Wednesday, February 26, 2014

Setting Upward A Mikrotik Hotspot Amongst Usermanager (Step-By-Step)

Mikrotik RouterOS provides a real powerful Hotspot Feature. This tin hold out used alongside the Mikrotik built inwards Radius server (Userman) or alongside a remote Radius/Freeradius Server.

You volition need:

Mikrotik RouterBOARD:

  • Level iv or ameliorate licence (Lower licences volition permit exclusively a unmarried Hotspot client)
  • RouterOS 6.x (5.x volition equally good work, but this tutorial is based on v6.7)
The network volition hold out configured equally below. You may ask to adapt the IP Addresses to suit your needs

 Mikrotik RouterOS provides a real powerful Hotspot Feature Setting upwardly a Mikrotik Hotspot alongside UserManager (Step-By-Step)




Notes:
The RouterBOARD CPU in addition to RAM volition direct comport upon the surgical operation of your Hotspot, thence view beforehand how many clients you lot wishing to connect.
A RouterBOARD 750 tin comfortably run near 25-50 users.
In my representative I volition usage a RouterBOARD 532 alongside ane 2.4ghz WLAN card


Please banker's complaint that I convey a Video Tutorial for this available on YouTube


Step 1: Configure mesh access on the router


Add Router IP Address:
/ip address add together address=10.0.0.2/24 interface=ether1
Change the IP to tally your network configuration

  1. Click on the IP Menu
  2. Click on the Addresses Menu
  3. Click "+"
  4. Enter the IP Address you lot wishing to assign to the router, this volition hold out the outward facing IP, thence brand certain to select the ethernet interface that volition give the router mesh access.
  5. Click on "Apply"



Configure Upstream DNS Server:
/ip dns laid servers=8.8.8.8 allow-remote-requests=yes
This representative uses Google's DNS service. You tin easily brand usage of OpenDNS to implement uncomplicated filtering, or usage your ain DNS servers if needed.

  1. Click on the IP Menu
  2. Click on the DNS Menu
  3. Enter your desired DNS server - hither I am using Google's DNS
  4. Click on "Apply"


Configure Default Route:
/ip road add together dst-address=0.0.0.0/0 gateway 10.0.0.1

  1. Click on IP
  2. Click on Routes
  3. Click on "+"
  4. Enter 0.0.0.0/0 equally the Dst. Address
  5. Enter 10.0.0.1 equally the Gateway

Test:
Check if you lot tin ping a populace ip address similar 8.8.8.8

  1. Click on Tools
  2. Click on Ping
  3. Enter a publicly available address 
  4. Click Start 

Step 2: Install User Manager in addition to Hotspot

If you lot invention to usage a stand upwardly lone Radius Server, you lot may skip this step.

Download the firmware parcel from Mikrotik
Extract the naught file on your local drive
  1. Make certain that the version of the file matches the version in addition to architecture of your device
  2. Open the Files window on winbox
  3. Drag the "user-manager-X.X-xxxxxx.npk" to the files window.
  4. Do the same for "hotspot-X.X-xxxxxx.npk".
  5. Reboot the router (/system reboot)

Step 3: Configure interfaces

First, nosotros ask to configure 2 Bridge interfaces. The showtime ane volition hold out a loopback interface. I convey flora inwards the past times that if you lot usage the normal loopback address (127.0.0.1), or ane of the other static addresses, for the Radius (Usermanager) server, you lot may sense roughly difficulties.

3.1.1 - Create Loopback Bridge
/interface twosome add together name=Loopback
  1. Click on the "Bridge" menu
  2. Click on "+"
  3. Enter "Loopback" for the twosome name
  4. Click "Apply"


3.1.2 - Add Loopback Bridge IP Address
I usage whatsoever unused person ip arrive at for this, it is used but equally an interface to run the RADIUS server on.
/ip address add together address=10.10.0.1/32 interface=Loopback

  1. Click on the IP Menu
  2. Click on the Addresses menu
  3. Click the "+" button
  4. Enter "10.10.0.1/32" equally the IP Address
  5. Select the "Loopback" Interface
  6. Click "OK"


3.2.1 - Create Hotspot Bridge
If you lot are planning to run the hotspot on a unmarried interface you lot may skip this step.
/interface twosome add together name=Hotspot
  1. Click on the "Bridge" menu
  2. Click on "+"
  3. Enter "Hotspot" for the twosome name
  4. Click "Apply"
3.2.2 - Add Hotspot Bridge IP Address
I brand usage of the person 192.168.0.1/24 arrive at for the hotspot network, but you lot tin usage whatever is suitable inwards your setup.
/ip address add together address=192.168.0.1/24 interface=Hotspot




  1. Click on the IP Menu
  2. Click on the Addresses menu
  3. Click the "+" button
  4. Enter "192.168.0.1/24" equally the IP Address
  5. Select the "Hotspot" Interface
  6. Click "OK"

