Tài liệu STUDYMetroFi Deploys Wi-Fi Networks UsingADC''''s SG-1 Service Gateway pptx

CASE STUDY
MetroFi Deploys Wi-Fi Networks Using
ADC's SG-1 Service Gateway
Background
MetroFi is a leader in designing, building and operating Wi-Fi networks.
The company partners with municipalities, ISPs and other companies
to deliver secure, reliable, high-speed wireless services to entire
communities. MetroFi delivers free Internet access services supported by
banner advertising from local and national companies.
Critical to MetroFi’s business model is revenue generated by
advertisements. “The ad banner servers that we use are great at
counting the total number of browser pages that they’ve served ads on,
but they don’t provide the context of whether that’s 1,000 ads to one
user or one ad to 1,000 users,” said John Reilly, Network Engineer at
MetroFi. “It makes a big difference to advertisers that they know how
many hits they receive by the actual user. This is where the ADC Service
Gateway (SG-1) came in to fill this requirement.
The Situation
In late 2005, MetroFi began evaluating service gateways that could
provide this type of granular information while also improving network
security, user experiences and the revenue potential of its public Wi-Fi
networks in the California cities of Cupertino, Santa Clara and Sunnyvale.
FASTER
FASTER
FASTER
CASE STUDY
The privately held company needed a product that could support thousands of simultaneous user
sessions, enhance accounting for their advertisers and handle policy management on a per-user basis.
One key requirement was scalability.
“We needed a large, industrial-strength, carrier-class box,” Reilly said. “Tens of thousands of people
have signed up for our service, so we needed something that could handle the number of simultaneous

sessions, as well as the traffic that those users generate.”
Although MetroFi’s networks provide free Internet access, another key requirement was the ability to
redirect users to a log-in Web page for registration. “We wanted to capture their e-mail address and
have a check box where they could agree to terms and conditions of our service,” Reilly said.
Finally, MetroFi wanted the service gateway to be able to work with its RADIUS server in order to
provision services and collect “real-time” information about usage.
The ability to know whether a particular session was from a new or returning user was another
important criteria in the selection of a gateway.
The Solution
MetroFi evaluated other service gateways and tested “live” another competitor’s product before
selecting ADC’s SG-1 Service Gateway. “Although the functionality appeared to be there in the other
vendor’s products, the scalability and reliability were not,” said Reilly.
The ADC SG-1 Service Gateway’s features include support for:
• Up to 64,000 concurrent users in a single 16-slot system.
• Free and paid Internet access, including a variety of billing models, such as time-based, volume-based,
prepaid and subscription. For example, the SG-1’s Smart Pre-Pay Service automatically redirects users
to a Web page where they can purchase a specific block of time, such as one hour. For subscription-
based Internet services, the SG-1 can check the username, or IP or MAC address to determine
whether the user has already subscribed to MetroFi’s network.
• Bandwidth control, including the ability to control by application, each user’s bandwidth in a
hierarchical manner.
• Support for any network (e.g., DSL, cable, wireless, and dial-up) or any Web technology, including
application service providers (ASPs), HTML and Java servers.
• Application awareness, which enables different services to different applications on a per user basis.
One example is Voice over IP (VoIP), which can be configured to receive traffic based on seven
different priorities.
• “Walled gardens,” where users are automatically redirected to a particular Web site, such as the
service provider’s log-in page. This feature includes the ability to send users directly to the Web site
they requested before being redirected to the log-in page. This feature is also useful for parental
controls because the SG-1 can restrict, by user, Web sites that are permitted or blocked entirely.

• Centralized enforcement of user policies and security, including spam throttling and browser hijacking
protection, on any individual user session.
• Multi-vendor environments, including interoperability with other vendors’ Wi-Fi access points and
RADIUS servers. The SG-1 also acts a mediation device between any third party and commercial Web
portals.
• A variety of installations, including central office, distributed and customer premises.
• Dynamic service provisioning, where users can change their profile and service “on the fly.” This
feature enables the delivery of differentiated services tailored to individual subscribers or user groups.
These features address the needs of a wide variety of public Internet access business models. For
example, the ADC SG-1 Service Gateway could be used in a municipal-owned Wi-Fi network that’s
partitioned, providing Internet access to citizens, as well as intranet and Internet access to city
employees and departments.
CASE STUDY
The Benefits
In MetroFi’s network, the ADC SG-1 Service Gateway sits between the 802.11x access points and the
RADIUS server. “It’s the front door to our network,” Reilly explained.
The SG-1 tracks the user’s MAC address immediately when they come onto the network. “We present
the sign-on screen the very first time that we get a log-on from a particular MAC address,” he said. “If
that MAC address is already in the SG-1 database, rather than present that sign-on screen again, the
SG-1 will simply redirect the user to a second page, which is a kind of start page that says, ‘Thank you
for using MetroFi.’ They click ‘go’, and we send them to whatever page they were trying to go when
they initially came on the network.”
As the network’s front door, the SG-1 provides the first level of network security by thwarting denial-of-
service (DoS) attacks. “There’s also the ability to specify access lists to block traffic intended for certain
destinations in our network that a user should have no business trying to get to,” said Reilly.
The SG-1 works closely with MetroFi’s RADIUS server by sending start and stop messages each time
a user logs in or out. “That’s the basis for all of our usage statistics and reporting,” he noted. That
information is critical for MetroFi’s business model, where revenue is provided by advertisers rather than
through customer subscriptions.
The Partnership Continues

MetroFi deployed the SG-1 in late March 2006 to serve its initial markets of Cupertino, Santa Clara and
Sunnyvale. In all three, MetroFi delivers free Internet access supported by banner advertising from local
and national advertisers.
The ADC SG-1 Service Gateway provides MetroFi with information about usage and advertising in its
existing markets that could be helpful when expanding into other areas or when approaching cities and
advertisers about public networks. That information, along with the SG-1’s other features, could enable
new business models for MetroFi.
“We’re using only a portion of the many value-add services the ADC Service Gateway offers,” said
Reilly. “In six months, I imagine there are quite a few additional services that we’ll introduce as we get
into additional cities.”
CASE STUDY
Web Site: www.adc.com
From North America, Call Toll Free: 1-800-366-3891 • Outside of North America: +1-952-938-8080
Fax: +1-952-917-3237 • For a listing of ADC’s global sales office locations, please refer to our Web site.
ADC Telecommunications, Inc., P.O. Box 1101, Minneapolis, Minnesota USA 55440-1101
Specifications published here are current as of the date of publication of this document. Because we are continuously
improving our products, ADC reserves the right to change specifications without prior notice. At any time, you may
verify product specifications by contacting our headquarters office in Minneapolis. ADC Telecommunications, Inc.
views its patent portfolio as an important corporate asset and vigorously enforces its patents. Products or features
contained herein may be covered by one or more U.S. or foreign patents. An Equal Opportunity Employer
102932AE 5/06 Original © 2006 ADC Telecommunications, Inc. All Rights Reserved