0748 111 304
News & Updates

How Hotspot Management Software Controls Public WiFi Access

Hotspot management software is the brain behind public WiFi networks, controlling who gets access, how long they stay online, what bandwidth they get, and what data is collected. From cafes to airports, this software automates authentication, session management, and policy enforcement at scale. What Is Hotspot Management Software? Hotspot management software (also called captive portal […]

How Hotspot Management Software Controls Public WiFi Access

    Hotspot management software is the brain behind public WiFi networks, controlling who gets access, how long they stay online, what bandwidth they get, and what data is collected. From cafes to airports, this software automates authentication, session management, and policy enforcement at scale.

    What Is Hotspot Management Software?

    Hotspot management software (also called captive portal software or WiFi management platform) is a cloud-based or on-premise system that controls access to public Wi-Fi networks through authentication, session management, and policy enforcement.

    It handles:

    • User authentication (email, social login, vouchers, passwords)

    • Session management (time limits, bandwidth caps, auto-disconnect)

    • Policy enforcement (ACL rules, content filtering, VLAN segmentation)

    • Analytics (user count, engagement, geolocation)

    • Marketing (custom splash pages, social integration, CRM export)

    Core Control Mechanisms

    1. Authentication Control

    Hotspot software decides who can access the network by requiring authentication:

    Method How Software Controls It
    Email Software validates email → Creates session → Stores in database
    Social (Facebook/Google) Software redirects to OAuth → Exchanges token for user data → Creates session
    Password/Voucher Software checks password against database → Validates voucher → Creates session
    None (Open) Software skips authentication → Grants immediate access (no data collected)

    Software Logic:

    python
    def authenticate_user(method, credentials):
    if method == "email":
    email = credentials["email"]
    if email valid:
    create_session(email)
    return True
    elif method == "facebook":
    token = oauth_exchange(credentials["facebook_token"])
    user_data = facebook_api(token)
    create_session(user_data.email)
    return True
    elif method == "voucher":
    voucher = credentials["code"]
    if voucher valid and used_count < max_uses:
    used_count += 1
    create_session(voucher)
    return True
    return False

    2. Session Management Control

    Once authenticated, software manages the user session:

    Control Implementation
    Time limit Session starts with expiration time (NOW + 1 hour)
    Auto-disconnect Timer checks every 30 seconds → If expired, remove ACL entry
    Daily quota Track total bandwidth used → Block if over limit (e.g., 500 MB/day)
    Max connections Limit concurrent sessions per user (e.g., 2 devices per account)

    Session Timer Logic:

    python
    def check_session_expiration():
    while True:
    time.sleep(30) # Check every 30 seconds
    for session in active_sessions:
    if session.expiration < NOW:
    remove_acl_entry(session.mac_address)
    mark_session_expired(session.id)

    3. Bandwidth Control

    Software limits speed per user to prevent network abuse:

    Control Type Implementation
    Per-user limit 5 Mbps max upload/download (set in firewall rule)
    Per-session limit 10 Mbps for first hour, 2 Mbps after
    Total pool limit Network has 100 Mbps total → Divided among 50 users (2 Mbps each)

    Firewall Rule Example:

    text
    iptables -A FORWARD -m mac --mac-source 00:1A:2B:3C:4D:5E -m limit --limit 5mbit -j ACCEPT

    4. Access Control (ACL) Rules

    Software updates firewall Access Control Lists to grant or deny internet access:

    text
    Rule 1: ALL → Internet = BLOCK (default deny for unauthenticated)
    Rule 2: HTTP → Captive Portal = ALLOW (port 80, for login)
    Rule 3: HTTPS → Any = ALLOW (port 443, authenticated users only)
    Rule 4: DNS → Any = ALLOW (port 53)
    Rule 5: DHCP → Any = ALLOW (port 67/68)
    Rule 6: [Authenticated User MAC] → Internet = ALLOW (added after auth)

    After Authentication:

    python
    if authenticated == True:
    add_acl_entry(user_mac_address, action="ALLOW")

    After Expiration:

    python
    if session_expired == True:
    remove_acl_entry(user_mac_address)