3.2.3 - Add Hotspot Ports to Bridge
If you lot would similar multiple interfaces to convey access to the hotspot, you lot tin repeat this process, exclusively changing the interface each time.
If you lot are running on a RouterBOARD 750 or similar, you lot volition ask to add together the ports that you lot AP's are connected to, to the bridge.
/interface twosome port add together bridge=Hotspot interface=wlan1
  1. Click on the "Bridge" menu
  2. Click on the "Ports" Tab
  3. Click on the "+"
  4. Select the interface you lot want to add together to the hotspot, inwards my representative it is "wlan1"
  5. Select the "Hotspot" bridge
  6. Click "OK

3.3 - Configure the Access Point
If you lot are using a RouterBOARD 750 or similar, you lot volition non hold out using this section.
You may direct to implement safety on your access point, but since this is a captive portal, you lot should non ask to usage whatsoever security. This tutorial volition non include whatsoever safety settings.
/interface wireless laid [ uncovering default-name=wlan1 ] band=2ghz-b/g disabled=no mode=ap-bridge ssid=Hotspot
  1. Click on the "Wireless" Menu
  2. Double click on the Wireless Interface that you lot volition hold out using
  3. Set the manner to "ap-bridge"
  4. Set the band to 2Ghz-B/G (or otherwise if needs be)
  5. Change the SSID to "Hotspot", or whatever suits you.
  6. Click "OK"

iv - Configure the Hotspot

/ip hotspot profile
add together dns-name=hotspot.example.com hotspot-address=192.168.0.1 name=hsprof1 smtp-server=192.168.123.4
/ip hotspot
add together address-pool=hs-pool-7 disabled=no interface=Hotspot name=hotspot1 profile=hsprof1
/ip hotspot user profile
laid [ uncovering default=yes ] idle-timeout=none keepalive-timeout=2m mac-cookie-timeout=3d
/ip hotspot user
add together name=dexter password=dexter

  1. Click on the "IP" menu. If this alternative is non available refer to stride 2
  2. Click on the "Hotspot" item
  3. Click on "Hotspot Setup". This volition start the Hotspot Setup Wizard

4.1 - The Hotspot Wizard
  1. Select the Hotspot twosome equally the Hotspot Interface
  2. Click Next

  1. Click adjacent - The address arrive at should hold out filled inwards automatically equally per our network configuration.


  1. Click Next - the address puddle should hold out pre-populated alongside the correct settings


  1. This tutorial volition non encompass the usage of Certificates, thence you lot may select "none" in addition to click next

  1. Enter the IP-Address of your SMTP server. Many providers exercise non permit usage of their SMTP servers exterior their ain network, thence this alternative allows you lot to circumvent the SMTP server configured on the client's device inwards favor of your own. (You may fifty-fifty specify the SMTP server of you lot ain provider inwards roughly cases)
  2. Click "Next"


These are the upstream DNS servers used past times the hotspot.
  1. Enter ane or to a greater extent than upstream DNS servers, you lot tin usage OpenDNS to furnish you lot alongside a basic filtering service. Here I usage Google's populace DNS.
  2. Click "Next"


  1. Enter a host advert for the local Hotspot. I am using hotspot.example.com, but this could hold out anything you lot want.
  2. Click "Next"


  1. Enter a advert for your administrative Hotspot user.
  2. Enter a password for your administrative user.
  3. Click "Next"


  1.  Click "OK" to consummate your hotspot setup.


Congratulations, you lot convey right away ready basic functionality for a Mikrotik Wireless Hotspot, you lot tin exercise users nether "IP->Hotspot->Users. But alas, you lot all the same ask to configure the Usermanager for a fully featured hotspot.

Step five - Configuring UserManager

5.1 Setting upwardly the Hotspot to usage RADIUS
  1. Click on the "IP" menu
  2. Click on "Hotspot"
  3. Select the "Server Profiles" tab
  4. Double click on "hsprof1"
  5. Select the "RADIUS" tab
  6. Tick the "Use RADIUS" tickbox
  7. Click "OK"

  1. Click on "RADIUS"
  2. Click on "+"
  3. Tick the "hotspot" tickbox
  4. Add the loopback twosome IP to the address field, inwards this tutorial 10.10.0.1
  5. Choose a secure password
  6. Click "OK"

  1. Using your browser of choice, connect to http://router-ip/userman
  2. Click "Log In" - The default username is admin with no password

  1. Once you lot convey logged in, click on the "Routers" menu
  2. Click "Add" in addition to thence "New"
  3. Enter "Local Router" equally the name
  4. Enter the Loopback Bridge IP address
  5. Enter the password you lot chose earlier.
  6. Click "OK" 


Your Mikrotik Hotspot should right away hold out able to communicate alongside the Usermanager Radius Server. You tin right away cash inwards one's chips along to ready profiles in addition to users on the user director interface.

I volition shortly exercise a UserManager Tutorial equally well.