Eric, No I hadn't thought of that but I am interested in hearing more about it. Can you give me some more insight on how that would work?
Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net<http://www.midwaynet.net/> jbows...@midwaynet.net<mailto:jbows...@midwaynet.net> From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Eric Roth Sent: Thursday, July 14, 2011 8:43 AM To: 'WISPA General List' Cc: supp...@webjogger.net Subject: Re: [WISPA] Authentication for WISP's Hi Joshua, Have you thought about using 802.1x with multiple VLAN's instead of PPOE and setting up a restricted vlan for those who shouldn't be granted access for whatever reason.? --Eric Roth Technology Specialist Webjogger Internet Services (845) 757-4000 www.webjogger.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Steve Barnes Sent: Thursday, July 14, 2011 8:42 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Joshua, There are several WISPA members who are Mikrotik Engineers. I would expect you could get some advice from one of them with very little cost. (Butch Evans, Dennis Burgess, Scott Reed come to mind.) I know from talking to Butch Evans less than a month ago that he has a system that allows you to setup DHCP at the Router, The DHCP relay Authenticates the Mac against the Radius and gets the assigned IP, creates the queue and reports back to the radius and accounting info. We still use Hotspot on ours and have no issue, but I am not the programmer and cant give you any info with how that is handled. I do know that they have told me that with hotspot it makes it easier to direct customers to a payment portal when suspended and it is the same setup if we put a hotspot in a public area to get short term customer logins at an event. Steve Barnes General Manager PCS-WIN/RC-WiFi<http://www.rcwifi.com/> From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Wednesday, July 13, 2011 5:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net<http://www.midwaynet.net/> jbows...@midwaynet.net<mailto:jbows...@midwaynet.net> From: wireless-boun...@wispa.org<mailto:wireless-boun...@wispa.org> [mailto:wireless-boun...@wispa.org]<mailto:[mailto:wireless-boun...@wispa.org]> On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher <jbows...@midwaynet.net<mailto:jbows...@midwaynet.net>> wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212<tel:219-866-7946%20ext%3A%20212> Cell 219-863-0678<tel:219-863-0678> www.midwaynet.net<http://www.midwaynet.net/> jbows...@midwaynet.net<mailto:jbows...@midwaynet.net> From: wireless-boun...@wispa.org<mailto:wireless-boun...@wispa.org> [mailto:wireless-boun...@wispa.org<mailto:wireless-boun...@wispa.org>] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman <j...@imaginenetworksllc.com<mailto:j...@imaginenetworksllc.com>> wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340<tel:937-552-2340> Direct: 937-552-2343<tel:937-552-2343> 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher <jbows...@midwaynet.net<mailto:jbows...@midwaynet.net>> wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212<tel:219-866-7946%20ext%3A%20212> Cell 219-863-0678<tel:219-863-0678> www.midwaynet.net<http://www.midwaynet.net/> jbows...@midwaynet.net<mailto:jbows...@midwaynet.net> From: wireless-boun...@wispa.org<mailto:wireless-boun...@wispa.org> [mailto:wireless-boun...@wispa.org<mailto:wireless-boun...@wispa.org>] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher <jbows...@midwaynet.net<mailto:jbows...@midwaynet.net>> wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212<tel:219-866-7946%20ext%3A%20212> Cell 219-863-0678<tel:219-863-0678> www.midwaynet.net<http://www.midwaynet.net/> jbows...@midwaynet.net<mailto:jbows...@midwaynet.net> -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org<mailto:wireless@wispa.org> Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org<mailto:wireless@wispa.org> Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org<mailto:wireless@wispa.org> Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org<mailto:wireless@wispa.org> Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org<mailto:wireless@wispa.org> Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
-------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
