Authenticator

The IEEE 802.1X standard provides a method for authentication and authorization in IEEE 802 networks. At the network access, a physical port in the LAN, a logical IEEE 802.1Q VLAN or a WLAN, the authentication of a participant is carried out by the authenticator, which uses an authentication server (RADIUS server) to check the authentication information transmitted by the participant (supplicant) and, if necessary, the access allows or rejects access to the services offered by the authenticator (LAN, VLAN or WLAN). VT AIR has both an 802.1X authenticator and an 802.1X supplicant.

Captive Portal

A captive portal is a device that is usually used in public, wireless networks to link access from end devices such as laptops or smartphones to the underlying network or the Internet to the user’s consent to certain usage rules. In addition, the provider of the network can link access to a specific user account. VT AIR offers the option of setting up a captive portal for each interface – with its own HTML page for authentication.

DHCP

VT AIR comes with built-in IPv4 and IPv6 Kea DHCP server. Whether static or dynamic DHCP addresses and multiple networks, the Kea DHCP server is also capable of high availability and can form an automatic failover with multiple VT AIR.

DNS

VT AIR has an unbound DNS server that allows it to run as a standalone or as a forwarding DNS server. Unbound allows you to define any host overrides and domain forwarding. For security, VT AIR uses different DNS block lists with categories. Encrypted DNS and DNSSEC are also no problem.

Docker

Docker is a suite of platform-as-service products that deliver software in packages using OS-level virtualization. These are called containers. The containers are isolated from each other and bundle their own software, libraries and configuration files. They can communicate with each other through well-defined channels. VT AIR solves support and management via the WebGUI for Docker.

HAProxy

HAProxy is free, open-source software that provides a highly available load balancer and proxy server for TCP and HTTP-based applications. VT AIR enables full support for setting up and operating a HAProxies via the web interface.

NtoPNG

NtoPNG is computer software for monitoring traffic on a computer network. It was developed as a high-performance and low-resource replacement for ntop. With ntopng on VT AIR, network traffic can be analyzed and monitored per interface, host or network segment.

NTP
Network Time Protocol is the most common method of synchronizing a system’s software clock with Internet time servers. It is designed to mitigate the effects of variable network latency and can typically limit time over the public internet to tens of milliseconds. The accuracy in local networks is even better with up to one millisecond. VT AIR has an NTP server for the network clients.

SNMP
The Simple Network Management Protocol is an Internet standard protocol for collecting and organizing information about managed devices on IP networks and manipulating that information to change device behavior. VT AIR supports SNMPv1/v2 and encrypted SNMPv3 for high security. All attributes of the firewall can be called up with SNMP, with the special VT AIR SNMP mibs users have full control over their monitoring.