Real-name authentication, logs and security protection: three core functions of Dream Gateway for self-built networks

Zhou, the sole network administrator of an industrial park, works out of a small weak-current room. He is required to handle three major tasks: real-name authentication, log retention and network security. In the past, this meant purchasing separate authentication servers, log servers and multiple security appliances, followed by complicated interconnection and joint debugging. Now he can manage all three requirements with just one Dream Gateway.

1. Real-name authentication: four access modes, authentication upon network connection

The first function is to identify who is accessing the network. The Dream Gateway supports Portal, SMS, WeChat and 802.1X authentication:

• SMS / WeChat: When employees and visitors connect to Wi‑Fi, a captive portal pops up. Users complete verification in seconds via SMS code or WeChat QR scan.
• 802.1X / MAC whitelist: For office terminals and fixed devices, access control checks are enforced. Unauthorized terminals are isolated automatically.
• Built-in compliant SMS qualification: The gateway comes with an approved SMS channel, so verification codes can be sent directly without extra qualification applications.

Identity information is recorded synchronously during authentication, with no manual registration required. Temporary visitors and outsourced staff are assigned to independent user groups with time and bandwidth limits. Their identities remain traceable without mixing with records of regular employees. For solo administrators like Zhou, automatic recording eliminates troublesome manual ledger work. Paper forms and Excel sheets used to suffer from missing entries and difficult querying. Now the gateway automatically captures the user, connection time and authentication method, and records can be retrieved instantly for inspections.

2. Log retention: 180-day rolling local storage, one-click export

The second function tracks what users access online. The Dream Gateway stores internet access logs locally on the hard disk on a rolling basis for 180 days. Log fields include phone number / ID number, terminal MAC, IP address, login time, visited URLs and uplink/downlink traffic, supporting searches by identity or time window.

During audits, compliant reports can be exported instantly by phone number or room number. Logs are stored locally on the gateway and do not rely on external internet. Records continue to be saved even when upstream links fluctuate. For relatively closed park networks, local storage lets operators fully control where data resides.

Local real-name authentication paired with local 180-day rolling log retention means identity and audit records are generated on the same gateway. Venues own and maintain the hardware, and this single device fulfils both compliance requirements. This description applies to self-built networks with local storage.

3. Security protection: built-in IPS / WAF / AV

The third function ensures secure internet access. The Dream Gateway integrates routing, AC, firewall, IPPBX and OLT capabilities. It embeds a next-generation firewall, IPS intrusion prevention, WAF and antivirus modules:

• Block external scanning and intrusion attempts at the network boundary, intercepting abnormal traffic.
• Prevent lateral movement among internal terminals. Rogue access detection identifies and blocks unauthorized routers and portable hotspots.
• Enforce network segmentation with isolated VLANs for production, office and visitor traffic.

The advantage of consolidating all three functions on one device is consistent policy execution. The same gateway knows who the user is, what they are doing online, and can block suspicious behaviour at the boundary. Alerts, blocking and evidence logging are completed in one workflow, removing the need to cross-check records across separate systems. This reduces repetitive daily work and lets administrators focus on core security operations.

Built on all-optical infrastructure, powered by audio & video engine, and protected by robust security capabilities, AINOPOL delivers an integrated “connectivity & security” solution. One single appliance links authentication, audit logging and threat protection from the source. Full features do not need to be enabled all at once; extra functions can be activated later as business grows. Multi-building and multi-park deployments are centrally managed via the management platform, with unified policy distribution and visualized topology for flexible scaling.

FAQ

Q: Can local logs from Dream Gateway cover all internet access records?
A: Yes. Log fields cover phone number / ID number, terminal MAC, IP address, login time, visited URLs and uplink/downlink traffic. Records can be searched and exported by identity or time range to meet retention and inspection requirements for self-built networks. The exact retention period is subject to the delivered firmware version and local regulatory rules.

Q: How large a park can one Dream Gateway manage?
A: A single unit covers one or several small and medium buildings. Multiple buildings and parks are connected to a central management platform for unified oversight and policy rollout, supporting on-demand scaling.

Q: What happens to real-name records and logs if the gateway loses power or the hard disk fails?
A: The gateway adopts high-availability design with dual power supplies and hot-standby dual main controllers to reduce single-point failure risks. Data protection and failure handling details depend on the delivered version. Confirm these terms and include them in the contract during solution selection.