Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 1751 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is Hotspot usable?

ThomasBall
Tried to get hotspot working from the meagre help file with no success.

Tried a few configuration options but I might be missing the concept.

Does a hot spot become its own wireless network or is it an "addon" to an existing one?

If someone could point me to some documentation I would be grateful.

  Tom


This thread was automatically locked due to age.
  • 0
    Hi Tom,

    This is from memory, so it might not be a 100% bullet proof guide.

    1.) create a new Wireless network ( SSID guest or what you prefer ). Set encryption "none" meaning no password and no encryption. Enable client isolation.
    I prefer "client trafic" set to seperate zone.
    You might want to check that you have dhcp,dns and nat masq enabled for the new interface likely named wlan0
    Enable the wifi network on your AP under grouping tab.

    2.) go to the hotspot section, choose your user portal users that should be allowed to create a voucher. 
    Now create one or more voucher definitions.
    Now create your hotspot. Choose the interface belonging to your new "guest" wifi ( wlan0 ? ). Finish the configuration to suit your needs.

    Finally configure your packet filter rules for the interface, allow http, https, imap etc etc as with any other interface.
    Clients connected but not authorised should now be redirected to a login page.

    Hope it helps you a bit further.
  • 0 in reply to Vels
    Vels is spot-on; you have to create the WLAN separately (unencrypted)... then add that wlan interface to the hotspot config.  This is why the hotspot functionality technically will work with wired interfaces as well (because you can select ethx interfaces too), although it is not officially supported at the moment.

    It is pretty slick!

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    Thanks!

    Somehow I thought this was a "wizard" and would set up the background services. 

    Once I set up the details it works great. 

    A few things for the future...
     
    Would like to be able to "expire" the vouchers. You can manually remove them but I do not see a way to have an old one become expired. 

    I would like to see the ability to put a few "public area" computers under this without a separate physical LAN. 
    Could we do this with a vlan?


       Tom
  • 0
    Hi, I would think a VLAN would work fine.

    Barry
  • 0 in reply to BarryG
    I have setup a hotspot using a wireless ssid that was bridged to a VLAN, worked fine.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I think I have configured all the necessary rules(firewall, nat, dhcp, ect). but when I try to connect a device, I am not redirected to the portal. I can access the portal by IP. but I have to know it to get there.

    Any ideas what I am doing wrong?
Unfiltered HTML