Media for Industry Standard Security and guest wifi access best practice

Industry Standard Security and guest wifi access best practice

Hello All,

I am looking for a solution to provide wifi access in a multi dwelling residential unit such that it provides as many of the following points as possible:

1 When a user connects for the first time they see a page displaying a usage policy and a login screen. Guest login is allowed, but registered login is optional and recommended, passwords and logins administered through the building management.

2 The Network Access Controller to provide the ability to throttle down guest connections to around 256k down, 128k up, while leaving registered users' connections a great deal more robust.

3 Connection is simple for the end user and requires no VPN client software.

4 The connection is nonetheless secured in a responsible fashion

5 The equipment may have high initial cost, but must run relatively trouble free (no on-site IT support needed). Preferibly it will involve a rack mounted gateway appliance rather than any sort of server and will be administrated remotely.

6 Wireless subnet roaming would be really nice as well.

I am aware of the basic access controllers such as those provided by BlueSocket. Basically what I want is a BlueSocket controller that can secure the wireless connection via SSL VPN so that the wireless portion is encrypted despite transmission over an open authentication access point system. However, I do not want to subject the user to multiple login pages (Authentication and then VPN) which would be necessary it I use two separate devices.

Inability to run my access points both WPA-PSK encrypted and open means that I can't reasonably leave guest access "at your own risk" while securing tennant acces, plus tennants will not be happy switching a highly random WPA key every week, but I also don't feel secure leaving the same key in place for a year allowing it to be compromised in that way.

Any major architectural restructuring is also right out. I can't see implementing 802.1X as the complexity in supporting tennants would require an onsite technician. Also transparent domain login authentication would be a hassle as many of the tennants would be using business laptops and no alteration to the setup they use at work would be acceptable.

So far I feel that I am asking too much and that even if a device is possible to do what I am looking for, it doesn't yet exist. Please advise. I have spent many hours looking through product brochures and searching the web and I have found nothing to fit the bill.

Just to clarify, I am asking for product recommendations. If you are connected to a company which provides a solution, then a sales pitch is invited.

Thanks in advance,

Tim