Broadband Internet Access solutions powered by Nomadix Confidential

Broadband Internet Access solutions powered by Nomadix™ Confidential 1

Confidential 2

Presentation outline • Who is Nomadix • Solution Partners and Network Architectures • Nomadix Features – End User provisioning features – Billing Features – Authentication Features • Standards Compliance • Nomadix Product Portfolio • Reference Sites Confidential 3

Who is Nomadix ? • Nomadix is the leading global Subscriber Internet Gateway company. We manufacture dedicated networking devices using the Nomadix Network Service Provide Engine (NSE). Plug and Play – Quickly and inexpensively get subscribers onto their networks without requiring client side software or reconfiguration of IP More Revenues settings. – Generate more revenue per broadband connection through intelligent subscriber management and delivery of IP services. At Lower Cost – Simplify their network infrastructure and maintenance costs. 4, 000 • Nomadix gateways are used in almost 4, 000 sites worldwide, with installations in USA, Japan, Asia and Europe. Confidential 4

Nomadix’s Value proposition Patents WISPr OEM • Nomadix have several patents on public Broadband Internet provisioning, e. g. DAT and i. NAT. These patents provide true ‘plug and play’ and support a complex of VPN links on a single hot-spot site. • Nomadix, as an active member of Wi-Fi Alliance, has been instrumental in the make of the WISPr (roaming) “best current practices for WISP roaming” and Wi-Fi Zone concept. • Nomadix established “license agreements” with leading industry partners, e. g. Proxim, Hughes Networks and Rockwell Collins for integration of NSE in application specific platforms. Confidential 5

Nomadix’s Value proposition • Nomadix functionality offered through the Nomadix Internet Gateways cover a rich set of features in the following main areas: End user provisioning – – – Authentication – – Billing Roaming End User provisioning Authentication (UAM, 802. 1 x Smart Client, 802. 1 x UAM) Security (VPN, EAP) Billing interfaces for both a centralized AAA and for local AAA Roaming • Through a range of solution partners, Nomadix fits well in a well designed end to end solution for carriers, ISPs and stand-alone sites. – AAA partners , e. g. Picopoint, Wificom – Roaming partners, e. g. Boingo, i. PASS – HLR interface partners, e. g. Adjungo Networks Confidential 6

Network Architecture AAA partners Credit Card Clearing Credit Card Server INTERNET External Web RADIUS Server Firewall + IP Router Server WWW, Web Server Email Scratchcards Nomadix Public Access Gateway Authentication SMS Etc. . Datacenter Billing Information Accounting payment Servers AAA partners Hotel Billing System Wireless LAN (Wi-Fi) and Ethernet All PCs accepted - DHCP -Static IP address - Web proxy settings Confidential 7

Network Setup (Ethernet Switch) Backbone PMS Nomadix Internet Gateway Ethernet Switch Confidential 8

Network Setup (x. DSL) Backbone PMS Nomadix Internet Gateway USGTM DSLAM Confidential 9

Network Setup (Wireless LAN + Ethernet) Backbone PMS Nomadix Internet Gateway Ethernet Switch Room 101 Laptop Confidential 10 BASE-T Room 102 Laptop 10 BASE-T Room 103 Laptop 10 BASE-T 10

End User Provisioning Features • Plug and Play – No client-side software installation / reconfiguration – Dynamic Address Translation (DAT)™ • For supporting users with: static IP Addresses, has a DHCP address from another subnet, going through public-private address translation • Transparent Proxy. For supporting Browsers configured for Proxy or private DNS Server that could be behind a firewall • VPN Support (PPTP and IPSEC) • Support End-to-End security, even when user’s address is being translated. • i. NAT™ supports multiple VPN sessions going to same corporate VPN Access Server, even with limited number of public IP Addresses available. i. NAT uses one public IP address for multiple sessions to different VPN Access Servers. • Multiple Language Support – Pre-defined login screen in Internal Web Server Confidential 11

End User Provisioning i. NAT™ and VPN WLAN Hot-Spot Authentication Corporate Main Server Headquarter #1 Nomadix HSG-25 VPN Access Point VPN Firewall ADSL Router Plus Firewall Authentication Server Corporate Main Headquarter #2 VPN Firewall Public IP Address #1 WLAN AP Corp #1 user 1 Corp #2 user 2 VPN Access Point Public IP Address #2 Corp #1 user 3 i. NAT™ supports multiple VPN sessions going to same corporate VPN Access Server, even with limited number of public IP Addresses available. i. NAT uses one public IP address for multiple sessions to different VPN Access Servers. Confidential 13

