MikroTik Tutorial 22 - How to create a Hotspot with Radius Server Authentication

hi everyone in this tutorial I'm going to show you how to create a hotspot and also to author to authenticate the users using a radius server so first thing that we are going to do is we are going to go to wireless security profile and disable the security security that is on your wireless because when you use a connect to your Wi-Fi they will be authenticated via the radio server so we're going to disable the authentication and next we're going to change the SSID you can change this to whatever you want I'm going to three inches to add spots now we're going to create a new bridge so go to go to bridge went to other bridge I'm going to call this bridge bridge that what hotspot okay and we're going to put the port 1 port the wireless which is W on one we're going to put that in to bridge into the odd spot bridge okay so now we have two bridges one for our spot and one regular bridge and Wi-Fi is in in that bridge next we are going to go to IP addresses I'm going to assign an app IP address to to the white to the hotspot bridge it's going to call this one n so one sixty eight dot going to call this 6.1 / 24 apply so that is IP address that is assigned to the bridge but our spot then oh we're going to go to IP hot spot then click on servers click on spot setup I'm going to select the bridge hotspot as the interface that we are going to use next next its it for the pool it automatically creates a range for the pool if you need to you can also change it but I'm going to just leave it leave the default so I'm going to leave the default next I'm going to leave this also this the inner server we're going to leave that to our for DNS name this is the name that you can give your at spot so if someone type that in in their browser address bar it will bring bring them to the ad spot pH we're going to call this sort dot spots you can name this anything that you want next alright this is the default user for the spot so we're just going to give this user password I'm going to use password but you should always use a secure password all the time next and then so now we have created my hotspot next thing that you're going to do know is to edit that spot so let's double click on this and the first thing that we are going to change is address per mark so so what this mean is that it will allow two connections per MAC address what we don't want to do that because that is a security risk because someone can actually spoof I use those MAC address and connect as them so I'm going to skip that I'm going to change that to one so in one connection for a mac address click ok next we're going to go to server profile I'm going to edit the hotspot CDs this is the US but that was this is what the system created on false when we were going through the configuration and you see all of these things that were configured previously we're going to go to radios I'm going to check this box to enable radius that's only thing that we're going to do here click OK now we're going to go over to ok one other thing we're going to go back to add spot click on login because we are already any radius if you want to use cookie mean that if I use as logged in and they got disconnected from from from the odd spot and then the user comes back and then connects again it will ask them to authenticate again it will use the cookie to authenticate the user if you don't want that you can you could all always disable this also if you have a trial if you want users to try out the hot spot you can also have a trial and you can set the trial period for the user but we're not going to have a trial feature enable in ours so I'm going to do those okay this all right no we are going to go to radius or one other thing just to make sure system packages ensure that you have user manager package installed and you can if you don't know to install the packages you can look at tutorial 5 we actually show you how to install packages so ensure that user manager is installed because that is what the radius server will be used into to authenticate the users you're going to pick on radios then we're going to add our radio server the address we're going to put in 1:27 dot 0 dot 0 dot 1 and the reason why we are using this address which is a loopback address is because the the radio server is actually on the same server that is running the hotspot if it was on a different server you would have to put in the IP address for that other server the secret now is what will be used to authenticate use a manager with radio server so we're going to just use a you can use anything that you want so I'm going to use a pass right here alright so the next thing that you need to do is to check this box that says odd spot service apply ok next click on in come in and check the box that says accept ok now you need to reboot your router so the next step is to open your browser and you're going to go to the IP address that is IP address for the hotspot which is the 6.1 I'm going to put user man at the end so just type that IP at the URL just like this so whatever IP address you use type that then type user man at the N enter and then you're presented with a login page so the default user is admin and there is no password for the user manager so you're going to click login so this is a user manager page and this is where you would go to make configuration I'd use the set profiles and so forth so first thing that we're going to do is go to routers click add new and we're going to create a new new router it's going to call this hotspot IP address is going to be the loopback address 127 dot 0 dot 0 dot 1 and the secret would be the password remember the password actually entered previously when we were creating the radio servers for mine was just 1 2 3 what you should you always this is just for demonstration purposes so I'm using 1 2 3 as as as a secret code to the air ok next we're going to thus add I hadn't experienced properly at spot okay alright the next thing step is to go to customers and this login is the default is the default login for user manager remember that we just log in to use the manager we're going to put a password so don't you should you should create a password for this user and see that so that's for the admin account next we're going to create some profiles click on profiles click Add alright for this profile we're going to call this Bruns you can name a profile anything that you want we're going to create an new limitation so the limitation is really like speed limits when the user can connect and things like that and then we're going to create a new limit I'm going to call this limit Bruns go to RIT alright so here's the tricky part now so the race know is the RX is actually your your upload speed are your TX is your download speed so say for instance this user is going to get 128 K upload and 1 megabyte download we're going to save going to add that that profile then we're going to click Add so now where I signed up a limit a limitation to the profile and then we're going to click Save profile okay so the profile is here and we have a limitation so we have one limitation you can go ahead and create as much limitation as possible what we're just going to create one for this tutorial so now we're going to create users click on users click Add I'm going to create one user will call this user test then just give the user password and the profile you realized by default because we only have one profile to actually assign that profile to the user so we're going to just click Add so I've now created a user alright so we're going to just test the hotspot no all right so we're going to connect to the odd spot connect so automatically when you connect to a spot it will redirect you to the user to the login page so remember we are created a username test test and the password was password click OK I know we have just created hot spots and authenticate the user user using a radio server there's a lot more to add spot than this but I'm not giving it a basic understanding our information so you can actually get started in terms of creating your own so if you like this video please give me a thumbs up if you have any comments please leave them and if you haven't subscribed please remember to do so so that's it for this tutorial and thanks for watching you

Channel: TKSJa

Views: 236,191

Keywords: Mikrotik, routeros, router os, router, wifi ap, network, network configuration, Mikrotic router configuration step by step, wifi configuration, mikrotik setup, routerboard, Winbox, routing, networking, security, ACL, CISCO network, WISP, QOS

Id: bH_6MS9T_n4

Length: 14min 28sec (868 seconds)

Published: Sat May 06 2017