Hotspot Gateway Captive Portal

Ransnet HSG Hotspot Gateway

Help Venues to Get the Most Out of Wi-Fi At Lower Costs

RansNet HotSpot Gateway (HSG) is designed for large Wi-Fi venues to offer guest Wi-Fi access for Hotels, malls, hospitals, airports, tourism places, F&B, retail chains, or enterprises offering Wi-Fi services to visitors.

HSG Gateway Features:
Mbox HSG Gateway

RansNet’s HotSpot Gateway Captive Portal product is a secure and reliable solution for managing user authentication and internet access for public Wi-Fi hotspots. It offers features such as social media login, customizable login pages, and bandwidth control. The product also supports PMS integration for hotels and resorts. Overall, the HotSpot Gateway Captive Portal provides a comprehensive solution for businesses and organizations seeking to offer internet access to their customers or guests.

mbox HSG Product Datasheet



Mfusion Cloud NMS

  • Automated SD-WAN Provisioning
  • Policy-based SD-WAN configuration
  • Monitor 3rd-party devices
  • Template-based Monitoring
  • Automated Alerting and Reporting
  • Customizable Dashboard
  • OpenAPI for 3rd-party platform integration
  • On-premise (hardware/VM) or cloud (VM) deployment

mfusion Product Datasheet

Wi-Fi Monetisation

Today, good and free Wi-Fi is a default facility that venue owners are expected to provide to their end customers, and Wi-Fi is often perceived as a cost center by the business owners. Now with RansNet HotSpot Gateway (HSG), Wi-Fi is no longer a cost center, it is an investment. 

HSG provides many opportunities for venue owners to monetize free Wi-Fi throughout user Wi-Fi journey. Having all monetization capabilities built-in as standard features, venues can easily enable the desired options with intuitive web interface, make unlimited promotional updates and run unlimited campaigns without any hidden costs.


Captive Portal for Any Wi-Fi Networks

RansNet HotSpot Gateway (HSG) can easily overlay any existing or new Wi-Fi/WLAN infrastructure, without significant network changes, at minimum operational impact. All brands of WLAN products are supported, as long as network is properly provisioned to route user traffic to HSG.

Immediately HSG transforms any WLAN network to deliver intelligent guest Wi-Fi services, and venue owners can start to customize branding portals and preferred user sign-in options without the need of any html coding.

Wi-Fi Monetisation Opportunities Throughout User Journey

Today, good and free Wi-Fi is a default facility that venue owners are expected to provide to their end customers, and Wi-Fi is often perceived as a cost center by the business owners. Now with RansNet HotSpot Gateway (HSG), Wi-Fi is no longer a cost center, it is an investment. 

HSG provides many opportunities for venue owners to monetize free Wi-Fi throughout user Wi-Fi journey. Having all monetization capabilities built-in as standard features, venues can easily enable the desired options with intuitive web interface, make unlimited promotional updates and run unlimited campaigns without any hidden costs.

Earn $$ from premium Wi-Fi

Can combine different sign-in options to offer free WI-Fi access and sell premium Wi-Fi for faster speed. Supported payment gateways include PayPal, iPay88, 2checkout, Wirecard.

Welcome customers with more offers

Redirect users to external advertising website or survey pages upon sign in. Gateway can schedule different redirect URL at different times for target user groups or portals.

Online & offline Campaign

Engage users through collected user contacts (via social-media login or self-registration). Schedule email/SMS campaigns to target groups. Customize and create campaign contents, with built-in CMS templates.

Promote and up-sell your offers

Prior to the user accessing the sign-in page, an optional advertisement may appear which can be configured to require the user to view the advertisement for a specified duration before being able to close it and proceed to the sign-in page. Administrators have the ability to upload image and video content and schedule advertisements to be displayed at target locations during preferred times. This feature enables venue owners to utilize their free Wi-Fi infrastructure as an advertising space for external agencies and advertisers, and generate revenue through profit-sharing, thereby transforming Wi-Fi from a cost center into a revenue-generating platform.

Know your customer better

Once a user's device is connected to a WIFI SSID, a survey form will appear before the user can proceed. Different survey forms can be applied to various portals. The survey questions are completely customizable through a web CMS.

Extensive User Login Methods (Authentication)

RansNet HotSpot Gateway (HSG) has builtin RADIUS/AAA server to authenticate user Internet access, either through captive portal or dot1x/EAP or MAC authentication. It comes with intuitive web interface for administrators to manage user accounts, create vouchers, defines access profiles and generate billing and analytics reporting.

