A WAG (Wireless Access Gateway) is the network core element that aggregates traffic from thousands of WiFi access points, authenticates users and connects that traffic to the operator’s systems and the internet. It is the piece that turns many standalone routers into a managed WiFi service.
What a WAG does
- Terminates tunnels coming from access points (e.g. SoftGRE or EoGRE), so public traffic travels separately from each home’s private traffic.
- Segregates traffic per SSID using VLANs (IEEE 802.1Q), to apply different rules to each network.
- Authenticates and accounts (AAA) together with RADIUS servers: who connects, on which plan and how much they use. With CoA/DM it can change or end a live session.
- Enforces policies before and after authentication: captive portal redirection, walled garden (sites reachable without signing up), speed or data limits.
- Translates addresses with Carrier Grade NAT to serve many users with few public IPv4 addresses.
- Integrates with routing in the operator’s network (e.g. via OSPF).
What about Hotspot 2.0?
Hotspot 2.0 (Passpoint) lets devices join WiFi networks automatically and securely, but it requires compatible access points. Billions of residential routers worldwide do not support it. A vendor-agnostic WAG with a captive portal makes it possible to offer community WiFi on that equipment without replacing it.
When an ISP needs one
When it wants to offer public or community WiFi at scale (homespots, multi-dwelling units or venue hotspots) and charge for it, it needs a layer that centrally manages access, sessions and billing. That is the WAG’s role.
Streetwifi WAG
Streetwifi WAG is a software-only, carrier-grade solution: it runs on premises or in the cloud, is access-point vendor agnostic and includes SoftGRE/EoGRE tunnels, VLAN segregation, FAS Web Service (authentication, accounting and CoA/DM), vCPE with per-SSID policies, Carrier Grade NAT and OSPF. Full details in the datasheet.