CARRIER GRADE CAPTIVE PORTAL

@ HOTSPOT.KOELN
Ivan Andric
AGENDA

• About NetCologne

• Our WiFi history

• What Is HOTSPOT.KOELN

• Structure Of The Carrier Grade Captive Portal Solution

• MikroTik Powered Network

• The Result
NETCOLOGNE
Our City - Our Region

Our Head-Office
SERVICES
Home & Business Customers

PHONE & INTERNET CABLE TV & INTERNET MOBILE

396.000* 238.000* 14.000*

of which 248.000 via own infrastructure

* 3/2017
OUR WIFI HISTORY
14 years experience
• 2004 – Installation of 450 Access-Points in the Cologne Trade Fair (koelnmesse)

for the photokina (the world's leading trade fair for photo, video and imaging)

• 2005 – Installation of 20 APs for the World Youth Day and the papal visit

• since 2005 – a lot of installations for hotels, hospitals, event locations, companies…

• 2006 – WiFi installation for the VIP-Area in the RheinEnergie Stadium (FIFA World Cup 2006)

• 2013 – The start of HOTSPOT.KOELN (Christmas Market, Roncalliplatz)

• 2014 – New and whole WiFi installation in the RheinEnergie Stadium (220 AP) for up to 50.000 users

• Currently we oversee more than 1.500 APs (+ 2.200 for schools)

• 2018 – Installation of additional 200 outdoor APs in the city

THE WIFI CHRISTMAS TREE
Christmas 2013 – HOTSPOT.KOELN „Test Installation“
x
WHAT IS HOTSPOT.KOELN ?
Free WiFi for everybody
The Dom-City has its own public WiFi
network: HOTSPOT.KOELN. Visitors
and residents can surf the Internet free
of charge - whether they are sightseeing,
strolling through the Old Town or working
in the café. Today, many public places
are already connected to the WiFi
network and more than 500 outdoor
Access-Points are installed in the city.
On average, almost 55,000 users dial
into the network every day.
HOTSPOT.KOELN
Requirements for the solution

• Comprehensive WiFi coverage

• Automatic roaming between the locations

• Location based services

• Capacity sufficient for events (sites in the city for more than 7.000 people)

• Broadband Access

• Out- and Indoor coverage

• Multilingual & Multitenant capable Portal System

• Integration of existing WiFi installations

OUTDOOR AP OVERVIEW
IOT READY
IoT Sensors in the Climate-Street
CARRIER CLASS CAPTIVE PORTAL
The main components

Cloud Core Router a3MANAGER

& Radius SQL

WEB WEB
Portal Admin

Load
Balancer
PORTAL SWITCH & ROUTER

Portal Switch (CCR1036-8G-2S+)

Collects the VLANs and distribute
them to the Portal Router

Portal Router (CCR1036-12G-4S)

HotSpot function with redirect to
the a3MANAGER Captive Portal
web page, DHCP, DNS, Router,
NAT, Firewall,…
 SCHEMATICALLY COMPOSITION
City koelnmesse Stadium Hotels, Event Business Spot Municipal Hotel, Hospital
Outdoor Trade Fair Out- + Indoor Locations,… Access-Points Building Company
Access-Points Access-Points Access-Points Access-Points Access-Points Access-Points
Locations

Access-Network (Leased-Lines, Internet)

Portal Switch Portal Switch a3MANAGER running on vmware

B OOT
B OOT B OOT
B OOT

ACT/LINK
ACT/LINK ACT/LINK
ACT/LINK

Load
ACT/LINK
ACT/LINK ACT/LINK
ACT/LINK

WEB WEB
10G 10G 10G 10G
10G 10G 10G 10G

S FP
S+FP1+ 1 S FP
S+FP2+ 2 MICRO
MICRO
SD SD E TE
HT1H 1 E TE
HT2H 2 E TE
HT3H 3 E TE
HT4H 4 E TE
HT5H 5 E TE
HT6H 6 E TE
HT7H 7 E TE
HT8H 8 RES
RES
E T E T CONS
CONS
OLE
OLE P WPRW R S FP
S+FP1+ 1 S FP
S+FP2+ 2 MICRO
MICRO
SD SD ETH
E T1H 1 ETH
E T2H 2 ETH
E T3H 3 ETH
E T4H 4 ETH
E T5H 5 ETH
E T6H 6 ETH
E T7H 7 ETH
E T8H 8 RES
RES
E T E T CONS
CONS
OLEOLE P WPRW R

