Chillispot

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 22:54, 12 July 2008 (edit)
S2s2 (Talk | contribs)
(Continuing edit.)
← Previous diff
Revision as of 19:25, 13 July 2008 (edit) (undo)
S2s2 (Talk | contribs)
(Major reformat for clarity. Structure fixed up. Not complete but almost...)
Next diff →
Line 1: Line 1:
-=Introduction=+<!-- Note to Chillispot Service Providers: -->
 +<!-- Advertisements (links to your service) go in the Link Section at the bottom. -->
 +==Introduction==
[http://www.chillispot.org Chillispot]: [http://www.chillispot.org Chillispot]:
* Is a complete authentication and management system for Hotspots. * Is a complete authentication and management system for Hotspots.
-* Can provide, for free³, a splash screen when clients connect to a DD-WRT-enabled device.+* Can provide, for free<sup>(1)</sup>, a splash screen when clients connect to a DD-WRT-enabled device.
** Enables the DD-WRT device Owner/Operator to display site News and an Access Agreement, Disclaimer, or Usage Policy. These are practically necessary in some legal regions when providing Internet Access to unknown persons. Consult a legal professional for specific advice, or ignore it and have a fun life, and possibly a friend named ''Bubba''. ** Enables the DD-WRT device Owner/Operator to display site News and an Access Agreement, Disclaimer, or Usage Policy. These are practically necessary in some legal regions when providing Internet Access to unknown persons. Consult a legal professional for specific advice, or ignore it and have a fun life, and possibly a friend named ''Bubba''.
-³ (requires a free account on an online provider. See the bottom of this article for links.)+<sup>(1)</sup> (requires a free account on an online provider. See the bottom of this article for links.)
-Chillispot without using an online provided service, requires a Webserver to host the redirect website and a Radius server for accounting. The Web Server and Radius Server may be installed on the same machine, but not the DD-WRT Device, of course.+When using Chillispot ''without'' using an online provided service, this requires a '''Web Server''' to host the redirect website and a '''Radius Server''' for accounting. The Web Server and Radius Server may be installed on the same machine, but not the DD-WRT Device, of course.
-The advantage of an online provider is Chillispot can be up and running in minutes.+The advantage of an On-line Provider is Chillispot can be up and running in minutes.
-= Configuration (V2.4 'Final')=+==Terms and Definitions==
-Add more here as time allows.+
-= Configuration (V2.3SP2)=+
-Notes: DD-WRT v23 sp2 corrected some annoying bugs. The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore if you setup your client to get a DHCP address. Now, you simply setup your router as usual, then you enable Chillispot. Your LAN (the wired switch ports) will not be accessible by your Hotspot users. This means that your privacy is respected. (Well, forced to be respected. :-) )+* Client Computer: Your laptop
 +* DD-WRT Device: Your Linksys WRT54GL or equivalent
 +* Chillispot Account: Your [free] account on WorldSpot.net or another On-line Provider of Chillispot services.
 +* http://192.168.1.1: The assumed address of your DD-WRT Device's Web Management. If you have changed the LAN IP, change this accordingly.
-* Make sure your DD-WRT Device already works on the internet, and your Wireless Clients are getting connected to the Internet. Follow the Wiki articles on installing DD-WRT v2.3SP2 for your device if you do not have it installed already.+==Prerequisites & Assumptions==
-* Connect the Internet (modem or existing router) to the Hotspot router using the WAN port+ 
-* Connect your computer to one of the LAN ports. (Disable your static IP and let DHCP automaticaly configure your IP.)+Obviously:
-* Now you should be able to connect to your router's web management screen at http://192.168.1.1/+* A DD-WRT-Compatible Device programmed with V24 Final or V23SP2. This will be your public access point, Chilli-enabled.
-* If you haven't reset to factory settings after installation, do it then reboot once more. (it is important)+ 
 +* '''For those using an On-line Provider, the DD-WRT Device ''must'' already have Internet access.''' Example, check your laptop is working through the DD-WRT Device to get Internet.
 +** Create a Chillispot Account on WorldSpot.net or equivalent provider.
