31,703
edits
Changes
Created page with "==Summary== Wireless '''Hotspots''' are essentially Wireless Access Points - they provide network and/or internet access to other Wi-Fi devices. The difference is that Hotspo..."
==Summary==
Wireless '''Hotspots''' are essentially Wireless Access Points - they provide network and/or internet access to other Wi-Fi devices. The difference is that Hotspots are a lot more versatile when it comes to managing, monitoring and authenticating the wireless network's users. For example, while Wireless APs can be password protected, with Hotspots you can configure different users with different names, passwords, even data limits and data speeds and more. This chapter is an overview of the '''Wireless Hotspot''' function in RUT routers.
==General==
The '''General''' tab is where most of the Hotspot configurations take place. This section will be divided into six sub-sections - one for each '''Authentication mode''', since the chosen '''Authentication mode''' will define how the Hotspot will be configured in general.
===External Radius===
'''External Radius''' authentication mode uses an external Radius server, to which you have to provide an address to, instead of using the router's internal Radius server.
[[Image:Services hotspot configuration external.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Authentication protocol
| style="text-align: left; vertical-align: top;" | PAP {{!}} CHAP; Default: '''PAP'''
| style="text-align: left; vertical-align: top;" | Authentication protocol used to authenticate new connections on the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | RADIUS server #1 {{!}} RADIUS server #2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP address of the RADIUS server that is to be used for Authenticating your wireless clients
|-
! style="text-align: left; vertical-align: top;" | Authentication port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1812'''
| style="text-align: left; vertical-align: top;" | RADIUS server authentication port
|-
! style="text-align: left; vertical-align: top;" | Accounting port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1813'''
| style="text-align: left; vertical-align: top;" | RADIUS server accounting port
|-
! style="text-align: left; vertical-align: top;" | Radius secret key
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | The secret key is a password used for authentication with the RADIUS server
|-
! style="text-align: left; vertical-align: top;" | UAM port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''3990'''
| style="text-align: left; vertical-align: top;" | Port to bind for authenticating clients
|-
! style="text-align: left; vertical-align: top;" | UAM UI port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''4990'''
| style="text-align: left; vertical-align: top;" | UAM User Interface port
|-
! style="text-align: left; vertical-align: top;" | UAM secret
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Shared secret between the UAM server and the Hotspot
|-
! style="text-align: left; vertical-align: top;" | NAS identifier
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | NAS-Identifier is one of the basic RADIUS attributes
|-
! style="text-align: left; vertical-align: top;" | Swap octets
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Swaps the meaning of input octets and output as it relates to RADIUS attributes
|-
! style="text-align: left; vertical-align: top;" | Location name
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Custom location name for your Hotspot
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===Internal Radius===
'''Internal Radius''' is Authentication mode that uses the router's internal Radius server for authentication
[[Image:Services hotspot configuration internal.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
Information on how to configure Internal radius server can be found [[#Radius_Server|here]].
===Without Radius===
'''Without Radius''' Authentication doesn't use a Radius server to authenticate users connecting to the Hotspot, instead it gives you the possibility to configure different users with different password and session parameters.
[[Image:Services hotspot configuration without.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
====Users Configuration====
The '''Users Configuration''' tab is used to create new, unique users that can connect to the Hotspot.
[[Image:Services hotspot configuration user.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Username
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom password for the specified user name
|-
! style="text-align: left; vertical-align: top;" | Session Template
| style="text-align: left; vertical-align: top;" | string; Default: '''unlimited'''
| style="text-align: left; vertical-align: top;" | Session templates define session settings for different users. The '''unlimited''' Session Template is a default template with no restrictions. More on Session Template in the next section
|-
|}
====Session Templates====
A '''Session Template''' is a set of rules that can be prescribed to a Hotspot user. A default template named '''unlimited''' is present in the router, but it has no configured restrictions. You can edit the default template or you can create a custom template and configure it.
