Skip to main content

TWAG — Trusted WLAN Access Gateway

The TWAG (Trusted WLAN Access Gateway) brings trusted Wi‑Fi access into the mobile core. It authenticates Wi‑Fi devices with EAP‑AKA/AKA′ against the AAA/HSS over Diameter, hands each authenticated client an IP address by DHCP, and anchors its data back to the packet core over a GTP tunnel to the PGW — so a subscriber on Wi‑Fi is served the same APN, policy and charging as on the cellular network. Its dashboard is the place to see who is connected, whether the Diameter and GTP paths are healthy, and to clear individual sessions.

← Operations Guide

The dashboard is a per‑instance element page reached from the sidebar when a TWAG runs in the site's inventory. All traffic goes through the OmniWeb backend proxy to the TWAG's API, so it stays behind the single authenticated gateway. It is organised into tabs.

Overview​

The TWAG overview dashboard — active/total sessions, Diameter peer health, subscriber counts, access points, DHCP leases, GTP tunnel status, authentication mode, aggregate traffic and recent activity

The landing tab is a single-screen health read: active and total sessions, connected/disconnected Diameter peers, accepted subscribers, the number of access points, DHCP lease count, the GTP tunnel status and its PGW address, the authentication mode in use (e.g. EAP‑AKA), aggregate traffic in and out, uptime, and a live recent‑activity feed of authentications and session starts/stops.

Sessions​

The Sessions tab listing authenticated Wi‑Fi sessions with identity, status, IP, MAC, SSID, serving NAS, duration and byte counters

Every authenticated Wi‑Fi session, each row showing the subscriber identity (the network access identifier), status, assigned IP, client MAC, SSID, serving NAS IP, session duration, and bytes in/out. An operator can delete a session to force‑disconnect a client — for example to clear a stuck or misbehaving device.

Access Points​

The Access Points tab listing the WLAN access points / NAS devices connected to the TWAG

The WLAN access points (NAS devices) currently connected to the gateway. Each can be removed individually when an access point is decommissioned or needs to be cleared.

Accounting​

The Accounting tab listing RADIUS accounting sessions and their usage records

The accounting sessions the TWAG has recorded — the usage records raised for authenticated clients. Individual accounting sessions can be deleted.

Diameter​

The Diameter tab showing peer connections to the AAA/HSS with connected and disconnected counts

The Diameter peer connections to the AAA/HSS that carry authentication, with connected and disconnected counts. This tab also offers a Diameter test — it sends a test Multimedia‑Auth‑Request (MAR) to confirm the authentication path to the AAA/HSS is up, which is the quickest way to prove Diameter connectivity when authentications are failing.

DHCP​

The DHCP tab listing the address leases the TWAG has issued to Wi‑Fi clients

The DHCP leases the TWAG has issued to Wi‑Fi clients — the address, client and lease state for each — so you can confirm clients are being addressed and see how much of the pool is in use.

Logs​

The Logs tab tails the TWAG's live log output for troubleshooting an individual gateway without leaving OmniWeb.

Actions​

Each action asks for confirmation first:

  • Delete a session — force‑disconnect one authenticated Wi‑Fi session (Sessions tab, per row).
  • Delete an access point — clear a single access point / NAS entry (Access Points tab, per row).
  • Delete an accounting session — remove a single accounting record (Accounting tab, per row).
  • Diameter test — send a test MAR to validate the Diameter path to the AAA/HSS (Diameter tab).
  • The PGW anchors the TWAG's user plane over GTP — see the packet‑core elements.
  • The HSS holds the subscriber authentication data the TWAG's Diameter requests resolve against.
  • ePDG — the untrusted‑Wi‑Fi counterpart for Wi‑Fi calling.
Last updated on