Page 1 of 1

Deny Access for Hot-Spot User During Certain Times

Posted: Wed Sep 11, 2019 1:16 pm
by PacketMangle
Hello Everybody,

I've setup a Hot-Spot with User Manager to authenticate my users. I'd also like to setup a profile on user manager to only allow access to the Hot-Spot from 6:00 to 22:00, 7 Days per week.

Currently, I've configured my user manager -> profile -> as follows:
Always 6:00:00-22:00:00 Transfer limit: 10.0 GiB IP pool: hs-pool
Always Rate limits: 1M/2M 2M/4M 512K/1M 1m/1m 0 512K/512K
Always 22:00:01-5:59:59 IP pool: no-pool
I've tried setting up the 'wrong pool' so that the users fail to login during this time and also setting the transfer limit to 1 byte but neither of these have any effect and users can still login and use data.

Could somebody tell me the best way to do this?

With Thanks.

Re: Deny Access for Hot-Spot User During Certain Times

Posted: Wed Sep 11, 2019 2:11 pm
by tvish
Hello Everybody,

I've setup a Hot-Spot with User Manager to authenticate my users. I'd also like to setup a profile on user manager to only allow access to the Hot-Spot from 6:00 to 22:00, 7 Days per week.

Currently, I've configured my user manager -> profile -> as follows:
Always 6:00:00-22:00:00 Transfer limit: 10.0 GiB IP pool: hs-pool
Always Rate limits: 1M/2M 2M/4M 512K/1M 1m/1m 0 512K/512K
Always 22:00:01-5:59:59 IP pool: no-pool
I've tried setting up the 'wrong pool' so that the users fail to login during this time and also setting the transfer limit to 1 byte but neither of these have any effect and users can still login and use data.

Could somebody tell me the best way to do this?

With Thanks.
I suggest you point to Radius server and implement policies from their

Re: Deny Access for Hot-Spot User During Certain Times

Posted: Wed Sep 11, 2019 4:41 pm
by PacketMangle
I suggest you point to Radius server and implement policies from their
User Manager is Mikrotik's implementation of RADIUS.

Re: Deny Access for Hot-Spot User During Certain Times

Posted: Thu Sep 12, 2019 6:37 am
by PacketMangle
To follow up on my first post,

I've setup a virtual AP and attached it to a bridge running the Hot-Spot server. I've also setup two scheduler processes, one to disable the Virtual AP at 22:00 and the other to re-enable it at 06:00.

I can though foresee one issue with this setup whereby if the router is powered off during an enabled time (06:00-22:00) And then powered on during a disabled time (22:00-06:00) The Virtual AP will still work until it the scheduler re-runs the 'disable' interface script at 22:00 the following night.

A better solution would be an additional schedule that checks the system-time on startup and disables or enables the Virtual AP interface based on the time of day, but, I'm unsure how to script this.

Thanks.