[[Image:Services hotspot configuration session template.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Idle timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after which idle users are automatically disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Session timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after users are automatically disconnected from the Hotspot. The timeout countdown begins when a user is authenticated to the Hotspot and, after an amount of time specified in this field, the user gets disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Download bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum download bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Upload bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum upload bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Download limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A received data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Download limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Upload limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A sent data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Upload limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Period
| style="text-align: left; vertical-align: top;" | Month {{!}} Week {{!}} Day; Default: '''Month'''
| style="text-align: left; vertical-align: top;" | The beginning of the period during which the restriction specified in this section will apply. After the period is over, all specified limits are reset
|-
! style="text-align: left; vertical-align: top;" | Start day {{!}} Start hour
| style="text-align: left; vertical-align: top;" | integer [1..31] {{!}} Monday..Sunday {{!}} integer [1..24]; Default: '''day 1'''
| style="text-align: left; vertical-align: top;" | Specifies which day of the month, week or hour of the day the limits will be reset
|-
|}
===Advertisement===
The '''Advertisement''' Authentication mode doesn't use any kind of actual authentication. Instead when a user connects to the Hotspot he first gets redirected to a specified advertisement page. After that the user is free to use the Hotspot.
[[Image:Services hotspot configuration advertisement.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Advertisement address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: " "
| style="text-align: left; vertical-align: top;" | The address of the advertisement page that newly connected users will be redirected to
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===MAC auth===
'''MAC auth''' Authentication mode authenticates users by their MAC address. A list of accepted or unaccepted MAC addresses can be configured in the router's WebUI's Wireless section under Interface Configuration->[[Wireless#MAC_Filter|MAC Filter]]
[[Image:Services hotspot configuration mac.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | Password protection
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables Hotspot password protection
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A password used to authenticate connecting clients to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Website access link
| style="text-align: left; vertical-align: top;" | Link {{!}} Auto redirect {{!}} Custom address; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Requested website access mode
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===SMS OTP===
With '''SMS OTP''' Authentication mode connecting users are prompted to enter their phone number. After that, the router sends and SMS message containing a code to the specified number. Users then authenticate themselves to the Hotspot using this code.
[[Image:Services hotspot configuration sms.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===List Of Addresses The Client Can Access Without First Authenticating===
You can configure a list of addresses that users connected to the Hotspot will be able to reach without any authentication. By default this list is empty. Click the '''Add''' button to add a new address.
[[Image:Services hotspot configuration address list.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables or disables an entry of the list
|-
! style="text-align: left; vertical-align: top;" | Address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: " "
| style="text-align: left; vertical-align: top;" | An address that users connected to the Hotspot can reach without authentication
|-
! style="text-align: left; vertical-align: top;" | Port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: " "
| style="text-align: left; vertical-align: top;" | Specifies the port through which the user can connect to the provided address. This field becomes visible only if '''Allow subdomains''' is disabled
|-
! style="text-align: left; vertical-align: top;" | Allow subdomains
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If checked, users can connect to the specified address and all of its subdomains
|-
|}
==Restricted Internet Access==
The '''Restricted Internet Access''' page provides you with the possibility to restrict internet access on Hotspot on specified hours. Blue squares represent restricted access, white squares - allowed access. Bellow is an example of a configuration that restricts internet access outside of working hours.
[[Image:Services hotspot restricted list.PNG]]
==Logging==
The Hotspot '''Logging''' section is used to periodically send Hotspot information to an FTP server.
[[Image:Services hotspot logging configuration ftp.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles logging to FTP ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Server address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''your.ftp.server'''
| style="text-align: left; vertical-align: top;" | FTP server address.
|-
! style="text-align: left; vertical-align: top;" | User name
| style="text-align: left; vertical-align: top;" | string; Default: '''username'''
| style="text-align: left; vertical-align: top;" | User name used for authentication when logging into an FTP server
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Password used for authentication when logging into an FTP server
|-
! style="text-align: left; vertical-align: top;" | Port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''21'''
| style="text-align: left; vertical-align: top;" | FTP server port
|-
! style="text-align: left; vertical-align: top;" | File name extras
| style="text-align: left; vertical-align: top;" | No extra information {{!}} MAC address {{!}} Serial number {{!}} Custom string; Default: '''No extra information'''
| style="text-align: left; vertical-align: top;" | Extra information to be added to the log filename
|-
|}
===FTP Upload Settings===
Here you can configure your timing settings for the log upload via FTP feature.