 +** After signing up, WorldSpot.net gives you a convenient customized screen-image (based on V2.3SP2) displaying the entries for the DD-WRT Device. Other providers may do the same.
 +* Ideally, be able to connect a cable to your laptop and a LAN port on the DD-WRT Device.
 +* Have the DD-WRT Device's Web Management Interface working. You should be able to connect to at http://192.168.1.1/ (default), or whatever LAN IP you have set your DD-WRT Device.
* Check to make sure that you can connect to the Internet from your computer. If not, configure your Internet connection. * Check to make sure that you can connect to the Internet from your computer. If not, configure your Internet connection.
-** If you're using an existing router for your Internet, instead of a modem, your Hotspot router must use an IP address in a different subnet. Supposing you're existing router's IP address is 192.168.1.1, then change your Hotspot router's IP address to something like 192.168.2.1.+* Setup your Wireless LAN. Disable encryption for the WLAN.
 +* Check to make sure you can connect to the internet from a wireless client device.
 +* These instructions assume your clients are using a homogeneous, private subnet. If this sounds technical, don't worry: it is the default setup of DD-WRT: the DD-WRT Device uses 192.168.1.1 and all clients are assigned an address automatically by the DD-WRT Device in the range of 192.168.1.x. Other configurations are possible.
 + 
 +* '''V23SP2 Introduces the option of 'Separate Wifi [WLAN] from the LAN Bridge': having ChilliSpot control ONLY the WLAN interface.''' The WLAN is torn away from the combined WLAN+LAN Bridge (br0), and the DD-WRT Device behaves as if the WLAN and LAN are separate networks completely. Most guides including the WorldSpot.net guide, assume this 'Separate WiFi' configuration.
 + 
 +However:
 +** If you have secondary Access Points, increasing your WLAN range, connected to the LAN port on a main Chillispot'ed DD-WRT Device, you do not want to 'Separate Wifi from the LAN Bridge'.
 +** If you have Public Access terminals which are Wired in, such as in a Library, to the DD-WRT Device, and these are going to use ChilliSpot Authentication, you also do not want to 'Separate Wifi from the LAN Bridge'.
 +** If you have a homogeneous network [all internet-connected devices shares the same private subnet], of wireless and wired clients, and your wired clients are secure from IP-based attacks, then you do not want to 'Separate Wifi from the LAN Bridge'.
 + 
 +* '''If you are choosing 'Separate WiFi from LAN Bridge' DISABLE, you must go to the Basic DD-WRT Device settings and turn off the DD-WRT DHCP Server.''' Chillispot has it's own DHCP Server. To continue to have Wireless clients use the same subnet, as before enabling Chillispot, do as in the following example:
 + 
 +::Your old private LAN subnet was 192.168.1.x and your DD-WRT Device LAN IP was 192.168.1.1. You must change the DD-WRT Device LAN IP to another subnet, such as 192.168.2.1, and turn off the DD-WRT DHCP Server. After enabling and configuration, Chillispot now provides DHCP Services on 192.168.1.x for all your DD-WRT Device Wireless and Wired clients.
 + 
 +:'''A Speculative Note''': It may be possible to keep the DD-WRT LAN IP on the same subnet, so long as assignments like <tt>net 192.168.1.0/24</tt><sup>(2)</sup> and <tt>dynip 192.168.1.128/26</tt><sup>(3)</sup> are used in the Chillispot configuration. This is untested as of this date. 21:25, 13 July 2008 (CEST)
 + 
 +<sup>(2)</sup> <tt>net 192.168.1.0/24</tt> in DD-WRT's Chillispot, is labeled the "Remote Network" option, and entered simply as "192.168.1.0/24"
 + 
 +<sup>(3)</sup> In DD-WRT, <tt>dynip 192.168.1.128/26</tt> is entered in the "Additional Chillispot Options" box. In this example, the dynip command has Chillispot's DHCP Server dispense address assignments from 192.168.1.128 to 192.168.1.191, to clients. IP's from 2 through 127 are left for fixed assignements. If <tt>dynip</tt> is not entered, Chillispot uses the range specified by <tt>net</tt>
 + 
 +===Additional Prerequisites for Older Firmwares===
 + 
 +* Firmware V23xx: If you haven't reset to factory settings after installation, do it, then reboot once more.
 + 
 +''Anyone familiar with the V23-series firmwares, please change the above point if this is only needed on specific revisions''
 + 
 +* Resetting to factory defaults is NOT needed for V24Final.
 + 
 +== Configuration==
-* Once your Internet is working, setup your wireless LAN. Disable encryption for your Hotspot users.+After carefully following the above section:
-* Now check to make sure you can connect to the internet from a wireless client device.+* Simply enable Chillispot:
-* If everything works, then simply enable Chillispot with the given settings in Administration/Hotspot/Chillispot+**V24Final: Services, Hotspot - Chillispot section.
 +**V23xx: Administration, Hotspot - Chillispot section.
** Enable Chillispot ** Enable Chillispot
-** Enable "Separate WiFi from the LAN bridge". This enables your wired LAN to connect directly to the Internet without going through Chillispot. Your LAN (the wired switch ports) will also be unaccessable by your WiFi users. 
-** On the DHCP interface, select WLAN. 
-** Set RADIUS server 1 to be the IP address of a your primary RADIUS server. 
-** set RADIUS server 2 to be the IP address of a your secondary RADIUS server (use the same as server 1 or leave the zeros if you only have one) 
-** Set DNS server to be the IP address of a DNS server 
-** In Shared Key, put your RADIUS secret password 
-** RADIUS NASID is the RADIUS name of your Hotspot 
-** Redirect URL is the address of the UAM Server, the web authentication portal. 
-** UAM Secret is a secret password between the Redirect URL and the Hotspot. 
-** UAM Allowed is a list of websites that unauthenticated users are allowed to access. 
-* Save and reboot your router.+Two Networks, WLAN separate from LAN:
-* Your Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair it or disable it and then enable it again) it to get the new Chillispot IP addresses.+If you choose 'Chillispot - Separate WiFi from the LAN Bridge' - ENABLE:
 +* Chillispot '''DHCP Interface''', select WLAN.
 +* '''Remote Network''': the default value is '192.168.182.0/24' (192.168.182.x), but you can choose something else, so long as it is NOT your existing DD-WRT LAN Range, e.g. '192.168.1.0/24'.
 +* Bridge Separation makes ChilliSpot control only your WLAN. The wired LAN continues to connect directly to the Internet without going through Chillispot, as before Chillispot was enabled. Your LAN ports are also inaccessible by your WiFi users.
-==Old Configuration for v23sp1 or when you want that chillispot manages your LAN ports==+One Network:
-Originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten+Keep your pre-Chilli private subnet throughout. 'Separate WLAN from LAN' - DISABLE
 +* Requires changing the DD-WRT Device LAN IP in the Basic DD-WRT settings and turning off DD-WRT's DHCP Server.
 +** You must change the IP of your computer after this, to continue to talk to the DD-WRT device.
 +* '''Chillispot - DHCP Interface - LAN''' This option is misleading, the documentation is poor. This choice should be labeled 'WLAN & LAN', as it means the br0 interface.
 +* '''Chillispot - Remote Network: 192.168.1.0/24'''. Or whatever the DD-WRT DHCP Server range was prior to Chillispot. Chillispot takes over this DHCP Server function.
 +
 +** '''RADIUS Server 1''' to be the IP address of a your primary RADIUS server.
 +** '''RADIUS Server 2''' to be the IP address of a your secondary RADIUS server.
 +*** If you have only one Radius Server, leave as 0.0.0.0 or specify Radius Server #1
 +** '''DNS Server''' to be the 1st Internet DNS server
 +** '''Shared Key''' put your RADIUS secret password
 +** '''RADIUS NASID''': the RADIUS name of your Hotspot
 +** '''Redirect URL''' is the address of the UAM Server, the web authentication portal.
 +** '''UAM Secret''' is a secret password between the Redirect URL and the Hotspot.
 +** '''UAM Allowed''' is a list of websites that unauthenticated users are allowed to access.
-Draft Configuration Guide for using DD-WRT as a Hot Spot +'''Additional Chillispot Options'''
 +* If your second Internet DNS is 4.2.2.4, then<br>
 +:<tt>dns2 4.2.2.4</tt>
 +* For WorldSpot.net users:<br>
 +:<tt>domain key.worldspot.net</tt>
 +* To tell Chillispot to issue addresses 192.168.1.128 through 191 to clients (DHCP)<br>
 +:<tt>dynip 192.168.1.128/26</tt>
-These instructions are valid when you already have an Internet connection that is shared by another router (doing NAT). It is also useful when you want that chillispot manages your LAN ports, for example when you want to extend your wifi range by adding more APs connected by ethernet (or when you want to connect wired public internet machines)+* Apply Changes/Save, and if needed, reboot your router.
 +* Your Chillispot Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair the WLAN in XP, or disable it and then enable it again) to get a new Chillispot-provided IP address.