Multiple Subnet Support • Multiple DHCP pool and IP subnet support • Subnets and DHCP pools assigned • Location ID (e. g. via VLAN ID) • Nomadix RADIUS VSA (‘Subnet’) • Administratively assigned Confidential 15

Multiple Subnet Support (con’t) • Save costs by using non-contiguous public DHCP pools – Example: Provide Internet access to 1, 000 DHCP users and only have noncontiguous Class C pools, you can now define these separate pools in the Nomadix Gateway • Use mixed pools (public/private) for varied network topologies and customer sets (residential vs. business) – Example: All residential users can get private IP address and be address translated, all business customers can get a public IP and not be address translated • Differentiate your customers depending on their location – Example: All users in one building can be placed in the same VLAN and provision all their IP address from a dedicated pool • Allocate different lease times to different users dependent on the peak usage patterns of the network • Keep all devices (e. g. Access Points) on a separate public subnet that will not get address translated Confidential 16

End User Provisioning Features • Captive Portal – Pre-Authentication Home Page Redirection (HPR) • Automatically redirect nomadic user to welcome page • Multi-portal / multi-Service Provider support – Post-Authentication Page Redirection (HPR) • Automatically redirect nomadic user to post welcome page Portal Page • Multi-portal / multi-Service Provider support • IP filtering / access control • White List for free/allowed sites • Black List for blocked/restricted sites • Presenting services Service Selection Console – Up-sell Bandwidth / Public IP address – Personalizing services Confidential 17

Billing Features Mix of Billing Options is possible 1 – Direct connection to Hotel PMS • Fully automated system, where the charge for HSIA is a line item on the hotel bill (= local hot-spot) • Shared revenue model possible through Billing Mirror • Incentive-based Pricing. This functionality offers the opportunity to provide price incentives to preferred customer groups 2 - Credit Card Payment • Fully automated system, where the charge for HSIA is deposited via Credit Card clearing house to the hot-spot site • Shared revenue model possible through Billing Mirror • Incentive-based Pricing. 3 - Connection to RADIUS Server • RADIUS server is connected to (existing) RADIUS billing system • Supports various ways to sell the service, Subscriptions (monthly fee, fees for usage), Pre-paid cards, Vouchers, etc. – XML Application Programmers Interface supported with all billing modules Confidential 18

Billing – Stand Alone lowest cost implementation INTERNET Broadband Connection with a minimum of 2 public IP addresses Firewall + IP Router WWW, Nomadix Public Access Gateway • Internal Database pre-configured with a range UN/PW • Hotel sells vouchers with UN/PW • Guest Access for the duration of the stay • Optional: graphical web interface as welcome page Email Authentication Wireless LAN (Wi-Fi) and Ethernet All PCs accepted - DHCP -Static IP address - Web proxy settings Confidential 19

Billing – Hotel PMS External Web INTERNET Server Web Server Broadband Connection with a minimum of 2 public IP addresses Nomadix Public Access Gateway • Automatic connection to hotel property management system (PMS) like Micros Fidelio • Hotel offers “bill to my room” authentication and billing • Guest Access for the selected duration (e. g. 24 hrs or 1 hr) and selected bandwidth • Optional: graphical web interface as welcome page Firewall + IP Router WWW, Email Authentication Hotel Billing System Wireless LAN (Wi-Fi) and Ethernet All PCs accepted - DHCP -Static IP address - Web proxy settings Confidential 20

Billing – Credit Card AAA partners Credit Card Clearing Credit Card Server INTERNET Credit Card Clearing Web Hosting broker Server Broadband Connection with a minimum of 2 public IP addresses External Web Server Firewall + IP Router WWW, Web Server Nomadix Public Access Gateway • Automatic connection to Credit Card clearing house • Hotel offers “credit card” authentication and billing • Guest Access for the selected duration (e. g. 24 hrs or 1 hr) and selected bandwidth • Optional: graphical web interface as welcome page Email Nomadix Public Access Gateway Authentication Wireless LAN (Wi-Fi) and Ethernet All PCs accepted - DHCP -Static IP address - Web proxy settings Confidential 21

Billing – RADIUS AAA partners External Web Server Scratchcards RADIUS Server Broadband Connection with a minimum of 2 public IP addresses SMS Mobile No. INTERNET Firewall + IP Router payment Servers WWW, Email Nomadix Public Access Gateway • Automatic connection to RADIUS server. External Billing S/W to offer various payment methods • Optional: graphical web interface as welcome page • Optional: WISP roaming Nomadix Public Access Gateway Authentication Wireless LAN (Wi-Fi) and Ethernet All PCs accepted - DHCP -Static IP address - Web proxy settings Confidential 22

