Wireless hotspot access control???

[Dman33]

Strange question, but I figured I would ask anyway. You see, I plan to implement a wireless HotSpot in our conference rooms at my office. I would prefer that only authorized guests have access to it so our whole building does not hop on it. Now, places like Starbucks and whatnot have a default page that comes up when you try to use a hotspot. This default page requires you to 'authenticate' yourself so you can access web resources.

What I am looking for is similar. I want it to prompt for a 'passcode' that the receptionist will generate weekly. She will then be able to give this passcode with the Terms of Usage to the guest before they can access the internet over our access point. Anybody know what this software is called?

I was thinking that it was kinda like a proxy between the Access Point and the WAN link. All it has to do is read the MAC address of the client, and set restrict all for that MAC until the passcode is successfully entered, then enforce the allow ruleset. This thing does not have to be bulletproof.

Anybody know of such software??

[brainsmile]

why not just do an encrypted (64 or 128 bit) passcode to access the wifi?

You can always change the password each week

[Dman33]

you mean a WEP key? I thought about that but I was hoping to make it easier to use and something that they are more familiar with in coffee shops and hotels.

You see, I could do a WEP key but it has to be hex, and requires configuration on the client. The people we deal with are lucky to find the laptop's power button and the IE icon. Our desktop support guy will kill me if he has to hold a client's hand every time they want to hop on the wireless.

[SmokeyDP]

If you are running Windows XP service pack 2 its much better with the WEP keys. You get a message on the bottom on the screen saying a wireless network was detected. You click there and it gives you a list. You click on the one you want and just type in the WEP key. Its VERY simple. You could put a step by step with pictures on a one page printout.

What starbucks sounds like they are going is using a server for the outside web. If someone without access goes to any website the server will feed them a default one untill their IP puts in the proper username and password. Sounds like a cool idea for setting up a pay for use server in a park or something.....hrm

[Jeffbx]

Here ya go

This is exactly what you need. It's a ticket printer that will provide a 1 day pass for your WAP. I just ordered one of these (with the required hot spot gateway) for my office. Once you print a ticket, it's only good for one day, and only good for one PC. You can't share the ticket with another computer.

Downside? It's a D-link. Everyone hates D-Link. However, my corporate parent office has been using these for about 6 months VERY successfully. Mine's on the way so I'll post back & let you know how it works out.

[Dman33]

Here ya go

This is exactly what you need. It's a ticket printer that will provide a 1 day pass for your WAP. I just ordered one of these (with the required hot spot gateway) for my office. Once you print a ticket, it's only good for one day, and only good for one PC. You can't share the ticket with another computer.

Downside? It's a D-link. Everyone hates D-Link. However, my corporate parent office has been using these for about 6 months VERY successfully. Mine's on the way so I'll post back & let you know how it works out.

Now that's what I am talking about! Hmmm.. if I want to go with the Cisco Aironet AP and these two Dlink units, I would fall just over budget...
Time to get creative.

Thanks!

[Dman33]

Here ya go

This is exactly what you need. It's a ticket printer that will provide a 1 day pass for your WAP. I just ordered one of these (with the required hot spot gateway) for my office. Once you print a ticket, it's only good for one day, and only good for one PC. You can't share the ticket with another computer.

Downside? It's a D-link. Everyone hates D-Link. However, my corporate parent office has been using these for about 6 months VERY successfully. Mine's on the way so I'll post back & let you know how it works out.

Looks like we are ordering this... let me know how yours works out. I will post my experience as well.

[Jeffbx]

Will do - we just got the last part yesterday & one of the techs here is putting it all together. I'll post back after we test it out.

[StonedWheat]

My company, Netopia has hotspots too. We just put them in the Sony Metreon in SF. Our routers (formerly cayman) are the best in terms of signal strength and range. Seriously I am amazed at how far our routers reach. I started using one of our DSL gateways at home, and it is so much faster than my linksys WRT54G/speedstream 5100.

The only thing that sucks is that our routers are pretty expensive as a residential solution.

[Jeffbx]

Well, we got everything fired up & it works like a champ. You print a ticket which has a 128-bit encryption key, a time limit, an ID & a password. Enter the encryption key to connect to the WAP, and then enter ID & password to authenticate yourself. You can set whatever time limit you want, and once that limit expires the user is disconnected.

Once one machine uses the ID & PW, no other machine can use that info to log on. If a 2nd machine needs to connect, a 2nd ticket has to be printed. Seems to be a very quick & easy solution for a small business.

[Dman33]

Well, we got everything fired up & it works like a champ. You print a ticket which has a 128-bit encryption key, a time limit, an ID & a password. Enter the encryption key to connect to the WAP, and then enter ID & password to authenticate yourself. You can set whatever time limit you want, and once that limit expires the user is disconnected.

Once one machine uses the ID & PW, no other machine can use that info to log on. If a 2nd machine needs to connect, a 2nd ticket has to be printed. Seems to be a very quick & easy solution for a small business.

Awesome, I cannot wait to get ours. It is exactly what I was looking for. Thank again, man.

[SmokeyDP]

Do you have to install software on the client's laptop to get it to work?

What do you have to setup on the laptop so this works.

[Jeffbx]

Nope, no setup on the laptop other than the WEP key (if you're encrypting the traffic) & then they have to provide the ID & PW on a web page. Works just like a hot spot in an airport or hotel.