[[Image:Services hotspot logging configuration ftp set.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Mode
| style="text-align: left; vertical-align: top;" | Fixed {{!}} Interval; Default: '''Fixed'''
| style="text-align: left; vertical-align: top;" | The scheduling mode to be used for uploading to FTP server
|-
! style="text-align: left; vertical-align: top;" | Hours {{!}} Minutes {{!}} Days
| style="text-align: left; vertical-align: top;" | time; Default: '''8 hours 15 minutes'''
| style="text-align: left; vertical-align: top;" | Time interval when the uploads will take place
|-
|}
===Wifi Log/SMS OTP Log===
WiFi and SMS OTP logs show information about connections to your WiFi Hotspot. FTP logging has to be enabled.
==Landing Page==
This section is used to define how your Hotspot's Landing Page will look like.
[[Image:Services hotspot landing page general.PNG]]
===Template===
This is a template based on the default landing page. You can edit its HTML code to make it look however you want!
[[Image:Services hotspot landing page template.PNG]]
==Radius Server==
This section is used to configure your '''Radius Server''' for use with '''[[#Internal_Radius|Internal radius]]''' Authentication mode
[[Image:Services hotspot radius server.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Radius Server ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Remote access
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles remote access to the Radius Server ON or OFF.
|-
! style="text-align: left; vertical-align: top;" | Authentication port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1812'''
| style="text-align: left; vertical-align: top;" | Radius server authentication port
|-
! style="text-align: left; vertical-align: top;" | Accounting port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1813'''
| style="text-align: left; vertical-align: top;" | Radius server accounting port
|-
|}
===Session Settings===
A '''Session Template''' is a set of rules that can be prescribed to a Hotspot user. A default template named '''unlimited''' is present in the router, but it has no configured restriction. You can edit the default template or you can create a custom template and configure it.
[[Image:Services hotspot configuration session template.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Idle timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after which idle users are automatically disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Session timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after users are automatically disconnected from the Hotspot. The timeout countdown begins when a user is authenticated to the Hotspot and, after an amount of time specified in this field, the user gets disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Download bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum download bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Upload bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum upload bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Download limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A received data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Download limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Upload limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A sent data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Upload limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Period
| style="text-align: left; vertical-align: top;" | Month {{!}} Week {{!}} Day; Default: '''Month'''
| style="text-align: left; vertical-align: top;" | The beginning of the period during which the restriction specified in this section will apply. After the period is over, all specified limits are reset
|-
! style="text-align: left; vertical-align: top;" | Start day {{!}} Start hour
| style="text-align: left; vertical-align: top;" | integer [1..31] {{!}} Monday..Sunday {{!}} integer [1..24]; Default: '''day 1'''
| style="text-align: left; vertical-align: top;" | Specifies which day of the month, week or hour of the day the limits will be reset
|-
|}
===Users Configuration Settings===
The '''Users Configuration''' tab is used to create new, unique users that can connect to the Hotspot.
[[Image:Services hotspot configuration user.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Username
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom password for the specified user name
|-
! style="text-align: left; vertical-align: top;" | Session Template
| style="text-align: left; vertical-align: top;" | string; Default: '''unlimited'''
| style="text-align: left; vertical-align: top;" | Session templates define session settings for different users. The '''unlimited''' Session Template is a default template with no restrictions. More on Session Template in the next section
|-
|}
===Clients Configuration Settings===
[[Image:Services hotspot radius server clients.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Clients Configuration ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Client name
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | IP address
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP address of the client
|-
! style="text-align: left; vertical-align: top;" | Netmask
| style="text-align: left; vertical-align: top;" | integer [0..32]; Default: " "
| style="text-align: left; vertical-align: top;" | The netmask of the client
|-
! style="text-align: left; vertical-align: top;" | Radius shared secret
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Radius shared secret used for communication between the client/NAS and the radius server
|-
|}
==Statistics==
The '''Statistics''' page shows statistics about connections to the hotspot.
