Hotspot Integration with Windows Active Directory

RouterOS General
1

All,
I just left a meeting with a customer that want us to do wifi for a school of about 10 blocks. They require us to setup up hotspot so that the users can login with username and password. However, they want whosoever that logs in to be further authenticated by the Windows Active directory so that their policies on access time etc can apply.

Is this possible? If it is possible, kindly send me the How-to doc. I will highly appreciate.

Thanks and regards,

Austin

2

I don’t have a how to document for you, but this is easily done by either hooking the Hotspot directly into IAS acting as a RADIUS server (I forget what that service is called in 2k8+, but it still does RADIUS), or using a different RADIUS server such as FreeRADIUS, which in turn goes against IAS or hooks into AD via LDAP or other methods. For simple scenarios going against IAS directly is easiest. Technet has a lot of information on IAS, the wiki manual is quiet explicit on how to use RADIUS with Hotspots since that’s common in all deployments with more than just a couple of users.

3

Thank you Guru. I will check it out. However, any How-to doc will be highly appreciated.

Thanks again,

Austin