Local and central authentication with hotspot

RouterOS General
1

Hi, we are making a very large implementation and we are having some question:
We are instaling severals rb433 configured as hotspot and we need to charge severals MACs on each one, so if there is a laptop that is not in that list it must check in a central MK to know if its able to connect the hotspot.

Also think that each RB 433 must have at least 500 MACs and the central must have around 100.000 MAC.

Our implementation will use around 500 RB 433 and RB433AH

Its this possible???

Many thx

Ricky

2

RADIUS server is used for central authentication.
Perhaps 100.000 active session for one RADIUS server is too much, and you’ll need to split load to one or few RADIUS server.
Yes, setup is possible.

3

Thx, for your answer.

Colud the RB433 handled 500 MACs??

and, for the central what its the best choice MK level 6 with user manager or Frer Radius with MySql ??

Thx in advance


PS. I forgot a minimal question we need to make a lot of content filtering ( using openDNS ) but we want to put some local words that are forbbiden in our lenguage that they may not be in others :smiley: , how many lines can we put in the proxy of a RB433 or a RB 433AH without having to much resources loose.

4

Thx, serge, another question. I need that in every AP (about 1000 ) of the network any laptop starting with the MAC Address for example with AA:BB:xx:xx:xx (aprox 150.000 laptops) could be automatic logged in, and if the MAC Address is diferent ask user and password to login. It is possible???

If it is not possible maybe you can suggest another way

Thx again

5

Plese serge waiting for your answer in the late night :smiley: :smiley: :smiley: :smiley: :smiley:
with 5 hour lless than Riga

6

We don’t aware of any limits for web-proxy lines in ‘ip proxy access’.
Note, that you can use ‘regexp’ to filter commonames there, that should hep you to optimize long lists.


I don’t know how you can allow wildcards for MAC-addresses, as username. Solution doesn’t sound secure enough, how do you know that all laptops are your user’s laptops within the MAC-address range ?

7

Thx for the reply. I recive also your mail with the answer.
Witch is the best and fast way to have a rapid conversation, because you now know how important its this for us.

I think in wildcards because i now that all the laptops are from the same vendor so they should star with the same numbers.

Do you think another way to authenticate???

8

The one way to add multiple users - by scripts.

9

OK, solved with a script

Many thx