Is there any way to specify that a HotSpot user can only use one interface? I am setting up a wired and wireless hotspot on the same MT router and don’t want the wired users to be able to log into the wireless system.
Any one have any ideas?
I believe this is handled with shared-users=1 in /ip hotspot profile. If the user uses their wired connection and logs on, they can not logon via their wireless (different mac address).
Also, the caller ID setting for radius can be used with the mac address – I know this is true for PPPoE. There is also a setting in the local ppp users list for caller ID.
John
I think I misunderstood your question. For radius, you can use the ‘called ID’ – that means the mac of the interface the caller is connecting too. We don’t hav that option in our local ppp users - I will see if we can add that.
John
Thanks, yea the setup is I have a school with students computers that need a common login, So I make a user that can log in 40 times. But on the same router I need to have a wireless AP that the students can’t use.
Just tried this and it works. Create a new profile for the student user and set incoming-filter to be a chain that drops everything coming from the wireless interface.
Here are the commands I used.
[admin@test] ip firewall> add name=test-no-wireless
[admin@test] ip firewall> rule test-no-wireless
[admin@test] ip firewall rule test-no-wireless> add in-interface=“Internal WiFi” action=drop
[admin@test] ip firewall rule test-no-wireless> print
Flags: X - disabled, I - invalid, D - dynamic
0 in-interface=Internal WiFi action=drop
[admin@test] ip firewall rule test-no-wireles> /ip hotspot profile
[admin@test] ip hotspot profile> add name=no-wireless idle-timeout=10m shared-users=40 mark-flow=“hs-auth” login-method=enabled-address incoming-filter=test-no-wireless
[admin@test] ip hotspot profile> .. user
[admin@test] ip hotspot user> add name=student password=test profile=“no-wireless”