HSG also integrates with many 3rd-party systems for flexible user sign-in options, including all common social-media providers, SMS providers, payment gateway providers, PMS vendors, etc. At the same time, HSG also has its own mboxapi which allows any 3rd-party system to integrate with HSG for user account management, apps sign-in and data retrieval for external analytics etc.

Multiple Authentications

Supports login via captive portal or seamless authentication via EAP. Supports MAC auto Login (eg. machine authentication)


Local built-in RADIUS/AAA server with intuitive web GUI to manage user accounts, pin-code, vouchers and create access profiles and run analytics and reports etc.

Seamless re-login

Supports auto re-login for authenticated users, for a configurable period, eg. hotel guest only needs to login once throughout their stay

QR Code login

Supports QR code auto login. User scan QR code to get instant access

Mobile App Login

Supports mobile app login using WISPr protocol. Free SDK is provided to integrate into customer’s apps, to provide seamless user experience

Direct Login

Supports direct login, with additional option to capture user info, eg. user key in email and click to login

Social Media Login

Supports social media login. Can auto pull and store user profiles into local database for further data analytics and user campaigns. Supported social media: facebook, twitter, linkedin, instagram, weibo, google+, line, wechat

SMS Login

SMS self-registration (or SMS OTP login) support many SMS providers, eg. BulkSMS, InfoBip, Nexmo, SendQuick, MD Media, TechStudio, Asia Mediatel, Send Quick (Telarax), Generic SMTP based gateways

Self-registration via email

Email self-registration (or email OTP login) can verify email authenticity. Can allow customers to set their own SMTP server for sending email OTP.

Customisable profile capture

Email/SMS self-registration can capture and store below user profile info (configurable options via CMS), Firstname, Lastname, Email, Mobile, Gender, Address, Country, Zip Code, Race, Religion, Nationality, Profession, Company Name, Interests, Marital Status, Birthdate, Passport/NRIC

Voucher Management

Have local voucher management system for easy generating vouchers. Vouchers can be printed by integrated POS printer (eg. EPSON, STAR), or sent via SMS.

API for any authentication

Works with external RADIUS server. Integrates with PMS (Opera) and any CRM via their respective API. Allows any 3rd-party system to integrate with HSG via mboxapi.

Granular User Access Controls (Authorisation)

The HSG builtin AAA server comes with fully featured RADIUS authorization capabilities, and enforces user access control by speed, time, data volume etc. Business owners can easy define multi-tier privileges to offer differentiated user experience, or sell premium Wi-Fi with different billing plans, or whitelist special network devices or destinations etc.

In addition, RansNet patented adaptive bandwidth control feature allows venue owners to fully maximize their back-haul investment to provide best possible user experience.

Allow multi-tier privileges

Supports multi-tier privileges and access plans, based speed & time. Can set authorisation per account or per profile (per user group)

Bandwidth control

Limits speed (QoS) per network, per VLAN, per user, per application, per IP/host

Adaptive Bandwidth Control

Can adaptively re-allocate per user speed, varying to link usage, to maximise user experience and efficiently use available link capacity.

Session Management

Manages access time per account, eg. idle timeout, session timeout, total access time, access time per day, per week, per month

Time Quota Management

Sets absolute expiry date/time per account, eg. valid till dd/mm/yy

Adaptive Time Management

Sets adaptive expiry date/time per account, eg. expiry in xx day/hours upon first use

Data Quota Management

Manages data usage (quota management), eg. total volume (upload/download), volume per day, per week, per month

Limit concurrent usage

Limits simultaneous logins per account

Disconnect Abuse User

Kick-out/disconnect/disable users through intuitive web console

Prevent account sharing

Can lock each account to one or multiple sets of authorized MAC. Auto detects and sets MAC upon first login, important for selling premium Wi-Fi

Delay reconnection

Delays reconnection (session wait) for fair free access sharing. Eg, free users are given 30 minutes free access per session, and must wait for 30 minutes before reconnect for next free session.

Multiple bypass options

Supports multiple whitelisting options., eg. by destination IP/network, URLs, domains; by source IP/network; by source MAC.

Analytics & Compliance Logging & Reporting (Accounting)

Detail Access Logging and Reporting for Analytics and Compliance (Accounting)

Regulations, such as the Sarbanes-Oxley Act, PCI DSS, HIPAA, and many others, are requiring organizations to implement comprehensive security measures, which often include collecting and analyzing logs from many different sources.

