2012-03-06 - Re: [GRASE-Hotspot] Access Point setup

Header Data

From: Tim White <ti***8@gmail.com>
Message Hash: 91e3c3c932c1424ceacaa2a54eb3fd66e002f644341b24c6f8d3ceecfb80dbe7
Message ID: <4F56765A.7010005@gmail.com>
Reply To: <2002935959.75518.1331064486684.JavaMail.open-xchange@email.1and1.co.uk>
UTC Datetime: 2012-03-06 13:40:58 UTC
Raw Date: Wed, 07 Mar 2012 06:40:58 +1000

Raw message 

On 07/03/12 06:08, ju***c@vilasmolic.co.uk wrote:
>
> Hi All,
>
> what are the steps that are needed to setup the access point.
>
> I have a draytek adsl modem / router which has the ability to connect 
> to the radius server.
>
Hi JS.

Firstly, I'm guessing you are looking at a modem/router that can do 
WPA-EAP? This is when the access point allows each user to login to the 
hotspot directly at wifi connection time. This /is/ possible with Coova 
Chilli, which the Grase Hotspot uses, but as I've not had hardware able 
to do this, I have no instructions for doing it. It's also not the 
easiest way for end users as not all devices support it (or support it 
well).

Also, ideally your access point can't also be the gateway router that 
the Hotspot system uses, as you need the "WAN" network separate from the 
LAN network on the Hotspot (partially for security, partially for 
simplicity).
>
> at present i have setup the router on the 172.xxx.xxx.xxx ip range, 
> does the range need to be in the 10.1.0.0 range as is grase on the 
> ubuntu server?
>
If the router is the upstream router, then it needs to be outside of the 
ip range you use on the Hotspot server's LAN interface (which is set in 
the Grase Hotspot admin interface, not in /etc/network/interfaces). So 
having the router on the 172.x.x.x range is fine, and you should set the 
Hotspots WAN interface to be in the same range (or use DHCP).

> when setting up the ip address of the radius server do you use the 
> 192.xxx.xxx.xxx ip address or 10.1.0.1
>
(See above about radius)
>
> does the security of the wireless need to be open or secure?
>
Open is preferred. Depending on your use case. i.e. If you are a cafe 
and want to sell internet to your customers, then having an open network 
means they can discover the network easily, connect, then when they try 
to use it, they are redirected to the login page which will have 
purchasing instructions. If you have a closed network, then most 
customers won't even realise that you sell WiFi access. (Lots of 
smartphones notify you if there is an open network nearby).
It's also a good idea in the help section to inform users that due to it 
being an open network, it's security can't be guaranteed and to make 
sure they are using https versions of websites etc etc.

Ideally, the kind of Wireless Access Point you want to use, are those 
that are 'Layer 2', i.e. don't do any routing, don't do DHCP (or can 
turn DHCP off). See the FAQ (http://trac.grasehotspot.org/wiki/FAQ) for 
more info.

Hope that helps.

Tim

Thread