[[Image:Services hotspot stats.PNG]]
==URL Parameters==
Here you can set custom Captive Portal URL identification names.
[[Image:Services hotspot URL parameters rut850.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | UAMip
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP Address of the Captive Portal gateway
|-
! style="text-align: left; vertical-align: top;" | UAMport
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: " "
| style="text-align: left; vertical-align: top;" | The port on which the Captive Portal will serve web content
|-
! style="text-align: left; vertical-align: top;" | Called
| style="text-align: left; vertical-align: top;" | mac; Default: " "
| style="text-align: left; vertical-align: top;" | The MAC address of the IP Address of the Captive Portal gateway
|-
! style="text-align: left; vertical-align: top;" | MAC
| style="text-align: left; vertical-align: top;" | mac; Default: " "
| style="text-align: left; vertical-align: top;" | The MAC address of the client trying to gain Internet access
|-
! style="text-align: left; vertical-align: top;" | IP
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP Address of the client trying to gain Internet access
|-
! style="text-align: left; vertical-align: top;" | NASid
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | An identification for the Captive Portal used in the RADIUS request
|-
! style="text-align: left; vertical-align: top;" | Sessionid
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | The unique identifier for the session
|-
! style="text-align: left; vertical-align: top;" | Userurl
| style="text-align: left; vertical-align: top;" | url; Default: " "
| style="text-align: left; vertical-align: top;" | The URL which the user tried to access before he was redirected to the Captive Portal's URL's pages
|-
! style="text-align: left; vertical-align: top;" | Challenge
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A challenge that should be used together with the user's password to create an encrypted phrase used to log on
|-
! style="text-align: left; vertical-align: top;" | Custom No. 1
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Adds a custom name and a custom value which will be displayed in url parameters
|-
! style="text-align: left; vertical-align: top;" | Custom No. 2
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Adds a custom name and a custom value which will be displayed in url parameters
|-
|}
==Manage==
With the help of the '''Manage''' page you manage the users that are connected to your Hotspot. To reach the '''Manage''' window, go to Services->Hotspot. The '''Manage''' button will be located next to your Hotspot instance.
[[Image:Services hotspot manage reach.PNG]]
[[Image:Services hotspot manage.PNG]]
Wireless '''Hotspots''' are essentially Wireless Access Points - they provide network and/or internet access to other Wi-Fi devices. The difference is that Hotspots are a lot more versatile when it comes to managing, monitoring and authenticating the wireless network's users. For example, while Wireless APs can be password protected, with Hotspots you can configure different users with different names, passwords, even data limits and data speeds and more. This chapter is an overview of the '''Wireless Hotspot''' function in RUT routers.
==General==
The '''General''' tab is where most of the Hotspot configurations take place. This section will be divided into six sub-sections - one for each '''Authentication mode''', since the chosen '''Authentication mode''' will define how the Hotspot will be configured in general.
===External Radius===
'''External Radius''' authentication mode uses an external Radius server, to which you have to provide an address to, instead of using the router's internal Radius server.
[[Image:Services hotspot configuration external.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Authentication protocol
| style="text-align: left; vertical-align: top;" | PAP {{!}} CHAP; Default: '''PAP'''
| style="text-align: left; vertical-align: top;" | Authentication protocol used to authenticate new connections on the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | RADIUS server #1 {{!}} RADIUS server #2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP address of the RADIUS server that is to be used for Authenticating your wireless clients
|-
! style="text-align: left; vertical-align: top;" | Authentication port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1812'''
| style="text-align: left; vertical-align: top;" | RADIUS server authentication port
|-
! style="text-align: left; vertical-align: top;" | Accounting port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1813'''
| style="text-align: left; vertical-align: top;" | RADIUS server accounting port
|-
! style="text-align: left; vertical-align: top;" | Radius secret key
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | The secret key is a password used for authentication with the RADIUS server
|-
! style="text-align: left; vertical-align: top;" | UAM port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''3990'''
| style="text-align: left; vertical-align: top;" | Port to bind for authenticating clients
|-
! style="text-align: left; vertical-align: top;" | UAM UI port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''4990'''
| style="text-align: left; vertical-align: top;" | UAM User Interface port
|-
! style="text-align: left; vertical-align: top;" | UAM secret
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Shared secret between the UAM server and the Hotspot
|-
! style="text-align: left; vertical-align: top;" | NAS identifier
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | NAS-Identifier is one of the basic RADIUS attributes
|-
! style="text-align: left; vertical-align: top;" | Swap octets
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Swaps the meaning of input octets and output as it relates to RADIUS attributes
|-
! style="text-align: left; vertical-align: top;" | Location name
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Custom location name for your Hotspot
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===Internal Radius===
'''Internal Radius''' is Authentication mode that uses the router's internal Radius server for authentication
[[Image:Services hotspot configuration internal.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
Information on how to configure Internal radius server can be found [[#Radius_Server|here]].
