Administrator: /* HotSpot */

2017-09-14T11:31:40Z

HotSpot

← Older revision		Revision as of 11:31, 14 September 2017
Line 14:		Line 14:

	[[File:CableFree WiFi Hotspot Login Example-35.png]]		[[File:CableFree WiFi Hotspot Login Example-35.png]]

	This page is fully customisable with user/operator/venue logos and instructions, including multi-language support		This page is fully customisable with user/operator/venue logos and instructions, including multi-language support

Administrator at 11:31, 14 September 2017

2017-09-14T11:31:25Z

← Older revision		Revision as of 11:31, 14 September 2017
Line 11:		Line 11:
	* automatic and transparent change any IP address of a client to a valid address;		* automatic and transparent change any IP address of a client to a valid address;

	==Example Screenshot in Use==		===Example Screenshot in Use===

	[[File:CableFree WiFi Hotspot Login Example-35.png]]		[[File:CableFree WiFi Hotspot Login Example-35.png]]

Administrator: /* Example Screenshot in Use */

2017-09-14T11:30:43Z

Example Screenshot in Use

← Older revision		Revision as of 11:30, 14 September 2017
Line 13:		Line 13:
	==Example Screenshot in Use==		==Example Screenshot in Use==

	[[File:CableFree WiFi Hotspot Login Example-50.png]]		[[File:CableFree WiFi Hotspot Login Example-35.png]]
	This page is fully customisable with user/operator/venue logos and instructions, including multi-language support		This page is fully customisable with user/operator/venue logos and instructions, including multi-language support

Administrator at 11:29, 14 September 2017

2017-09-14T11:29:57Z

← Older revision		Revision as of 11:29, 14 September 2017
Line 14:		Line 14:

	[[File:CableFree WiFi Hotspot Login Example-50.png]]		[[File:CableFree WiFi Hotspot Login Example-50.png]]
			This page is fully customisable with user/operator/venue logos and instructions, including multi-language support

	===Sub Categories===		===Sub Categories===

Administrator: /* Example Screenshot in Use */

2017-09-14T11:27:50Z

Example Screenshot in Use

← Older revision		Revision as of 11:27, 14 September 2017
Line 13:		Line 13:
	==Example Screenshot in Use==		==Example Screenshot in Use==

			[[File:CableFree WiFi Hotspot Login Example-50.png]]

	===Sub Categories===		===Sub Categories===

Administrator at 11:24, 14 September 2017

2017-09-14T11:24:10Z

← Older revision		Revision as of 11:24, 14 September 2017
Line 10:		Line 10:
	* login page modification, where you can put information about the company;		* login page modification, where you can put information about the company;
	* automatic and transparent change any IP address of a client to a valid address;		* automatic and transparent change any IP address of a client to a valid address;

			==Example Screenshot in Use==

Administrator: Created page with "==HotSpot== The CableFree HotSpot Gateway provides authentication for clients before access to public networks . '''HotSpot Gateway features:''' * different authentication..."

2015-01-29T12:19:59Z

Created page with "==HotSpot== The CableFree HotSpot Gateway provides authentication for clients before access to public networks . '''HotSpot Gateway features:''' * different authentication..."

New page

==HotSpot==

The CableFree HotSpot Gateway provides authentication for clients before access to public networks .

'''HotSpot Gateway features:'''

* different authentication methods of clients using local client database on the router, or remote RADIUS server;
* users accounting in local database on the router, or on remote RADIUS server;
* walled-garden system, access to some web pages without authorization;
* login page modification, where you can put information about the company;
* automatic and transparent change any IP address of a client to a valid address;

===Sub Categories===

{{ycgu-cooltable-3
|title-left='''List of reference sub-pages'''
|title-center='''Case studies'''
|title-right='''List of examples'''
|content-left=
<splist
showparent=yes
/>

|content-center=
<DynamicPageList>
category = Hotspot
category = Manual
category = Case Studies
namespace = Manual
shownamespace = false
</DynamicPageList>

|content-right=
<DynamicPageList>
category = Manual
category = Hotspot
category = Examples
namespace = Manual
shownamespace = false
</DynamicPageList>

}}

==HotSpot Setup==
The simplest way to setup HotSpot server on a router is by '''<code>/ip hotspot setup</code>''' command.
Router will ask to enter parameters required to successfully set up HotSpot. When finished, default configuration will be added for HotSpot server.

