Guest Wi-Fi is an important amenity for hotels, with many guests reviewing Wi-Fi quality before booking. Providing username and password allows guests to access a hotel's Wi-Fi signal. RADIUS is a protocol that handles authentication, authorization, and accounting for network access, allowing devices to securely connect to access points using credentials. Wi-Fi management through RADIUS allows for bandwidth allocation, enhanced security through individual credentials, and more efficient infrastructure and reduced costs.

1. WIFI HOTSPOT
PASSWORD
Maryam Namira

2. Public WiFi
Today, commercial areas have
free WiFi so it is unlikely
people will pay for something
they can get for free
Guest Wi-Fi is one of the most
important amenities for the
hospitality market. According
to TripAdvisor, a majority of the
hotel guests review the rating
for the WiFi service before
booking the property online.
People will get username and
password to benefit from you
WiFi signal

3. What is FreeRadius?
Once a device wanted to connect
to an access point, NAS will do
control to ensure proper security
This proper security is described
as AAA (Authentication,
Authorization, and Accounting)
• Authentication, step to gain access to a
network and service
• Authorization, control the usage of the
resources
• Accounting, measure the usage of
resources and connected users
WPA2
WPA2
Figure 1. WiFi access point with WPA2
enterprise security
RADIUS is a client/server protocol
(RF2865) which the communication
between Network Access Server (NAS)
and RADIUS server based User Datagram
Protocol (UDP) which is connectionless.
i

4. Why we need WiFi management?
It would be easier to manage WiFi bandwidth allocation in a company or in
a hotel i.e. different allocation for employee and guest
Serves higher level of security (AAA) because everyone got their own
username and password to obtain WiFi connection
Bandwidth allocation efficiency and reduced cost
Infrastructure of FreeRadius
1
2
3

5. How RADIUS works?
*Note: RADIUS server is on a UNIX/Windows NT machine. RADIUS client is a NAS
Modem
1
2
3
RADIUS
Client
4
5
RADIUS
Server
User initiates PPP authentication
to Network Access Server (NAS)
1
NAS prompts for username and
password
2
Radius client acts upon services
and services parameters bundled
with Accept or Reject
6
User replies3
RADIUS client sends username
and password to the RADIUS
server
4
RADIUS server responds with
Accept, Reject, or Challenge
5

6. How RADIUS works?
RADIUS server support various methods
to authenticate user, those are PPP, PAP or
CHAP, Unix login, etc
Packet type – Access Request
Username, password
Access-Accept/Access-Reject
User service, framed protocol
Access Challenge (optional)
Reply messageAccess
Server
Radius
Server
Figure 2. Authentication and Authorization
illustration.
When a user do a login, it sends a
query (Access-Request) from the NAS
to the RADIUS server
1
2
Radius protocol (RFC 2865) then assign
port number for RADIUS. Query is
presented in two modes, character
mode and packet mode
3
When RADIUS server receives Access-
Request, it searches a database for
username listed whether username
exist or not. If the username exist and
password is correct it will send Access-
Accept message
4 When RADIUS server receives Access-
Accept, it respond incl. service type,
protocol type, IP address, and access
list to apply
5 After user obtain access to the
internet, amount of resources such
as time, packets, bytes, etc then ISPs
will use RADIUS access control and
accounting software to meet special
security and billing. This also allow
data to be sent at the start until end
of session.

7. Important point when implementing
Where RADIUS is utilized?
Security
• Firewall
• Role-based
access control
• Profiling
• IDS/IPS
Capacity planning
Using WiFi management, it is
very important to plan what
kind of applications are
being used by guest or staff
in the organization.
Access point placement
Specify the best place
to place the access
point based on where
guest or staff spend
their time with the
connection.
Firewall with VPN
service
Access point with
WPA2 encryption
When MS connect to Telco
infrastructure using, equipment use
radius to gain internet access

8. THANK YOU