Hotspot users

Recently I installed multiple MT493AH units at multiple locations. All locations are just about the same configuration, 100-200 foot tower with 493 at bottom of tower and Ubiquiti APs at the top of the tower with directional antennas.

The 493s are all configured as hotspots with Radius authentication. I do not have idle timeout, session timeout or keepalive enable for the default user on the hotspot. The server has idle timeout, and keepalive enabled on the default server. Radius attributes that are configured in Radius are WISPr bandwidth up/down.

I have also reconfigured the login page so those that are not authenticated will receive a notice of our services and their MAC address and IP address.

We have multiple clients on each tower that will ocassionally received the login page. Sometimes this happens when they first connect, sometimes it happens during a session. Typically when we look at the Host tab in WinBox they have a D beside their MAC meaning they are not authenticated. Normally we can clear their entry and they start working but sometime the only thing that will get them working is to have them shut down all their equipment and/or repair their network connection. This is happening with different brands of CPEs on the customer end.

I have spent the last 3 weeks working on this, searching the forums, changing settings and still no solution.

Anyone with an insight to the solution to the problem please let me know what to do next. I am almost to the point that I am going to have to turn off the Hotspot and just allow everyone in the system which I don’t want to do.

Thanks!!

Hi,

Can you please send your hotspot server config here ? I think I can help you !

The below example has 4 ubiquiti PS2-EXT APs mounted at 190 feet with the 493 in the comm building at the bottom of the tower. Each AP is connected to individual ports on tthe 493, ports 2, 3, 4, 5. Those 4 ports are then placed in a bridge called HS-Bridge. The hotspot is assigned to the HS-Bridge.

If the below is not enought let me know what you need.. I am new to MT’s but not new to IPs :slight_smile:

mar/08/2009 19:31:37 by RouterOS 3.20

software id = K8U4-LTT

/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0 html-directory=hotspot
http-proxy=0.0.0.0:0 login-by=mac mac-auth-password=ANY name=default
nas-port-type=ethernet radius-accounting=yes radius-default-domain=
itexas.net radius-interim-update=30m radius-location-id=Main-Twr
radius-location-name=Tower1 radius-mac-format=XX:XX:XX:XX:XX:XX
rate-limit=“” smtp-server=0.0.0.0 use-radius=yes
/ip hotspot
add address-pool=HS-Pool-1 addresses-per-mac=1 disabled=no idle-timeout=15m
interface=HS-Bridge keepalive-timeout=2m name=HotSpot-Main profile=
default
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=none name=default rate-limit=
64000/64000 shared-users=1 status-autorefresh=1m transparent-proxy=no
/ip hotspot ip-binding
add address=xx.xx.xx.xx comment=“Management Computer” disabled=no mac-address=
XX:XX:XX:XX:XX:XX type=bypassed
add address=xx.xx.xx.xx comment=AP-1 disabled=no mac-address=XX:XX:XX:XX:XX:XX
server=HotSpot-Main type=bypassed
add address=xx.xx.xx.xx comment=AP-2 disabled=no mac-address=XX:XX:XX:XX:XX:XX
server=HotSpot-Main type=bypassed
add address=xx.xx.xx.xx comment=AP-3 disabled=no mac-address=XX:XX:XX:XX:XX:XX
server=HotSpot-Main type=bypassed
add address=xx.xx.xx.xx comment=AP-4 disabled=no mac-address=XX:XX:XX:XX:XX:XX
server=HotSpot-Main type=bypassed
add comment=“Ronnie’s Compaq Laptop” disabled=no mac-address=
XX:XX:XX:XX:XX:XX type=bypassed
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot user
add comment=“” disabled=no name=xxxxxxx password=xxxxxxxxx profile=default
/ip hotspot walled-garden
add action=allow comment=“” disabled=no dst-host=www.itexas.net dst-port=80
add action=allow comment=“” disabled=no dst-host=webmail.itexas.net dst-port=
80
add action=allow comment=“” disabled=no dst-host=myaccount.itexas.net
dst-port=443

/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0

Isn’t that hotspot-address supposed to be the ip of the hotspot interface?

The Docs say if you don’t have one it will use the gateway address…

I don’t see that in the docs. If you use the “/ip hotspot setup” and don’t change it, it will use the ip of the interface you selected. All mine have the ip of the interface there, and all work normally.

ADD: Just to be sure, you are seeing the mac addresses of the clients and not the APs in the host list, correct?

My interface is a bridge, not individual ports, but maybe it will work. I will give it a try.

I have a customer with a hotspot on a bridge, and his is assigned an ip.

Found the reference to 0.0.0.0 for hotspot IP.

Page 12 of the Hotspot.pdf under Notes states: “If dns-name property is not specified, hotspot-address is used instead. If hotspot-address is also absent, then both are to be detected automatically.”

I am trying to find differences between your system and mine, since mine is working and your isn’t. I will presume that works, but I haven’t seen it. All setups I have done set that value.

Did you check your “/ip hotspot host” to insure the mac addresses there are in fact your clients and not the mac addresses of the APs?

Yes, all MAC addresses are those of the clients…

That is odd. Is there anything in the log that indicates why they are being logged out? Obviously that is what is happening, don’t you think? I would look at the RADIUS server log too. Radacct table actually. It should have a reason why each client session was terminated.