LAN (authentication required)
DSL Modem
Employee LAN (no authentication required)
Workstation
Terminal
Network Printer
Terminal

4. Scenario 4 Internet WAN LAN WAN LAN1 LAN2 LAN3 LAN4
Laptop
Router
WAN
LAN
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Employee LAN (no authentication required)
DSL Modem
Workstation
workstation
Network Printer
Workstation

5. Scenario 4x Internet WAN LAN WAN LAN1 LAN2 LAN3 LAN4
Laptop
Router
WAN
LAN
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Employee LAN (no authentication required)
DSL Modem
Switch
Workstation
Network Printer
More Workstation PCs
Workstation

6. Scenario 5 Internet WAN LAN1 LAN2 LAN3 LAN4
Laptop
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Guest LAN (authentication required)
DSL Modem
Employee LAN (no authentication required)
Workstation
Terminal
Network Printer
Terminal

7. Scenario 6 Internet WAN LAN1 LAN2 LAN3 LAN4
Laptop
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Employee LAN (no authentication required)
DSL Modem
Workstation
workstation
Network Printer
Workstation

8. Scenario 6x Internet WAN LAN1 LAN2 LAN3 LAN4
Laptop
WAN
LAN1
LAN2
LAN3
LAN4
DD-WRT-Powered AP
(ports shown below)
WLAN (authentication required)
Laptop
VCN Authentication
(RADIUS-based)
Internet
Employee LAN (no authentication required)
DSL Modem
Switch
Workstation
Network Printer
More Workstation PCs
Workstation

9. New VCN Network Infrastructure
DD-WRT’s Chillispot redirect the user to the VCN hotspot login page (go to step 2).
(i) Registered VCN (hotspot or dial-up) users can log in to the hotspot using their username and password (go to step 3); (ii) Unregistered users can register for a new hotspot account (go to step 5).
The FreeRadius Server will do a look up on the username to see whether the user is a first-time hotspot user. (i) If the VCN user never use the hotspot before, the server will acts as a proxy and redirects the user’s info to the VCN Radius Server for authentication (go to step 4); (ii) If the VCN user has used the VCN hotspot service before in which it means the HotSpot has registered a hotspot account in its local database (go to step 5).
The VCN Radius Server will authenticate the user using his/her registered account in the data for dial-up user. Once authentication is successful, it will pass an acceptance back to the FreeRadius Server (go to step 5).
The FreeRadius will either register an account if it doesn’t exist or update the accounting info on the account and the user will be allowed to access the site page and the internet immediately.
VCN Authentication
(RADIUS-based) 4 1
DD-WRT-Powered AP
Database
(Dialup-user)
HotSpot Authentication
(FREERADIUS & Proxy) 3 5
Database
(Hotspot-user)
VCN HotSpot Login Page 2