2014-12-02 - Grase Hotspot working with DD-WRT routers in remote locations.

Header Data

From: Norberto Esteves <no***e@gmail.com>
Message Hash: 51017cbf90790395adf0425c8370ea3205983c502f252673d4565c067a7e0f5e
Message ID: <fdecd37a-fa21-4d62-a6b5-50601889ecb6@grasehotspot.org>
Reply To: N/A
UTC Datetime: 2014-12-02 12:38:54 UTC
Raw Date: Tue, 02 Dec 2014 11:38:54 -0800

Raw message 

Hi all,

I managed to get this configuration working.

Basically I have the Grase Hotspot installed in a machine (shuttle XPC DS6) 
in the office and one router (D-Link DIR-615) with DD-WRT in my house for 
testing.
The remote site (D-Link Router) uses the Coova Chilli included with the 
DD-WRT firmware to redirect users to the Grase authentication Portal, after 
that, the username, password, and other attributes are checked with the 
radius server. If the authentication is successful then the user is allowed 
to use the Internet and DD-WRT Coova Chilli takes care of the session even 
if the main site (Grase) goes down. DD-WRT Coova Chilli also sends 
periodical data (every 5 minutes) to Radius server to keep information up 
to date. 

So far I had to change a few things in the follwing files:
hotspot.php, nojsstatus.php, /includes/site.inc.php

I do not use VPN, so, there is a few ports that need forwarding:
In the main site: Radius (1812, 1813, 1814), UAM (3990) and HTTP (80) ports 
forward to Grase Hotspot machine.
The remote site only needs port forwarding for COA port 3779 if you are 
going to use the radclient to disconnect users.

Freeradius also needs to allow remote site to connect, to do this you need 
to add remote client to clients.conf, or use nas table.
  
So far I'am still testing and correcting some "bugs" i found.

The bad new is that this setup don't work with Javascript login, I did some 
tests and I think DD-WRT is not able to use the JSON interface for Coova 
Chilli. So if you want to use DD-WRT, Java script login should be disabled.

If anyone is interested in multi-location setup using DD-WRT I can make a 
document and share with the community.

Regards,

Norberto Esteves

Thread