Portal Router Portal Router Radius SQL

S FP
S FP
1 1 S FP
S FP
2 2 S FP
S FP
3 3 S FP
S FP
4 4 E TH
E TH
1 1 E TH
E TH
2 2 E TH
E TH
3 3 E TH
E TH
4 4 E TH
E TH
5 5 E TH
E TH
6 6 E TH
E TH
7 7 E TH
E TH
8 8 E TH
E TH
9 9 E TH
E TH
10 10 E TH
E TH
11 11 E TH
E TH
12 12RES
RES
E T E T CONS
CONS
OLE
OLE S FP
S FP
1 1 S FP
S FP
2 2 S FP
S FP
3 3 S FP
S FP
4 4 E TH
E TH
1 1 E TH
E TH
2 2 E TH
E TH
3 3 E TH
E TH
4 4 E TH
E TH
5 5 E TH
E TH
6 6 E TH
E TH
7 7 E TH
E TH
8 8 E TH
E TH
9 9 E TH
E TH
10 10 E TH
E TH
11 11 E TH
E TH
12 12RES
RES
E T E T CONS
CONS
OLE
OLE
redirect Balancer Portal Admin
Portal Router Portal Router https
S FP 1 S FP 2 S FP 3 S FP 4 E TH 1 E TH 2 E TH 3 E TH 4 E TH 5 E TH 6 E TH 7 E TH 8 E TH 9 E TH 10 E TH 11 E TH 12 RES E T CONS OLE S FP 1 S FP 2 S FP 3 S FP 4 E TH 1 E TH 2 E TH 3 E TH 4 E TH 5 E TH 6 E TH 7 E TH 8 E TH 9 E TH 10 E TH 11 E TH 12 RES E T CONS OLE
api Load WEB WEB
Radius SQL
Balancer Portal Admin

Internet
 VLAN DISTRIBUTION
Access Network

Bridge Bridge Bridge Bridge Bridge Bridge Bridge Bridge

Portal Switch VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN
101 102 103 104 105 106 107 108

Portal Router Portal Router

Bridge VLAN 101 VLAN 108 Bridge Internet

Internet VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105

Portal Router Portal Router

Internet Bridge VLAN 101 VLAN 108 Bridge Internet

VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105
 VLAN DISTRIBUTION
Access Network

all VLAN-Interfaces Bridge Horizon = 10

Bridge Bridge Bridge Bridge Bridge Bridge Bridge Bridge

Portal Switch VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN
101 102 103 104 105 106 107 108

all VLAN-Interfaces Bridge Horizon = 20

Portal Router Portal Router

Bridge VLAN 101 VLAN 108 Bridge Internet

Internet VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105

Portal Router Portal Router

Internet Bridge VLAN 101 VLAN 108 Bridge Internet

VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105
 VLAN DISTRIBUTION
Access Network

all VLAN-Interfaces Bridge Horizon = 10

Bridge Bridge Bridge Bridge Bridge Bridge Bridge Bridge

Portal Switch VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN
101 102 103 104 105 106 107 108

all VLAN-Interfaces Bridge Horizon = 20

Portal Router Portal Router
Bridge Horizon = 10

Bridge Horizon = 10
all VLAN-Interfaces

all VLAN-Interfaces
Bridge VLAN 101 VLAN 108 Bridge Internet
Internet VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105

Portal Router Portal Router

Bridge Horizon = 10
Bridge Horizon = 10

all VLAN-Interfaces
all VLAN-Interfaces

Internet Bridge VLAN 101 VLAN 108 Bridge Internet

VLAN 102 VLAN 107
HotSpot VLAN 103 VLAN 106 HotSpot
VLAN 104 VLAN 105
A3MANAGER DASHBOARD
A3MANAGER DASHBOARD
A3MANAGER DASHBOARD
A3MANAGER DASHBOARD
A3MANAGER DASHBOARD
A3MANAGER
Some features
• Individual characteristics for each location / VLAN
• Bandwith, Volume, Time Credit, …
• Advertisement
• Voucher
• Self-Service
• MAC-Authentication
• PayPal integration
• Statistics / Reports
• and many more…
MULTITENANT LOGIN PAGE
VLAN = Location/Customer
x
MIKROTIK POWERED NETWORK
MikroTik Equipment in our WiFi Network
• CCR1036-8G-2S+ 8 x as Portal Switch
• CCR1036-12G-4S 18 x as Portal Router
• CCR1036-12G-4S 12 x as Router, NAT Gateway, L2TP Server,…
• CCR1072-1G-8S+ 10 x as MPLS/VPLS Backbone Router
• CCR1016-12S-1S+ 16 x as MPLS/VPLS Fiber Access Router
• CCR1009-7G-1C-1S+ 10 x as L2TP Bridge (up to 1GBit/s Access)
• hex 50 x as L2TP Bridge (up to 100Mbit/s Access)
• wAP 300 x as Access-Point (Internet Access, L2TP)
• CRS212-1G-10S-1S+IN 16 x as Fiber Access Switch
THE RESULT
20.5 Million Tickets (Login) in 2017
THANK YOU
Ivan Andric