limit ip addresses with hotspot

RouterOS General
1

Hi every 1 :

In MT 2.9 , hotspot users data base includes ip address option which
should match the user ip with other authentication informations , but
its not working at all , the hotspot server will allow the user to login
even not at the same ip address in the data base !! :confused:

Please advice ,

Thank you

2

IP address should not match, client always gets this address from HotSpot server (in other words one-to-one NAT translates client’s address to configured one).

3

Dear sergejs :

Thank you for your reply , i got the idea .

the goal is to make matching for user username + pass + ip + MAC ,
i tryed the ( address lists ) in firewall as reference for trusted IPs , but also not matching , any idea ?

Thanks again .

4

Dear all :

In addition to the above , the point is to prevent some hacking programs from
unauthorized login by passing the hotspot security , so ( i think ) the best way
is to filter the users IPs as its impossible to share the same ip between two
Pcs at the same time .

Please advice ,

Thank you in advanced

5

the hacker isn’t sharing the same victim IP , he is offline the victim using some nasty softwares like net-cut , so he can clone the victim mac address and entering and getting the victim IP ..

6

yes and this method also burns 2 ipaddress instead of one if in bridged mode, id like to disable the one to one nat and have only one address as well, is that possible, I get your point it gets hard to match the addresses up. Im having the same issue the user gets the ip thats not inthe database, is ther a way to tie all this together and only have 1 ip and no one to one natting ?

7

Dear samsoft08 :

You are right , but how to secure the hotspot from such programs ?

i like the MT hotspot and not planning to mave into the PPPoe unless
there are NO other way ! .

Thank you All

8

this problem wil be avalivabe until some one write JAVA script,
with will get some info from user.
Hard drive number or partition number for example.
and then, send it to RADIUS,
if info from last time is same as curent then user will have internet else no.
Very simple and in same time, hart to be made.

9

ok so is ther a way to run the hotspot without burning 2 ips , how bout just giving the user just 1 ip address and not 2 lol