Questions

[lonnie]

I have had guys saying they will not use this because they do not like the hotspot business model. We have made an extended authentication method for ALL ISP customers, so I suggest to take a look.

This release has added a couple of authentication methods, one of which is typically used for other hotspot systems - it uses the browser to log the customer in. Above all, our goal was for this be used for general user authentication and control.

My big plan is to have a database with username, password, MAC, IP, CBQ speeds and data transfer limits. This should then interface with the AP to check and set as many of those parameters as possible.

[cdavis]

Does this version allow you to skip the login page if you are using a known MAC address? IE, allow-mac-auth=yes

[tony]

In this release, you can auto-authenticate your users based on MAC once they launch their web browser. If the MAC is not authenticated, then the regular login page will be presented. This option is available in the hotspot dialog.

The MAC format that is sent to the radius server in this release is comma-delimited, and in lower-case. The password is the same as the username. Next release will allow this behavior to be adjustable, much like our wireless radius authentication method.

Thanks!

[georgew]

Can you give us an option to designate an IP address for a web server to pull images and help files from? That way we can do things not directly supported in the internal web server...

Or can we simply upload images using starutil?

[tony]

Once we get the starutil updated, you will be able to upload your custom versions of the pages we supply, plus 2 logo images, replacing the ones included. We will be including a server bypass / white list which will allow you to link content from your own servers, including possible signup pages for unauthorized users to access.

At the moment, you can customize the various pages via the UI.

Thanks!

[georgew]

very cool!

[thalaiva]

Does HOTSPOT depend on DHCP for authentication and allocation of IP? If so then how do you overcome the inconvenience of myriad DHCP servers running on the network due to the users ignorance of their system OS being preloaded with ICS/Win2K/XP etc DHCP servers??

The most common one I found is users running ICS without even being aware of the same!

MikroTIK also does a neat implementation of HotSpot but based on DHCP which is kinda self limiting!

[tony]

You can use DHCP, but it is not a requirement. You can assign the IPs in the same manner as you are currently used to, weather it be dynamic via DHCP, or static.

[lonnie]

Not sure there is much we can do. If a Windows client uses DHCP and a rogue DHCP server gives it an IP then where do we come in? For the most part the system will not function and you will get a call to come and fix the network. You charge a good fee for that - right - since it is a customer created problem.

We are open to suggestions, but the solution here is to do proper network design and also to educate customers about good network manners.

[thalaiva]

Not sure there is much we can do. If a Windows client uses DHCP and a rogue DHCP server gives it an IP then where do we come in? For the most part the system will not function and you will get a call to come and fix the network. You charge a good fee for that

Oh How I wish that was true! But in an intensively competetive environment like we have in India, that is not possible. Why we even have to do Virus Cleaning for free , again due to users ignorance and unwillingness to do proper upgrades and patches!!

We are open to suggestions, but the solution here is to do proper network design and also to educate customers about good network manners.

Would it be possible to utilize the Web Based login but PPPoE for the authentication??

[tony]

Would it be possible to utilize the Web Based login but PPPoE for the authentication??

Seeing both the web-based login, and pppoe handle the same tasks (authentication) I cannot fully answer your question, however if you answer this we may be able to help. Are you hoping to use pppoe authentication, and not be prompted for username / password via the web login, or do you wish to login via pppoe and still get another hotspot login screen afterwards?

[lonnie]

Or are you wanting the PPPoE style of setting IP, mask, gateway, DNS, CBQ without having to use any special PPPoE client software - ie just the standard browser to login?

[thalaiva]

Or are you wanting the PPPoE style of setting IP, mask, gateway, DNS, CBQ without having to use any special PPPoE client software - ie just the standard browser to login?

Right On! Use the standard browser to login without using any specific PPPoE style client but utilize all the PPPoE setting styles without the drawbacks inherent in DHCP, is what I desire.

Further a ability to allow the user to change his password through the WEB would be icing on the cake!! :)

[tony]

There is no easy way to get windows to use specific IPs, DNS and other settings without a specialized client, such as PPPoE, PPtP and DHCP. There are other possibilities that we are researching however.

Allowing the user to change their username is something we are working on as an extension to our user manager.

[cdavis]

Will there be a way to auth them without having to open a web browser? My student clients sign up for a semester and as long as they have the same MAC I want them to have access withouth having to open a web page.

In this release, you can auto-authenticate your users based on MAC once they launch their web browser. If the MAC is not authenticated, then the regular login page will be presented. This option is available in the hotspot dialog.

The MAC format that is sent to the radius server in this release is comma-delimited, and in lower-case. The password is the same as the username. Next release will allow this behavior to be adjustable, much like our wireless radius authentication method.

Thanks!

[lonnie]

I guess we can quit being evasive - the module you want is in final beta testing.

Your students have to use our Radius and DHCP and we return them an IP, mask, gateway, and DNS. We also force a rule that requires no change to their IP-MAC combo during the session - so no playing around is allowed. The final thing we do is set the CBQ from the Radius database.

So, we bow have PPPoE style configuration ease without the special PPPoE client. It has been a lot of work, and until we had it nearly ready for release we did not want anybody bugging us for it.

We also are in first beta of a module that takes any IP from the customer and "massages" it so that it works in our system. I personally don't like this since it covers up customer configuration problems, but it will ensure the guy connects. It is more overhead, but we have no lack of ram and horsepower.

[szern]

Once we get the starutil updated, you will be able to upload your custom versions of the pages we supply, plus 2 logo images, replacing the ones included. We will be including a server bypass / white list which will allow you to link content from your own servers, including possible signup pages for unauthorized users to access.

At the moment, you can customize the various pages via the UI.

Thanks!
Hi Tony,

I don't see the option to upload custom hotspot pages or logos in starutil17.exe? Has this option been included yet?

Thanks!

[cdavis]

I'm looking in 1.8. Any update?

[szern]

Once we get the starutil updated, you will be able to upload your custom versions of the pages we supply, plus 2 logo images, replacing the ones included. We will be including a server bypass / white list which will allow you to link content from your own servers, including possible signup pages for unauthorized users to access.

At the moment, you can customize the various pages via the UI.

Thanks!
Btw, just checking. Is the functionality for uploading the 2 logo pictures available?

Thanks!

[tony]

All logos and images will have to be linked too from your internal webserver (once it is added to your hotspot server whitelist).

The ability to load the logos on the box itself is still planned, however with the ability to link from an internal webserver for any number of images that are needed, the usefullness of this feature is limited and therefor not the highest item on our list.

Thanks!

[szern]

Hi Tony,

Thanks. Its not a problem. We do link the images from a whitelisted server locally. But I've had enquiries from clients who want a self-contained hotspot system at their premises.

In this case, the ability to upload a few local images would be a great feature. But, its non-critical and I can wait.

Thanks again!

[cdavis]

Once we get the starutil updated, you will be able to upload your custom versions of the pages we supply, plus 2 logo images, replacing the ones included. We will be including a server bypass / white list which will allow you to link content from your own servers, including possible signup pages for unauthorized users to access.

At the moment, you can customize the various pages via the UI.

Thanks!

I am unable to find the functionality to upload my own logo, is it hidden somewhere?