 +==Notes==
IMPORTANT: When doing this, chillispot will manage you LAN ports, and may block any access to the DD-WRT admin interface. You must make sure that you can reach DD-WRT admin interface from the WAN port BEFORE setting up chillispot. IMPORTANT: When doing this, chillispot will manage you LAN ports, and may block any access to the DD-WRT admin interface. You must make sure that you can reach DD-WRT admin interface from the WAN port BEFORE setting up chillispot.
Line 56: Line 109:
This is required to ensure security of your Hotspot (your LAN won't be visible) This is required to ensure security of your Hotspot (your LAN won't be visible)
-* follow the DD-WRT [[Installation|installation procedure]] 
- 
-* In Setup / Basic Setup: Set the IP address on the WAN port to a static IP Address or somehow be able to know the IP address. This is necessary if you want to connect to the web management interface. You could also use DHCP to set the ip to a known value.  
-** IMPORTANT: you must choose a WAN ip address which is not in the same subnet than the LAN port of DDWRT. For example, if you connected from the LAN port at address 192.168.1.1, and your gateway IP is in the same subnet (192.168.1.x), you must change your lan IP address to somethink else like: 192.168.10.1 (assuming that your ip masks are 255.255.255.0) 
- 
-* In Administration / Management / Remote Access: Configure the router for remote management. (save settings) 
-* Reconnect to the router via the WAN port. This is required because you will now disable DHCP on the Main setting page. 
-* Disable DHCP on the Basic Setup page 
-* configure Chillispot in Administration / Hotspot / Chillispot: fill the values that depend on your setup (you can get them from http://worldspot.net) 
-** set Radius server 1 to be the ip address of a your primary radius server 
-** set Radius server 2 to be the ip address of a your secondary radius server (use the same as server 1 or leave the zeros if you only have one) 
-** set dns server to be the ip address of a dns server 
-** in Shared Key, put your radius secret password 
-** set dhcp interface to be LAN and WLAN 
-** radius NASID is the radius name of your hotspot 
-** Redirect Url is the address of the Uam Server, the web authentication portal. 
-** UAM Secret is a secret password between the Redirect Url and the hotspot. 
-** UAM Allowed is a list of website that unauthenticated users are allowed to use. 
- 
-* Now enable Chillispot and reboot router 
* Chillispot will not start unless it can see the dns server specified the chillispot settings. * Chillispot will not start unless it can see the dns server specified the chillispot settings.
* Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface! * Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!
- +* Chillispot is operating on the wrt if your client picks up a DHCP address of 192.168.182.2
-'''Contact [http://hotspotexpress.in/service_providers/ispot.html Hotspotexpress]''' for configuration and using hosted chillispot management+
==Troubleshooting== ==Troubleshooting==
Line 92: Line 124:
# Make sure you are using a package that includes chillispot. Chillispot is not in the micro and mini versions of dd-wrt (consult [[What_is_%22DD-WRT%22%3F#v23_File_Versions|this table]]). # Make sure you are using a package that includes chillispot. Chillispot is not in the micro and mini versions of dd-wrt (consult [[What_is_%22DD-WRT%22%3F#v23_File_Versions|this table]]).
-===Connection Failed===+===Connection Failed on Older Firmwares===
-If your client does not recieve 192.168.182.2 address via chillispot you may have touched the Chillispot DHCP Interface. Touching this setting breaks Chillispot on Sp23 V2. A fix is to reset to factory defaults and re-enter all your settings.+If your client does not recieve 192.168.182.x address via chillispot you may have changed the Chillispot DHCP Interface. Touching this setting breaks Chillispot on Sp23 V2. A fix is to reset to factory defaults and re-enter all your settings.
- +
-Chillispot is operating on the wrt if your client picks up a DHCP address of 192.168.182.2 +
- +
-If Chillispot works (you can see the uam page), but you cannot connect, recheck your Chillispot settings.+
If the UAM secret is bad, you will have an authentication failure. If the UAM secret is bad, you will have an authentication failure.
Line 117: Line 145:
if you don't have any ping return, check the output of "ifconfig", and post it on the [http://worldspot.net/forum/ WorldSpot forum] if you don't have any ping return, check the output of "ifconfig", and post it on the [http://worldspot.net/forum/ WorldSpot forum]
-If internet work from your router but you don't have chillispot working, check first that the chillispot process is launched with+If internet works from your router but you don't have chillispot working, check first that the chillispot process is launched with
ps -ef ps -ef
Line 125: Line 153:
If you need more assistance, you can post on the [http://worldspot.net/forum/ WorldSpot forum] If you need more assistance, you can post on the [http://worldspot.net/forum/ WorldSpot forum]
-=For the FON Hotspot=+==For the FON Hotspot==
Please see the [[FON Hotspot|FON Hotspot]] page for a guide and advice on setting up a [http://www.fon.com FON] hotspot using DD-WRT and Chillispot. Please see the [[FON Hotspot|FON Hotspot]] page for a guide and advice on setting up a [http://www.fon.com FON] hotspot using DD-WRT and Chillispot.
-=Links for Online Chillispot Back-end Providers=+==Links for Online Chillispot Back-end Providers==
 + 
 +A hosted Chillispot portal can be used to speed-up HotSpot setup and Management, and ease payment and other back-end requirements. Only a router is necessary, the rest is done by third parties listed below.<br>
 +'''Disclaimer: While NONE of the following links are endorsements (You are Entirely Responsible Solely for your Choices)'''
-A hosted Chillispot portal can be used to speed-up HotSpot setup and Management, and ease payment and other back-end requirements. Only a router is necessary, the rest is done by third parties listed below. '''While NONE of the following links are endorsements (You are Entirely Responsible Solely for your Choices)''', WorldSpot.net has been recommended by many people as having the best support and development. Some of the links are simply ads which were inserted into this Wiki in a badly-organized fashion (HotSpotExpress.In), if this helps inform you about which one to test.+Note: WorldSpot.net has been recommended by many people as having the best support and development. Some of the links are simply ads which were inserted into this Wiki in a badly-organized fashion (HotSpotExpress.In), if this helps inform you about which one to test.
-[https://worldspot.net WorldSpot.net]. Free for free hotspots. Earn 75% in revenue sharing.+:[https://worldspot.net WorldSpot.net]. Free for free hotspots. Earn 75% in revenue sharing.
-[http://www.skyrove.com Skyrove] free for free hotspots only, otherwise a payed account is required.+:[http://www.skyrove.com Skyrove] free for free hotspots only, otherwise a payed account is required.
-[http://www.hotspotsystem.com HotSpotSystem.com]. Free sign up with a revenue share based solution for paid hotspots.+:[http://www.hotspotsystem.com HotSpotSystem.com]. Free sign up with a revenue share based solution for paid hotspots.
-[http://hotspotexpress.in/products/ispot.html Hotspotexpress] HotSpot services to use with Chillispot]+:[http://hotspotexpress.in/products/ispot.html Hotspotexpress] HotSpot services to use with Chillispot]
Any of these systems linked above are designed to replace both a local radius server and webserver, and bring powerful features. Simply register online and create your hotspot. Then you can get the chillispot configuration setting: Any of these systems linked above are designed to replace both a local radius server and webserver, and bring powerful features. Simply register online and create your hotspot. Then you can get the chillispot configuration setting:
-[http://www.skyrove.com/chillispot.html SkyRove Chillispot Page]+:[http://www.skyrove.com/chillispot.html SkyRove Chillispot Page]
-[http://worldspot.net/wk/Main/en/SetupDDWRT Setup DD-WRT for WorldSpot]+:[http://worldspot.net/wk/Main/en/SetupDDWRT Setup DD-WRT for WorldSpot]
-[http://www.hotspotsystem.com/en/hotspot/install_guide.html HotSpotSystem.com] to enter in the steps below, and you can get your hotspot working in some minutes.+:[http://www.hotspotsystem.com/en/hotspot/install_guide.html HotSpotSystem.com] to enter in the steps below, and you can get your hotspot working in some minutes.
-[http://www.chillispot.info/ Chillispot info]+:[http://www.chillispot.info/ Chillispot info]
[[Category:English documentation]] [[Category:English documentation]]
[[Category:Advanced tutorials]] [[Category:Advanced tutorials]]