===Without Radius===
'''Without Radius''' Authentication doesn't use a Radius server to authenticate users connecting to the Hotspot, instead it gives you the possibility to configure different users with different password and session parameters.
[[Image:Services hotspot configuration without.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | External landing page
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of an external landing page
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
====Users Configuration====
The '''Users Configuration''' tab is used to create new, unique users that can connect to the Hotspot.
[[Image:Services hotspot configuration user.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Username
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom password for the specified user name
|-
! style="text-align: left; vertical-align: top;" | Session Template
| style="text-align: left; vertical-align: top;" | string; Default: '''unlimited'''
| style="text-align: left; vertical-align: top;" | Session templates define session settings for different users. The '''unlimited''' Session Template is a default template with no restrictions. More on Session Template in the next section
|-
|}
====Session Templates====
A '''Session Template''' is a set of rules that can be prescribed to a Hotspot user. A default template named '''unlimited''' is present in the router, but it has no configured restrictions. You can edit the default template or you can create a custom template and configure it.
[[Image:Services hotspot configuration session template.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Idle timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after which idle users are automatically disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Session timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after users are automatically disconnected from the Hotspot. The timeout countdown begins when a user is authenticated to the Hotspot and, after an amount of time specified in this field, the user gets disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Download bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum download bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Upload bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum upload bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Download limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A received data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Download limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Upload limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A sent data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Upload limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Period
| style="text-align: left; vertical-align: top;" | Month {{!}} Week {{!}} Day; Default: '''Month'''
| style="text-align: left; vertical-align: top;" | The beginning of the period during which the restriction specified in this section will apply. After the period is over, all specified limits are reset
|-
! style="text-align: left; vertical-align: top;" | Start day {{!}} Start hour
| style="text-align: left; vertical-align: top;" | integer [1..31] {{!}} Monday..Sunday {{!}} integer [1..24]; Default: '''day 1'''
| style="text-align: left; vertical-align: top;" | Specifies which day of the month, week or hour of the day the limits will be reset
|-
|}
===Advertisement===
The '''Advertisement''' Authentication mode doesn't use any kind of actual authentication. Instead when a user connects to the Hotspot he first gets redirected to a specified advertisement page. After that the user is free to use the Hotspot.
[[Image:Services hotspot configuration advertisement.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Advertisement address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: " "
| style="text-align: left; vertical-align: top;" | The address of the advertisement page that newly connected users will be redirected to
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===MAC auth===
'''MAC auth''' Authentication mode authenticates users by their MAC address. A list of accepted or unaccepted MAC addresses can be configured in the router's WebUI's Wireless section under Interface Configuration->[[Wireless#MAC_Filter|MAC Filter]]
[[Image:Services hotspot configuration mac.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Logout address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''1.1.1.1'''
| style="text-align: left; vertical-align: top;" | An address that can be used by users to logout from the Hotspot session
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Terms of service
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If enabled, users have to agree to the Terms of service before logging in. Custom Terms of service can be defined in the '''Landing Page''' section
|-
! style="text-align: left; vertical-align: top;" | Password protection
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables Hotspot password protection
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A password used to authenticate connecting clients to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Website access link
| style="text-align: left; vertical-align: top;" | Link {{!}} Auto redirect {{!}} Custom address; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Requested website access mode
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===SMS OTP===
With '''SMS OTP''' Authentication mode connecting users are prompted to enter their phone number. After that, the router sends and SMS message containing a code to the specified number. Users then authenticate themselves to the Hotspot using this code.
