hAp Lite questions and doubts

RouterOS General
1

a client purchased a hAp lite and I have few questions as im new to hap lite:

  1. Can I save config and import the same config each time a client buys a hap lite from us ?

  2. can i give read only account to my clients, so they can open winbox and see the total usage anytime they want ?

  3. can i generate the clients 30 days full usage graph, bandwdith and speed usage of the wan ether port ?

  4. how will the clients access the winbox or the hap lite ? what IP should be default, so it will open directly without having them to change the PC ether subnet IP. I mean, lets say you install a hap lite at a customer place and he says, speed is slow. So, what IP shall I ask him to open so that he can login with his read only user pass and see the ether total usage ?

  5. can i block websites for specific ether in hap lite ?
    Like parents on eth2 they need full access, but they want that their kids room wifi connected to eth3 of hap lite, should have bad websites blocked, which they should list in firewall rules or whatever. (i need that tutorial too)

  6. can i limit speed and bandwdith for specific ether in hap lite ?
    Like eth2 parents full speed. But eth3 kids limited to 10Mbps and 100GB total usage only.

  7. Can I monitor each of client hapLite over SNMP, that way theit whole ether graphs are with me then.

  8. Is there a way my customers can access the hapLite from their end without changing anything in their PC and at the same time, I can also open their devices from my office end without changing anything ?

2

  1. Can I save config and import the same config each time a client buys a hap lite from us ?
    Yes, you can.

    \

  2. can i give read only account to my clients, so they can open winbox and see the total usage anytime they want ?
    Yes, you can. It is standard. If the client enters the IP of the MIkrotik, he can click the Graph button.

  3. can i generate the clients 30 days full usage graph, bandwdith and speed usage of the wan ether port ?

Maybe, not sure

  1. how will the clients access the winbox or the hap lite ? what IP should be default, so it will open directly without having them to change the PC ether subnet IP. I mean, lets say you install a hap lite at a customer place and he says, speed is slow. So, what IP shall I ask him to open so that he can login with his read only user pass and see the ether total usage ?

The clients should NEVER EVER enter the hap Lite. They should not “look around”. They will mess up something, and then YOU can come and solve it. Of you have 500 clients and 15 of them do that, … how many free evening will you have? You are the controller (ISP or whater), they should be the “dumb users”.


5. can i block websites for specific ether in hap lite ?
Like parents on eth2 they need full access, but they want that their kids room wifi connected to eth3 of hap lite, should have bad websites blocked, which they should list in firewall rules or whatever. (i need that tutorial too)

In theory yes, but since the websites nowadays use dynamic content and ever changing server for cloud, it is a never ending story.


6. can i limit speed and bandwdith for specific ether in hap lite ?
Like eth2 parents full speed. But eth3 kids limited to 10Mbps and 100GB total usage only.

Yes you can. With help of some scripts.

  1. Can I monitor each of client hapLite over SNMP, that way theit whole ether graphs are with me then.

I do not know.

  1. Is there a way my customers can access the hapLite from their end without changing anything in their PC and at the same time, I can also open their devices from my office end without changing anything ?
    Yes, Winbox will find out what IP the hapLite has. But again, see point 4. They (clients) should NOT have access to the Mikrotik device. It is a very complex device, not way a Linksys or Asus router like with a nice menu with buttons NEXT–> NEXT–> APPLY… And it works… You should have full remote control over their devices. And normally, if you set it up correctly, put a good password on it, then it will run perfectly and without glitches. I have an uptime of more than 2 years in a church with weekly 240 visitors, and 15 fixed PC’s. They never call me. You should set it up like that, that the client will never call you. The helpdesk job should be the most boring job in our company.
3

No..
I mean the read only account, so they can see their usage.

4

You should manage and monitor the usage centrally.

5

I know.
What I mean to say, customers dont trust.
They say, show us our usage.

So, we want to give them read only account, so they can simply see their own speed, instead of calling us.

6

Solution:

  1. stop using “pay per Mbyte” plans. Make an 1 Gb or 5 Gbyte download per month. Make one price. Easy for client, and easy for you. Make a website login so they can see their usage.

  2. Show them the statistics of MIkrotik by going to the IP of the Mikrotik.

7

In india, people do abuse. Means, if you give them 2Mbps unlimited, they download 1TB in a month.

and yes, thats what I mean, can we get them to show the usage and traffic from the IP of their microtik ?

8

You can limit their usage after limit reached.

If you need to show clients their stats, do not give access to router, use Ntop to show them their traffic breakdown. RouterOS supports it, using Traffic Flow:

http://www.ntop.org/products/traffic-analysis/ntop/

9

They don’t trust? Then they can make their own measurement…

10

First, have to agree with others.. If your customers don’t trust you, they should maybe think some other ISP. :slight_smile:

But, on the other hand, question to others.. why it is so “big deal” to allow read-only (policies: read & winbox) access for customers?

11

how can ntop help here ?
ntop only shows the flows of all the IP mac, etc.

how will the customer see his past speed usage and bandwdith usage from ntop ?