Revision as of 19:25, 13 July 2008

Contents

Introduction

Chillispot:

  • Is a complete authentication and management system for Hotspots.
  • Can provide, for free(1), a splash screen when clients connect to a DD-WRT-enabled device.
    • Enables the DD-WRT device Owner/Operator to display site News and an Access Agreement, Disclaimer, or Usage Policy. These are practically necessary in some legal regions when providing Internet Access to unknown persons. Consult a legal professional for specific advice, or ignore it and have a fun life, and possibly a friend named Bubba.

(1) (requires a free account on an online provider. See the bottom of this article for links.)

When using Chillispot without using an online provided service, this requires a Web Server to host the redirect website and a Radius Server for accounting. The Web Server and Radius Server may be installed on the same machine, but not the DD-WRT Device, of course.

The advantage of an On-line Provider is Chillispot can be up and running in minutes.

Terms and Definitions

  • Client Computer: Your laptop
  • DD-WRT Device: Your Linksys WRT54GL or equivalent
  • Chillispot Account: Your [free] account on WorldSpot.net or another On-line Provider of Chillispot services.
  • http://192.168.1.1: The assumed address of your DD-WRT Device's Web Management. If you have changed the LAN IP, change this accordingly.

Prerequisites & Assumptions

Obviously:

  • A DD-WRT-Compatible Device programmed with V24 Final or V23SP2. This will be your public access point, Chilli-enabled.
  • For those using an On-line Provider, the DD-WRT Device must already have Internet access. Example, check your laptop is working through the DD-WRT Device to get Internet.
    • Create a Chillispot Account on WorldSpot.net or equivalent provider.
    • After signing up, WorldSpot.net gives you a convenient customized screen-image (based on V2.3SP2) displaying the entries for the DD-WRT Device. Other providers may do the same.
  • Ideally, be able to connect a cable to your laptop and a LAN port on the DD-WRT Device.
  • Have the DD-WRT Device's Web Management Interface working. You should be able to connect to at http://192.168.1.1/ (default), or whatever LAN IP you have set your DD-WRT Device.
  • Check to make sure that you can connect to the Internet from your computer. If not, configure your Internet connection.
  • Setup your Wireless LAN. Disable encryption for the WLAN.
  • Check to make sure you can connect to the internet from a wireless client device.
  • These instructions assume your clients are using a homogeneous, private subnet. If this sounds technical, don't worry: it is the default setup of DD-WRT: the DD-WRT Device uses 192.168.1.1 and all clients are assigned an address automatically by the DD-WRT Device in the range of 192.168.1.x. Other configurations are possible.
  • V23SP2 Introduces the option of 'Separate Wifi [WLAN] from the LAN Bridge': having ChilliSpot control ONLY the WLAN interface. The WLAN is torn away from the combined WLAN+LAN Bridge (br0), and the DD-WRT Device behaves as if the WLAN and LAN are separate networks completely. Most guides including the WorldSpot.net guide, assume this 'Separate WiFi' configuration.

