RE: Question about hotel security design

["Dante Mercurio" <Dante () webcti com>]

More likely they have a device like Cisco BBSM to manage the service.
See here:
http://www.cisco.com/en/US/products/sw/netmgtsw/ps533/ps5463/index.html

The device just sits between the wireless and the Internet and nothing
is available until you authenticate.

M. Dante Mercurio, CISSP, CWNA, Security+


-----Original Message-----
From: Alexander Klimov [mailto:alserkli () inbox ru] 
Sent: Thursday, April 07, 2005 8:03 AM
To: ricci
Cc: security-basics () securityfocus com
Subject: Re: Question about hotel security design


On Wed, 6 Apr 2005, ricci wrote:
>       Can someone tell me how to design and configure the hotel room 
> security control? As what I have experience before in a hotel, I will 
> only be permitted to access to the Internet after I pay using the 
> credit card. But I sometimes found that I have been assigned with IP 
> addresses but cannot access to any port. When I access to the web 
> port, it will bring me to the payment page before I can access to the 
> web.
>
>       Can someone tell me how that is configured? What mechanism is
used 
> and what device is used?

Probably there is a "transparent proxy" (google for it) which either
forward your requests to internet or shows hotel's web site there you
can pay. After this the web site reports to the proxy that from now on
your requests should be forwarded to internet.

Alternatively, there is just a dynamic firewall/nat (without proxy)

-- 

Regards,
ASK

------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security 
professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals.  Norwich University is fulfilling this demand with its MS in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------