Confidential 23

Billing Features - RADIUS • Vendor Specific Attributes (VSA) supported • • • Max. Bandwidth up / per user Max. Bandwidth down / per user Home Page Redirect (URL redirection) / per user IP Upsell / per user Subnet / user (to allocate a specific IP subnet to a user) • Time based Billing / per user • Time-Based Session Timeout : Allows the termination of a session per a specified time period allowing a service provider to introduce service plans that limit the session time • Volume based Billing/ per user • Volume-Based Session Timeout : Allows the termination of a session per a specified data volume allowing a service provider to introduce service plans that limit the data transfer volume Confidential 24

Location Identification • Determines physical location (port) of subscriber • Enables: – Automated provisioning/billing based on location – Customization of portal page based on subscriber’s location Port 1 VLAN Switch Port 2 Could use: – – 802. 1 Q VLAN tags Integrated SNMP Manager • Custom SNMP MIB Queries • RFC 1493 Compliant Bridge MIB Queries Confidential 26

End User Authentication Features 1. Universal Access Method (UAM) – Web Browser Based initiated Authentication utilizing SSL – No special client-side software to install – Compatible with existing standard networking protocols and components (any Wi-Fi compliant NIC or AP) 2. IEEE 802. 1 x / Smart Clients and SIM Smart Client – – Provides user with directory of approved hotspots Could prevent against rogue AP’s Automates authentication process for the user Can automatically establish remote VPN tunnel (end-to-end IPSEC tunnel) 3. IEEE 802. 1 x / UAM – IETF EAP (Extensible Authentication Protocol) – End-to-end security association (support multiple EAP types such as MD 5, TLS, TTLS, strong authentication tokens, etc. ) Confidential 27

Universal Access Method (UAM): User Experience 1) User associates with “open mode” Access Point at hotspot 2) Opening Browser automatically presents “Captive Portal Page” with local content/services 3) User can authenticate (login) at hotspot via any Internet Browser (utilizing SSL) 4) User gets profile-driven, personalized Internet access 5) User gets automatically redirected to their Internet Start Page Service Selection Console Portal Page Login Page Nomadic or Mobile User Public Access Control Gateway Confidential 28

802. 1 x Smart Client Authentication User Steps: 1) 2) 3) 4) Start Smart Client Select access type and find locations using phonebook Click “Connect” to automatically login to Network Remote VPN (IPSEC tunnel) may automatically load to their corporation Home VPN Server Remote VPN Client –Gateway Access Protocol RADIUS UAM SSL-based Smart Client Access Point Auth & Acctg Public Access Control Gateway Confidential Auth/Billing Server & Services 29

802. 1 x / UAM Authentication IEEE 802. 1 x = Port-Based Network Access Control • • • Uses EAP = Extensible Authentication Protocol (Advanced Security) Driven by 802. 11, overcomes security (WEP key mgmt) issues, but can be used in Ethernet Official Standard as of Q 2, 2001 1 x clients and enabled APs coming to market (currently focused on Enterprise) Can be used with: • MD 5 (hashed Username and Password), Certificates (TLS, TTLS), Strong Authentication Tokens (Vasco Digi. Pass), etc. EAP US RADI 802. 1 x Hotspot Auth Server Home Auth. Server 802. 1 x Client (Supplicant) Confidential 30

Multi-Service Provider Support • Wi-Fi Zone support – Nomadix is fully Wi-Fi Zone compliant – Nomadix supports a multi-service provider (ISP) model through extensive set of roaming features • Portal page / Service provider support – Nomadix supports pre-authentication Home page redirect (HPR) and post-authentication HPR. – 802. 1 x UAM and 802. 1 x Smart Clients could provide a 3 rd party ISP specific user experience Confidential 31

Multi-Service Provider support Billing Mobile. Gate Server + AAA ROAMing Server Optional Roaming Intermediary Broker or Settlement Services Mobile Operator Billing Relationship Roaming Revenue Hotspot Operator’s Network Operations Center Global Roaming AAA Services Network Roaming RADIUS NETwork Server Corp. Enterprise Home Entity (such as User’s Corporation or Service Provider) VPN / AAA Firewall & Server VPN Server Nomadic User AAA / RADIUS Proxy Server IPSEC or PPTP VPN Hotspot 2 Hotspot 1 Login as Nomad@Home. Entity. com Cell 1 Wireless Access Point Cell 1 Cell 2 Wireless Access Point Confidential Cell 2 Wireless Access Point 32

