Hotspot with User Credits and Active Directory

G’day Guys,

My apologies if these are stupid questions, but let me explain my setup and what I would like to do.

I am providing a network and internet cafe for a nation-wide Scouting event in Australia. What I have is an internet connection in the middle of a field, which will have a point to point link to a main area. That will be counted as backhaul to my main router - which is then sent to some other buildings. What I would like to do is setup Hotspot on the main router for the whole event. This leads into my first question. Authentication for Hotspot: Is is MAC based or based on HTTP session? The other buildings would be behind their own router so I don’t have to make one huge, gigantic subnet.

My second question is: If I use Active Directory with the Microsoft RADIUS server as the authentication database for Hotspot, can I still use the User Credits that I see documented in the wiki? I have yet to see a step-by-step tutorial as to how to set that up - Am I just being blind?

Lastly: with User Credits, can I automatically give each user say 10 minutes per day, with the ability for them to “buy” a credit from a staff member? Or can they only buy using the inbuilt payment methods?

Thanks in advance,
Brendan

I don’t like bumping posts, but I’ve been trying to get this to work for too long and my deadline is looking :open_mouth:

Any tips?

Authentication for Hotspot: Is is MAC based or based on HTTP session? The other buildings would be behind their own router so I don’t have to make one huge, gigantic subnet.

Per MAC, but the “addresses-per-mac” property lets you govern how many IPs can log in per MAC. Generally speaking, though, Hotspot users should connect directly to the Hotspot.

If I use Active Directory with the Microsoft RADIUS server as the authentication database for Hotspot, can I still use the User Credits that I see documented in the wiki?

Probably not. When you use RADIUS the RADIUS server has to make all decisions regarding user authentication and authorization. AD doesn’t have any provisions for storing information such as “how many credits does this user account have”, or writing back usage time into AD. You could potentially use something like FreeRADIUS to proxy requests to AD and then work with the result once it comes back but it’s a lot of customization work (likely including database work). User Manager definitely can’t help you here.

Lastly: with User Credits, can I automatically give each user say 10 minutes per day, with the ability for them to “buy” a credit from a staff member? Or can they only buy using the inbuilt payment methods?

Don’t know, I don’t use User Manager.

Hey! Didn’t see the reply - Work sent me to the other side of the state. :stuck_out_tongue:

Thanks. I didn’t know enough about Hotspot to be able to figure that bit out.

Hopefully I can work out some manner of credits with HotSpot and Active Directory…

Hey people.

I’ve decided just to make each user in User Manager as well as Active Directory. No big issue.

I was wondering, as a follow on from my other question: What I have is a main router (a multi-core x86 machine running MT off a USB - MT doesn’t support the raid card - there should be heaps of grunt!) between my network and the internet, and some wireless links from the main router to some other buildings. Can I have the hotspot run from the main router (as the wireless links only have the base routeros licence, and I can’t afford a better licence for each of them) with 2 of the vlans behind it being affected and my maintenance vlan not having to use hotspot? Is this possible?

I see there’s a http chap and cookie option - would I use these, and have the wireless links show up as three IPs to the main router - one on each of the Hotspot networks, and one on the maintenance network?

Sorry, I’m new to Hotspot!