<pre>
[admin@CableFree] /ip hotspot> setup
Select interface to run HotSpot on

hotspot interface: ether3
Set HotSpot address for interface

local address of network: 10.5.50.1/24
masquerade network: yes
Set pool for HotSpot addresses

address pool of network: 10.5.50.2-10.5.50.254
Select hotspot SSL certificate

select certificate: none
Select SMTP server

ip address of smtp server: 0.0.0.0
Setup DNS configuration

dns servers: 10.1.101.1
DNS name of local hotspot server

dns name: myhotspot
Create local hotspot user

name of local hotspot user: admin
password for the user:
[admin@CableFree] /ip hotspot>
</pre>

What was created:
<pre>
[admin@CableFree] /ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS
# NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
0 hotspot1 ether3 hs-pool-3 hsprof1 5m
[admin@CableFree] /ip hotspot>
[admin@CableFree] /ip pool> print
# NAME RANGES
0 hs-pool-3 10.5.50.2-10.5.50.254
[admin@CableFree] /ip pool> /ip dhcp-server
[admin@CableFree] /ip dhcp-server> print
Flags: X - disabled, I - invalid
# NAME INTERFACE RELAY ADDRESS-POOL LEASE-TIME ADD-ARP
0 dhcp1 ether3 hs-pool-3 1h
[admin@CableFree] /ip dhcp-server> /ip firewall nat
[admin@CableFree] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough

1 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=10.5.50.0/24
[admin@CableFree] /ip firewall nat>

</pre>

'''Parameters asked during setup process'''

{{Mr-arg-table-h
|prop=Parameter
|desc=Description
}}

{{Mr-arg-table
|arg=hotspot interface
|type=string
|default=allow
|desc=Interface name on which to run HotSpot. To run HotSpot on a bridge interface, make sure public interfaces are not included to the bridge ports.
}}

{{Mr-arg-table
|arg=local address of network
|type=IP
|default=10.5.50.1/24
|desc=HotSpot gateway address
}}

{{Mr-arg-table
|arg=masquerade network
|type=yes {{!}} no
|default=yes
|desc=Whether to masquerade HotSpot network, when '''yes''' rule is added to ''/ip firewall nat'' with ''action=masquerade''
}}

{{Mr-arg-table
|arg=address pool of network
|type=string
|default=yes
|desc=Address pool for HotSpot network, which is used to change user IP address to a valid address. Useful if providing network access to mobile clients that are not willing to change their networking settings.
}}

{{Mr-arg-table
|arg=select certificate
|type=none {{!}} import-other-certificate
|default=
|desc=Choose SSL certificate, when HTTPS authorization method is required.
}}

{{Mr-arg-table
|arg=ip address of smtp server
|type=IP
|default=0.0.0.0
|desc=IP address of the SMTP server, where to redirect HotSpot's network SMTP requests (25 TCP port)
}}

{{Mr-arg-table
|arg=dns servers
|type=IP
|default=0.0.0.0
|desc=DNS server addresses used for HotSpot clients, configuration taken from ''/ip dns'' menu of the HotSpot gateway
}}

{{Mr-arg-table
|arg=dns name
|type=string
|default=""
|desc=domain name of the HotSpot server, full quality domain name is required, for example www.example.com
}}

{{Mr-arg-table
|arg=name of local hotspot user
|type=string
|default="admin"
|desc=username of one automatically created HotSpot user, added to ''/ip hotspot user''
}}

{{Mr-arg-table-end
|arg=password for the user'
|type=string
|default=
|desc=Password for automatically created HotSpot user
}}

==ip hotspot==

Menu is designed to manage HotSpot servers of the router. It is possible to run HotSpot on Ethernet, wireless, VLAN and bridge interfaces. One HotSpot server is allowed per interface. When HotSpot is configured on bridge interface, set HotSpot interface as ''bridge'' interface not as ''bridge port'', do not add public interfaces to bridge ports. You can add HotSpot servers manually to ''/ip hotspot'' menu, but it is advised to run ''/ip hotspot setup'', that adds all necessary settings.

* '''name''' (text) : HotSpot server's name or identifier
* '''address-pool''' (name '''/''' none; default: ''none'') : address space used to change HotSpot client ''any'' IP address to a valid address. Useful for providing public network access to mobile clients that are not willing to change their networking settings
* '''idle-timeout''' (time '''/''' none; default: ''5m'') : period of inactivity for unauthorized clients. When there is no traffic from this client (literally client computer should be switched off), once the timeout is reached, user is dropped from the HotSpot host list, its used address becomes available
* '''interface''' (name of interface) : interface to run HotSpot on
* '''addresses-per-mac''' (integer '''/''' unlimited; default: 2) : number of IP addresses allowed to be bind with the MAC address, when multiple HotSpot clients connected with one MAC-address
* '''profile''' (name; default: ''default'') - HotSpot server default HotSpot profile, which is located in ''/ip hotspot profile''

==ip hotspot active==
HotSpot active menu shows all clients authenticated in HotSpot, menu is informational it is not possible to change anything here.