Multi-portal / multi-Service Provider support Welcome Page #1 PC #1 Launch i. Pass Smart Client: Proxy Auth/Billing Server & Services Ipass/Hstevens@nomadix. com PC #2 Public Access Control Gateway Start 802. 1 x Authentication: Hstevens@vodafone. com Welcome Page #2 Welcome Page #3 PC #3 Web browser (UAM) Username : Hstevens Password : xxxxxxx Vodafone i. PASS Auth/Billing + Web Server & Services Confidential 33

Nomadix Standards Compliance • Nomadix is fully network agnostic, i. e. is successfully tested against major network equipment suppliers like Cisco, Avaya, Proxim, Symbol, Intel, 3 COM, etc. . • Nomadix supports both wired (Ethernet) and Wireless (802. 11 a, 802. 11 b, 802. 11 g, Bluetooth) access • Nomadix supports Security Standards like 802. 1 x , SSL, IPsec and PPTP for VPN • Nomadix supports RADIUS standard • Nomadix supports XML application programmers interface • European CE and Safety Standards compliance Confidential 35

Market Statistics Today’s Business Travelers want Broadband Access Confidential 37

Market Statistics • Market Research shows: • 70% of business travelers carry laptops • 68% expressed interest in Internet access in hotels, on planes and in airports • Customers value higher productivity and better, faster connections Quote: "As an investor, I focus on cost per bit, " says Chris Brookfield, general partner with Northwest Venture Associates. "In wireless LANs, it is incredibly inexpensive to move data, compared with other wireless technologies like [Cellular Digital Packet Data], [General Packet Radio Service] and 3 G. " Confidential 38

Market Statistics – Western Europe Confidential 39

Market Opportunity-1 Hotels and Conference Centers • Business Traveler on the road wants to connect his Notebook PC to the Internet and download e-mails, fast and without hassle. • Does not want to reconfigure his/her Notebook PC • Needs a fast connection to reduce time loading large attachments • Hotels want to make money, and maintain many happy guests • Hotel needs to offer a value-package to business travelers, i. e. offer fast internet connections in both the conference center and hotel rooms • Prevent cost to deploy the value-package, i. e. no need to set-up help-desk, or hire IT manager to help configure PCs Confidential 40

Market Opportunity -2 Wireless Hot-Spots • Business Traveler in Wireless Hot-Spots (e. g. an Airport) wants to efficiently use his wait time to connect his laptop PC to the Internet and download e-mails, fast and without hassle. • Does not want to reconfigure his/her Notebook PC • Needs a fast connection to reduce time loading large attachments • Airports want to make money and keep passengers happy • Airports need to offer a value-package to business travelers, i. e. offer fast internet connections in both airline lounges and passengers areas • Prevent cost to deploy the value-package, i. e. no need to set-up helpdesk, or to hire IT manager to help configure PCs Confidential 41

Market Opportunity -3 Residential Users • Residential users that are connected through either wired (x. DSL, CATV) or Wireless (IEEE 802. l 1 b, LMDS) to ISPs in small communities and apartment complexes. • Needs an easy way to log-on, i. e. no client software, and does not want to re-configure their (Notebook) PC • Needs fast connection and dynamic bandwidth selection service plan • ISPs want to make money and sign on as many happy subscribers, at zero incremental cost, as possible • ISP’s need to offer a value-package to residential users, i. e. fast internet connections • Prevent cost to deploy the value-package, i. e. no need to set-up helpdesk, or send out support people to help configure PCs Confidential 42

How to make €€€ Hotels, Conference Centers, Airports and Airlines • Pre-connection • Initial Connection • On-line connection • Advertisement, e-Commerce and info display revenues as offered through Walled garden. • Subscriber revenue and /or timebased revenue, Conference Center service plan, Meeting Room Scheduler (MRS) • IP Up-sell (public IP address), Selfservice plans, advertisements and info display through ICC A San Jose hotel made 250 K$ revenues from Nomadix USG in their Conference Center in yr 2000 Confidential 43

Market Opportunity -4 Universities and Schools • Students on University Campus and Dormitories want to connect PC’s to the Internet and download e-mails, fast and without hassle. • Does not want to reconfigure his/her (Notebook) PC • Needs fast connection to reduce time downloading large attachments • Universities want to facilitate network access, however prevent un-authorized access to the University Network • Universities need to offer an access-package to students, visitors and staff, i. e. offer fast internet connections in and around the campus • Be able to facilitate access for many students in a very short time • Prevent cost to deploy the access-package, i. e. no need to set-up helpdesks, or to hire IT managers to help configure PCs • Increase Network Access security Confidential 44