[[Image:Services hotspot configuration sms.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Wi-Fi Hotspot ON or OFF
|-
! style="text-align: left; vertical-align: top;" | AP IP
| style="text-align: left; vertical-align: top;" | ip; Default: '''192.168.2.254/24'''
| style="text-align: left; vertical-align: top;" | Access Point IP address defines the IP address of your Hotspot's network
|-
! style="text-align: left; vertical-align: top;" | Authentication mode
| style="text-align: left; vertical-align: top;" | External radius {{!}} Internal radius {{!}} Without radius {{!}} Advertisement {{!}} MAC auth {{!}} SMS OTP; Default: '''Without radius'''
| style="text-align: left; vertical-align: top;" | Authentication mode defines how users will connect to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Protocol
| style="text-align: left; vertical-align: top;" | HTTP {{!}} HTTPS; Default: '''HTTP'''
| style="text-align: left; vertical-align: top;" | Connection protocol of your Hotspot
|-
! style="text-align: left; vertical-align: top;" | HTTPS redirect
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Redirects HTTP pages to landing page
|-
! style="text-align: left; vertical-align: top;" | SSL key file
| style="text-align: left; vertical-align: top;" | .key file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL key file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | SSL certificate file
| style="text-align: left; vertical-align: top;" | .crt file; Default: " "
| style="text-align: left; vertical-align: top;" | SSL certificate file used for authentication. This field becomes visible only if '''HTTPS redirect''' is enabled
|-
! style="text-align: left; vertical-align: top;" | Use custom DNS
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables the use of custom DNS servers instead of your regular DNS
|-
! style="text-align: left; vertical-align: top;" | DNS server 1 {{!}} DNS server 2
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | Additional DNS servers that are to be used by the Hotspot. These fields become visible only if '''Use custom DNS''' is enabled
|-
|}
===List Of Addresses The Client Can Access Without First Authenticating===
You can configure a list of addresses that users connected to the Hotspot will be able to reach without any authentication. By default this list is empty. Click the '''Add''' button to add a new address.
[[Image:Services hotspot configuration address list.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Enables or disables an entry of the list
|-
! style="text-align: left; vertical-align: top;" | Address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: " "
| style="text-align: left; vertical-align: top;" | An address that users connected to the Hotspot can reach without authentication
|-
! style="text-align: left; vertical-align: top;" | Port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: " "
| style="text-align: left; vertical-align: top;" | Specifies the port through which the user can connect to the provided address. This field becomes visible only if '''Allow subdomains''' is disabled
|-
! style="text-align: left; vertical-align: top;" | Allow subdomains
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | If checked, users can connect to the specified address and all of its subdomains
|-
|}
==Restricted Internet Access==
The '''Restricted Internet Access''' page provides you with the possibility to restrict internet access on Hotspot on specified hours. Blue squares represent restricted access, white squares - allowed access. Bellow is an example of a configuration that restricts internet access outside of working hours.
[[Image:Services hotspot restricted list.PNG]]
==Logging==
The Hotspot '''Logging''' section is used to periodically send Hotspot information to an FTP server.
[[Image:Services hotspot logging configuration ftp.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles logging to FTP ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Server address
| style="text-align: left; vertical-align: top;" | host {{!}} ip; Default: '''your.ftp.server'''
| style="text-align: left; vertical-align: top;" | FTP server address.
|-
! style="text-align: left; vertical-align: top;" | User name
| style="text-align: left; vertical-align: top;" | string; Default: '''username'''
| style="text-align: left; vertical-align: top;" | User name used for authentication when logging into an FTP server
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Password used for authentication when logging into an FTP server
|-
! style="text-align: left; vertical-align: top;" | Port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''21'''
| style="text-align: left; vertical-align: top;" | FTP server port
|-
! style="text-align: left; vertical-align: top;" | File name extras
| style="text-align: left; vertical-align: top;" | No extra information {{!}} MAC address {{!}} Serial number {{!}} Custom string; Default: '''No extra information'''
| style="text-align: left; vertical-align: top;" | Extra information to be added to the log filename
|-
|}
===FTP Upload Settings===
Here you can configure your timing settings for the log upload via FTP feature.
