Hotspot 2.0 profiles

Using this table you manage the profile lists for the Hotspot 2.0. Hotspot 2.0 profiles offer you the ability to group certain ANQP elements (from the Hotspot 2.0 specification) and to assign them to mutually independent logical WLAN interfaces in the table Interfaces. These include, for example, the operator-friendly name, the connection capabilities, operating class and WAN metrics. Some of the elements are located in other profile lists.

Name

Assign a name for the Hotspot 2.0 profile here. This name will appear later in the interfaces table in the selection for the Hotspot 2.0 profile.

Hotspot 2.0 version

Set the Hotspot-2.0 release supported by this profile.

Note: A client must support this release in order to connect.

Operator names list

Select the profile of a hotspot operator from the list. You specify profiles for hotspot operators in the configuration menu by clicking the Operator list.

Connection capabilities

Select the connection capabilities for each service. Before joining a network, stations use the information stored in this list to determine whether your hotspot even allows the required services (e.g., Internet access, SSH, VPN). For this reason, the fewest possible entries should be entered with the status "unknown". Possible status values for each of these services are "closed" (-C), "open" (-O) or "unknown" (-U):

• ICMP: Specify whether to allow the exchange of information and error messages via ICMP.
• TCP-FTP: Specify whether to allow file transfers via FTP.
• TCP-SSH: Specify whether to allow encrypted connections via SSH.
• TCP-HTTP: Specify whether to allow Internet connections via HTTP/HTTPS.
• TCP-TLS: Specify whether to allow encrypted connections via TLS.
• TCP-PPTP: Specify whether to allow the tunneling of VPN connections via PPTP.
• TCP-VOIP: Specify whether to allow Internet telephony via VoIP (TCP).
• UDP-IPSEC-500: Specify whether to allow IPsec via UDP and port 500.
• UDP-VOIP: Specify whether to allow Internet telephony via VoIP (UDP).
• UDP-IPSEC-4500: Specify whether to allow IPsec via UDP and port 4500.
• ESP: Specify whether to allow ESP (Encapsulating Security Payload) for IPsec.

If you do not know if a service is available and its ports are open or closed on your network, or you consciously do not want to make any entry for the status, select a -U setting.

Important: Using this dialog, you do not define permissions! The stations only use the entries to determine whether to join a network via your device. You configure specific access permissions for your network with other device functions, such as the firewall/QoS.

Operating class

Enter the code for the global operating class of the access point. Using the operating class, you inform a station about the frequency bands and channels that your access point is available on. Example:

• 81: Operation at 2.4 GHz with channels 1-13
• 116: Operation at 40 MHz with channels 36 and 44

Please refer to the IEEE standard 802.11‑ 2012, Appendix E, Table E‑4, for the operating class that corresponds to your device: Global operating classes, available at standards.ieee.org.

Domain ID

The domain ID indicates which ANQP server is used. All access points and SSIDs with the same number/domain ID (16‑ value) use the same ANQP server. A client sending an ANQP request to access points / SSIDs with the same domain ID would always receive the same response. To get different responses, the client would have to look for different domain IDs.

OSU SSID

Name of the SSID that provides access to the OSU server.

OSU providers

List of OSU provider names in OSU providers that are supported in the profile.