RansNet HSG tracks all user connection sessions, login attempts and access logs, with detail timestamps and packet header information (source, destination, protocols, port no, etc). The logs are stored in local storage for immediate analysis and investigation, and can be archived out to external FTP servers for long-term retention.

These features provide venue owners full visibility on the traffic usage and comply to security regulations and audits.

Record login sessions

Captures per hotspot session details, minimum including: Username, Device MAC, IP Address, Start Time, Stop Time, Total Time, Total Uploads (MB), Total Downloads (MB), Gateway IP (NAS IP), Allocated Speed, Device Type

Log access details

Captures user access logs, through firewall logs, web proxy logs or netflow, minimum including: timestamps, source IP, destination IP, destination domain (DNS query), protocol, source/destination ports

Analyze & Report

Analyzes logs against pre-fined rules and alarm for anomalies. Schedule reports on daily, weekly or monthly basis, or any selected time/date range. Analytics reports include: Total logins, Unique users, Repeat users, Average dwell time, device types, demographics, locations, Top users by time usage, bandwidth usage, data volume usage, or login methods.

Real-time live logs

Displays live access logs through web GUI at lightning speed. Many filtering options for admin to troubleshoot any incidents.

Search historical logs

Historical logs are stored in local storage, with intuitive GUI to search and discovery historical activities. Important for security forensic investigations.

Archive for log retention

Able to auto archive logs to local storage and external FTP server for long-term log retention and audit compliance requirements.

Hardware Specifications

ProcessorMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreMulti-coreDual CPUDual CPU
Memory (RAM)4GB4GB4GB4GB16GB32GB32GB64GB
Gigabit Interface4 x GE4 x GE6 x GE6 x GE8 x GE8 x GE8 x GE8 x GE
10G Interface (fiber or copper)OptionalOptionalOptionalOptionalOptionalOptional
Dimensions (mm) (WxHxD)231.9 x 44 x 152231.9 x 44 x 152231 x 44 x 197231 x 44 x 197430 x 44 x 450430 x 44 x 450562 x 88 x 430562 x 88 x 430
Power Consumption< 18W< 18W< 60W< 60W< 230W< 230W< 420W< 420W
Redundant Power SupplyOptionalOptionalOptionalOptional
Design Form FactorDesktopDesktopDesktopDesktop1U rack1U rack2U rack2U rack
Operating Temperature0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C0°C to 40°C
Total HotSpot Instances (VLANs)20020030030050050020002000
– Max Throughput per HotSpot Instance200Mbps200Mbps1Gbps1Gbps1Gbps1Gbps1Gbps1Gbps
– Max Concurrent Devices per HotSpot
Total Throughput (w/ hotspot)500Mbps500Mbps2Gbps2Gbps2Gbps2Gbps5Gbps5Gbps
Total Current Devices (w/ hotspot)2004008001000200050001500025000
Total Throughput (w/o hotspot)1.5Gbps1.5Gbps2Gbps2Gbps3Gbps3Gbps5Gbps5Gbps
Total Concurrent Devices (w/o
Multi-WAN Link Balancing
(WAN Bonding)
Up to 3 WAN
Up to 3 WAN
Up to 7 WAN
Up to 7 WAN
Up to 15 WAN
Up to 15 WAN
Up to 28 WAN
Up to 28 WAN
Wireless AP management (MACC)
mfusion monitoring & management
Online Firmware Patching and
Stateful Firewall & DHCP Server
Static, Dynamic Routing (OSPF/
IPv4 and IPv6 Capable
VLAN, Trunking (802.1q), Bonding
HA w/ Stateful Failover
Login page templates and CMS
Bandwidth Control (Static/Dynamic)
Time/Data/Session/Device Control
Whitelist by URL/Domain/IP/MAC
Local Authentication (RADIUS)
SMS & Email Signup, Social Media,
PMS/API/payment gateway
Landing page and In-session ads
User log and data Analytics

Success Stories

Retail Chains

Find out how RansNet SD-WAN/SD-Branch solutions have helped one of the largest Singapore luxury retail brands to succeed in the Covid-19 pandemic.

Cafe | Restaurant

Find out how this multi branch F&B is able to promote its branding, engage with its customers more effectively, and increase sales revenue through added offers, while maximizing user experiences using RansNet HotSpot Solution.


Find out how these dorm operators are able to profit from the Wi-Fi facility, win more happy customers and earn revenue through paid Wi-Fi, while maximising user experiences using RansNet HotSpot Solution