Changes

<li>Press Save & Apply button </li>

<li>Press Save & Apply button </li>

</ol>

</ol>

[[File:VLAN HOTSPOT CONFIGURATION SOL2.png|border|class=tlt-border]]

[[File:VLAN HOTSPOT CONFIGURATION SOL2.png|border|class=tlt-border|1000px]]

===Creating Management Firewall Zone===

===Creating Management Firewall Zone===

<li>Enable DHCP server</li>

<li>Enable DHCP server</li>

[[File:Hotspot_1_lan.png|border|class=tlt-border]]

[[File:Hotspot_1_lan.png|border|class=tlt-border|1000px]]

<li> Next, we need to navigate to Physical Settings of the same interface and choose eth0.150 interface </li>

<li> Next, we need to navigate to Physical Settings of the same interface and choose eth0.150 interface </li>

[[File:Hotspot_2_lan.png|border|class=tlt-border]]

[[File:Hotspot_2_lan.png|border|class=tlt-border|1000px]]

<li> Lastly, we need to navigate to Firewall settings of the same interface and add custom "Management" zone </li>

<li> Lastly, we need to navigate to Firewall settings of the same interface and add custom "Management" zone </li>

[[File:Hotspot_3_lan.png|border|class=tlt-border]]

[[File:Hotspot_3_lan.png|border|class=tlt-border|1000px]]

</ol>

</ol>

<li>Enter interface name as "Hotspot"</li>

<li>Enter interface name as "Hotspot"</li>

<li>Protocol should be set as "None"</li>

<li>Protocol should be set as "None"</li>

[[File:Hotspot_4_lan.png|border|class=tlt-border]]

[[File:Hotspot_4_lan.png|border|class=tlt-border|1000px]]

<li>Next, In physical settings turn on "Bridge Interfaces"</li>

<li>Next, In physical settings turn on "Bridge Interfaces"</li>

<li>Additionally select eth0.50 interface</li>

<li>Additionally select eth0.50 interface</li>

[[File:Hotspot_5_lan.png|border|class=tlt-border]]

[[File:Hotspot_5_lan.png|border|class=tlt-border|1000px]]

<li>Lastly, In firewall settings, choose LAN zone</li>

<li>Lastly, In firewall settings, choose LAN zone</li>

[[File:Hotspot_6_lan.png|border|class=tlt-border]]

[[File:Hotspot_6_lan.png|border|class=tlt-border|1000px]]

<li>Dont forget to press Save & Apply</li>

<li>Dont forget to press Save & Apply</li>

</ol>

</ol>

</ol>

</ol>

It's crucial to remember and securely store these credentials, as they will be used by users to authenticate themselves on the hotspot network successfully.

It's crucial to remember and securely store these credentials, as they will be used by users to authenticate themselves on the hotspot network successfully.

[[File:Hotspot_7_lan.png|border|class=tlt-border]]

[[File:Hotspot_7_lan.png|border|class=tlt-border|1000px]]

====Hotspot interface configuration====

====Hotspot interface configuration====

----

----

<li> Press "ADD" button </li>

<li> Press "ADD" button </li>

</ol>

</ol>

[[File:Hotspot_8_lan.png|border|class=tlt-border]]

[[File:Hotspot_8_lan.png|border|class=tlt-border|1000px]]

Next, in the pop-up window, please click the "Enable" button. You can choose to either leave all other settings at their default values or make adjustments as per your preferences. For the purpose of this configuration, we'll maintain the default settings.

Next, in the pop-up window, please click the "Enable" button. You can choose to either leave all other settings at their default values or make adjustments as per your preferences. For the purpose of this configuration, we'll maintain the default settings.

[[File:Hotspot_9_lan.png|border|class=tlt-border]]

[[File:Hotspot_9_lan.png|border|class=tlt-border|1000px]]

==Access point (TAP100) configuration==

==Access point (TAP100) configuration==

After successfully establishing a connection to the TAP100 WebUI, the next step is to navigate to '''Network -> Wireless SSIDs'''. Within this section, press edit button on SSID and in pop-up window on VLAN ID option choose custom and enter 50.   

After successfully establishing a connection to the TAP100 WebUI, the next step is to navigate to '''Network -> Wireless SSIDs'''. Within this section, press edit button on SSID and in pop-up window on VLAN ID option choose custom and enter 50.   

[[File:Hotspot_10_lan.png|border|class=tlt-border]]

[[File:Hotspot_10_lan.png|border|class=tlt-border|1000px]]

After this, navigate to '''Network -> IP Settings''' and under Management VLAN option choose custom and enter 150. Also, make sure that Mode is set to Static + DHCP.  

After this, navigate to '''Network -> IP Settings''' and under Management VLAN option choose custom and enter 150. Also, make sure that Mode is set to Static + DHCP.  

[[File:Hotspot_11_lan.png|border|class=tlt-border]]

[[File:Hotspot_11_lan.png|border|class=tlt-border|1000px]]

That concludes the necessary configuration steps for the TAP100. Now, let's establish the connection between your router and the TAP100. To do this, you can simply connect one end of an Ethernet cable to the router's LAN3 port and the other end to the TAP100's Ethernet IN port on the PoE injector. For more detailed installation instructions, please refer to the installation guide which can be found [https://wiki.teltonika-networks.com/view/QSG_TAP100#Installation_Guide here]

That concludes the necessary configuration steps for the TAP100. Now, let's establish the connection between your router and the TAP100. To do this, you can simply connect one end of an Ethernet cable to the router's LAN3 port and the other end to the TAP100's Ethernet IN port on the PoE injector. For more detailed installation instructions, please refer to the installation guide which can be found [https://wiki.teltonika-networks.com/view/QSG_TAP100#Installation_Guide here]

<li> Press "ADD" button  </li>

<li> Press "ADD" button  </li>

</ol>

</ol>

[[File:Hotspot_12_lan.png|border|class=tlt-border]]

[[File:Hotspot_12_lan.png|border|class=tlt-border|1000px]]

After completing these steps, a pop-up window will appear, where you need to enter the following details:

After completing these steps, a pop-up window will appear, where you need to enter the following details:

<li> Don't forget to enable and save it </li>

<li> Don't forget to enable and save it </li>

</ol>

</ol>

[[File:Hotspot_13_lan.png|border|class=tlt-border]]

[[File:Hotspot_13_lan.png|border|class=tlt-border|1000px]]

With this firewall rule in place, all clients connected to the hotspot will have access to the router's WebUI using the router LAN address.

With this firewall rule in place, all clients connected to the hotspot will have access to the router's WebUI using the router LAN address.

<li> In the configuration window, go to the Additinal Settings section and enable the "Isolate Clients" option by clicking the "ON" button </li>

<li> In the configuration window, go to the Additinal Settings section and enable the "Isolate Clients" option by clicking the "ON" button </li>

</ol>

</ol>

[[File:Hotspot_14_lan.png|border|class=tlt-border]]

[[File:Hotspot_14_lan.png|border|class=tlt-border|1000px]]

To further ensure that clients connected to the router's Wi-Fi interface cannot communicate with hotspot clients, I recommend enabling the "Isolate Clients" option on your router wi-fi interface as well.

To further ensure that clients connected to the router's Wi-Fi interface cannot communicate with hotspot clients, I recommend enabling the "Isolate Clients" option on your router wi-fi interface as well.