* '''server''' (read-only; name) : HotSpot server name client is logged in
* '''user''' (read-only; name) : name of the HotSpot user
* '''domain''' (read-only; text) : domain of the user (if split from username), parameter is used only with RADIUS authentication
* '''address''' (read-only; IP address) : IP address of the HotSpot user
* '''mac-address''' (read-only; MAC-address) : MAC-address of the HotSpot user
* '''login-by''' (read-only; multiple choice: cookie '''/''' http-chap '''/''' http-pap '''/''' https '''/''' mac '''/''' mac '''/''' trial) : authentication method used by HotSpot client
* '''uptime''' (read-only; time) : current session time of the user, it is showing how long user has been logged in
* '''idle-time''' (read-only; time) : the amount of time user has been idle
* '''session-time-left''' (read-only; time) : the exact value of session-time, that is applied for user. Value shows how long user is allowed to be online to be logged of automatically by '''uptime''' reached
* '''idle-timeout''' (read-only; time) : the exact value of the user's idle-timeout
* '''keepalive-timeout''' (read-only; time) : the exact value of the keepalive-timeout, that is applied for user. Value shows how long host can stay out of reach to be removed from the HotSpot
* '''limit-bytes-in''' (read-only; integer) : value shows how many bytes received from the client, option is active when the appropriate parameter is configured for HotSpot user
* '''limit-bytes-out''' (read-only; integer) : value shows how many bytes send to the client, option is active when the appropriate parameter is configured for HotSpot user
* '''limit-bytes-total''' (read-only; integer) : value shows how many bytes total were send/received from client, option is active when the appropriate parameter is configured for HotSpot user

==ip hotspot host==
Host table lists all computers connected to the HotSpot server. Host table is informational and it is not possible to change any value there

* '''mac-address''' (read-only; MAC-address) : HotSpot user MAC-address
* '''address''' (read-only; IP address) : HotSpot client original IP address
* '''to-address''' (read-only; IP address) : New client address assigned by HotSpot, it might be the same as original '''address'''
* '''server''' (read-only; name) : HotSpot server name client is connected to
* '''bridge-port''' (read-only; name) : /interface bridge port client connected to, value is unknown when HotSpot is not configured on the bridge
* '''uptime''' (read-only; time) : value shows how long user is online (connected to the HotSpot)
* '''idle-time''' (read-only; time) : time user has been idle
* '''idle-timeout''' (read-only; time) : value of the client idle-timeout (unauthorized client)
* '''keeaplive-timeout''' (read-only; time) : keepalive-timeout value of the unauthorized client
* '''bytes-in''' (read-only; integer) : amount of bytes received from unauthorized client
* '''packet-in''' (read-only; integer) : amount of packets received from unauthorized client
* '''bytes-out''' (read-only; integer) : amount of bytes send to unauthorized client
* '''packet-out''' (read-only; integer) : amount of packets send to unauthorized client

==IP Bindings==


Sub-menu: <code>/ip hotspot ip-binding</code> 

 

IP-Binding HotSpot menu allows to setup static One-to-One NAT translations, allows to bypass specific HotSpot clients without any authentication, and also allows to block specific hosts and subnets from HotSpot network

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-table
|arg=address
|type=IP Range
|default=""
|desc=The original IP address of the client
}}

{{Mr-arg-table
|arg=mac-address
|type=MAC
|default=""
|desc=MAC address of the client
}}

{{Mr-arg-table
|arg=server
|type=string {{!}} all
|default="all"
|desc=Name of the HotSpot server.
* '''all''' - will be applied to all hotspot servers
}}

{{Mr-arg-table
|arg=to-address
|type=IP
|default=""
|desc=New IP address of the client, translation occurs on the router (client does not know anything about the translation)
}}

{{Mr-arg-table-end
|arg=type
|type=blocked {{!}} bypassed {{!}} regular
|default=""
|desc=Type of the IP-binding action
* '''regular''' - performs One-to-One NAT according to the rule, translates '''address''' to '''to-address'''
* '''bypassed''' - performs the translation, but excludes client from login to the HotSpot
* '''blocked''' - translation is not performed and packets from host are dropped
}}

==Cookies==


Sub-menu: <code>/ip hotspot cookie</code> 

 

Menu contains all cookies sent to the HotSpot clients, which are authorized by cookie method, all the entries are read-only.

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-ro-table
|arg=domain
|type=string
|desc=Domain name (if split from username)
}}

{{Mr-arg-ro-table
|arg=expires-in
|type=time
|desc=How long the cookie is valid
}}

{{Mr-arg-ro-table
|arg=mac-address
|type=MAC
|desc=Client's MAC-address
}}

{{Mr-arg-ro-table-end
|arg=user
|type=string
|desc=HotSpot username
}}

{{cont}}

[[Category:Manual|Hotspot]]
[[Category:Hotspot|H]]
[[Category:AAA|Hotspot]]

Manual:IP/Hotspot - Revision history

Administrator: /* HotSpot */

Administrator at 11:31, 14 September 2017

Administrator: /* Example Screenshot in Use */

Administrator at 11:29, 14 September 2017

Administrator: /* Example Screenshot in Use */

Administrator at 11:24, 14 September 2017

Administrator: Created page with "==HotSpot== The CableFree HotSpot Gateway provides authentication for clients before access to public networks . '''HotSpot Gateway features:''' * different authentication..."