Mikrotik Hotspot Setup

The MikroTik HotSpot Gateway provides authentication for clients before access to public networks .

HotSpot Gateway Setup:
- different authentication methods of clients using local client database on the router, or remote RADIUS server;
- users accounting in local database on the router, or on remote RADIUS server;
-walled-garden system, access to some web pages without authorization;
-login page modification, where you can put information about the company;
-automatic and transparent change any IP address of a client to a valid addres.
Download

HotSpot Profile
Hotspot server profiles. There may be various different HotSpot systems, defined as HotSpot Server Profiles, on the same gateway machine. One or more interfaces can be grouped into one server profile. There are very few settings for the servers on particular interfaces - most of the configuration is set in the server profiles. For example, it is possible to make completely different set of servlet pages for each server profile, and define different RADIUS servers for authentication.
Download

HotSpot User
This is tutorial, where client's user/password information is actually added, additional configuration options for HotSpot users are configured here as well.
Download


HotSpot Walled Garden
This is tutorial, where client's user/password information is actually added, additional configuration options for HotSpot users are configured here as well.
Download

Mikrotik Customizing Hotspot

You can create a completely different set of servlet pages for each HotSpot server you have, specifying the directory it will be stored in html-directory property of a HotSpot server profile /ip hotspot profile. The default servlet pages are copied in the directory of your choice right after you create the profile. This directory can be accessed by connecting to the router with an FTP client. You can modify the pages as you like using the information from this section of the manual. Note that it is suggested to edit the files manually, as automated HTML editing tools may corrupt the pages by removing variables or other vital parts.

Download Manual Mikrotik Customizing Hotspot

Mikrotik Hotspot Introduction

HotSpot is a way to authorize users to access some network resources, but does not provide traffic encryption. To log in, users may use almost any web browser (either HTTP or HTTPS protocol), so they are not required to install additional software. The gateway is accounting the uptime and amount of traffic each client have used, and also can send this information to a RADIUS server. The HotSpot system may limit each particular user's bitrate, total amount of traffic, uptime and some other parameters mentioned further in this document.

The HotSpot system is targeted to provide authentication within a local network (for the local network users to access the Internet), but may as well be used to authorize access from outer networks to access local resources (like an authentication gateway for the outside world to access your network). It is possible to allow users to access some web pages without authentication using Walled Garden feature.

Download Manual Mikrotik Hotspot Introduction

RouterOS built-in RADIUS client configuration

This Ebook provides Tutorial about RouterOS built-in RADIUS client configuration, supported RADIUS attributes and recommendations on RADIUS server selection.

RADIUS, short for Remote Authentication Dial-In User Service, is a remote server that provides authentication and accounting facilities to various network apliances. RADIUS authentication and accounting gives the ISP or network administrator ability to manage PPP user access and accounting from one server throughout a large network. The MikroTik RouterOS has a RADIUS client which can authenticate for HotSpot, PPP, PPPoE, PPTP, L2TP and ISDN connections. The attributes received from RADIUS server override the ones set in the default profile, but if some parameters are not received they are taken from the respective default profile.
The RADIUS server database is consulted only if no matching user acces record is found in router's local database.
Traffic is accounted locally with MikroTik Traffic Flow and Cisco IP pairs and snapshot image can be gathered using Syslog utilities. If RADIUS accounting is enabled, accounting information is also sent to the RADIUS server default for that service.

For completed Ebook (format .doc)
Download here

Mikrotik as Hotspot and RADIUS Server

Mikrotik, to setting hotspot could be very easily, just repeated click in steps until finished. But how with the case where users more than one (the example of the student that brought laptop to the campus plus the guest, friend etc) that the wish continue to be able to connected in the network but continue to be able to in monitored who that login with the maintenance as easily as possible.

Mikrotik membuat setting hotspot bisa dilakukan dengan mudah, cukup klik sana sini selesai. Tapi bagaimana dengan kasus dimana usernya banyak (misal mahasiswa yang bawa laptop ke kampus plus tamu plus bla..bla) yang maunya tetap bisa terkoneksi di jaringan tapi tetap bisa di pantau siapa yang login dengan pemeliharaan semudah mungkin.

Jawabnya / answered:

Tambah dukungan authentifikasi dengan radius di hotspotnya /Add authentifikasi with the radius in hotspot.

Caranya juga mudah, step by stepnya :

1. Login to mikrotik (with winbox, putty etc).

2. Click Radius menu like the following image:

3. Click "+" button

4. Isikan data-data yang sesuai, minimal di bagian/input form with the name as follow :

Service -> pilih hotspot

Address -> input ip address server radius

Secret -> input ‘password’ to connect Radius Server

Authetification Port -> default 1812

Accounting Port -> default 1813

Click Apply

5. Muncul bagian service.

6. Click menu

Ip -> Hotspot -> Active

Untuk melihat user yang sedang menggunakan hotspot.
To look active user that using hotspot

User will login with username and password that given by that worksheet.

source: http://alamsyah.rasyid.net