Quck-start guide

[tony]

To set up the Hotspot system is a simple task.

Step 1: Configure the system so clients can access the internet freely, whether by masquerading, 1:1 mapping or routing.

Step 2: Under the hotspot menu, configure the radius settings to point to your current authentication and accounting servers.

Step 3: Under the hotspot configuration dialog, click the "Enable HotSpot" checkbox, change the defaults to suite your needs, then click Ok.

Step 4: Select file->save.

At this point, your system is acting as a hotspot portal for all your clients.

Restrictions include:
Device that holds the default gateway cannot be a VLAN or Bridged. Clients can reside on any interface type, in any mode.

[go.fast]

Glad you guys have finally released the Star-Os htospot solution.
Now can you guys get a more detailed set of instructions on how to set up a hot spot and to integrate it with a raius server and online billing solution.
I could hire someone to help me with it, but if you had these instructions posted, I bet you would be able to sell even more, or save a guy like me a few bucks.
Thanks for the hard work.
George

[tony]

We'll see what we can do.

For the time being, the radius server information is set up exactly the same for a Hotspot user, as it is for PPPoE and PPtP. Same attributes are used. To get you going, look at the radius server we provide, and uncomment one of the sample users. This should be enough to help you test the new hotspot feature.

Thanks!

[lonnie]

A few details about the new authentication method.

:arrow: The web server used in the hotspot binds to the IP address of the default gateway interface, and no other IP on the system. It is not intended to be accessed manually, and if it is, it will redirect them to a login prompt, or popup a status window if they are already logged in.

:arrow: When options are changed in the hotspot dialog or radius script, the new settings come live once the Ok button is pressed with no other user actions needed. (other than a file->save)

:arrow: Special Radius attributes understood by the hotspot system include:
Session-Timeout (max session length in seconds. 0 = unlimited)
Idle-Timeout (max idle time before session is closed in seconds, 0 = no idle timeout)
Framed-IP-Address (used to verify against user's login IP)
VNC-PPPoE-CBQ-RX (RX rate for user in bps)
VNC-PPPoE-CBQ-TX (TX rate for user in bps)

:arrow: When a user's MAX IDLE time is reached (by turning off PC, etc), it will log the user's active time minus the IDLE duration. For example: Assuming the IDLE disconnect time is set to 1 hour; if a user logs in, and uses his system for 10 minutes before turning it off (without logging out), then the system's session will stay active until 1 hour and 10 minutes mark is reached. When the session is automatically logged out, the radius accounting will only be marked down for 10 minutes, and not 1 hour, 10 minutes. (works as it should be).

:arrow: When and if the default gateway IP is changed on the system, make sure you stop, then start the hotspot service again. (we may include a way to automatically take care of this in the next release).

:arrow: All web pages can be modified via the UI. The included templates have been tested on these browsers:
IE 6.0 (PC - perfect
IE 5.x (PC - perfect
Netscape 4.75 (PC - perfect
Netscape 6.0 (PC - perfect
Netscape 7.0 (PC - perfect
Netscape 7.1 (PC - perfect
IE 5.5 (OSX - perfect
Netscape 7.0 (OSX - perfect
Netscape 7.1 (OSX - perfect
Safari 1.0 (OSX - does not listen to meta no-cache tags, but otherwise works fine.
IE 6.x (Pocket PC - perfect

:arrow: Hotspot has a small memory footprint, and no overhead for active sessions.

:arrow: There is an automatic firewall rule to prevent users from switching IPs after they log in. If this happens, they will have to log out, then log back in.

:arrow: Non authorized users have access to the Hotspot system, and have the ability to reach outside systems using icmp and dns lookups.

:arrow: The Gateway device must not be bridged, and must contain a bound IP. If it is not, the hotspot will not function.

:arrow: Hotspot will not function if gateway device is a VLAN. (This has actually never been tested, so for now - don't try to use it this way)

:arrow: In firewall enable port 10000 (default is deny) and then you can point your web browser to the system IP:10000 and have an nicer edit screen for the user info.

[K1n6]

I know the new manual isn't complete but someone should spend a day and copy and paste a bunch of this junk into the manual and call it a new version of the prelim :) n00bs like me get by on documentation and it would have been easier to find the first 5 steps mentioned by Tony in the manual rather than here... I was expecting enabling hotspot on the interface to set the nat'ing up for me, mainly because you specify a wan interface for the hotspot and then you enable 'hotspots' on the in-facing interfaces. Clearly that is not the case and the first few lines in this forum cleared that up!

Thanks for the forums though!

[K1n6]

Hey now that you guys got a decent manual at least you can say RTFM :wink: . It might appear that you do need the hotspot enabled on the interface that has the public ip and the interface that is acting as an AP for hot spot customers.

[lonnie]

You only enable HotSpot for the interface that has customer entering the system.

[WATTSWATTS]

Iam looking to setup a hot spoy and then move to a internet. can you guys recomned the best software package. already have my AP And client bridges


Thanks


WATTSWATTS

[matthewa]

Hey, this belongs on the Wiki! :)

[jimmy]

Can i put a address of another hot spot company so thay can handel all billing .When a person conects to my ap running star-os it will send them to a login page of the company that takes care of all my billing . Can this be done in star-os I believe it is kinda like the hotspotzz thing you have in it now.

[lonnie]

The radius server can be located anywhere.

[jimmy]

The company i want to use uses the trakos software.Have you had any dealings with this.

[lonnie]

No, we only use our FreeRadius. Radius shoud simply be radius and if they say it is a standards based radius server it should do the job.

[jimmy]

Looking thru the access points thay use for this trakos software .Thay have a Primary server address and a secret .Then thay have a Authentication port that is 1812 and then a Accounting port that is 1813 and a nas id.Does this look like star os will work with there setup.

[lonnie]

That looks pretty standard.