Hotspot
U
SER
G
UIDE
109
H
OTSPOT
The hotspot module allows to regulate the access of the clients connected to a LAN (access point
configured on la
wlanx
interface
)
to a network exposed by the WAN interface (
eth0
), showing a
captive portal that present a login page.
Only the clients that have successfully logged in are authorized: the traffic not authorized is
blocked.
CONFIGURAtion
To activate the hotspot function use:
set hotspot on
Similarly, to deactivate it:
set hotspot off
To disable and delete the hotspot configuration:
set no-hotspot
You can specify the interface on which the clients‟ LAN will be created, by using:
set hotspot lan-if <interface>
The clients on this interface will get an IP address from the DHCP server inside the hotspot, the
server will assign addresses from the address space that you can define with:
set hotspot network <address> netmask <netmask>
To specify the DNS servers that the client on the LAN must use, the syntax is:
set hotspot dns <address> [<address>]
with this command you can specify up to two DNS server address.
To allow the client authentication, you have to specify the parameters of both the RADIUS Server
and the authentication service (UAM). The hotspot will use the RADIUS to authenticate the clients
through their credentials. The available commands are:
set hotspot radius-host <address>
set hotspot radius-acct-port <number> (default 1813)
set hotspot radius-auth-port <number> (default 1812)
set hotspot nasid <string>
set hotspot radius-secret <string>
When the clients gain access to the network, they are redirected to a captive portal that shows a
login page. The hotspot redirects the clients‟ HTTP requests to the captive portal URL.
To set the redirect address you can use:
Access protocol:
set hotspot uam-server-protocol [http|https]
Hostname or host IP address
set hotspot uam-server-ip <address>
set hotspot uam-server-hostname <string>
The port on which the web server is listening