[[Image:Services hotspot logging configuration ftp set.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Mode
| style="text-align: left; vertical-align: top;" | Fixed {{!}} Interval; Default: '''Fixed'''
| style="text-align: left; vertical-align: top;" | The scheduling mode to be used for uploading to FTP server
|-
! style="text-align: left; vertical-align: top;" | Hours {{!}} Minutes {{!}} Days
| style="text-align: left; vertical-align: top;" | time; Default: '''8 hours 15 minutes'''
| style="text-align: left; vertical-align: top;" | Time interval when the uploads will take place
|-
|}
===Wifi Log/SMS OTP Log===
WiFi and SMS OTP logs show information about connections to your WiFi Hotspot. FTP logging has to be enabled.
==Landing Page==
This section is used to define how your Hotspot's Landing Page will look like.
[[Image:Services hotspot landing page general.PNG]]
===Template===
This is a template based on the default landing page. You can edit its HTML code to make it look however you want!
[[Image:Services hotspot landing page template.PNG]]
==Radius Server==
This section is used to configure your '''Radius Server''' for use with '''[[#Internal_Radius|Internal radius]]''' Authentication mode
[[Image:Services hotspot radius server.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Radius Server ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Remote access
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles remote access to the Radius Server ON or OFF.
|-
! style="text-align: left; vertical-align: top;" | Authentication port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1812'''
| style="text-align: left; vertical-align: top;" | Radius server authentication port
|-
! style="text-align: left; vertical-align: top;" | Accounting port
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: '''1813'''
| style="text-align: left; vertical-align: top;" | Radius server accounting port
|-
|}
===Session Settings===
A '''Session Template''' is a set of rules that can be prescribed to a Hotspot user. A default template named '''unlimited''' is present in the router, but it has no configured restriction. You can edit the default template or you can create a custom template and configure it.
[[Image:Services hotspot configuration session template.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Idle timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after which idle users are automatically disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Session timeout
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A timeout in seconds after users are automatically disconnected from the Hotspot. The timeout countdown begins when a user is authenticated to the Hotspot and, after an amount of time specified in this field, the user gets disconnected from the Hotspot. 0 means unlimited
|-
! style="text-align: left; vertical-align: top;" | Download bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum download bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Upload bandwidth
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | Maximum upload bandwidth that the users assigned to this template can achieve. Bandwidth can be specified in Kbit/s or Mbit/s
|-
! style="text-align: left; vertical-align: top;" | Download limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A received data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Download limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Upload limit
| style="text-align: left; vertical-align: top;" | integer; Default: " "
| style="text-align: left; vertical-align: top;" | A sent data limit that the users assigned to this template can reach. After the data limit is reached, the user will lose data connection. Upload limit is specified in MB
|-
! style="text-align: left; vertical-align: top;" | Period
| style="text-align: left; vertical-align: top;" | Month {{!}} Week {{!}} Day; Default: '''Month'''
| style="text-align: left; vertical-align: top;" | The beginning of the period during which the restriction specified in this section will apply. After the period is over, all specified limits are reset
|-
! style="text-align: left; vertical-align: top;" | Start day {{!}} Start hour
| style="text-align: left; vertical-align: top;" | integer [1..31] {{!}} Monday..Sunday {{!}} integer [1..24]; Default: '''day 1'''
| style="text-align: left; vertical-align: top;" | Specifies which day of the month, week or hour of the day the limits will be reset
|-
|}
===Users Configuration Settings===
The '''Users Configuration''' tab is used to create new, unique users that can connect to the Hotspot.