    5. VLAN Segmentation Control

    Software assigns users to VLANs to separate guest traffic from internal networks:

    VLAN Purpose Access
    VLAN 1 Administrative Full network access
    VLAN 10 Guest WiFi Internet only, no internal servers
    VLAN 20 Employee Internal + Internet access

    Software Logic:

    python
    def assign_vlan(user_type):
    if user_type == "guest":
    return VLAN_10
    elif user_type == "employee":
    return VLAN_20

    6. Content Filtering Control

    Software blocks access to specific websites or categories:

    Filter Type Example
    Blacklist Block gambling.com, pornsite.com
    Category Block all gambling, adult content, torrent sites
    Time-based Block social media during work hours (9 AM–5 PM)

    Implementation:

    text
    iptables -A FORWARD -d gambling.com -j DROP
    iptables -A FORWARD -d pornsite.com -j DROP

    1. Powerlynx

    Best For: ISPs, MSPs, multi-location venues

    Key Controls:

    • Branded captive portals with custom splash pages

    • Payment gateway integration (credit cards, mobile money, vouchers)

    • Multi-location control from centralized dashboard

    • Bandwidth limits (5 Mbps per user default)

    • Session time policies (1 hour, 4 hours, 24 hours)

    • Real-time analytics (user count, geolocation, engagement)

    Control Features:

    text
    User Limits: 5 Mbps per user, 1-hour sessions
    Payment: Credit cards, M-Pesa, vouchers
    Analytics: Real-time dashboard with 10+ metrics
    Multi-location: Manage 100+ venues from one login

    2. Antamedia Hotspot

    Best For: Enterprise venues (10,000+ users)

    Key Controls:

    • Guest WiFi access management with captive portals

    • Customizable splash pages and branding

    • Voucher generation (time-based, duration-based, unlimited)

    • Payment processing (credit cards, PayPal, mobile payments)

    • Bandwidth limits per user, group, or session

    • VLAN support for network segmentation

    • 24/7 technical support

    Control Features:

    text
    Enterprise Capacity: 10,000+ concurrent users
    Voucher Flexibility: Unlimited types (1 hour, 24 hours, unlimited)
    Bandwidth Control: Per-user, per-group, per-session
    VLAN Segmentation: Guest vs. Internal traffic separation

    3. XceedNet

    Best For: African ISPs and SMEs

    Key Controls:

    • Cloud-based Wi-Fi hotspot management

    • Branded captive portals with customizable splash pages

    • Payment integration (credit cards, M-Pesa, mobile money)

    • User onboarding and analytics dashboards

    • Multi-venue support

    Control Features:

    text
    Africa Focus: M-Pesa, Airtel Money integration
    Cloud-Based: No on-premise hardware needed
    Multi-Venue: Manage 10+ locations from one dashboard
    Payment: Credit cards + mobile money

    4. YesSpot

    Best For: Small businesses, cafes

    Key Controls:

    • Cloud-based Wi-Fi hotspot management

    • Captive portal with social login (Facebook, Google, LinkedIn)

    • User onboarding and CRM integration

    • Analytics and geolocation tracking

    • Marketing campaign tools

    • Voucher and payment support

    Control Features:

    text
    Social WiFi: Facebook, Google, LinkedIn login
    CRM Export: Mailchimp, CSV exports
    Geolocation: Real-time occupancy tracking
    Affordable: $49–$299/month pricing

    How Software Controls Access: The Full Flow

    Step 1: User Connects to WiFi

    text
    User Device → Select SSID "CafeWiFi_Guest" → Access Point (AP)
    AP → DHCP Request → DHCP Server assigns IP 192.168.1.105

    Step 2: Traffic Interception

    text
    User Device → Browser → HTTP Request (google.com)
    Firewall → BLOCK (default deny) → Redirect to captive portal (192.168.1.1:80)

    Step 3: Portal Displays Login Page

    text
    Captive Portal Server → Serves HTML page → User sees:
    - Email input field
    - "Login with Facebook" button
    - "Login with Google" button
    - Voucher code input

