WiFi Hotspot with Radius Server Authentication
A hotspot is a physical location where people may obtain Internet access, typically using Wi-Fi technology, via a wireless local area network (WLAN) using a router connected to an internet service provider.
Public hotspots may be created by a business for use by customers, such as coffee shops or hotels. Public hotspots are typically created from wireless access points configured to provide Internet access, controlled to some degree by the venue. In its simplest form, venues that have broadband Internet access can create public wireless access by configuring a access point (AP), in conjunction with a router and connecting the AP to the Internet connection. A single wireless router combining these functions may suffice.
Private hotspots may be configured on a smartphone or tablet with a mobile network data plan to allow Internet access to a other devices via Bluetooth pairing or if both the hotspot device and the device/s accessing it are connected to the same Wi-Fi network.
Here in this blog. i would like to explain hotpot setup In Mikrotik Routerboard with Radius Authentication.
Please follow this video for Mikrotik Device basic settings
After the basic settings we start hotspot configuration,
Login to the Mikrotik Router using Winbox.
Click on ‘Wireless’ tab, Click interfaces then Wireles.
Change the SSID to whatever you like.
Click on security profiles and select the authentication mode ‘none’.
Click on ‘Bridge’ , create a new bridge and name it ‘Bridge-Hotspot’.
Click on Ports and select ‘wlan1’ to the newly created bridge ‘Bridge-Hotspot’.
Click IP ->Hotspot
Click on ‘Hotspot Setup’
Select Hotspot interface as ‘Bridge-Hotspot’.
and click next
You can enter the default address pool here.
select certificate- if you have valid certificate choose it or select ‘none’ .
IP of SMTP server- ‘none’
DNS Server – ‘none’
Enter the DNS name. That name will be the display name of the Hotspot Login page.
Default user for the hotspot will be ‘admin’
Enter a password for ‘admin’.
You will see a message. ‘setup has completed successfully’.
Double click on ‘hotspot1’ and edit.
change Address per MAC from 2 to 1 for security reason. It will allow one connection per MAC.otherwise someone can spoof the MAC address and connect.
Click on server profiles -> click Radius-> put a tick on ‘Use Radius’.
Click on ‘Login’
tick out ‘cookie’
Click on System->packages and make sure ‘user-manager’ package is installed.
Click on ‘Radius’ and add a radius server as shown
Enter IP: 127.0.0.1
secret: 123 (use secure one, This is for demonstration only)
Click on ‘incoming’ and put a tick on ‘accept’
Reboot the router.
Open web browser and enter ‘192.168.88.1/userman’
Mikrotik User manager page will open. Default user name is admin and there is no password.
Login to User Manager.
Click on Routers and add Router.
Create a New Profile
You can add profile limitations, if you want.
Click on ‘Users’ and create the hotspot users.
Setup is completed.
Connect to that Hotspot from a wifi enabled computer, tablet or mobile.
You will see a Login Page.
Login with the Username and password, and You can start browsing.