[[Image:Services hotspot configuration user.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Username
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | Password
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom password for the specified user name
|-
! style="text-align: left; vertical-align: top;" | Session Template
| style="text-align: left; vertical-align: top;" | string; Default: '''unlimited'''
| style="text-align: left; vertical-align: top;" | Session templates define session settings for different users. The '''unlimited''' Session Template is a default template with no restrictions. More on Session Template in the next section
|-
|}
===Clients Configuration Settings===
[[Image:Services hotspot radius server clients.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | Enable
| style="text-align: left; vertical-align: top;" | yes {{!}} no; Default: '''no'''
| style="text-align: left; vertical-align: top;" | Toggles Clients Configuration ON or OFF
|-
! style="text-align: left; vertical-align: top;" | Client name
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A custom user name used to authenticate clients connecting to the Hotspot
|-
! style="text-align: left; vertical-align: top;" | IP address
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP address of the client
|-
! style="text-align: left; vertical-align: top;" | Netmask
| style="text-align: left; vertical-align: top;" | integer [0..32]; Default: " "
| style="text-align: left; vertical-align: top;" | The netmask of the client
|-
! style="text-align: left; vertical-align: top;" | Radius shared secret
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Radius shared secret used for communication between the client/NAS and the radius server
|-
|}
==Statistics==
The '''Statistics''' page shows statistics about connections to the hotspot.
[[Image:Services hotspot stats.PNG]]
==URL Parameters==
Here you can set custom Captive Portal URL identification names.
[[Image:Services hotspot URL parameters rut850.PNG]]
{| class="wikitable"
|+
! style="width: 250px; background: black; color: white;" | Field name
! style="width: 250px; background: black; color: white;" | Value
! style="width: 1200px; background: black; color: white;" | Description
|-
! style="text-align: left; vertical-align: top;" | UAMip
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP Address of the Captive Portal gateway
|-
! style="text-align: left; vertical-align: top;" | UAMport
| style="text-align: left; vertical-align: top;" | integer [0..65535]; Default: " "
| style="text-align: left; vertical-align: top;" | The port on which the Captive Portal will serve web content
|-
! style="text-align: left; vertical-align: top;" | Called
| style="text-align: left; vertical-align: top;" | mac; Default: " "
| style="text-align: left; vertical-align: top;" | The MAC address of the IP Address of the Captive Portal gateway
|-
! style="text-align: left; vertical-align: top;" | MAC
| style="text-align: left; vertical-align: top;" | mac; Default: " "
| style="text-align: left; vertical-align: top;" | The MAC address of the client trying to gain Internet access
|-
! style="text-align: left; vertical-align: top;" | IP
| style="text-align: left; vertical-align: top;" | ip; Default: " "
| style="text-align: left; vertical-align: top;" | The IP Address of the client trying to gain Internet access
|-
! style="text-align: left; vertical-align: top;" | NASid
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | An identification for the Captive Portal used in the RADIUS request
|-
! style="text-align: left; vertical-align: top;" | Sessionid
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | The unique identifier for the session
|-
! style="text-align: left; vertical-align: top;" | Userurl
| style="text-align: left; vertical-align: top;" | url; Default: " "
| style="text-align: left; vertical-align: top;" | The URL which the user tried to access before he was redirected to the Captive Portal's URL's pages
|-
! style="text-align: left; vertical-align: top;" | Challenge
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | A challenge that should be used together with the user's password to create an encrypted phrase used to log on
|-
! style="text-align: left; vertical-align: top;" | Custom No. 1
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Adds a custom name and a custom value which will be displayed in url parameters
|-
! style="text-align: left; vertical-align: top;" | Custom No. 2
| style="text-align: left; vertical-align: top;" | string; Default: " "
| style="text-align: left; vertical-align: top;" | Adds a custom name and a custom value which will be displayed in url parameters
|-
|}
==Manage==
With the help of the '''Manage''' page you manage the users that are connected to your Hotspot. To reach the '''Manage''' window, go to Services->Hotspot. The '''Manage''' button will be located next to your Hotspot instance.
[[Image:Services hotspot manage reach.PNG]]
[[Image:Services hotspot manage.PNG]]