Market Opportunity -5 1. Enterprise Roaming staff (Nomadic employees) and visitors create challenges for the Enterprise network administrator • Nomadix can solve these issues: – Increased security concerns • Allow visitors to access pre-determined network resources, depending on their access level. – Mobility management • Roaming between subnets is an issue as users cannot connect automatically – Traffic shaping • Profile-driven bandwidth allocation is key Confidential 45

Enterprise Application Examples Head Office Client Office (e. g. Consulting firm ABC) (e. g. Company XYZ) • Professional Services Company (Nomadic employees) Network setup: Static IP (e. g. 192. 168. x. x) DHCP, no proxy, HTTP Proxy Universal Subscriber Gateway Random Office • Meeting Room/Lobby (e. g. Company XYZ) (“Enterprise Hot Spot”) VIP üWeb-based presentations üReal-time inventory checks Customer üEmail synchronization üCorporate File Retrieval (VPN) Supplier Various PC configurations Confidential 46

Features List USG / HSG • Standard features – – – – • Optional features Plug and Play Home Page Redirect pre-Authen. Home Page Redirect post-Authen. Walled Garden Standard Mgmt. Language Support SNMP Support Multi-Level Admin Access Control List Bridge Mode CMS enabled support Internal Web Server External Web Server Intf. Billing Mirror XML - API Confidential – – – Radius client Interface Credit Card interface PMS interface SSL Support i. PASS smart client 802. 1 x IPSec Port Location Self Service Console Bandwidth Management IP Up-sell Proxy ARP – URL Filtering – i. NAT – Multi-Subnet Support 47

Examples Nomadix ISP / Service Providers Confidential 48

Hotel reference List - Europe all use the Nomadix solution EUROPE: • Hilton Antwerp (Belgium) • 71 Nyhavn Hotel (Denmark) • Copenhagen Strand (Denmark) • Grand Hotel (Denmark) • Phoenix Hotel (Denmark) • Torve Hallerne Hotel (Denmark) • West-Inn (Denmark) • Hotel Avion, Helsinki (Finland) • Hotel Haikon Kartano, Porvoo (Finland) • Hotel Krapihovi, Tuusula (Finland) • Hotel Musta Kissa, Lahti (Finland) • Ikaalisten Kylpylä, Ikaalinen (Finland) • Millennium Hotel Stuttgart (Germany) • Hotel Kurfuerstendamm 101 (Germany) • Ritz Hotel (Spain) • NH Hotels (Spain) EUROPE: • NH / Golden Tulip Fi. Gi (Holland) • Van der Valk-Assen & Vianen (Holland) • Hotel Du Lac (Italy) • Conf. Center and Hotel Affi (Italy) • Holiday. Inn & Crowne Plaza (Italy) • Sunborn Yacht Hotel (UK) • Chelsea Village Hotel London (UK) • Great Eastern Hotels (UK) Middle East & Africa: • Sheraton – Amman (Jordan) • Four Seasons – Amman (Jordan) • Four-seasons – Cairo (Egypt) • Hilton – Cairo (Egypt) • Meridian – Cairo (Egypt) • Four seasons – Riyadh (Saudi Arabia) And many more……. Confidential 49

Reference List - Europe all use the Nomadix solution EUROPE - Events: • Cannes Film festival ’ 02 in France • Foire de International Luxembourg • Dorn Birner Messe (Austria) • Norges Varemesse(Norway) • Munich Messe (Germany) EUROPE - Airports: • Oslo Airport (Norway) • Schiphol Airport (Amsterdam) • Koln/Bonn Airport (Germany) • Birmingham Airport (UK) EUROPE - Universities: • Warrick Univerisity – UK • Uni Erlangen, Germany • TU Wien, Austria • Uni Leipzig, Germany • Universität Köln, Germany EUROPE – WISPs / Hotel solution providers: • Aervik (the Netherlands) • Win. Q (the Netherlands) • Attingo (the Netherlands) • My. Call (the Netherlands) • Hub. Hob (the Netherlands) • Kubi Wireless (Spain) • Inntouch (UK) • Liberty SNL (UK) • Swisscom Europort (UK) • X 2. internet (Germany) • Teleport (Austria) • Hi. Port (Italy) • Menacom (Egypt) • Wi-TEL (South Africa) Confidential 50

Summary Nomadix is the global leading Internet Gateway supplier that addresses the various market segments: – Public Visitor Based Networks – Multi-Tenant Units – Private Visitor Based Networks. THANK YOU ! Confidential 51