    Step 4: User Authenticates

    text
    User → Enters email → POST /login → Hotspot Software
    Software → Database Check → Email valid? → YES
    Software → Create Session → Session ID: 5001, Start: 14:30, Expiration: 15:30

    Step 5: Software Updates Firewall

    text
    Hotspot Software → Firewall API → add_acl_entry(mac=00:1A:2B:3C, action=ALLOW)
    Firewall → Update Rule 6 → 00:1A:2B:3C → Internet = ALLOW

    Step 6: Internet Access Granted

    text
    User Device → HTTP Request (google.com) → Firewall → ALLOW (authenticated)
    Public Internet → google.com → User Device → Page loads

    Step 7: Session Management

    text
    Software → Timer Check (every 30 seconds) → Session expiration?
    At 15:30 → Session expired → remove_acl_entry(mac=00:1A:2B:3C)
    User → Internet blocked → Must re-authenticate

    Advanced Control Features

    1. Marketing Integration

    Software connects to marketing tools for customer engagement:

    Integration Purpose
    Facebook Pixel Track WiFi visitors for ad targeting
    Mailchimp Export emails for email campaigns
    CSV Export Download user data for custom spreadsheets
    TripAdvisor Request reviews after session

    Example:

    python
    def export_to_mailchimp(emails):
    mailchimp_api.add_contacts(emails) # Add to email list
    mailchimp_api.send_campaign("Welcome to CafeWiFi!") # Send newsletter

    2. Payment & Monetization

    Software enables paid WiFi access:

    Payment Type Implementation
    Credit Card Stripe/PayPal integration → Charge $5 for 1 hour
    Mobile Money M-Pesa/Airtel Money → Kenyan market support
    Vouchers Pre-paid codes → Buy 10 vouchers for $50
    Subscription Monthly plan → $30 for unlimited 24/7 access

    Payment Flow:

    text
    User → Click "Pay with Credit Card" → Stripe API
    Stripe → Process Payment → $5 charged → Success
    Hotspot Software → Create Unlimited Session → Grant access

    3. Analytics & Reporting

    Software tracks metrics for business insights:

    Metric Value
    Total Logins Today 127 users
    Active Sessions 43 users
    Average Session Duration 47 minutes
    Top Authentication Facebook (65%)
    Geolocation Nairobi (78%), Mombasa (12%)
    Peak Hour 2:00 PM – 4:00 PM (67 users)

    Dashboard Query:

    sql
    SELECT COUNT(*) as total_logins
    FROM sessions
    WHERE created_at BETWEEN '2026-01-15 00:00' AND '2026-01-15 23:59';

    4. Security Controls

    Software enforces network security policies:

    Control Implementation
    VLAN Segmentation Guest traffic on VLAN 10, internal on VLAN 1
    Client Isolation Device A cannot ping Device B
    HTTPS Pirouette Redirect HTTP login to HTTPS (encrypt credentials)
    MAC Binding Session tied to hardware MAC address

    Security Rule:

    text
    iptables -A FORWARD -i wlan0 -o wlan0 -j DROP # Client isolation

    Bottom Line

    Hotspot management software controls public WiFi access through authentication, session management, bandwidth limits, ACL rules, VLAN segmentation, and content filtering. Platforms like Powerlynx, Antamedia, XceedNet, and YesSpot automate these controls, enabling businesses to offer secure, monetized, and analytics-driven WiFi services.

    The control flow is: User connects → Traffic intercepted → Portal displays → User authenticates → Software updates firewall → Internet granted → Session managed → Auto-disconnect at expiration. This automation ensures only authorized users access the network while capturing valuable data for marketing and business growth.

    Looking for fast, reliable internet in Nairobi? Same-day connection · Packages from Ksh 1,500/month · No long-term contracts.
    Call 0748 111 304
    Share:
    Get Connected Today
    High-speed WiFi & Fiber internet from Ksh 1,500/month. Same-day installation across Nairobi.
    Our Services
    Contact Us
    City View, Jogoo Road, Nairobi
    Mon–Sat: 8:00 AM – 6:00 PM

    Ready to Get Connected in Nairobi?

    Same-day WiFi & Fiber internet, CCTV, web design and full ICT solutions — all under one roof.