However:

    • If you have secondary Access Points, increasing your WLAN range, connected to the LAN port on a main Chillispot'ed DD-WRT Device, you do not want to 'Separate Wifi from the LAN Bridge'.
    • If you have Public Access terminals which are Wired in, such as in a Library, to the DD-WRT Device, and these are going to use ChilliSpot Authentication, you also do not want to 'Separate Wifi from the LAN Bridge'.
    • If you have a homogeneous network [all internet-connected devices shares the same private subnet], of wireless and wired clients, and your wired clients are secure from IP-based attacks, then you do not want to 'Separate Wifi from the LAN Bridge'.
  • If you are choosing 'Separate WiFi from LAN Bridge' DISABLE, you must go to the Basic DD-WRT Device settings and turn off the DD-WRT DHCP Server. Chillispot has it's own DHCP Server. To continue to have Wireless clients use the same subnet, as before enabling Chillispot, do as in the following example:
Your old private LAN subnet was 192.168.1.x and your DD-WRT Device LAN IP was 192.168.1.1. You must change the DD-WRT Device LAN IP to another subnet, such as 192.168.2.1, and turn off the DD-WRT DHCP Server. After enabling and configuration, Chillispot now provides DHCP Services on 192.168.1.x for all your DD-WRT Device Wireless and Wired clients.
A Speculative Note: It may be possible to keep the DD-WRT LAN IP on the same subnet, so long as assignments like net 192.168.1.0/24(2) and dynip 192.168.1.128/26(3) are used in the Chillispot configuration. This is untested as of this date. 21:25, 13 July 2008 (CEST)

(2) net 192.168.1.0/24 in DD-WRT's Chillispot, is labeled the "Remote Network" option, and entered simply as "192.168.1.0/24"

(3) In DD-WRT, dynip 192.168.1.128/26 is entered in the "Additional Chillispot Options" box. In this example, the dynip command has Chillispot's DHCP Server dispense address assignments from 192.168.1.128 to 192.168.1.191, to clients. IP's from 2 through 127 are left for fixed assignements. If dynip is not entered, Chillispot uses the range specified by net

Additional Prerequisites for Older Firmwares

  • Firmware V23xx: If you haven't reset to factory settings after installation, do it, then reboot once more.

Anyone familiar with the V23-series firmwares, please change the above point if this is only needed on specific revisions

  • Resetting to factory defaults is NOT needed for V24Final.

Configuration

After carefully following the above section:

  • Simply enable Chillispot:
    • V24Final: Services, Hotspot - Chillispot section.
    • V23xx: Administration, Hotspot - Chillispot section.
    • Enable Chillispot

Two Networks, WLAN separate from LAN: If you choose 'Chillispot - Separate WiFi from the LAN Bridge' - ENABLE:

  • Chillispot DHCP Interface, select WLAN.
  • Remote Network: the default value is '192.168.182.0/24' (192.168.182.x), but you can choose something else, so long as it is NOT your existing DD-WRT LAN Range, e.g. '192.168.1.0/24'.
  • Bridge Separation makes ChilliSpot control only your WLAN. The wired LAN continues to connect directly to the Internet without going through Chillispot, as before Chillispot was enabled. Your LAN ports are also inaccessible by your WiFi users.

One Network: Keep your pre-Chilli private subnet throughout. 'Separate WLAN from LAN' - DISABLE

  • Requires changing the DD-WRT Device LAN IP in the Basic DD-WRT settings and turning off DD-WRT's DHCP Server.
    • You must change the IP of your computer after this, to continue to talk to the DD-WRT device.
  • Chillispot - DHCP Interface - LAN This option is misleading, the documentation is poor. This choice should be labeled 'WLAN & LAN', as it means the br0 interface.
  • Chillispot - Remote Network: 192.168.1.0/24. Or whatever the DD-WRT DHCP Server range was prior to Chillispot. Chillispot takes over this DHCP Server function.
    • RADIUS Server 1 to be the IP address of a your primary RADIUS server.
    • RADIUS Server 2 to be the IP address of a your secondary RADIUS server.
      • If you have only one Radius Server, leave as 0.0.0.0 or specify Radius Server #1
    • DNS Server to be the 1st Internet DNS server
    • Shared Key put your RADIUS secret password
    • RADIUS NASID: the RADIUS name of your Hotspot
    • Redirect URL is the address of the UAM Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect URL and the Hotspot.
    • UAM Allowed is a list of websites that unauthenticated users are allowed to access.

Additional Chillispot Options

  • If your second Internet DNS is 4.2.2.4, then
dns2 4.2.2.4
  • For WorldSpot.net users:
domain key.worldspot.net
  • To tell Chillispot to issue addresses 192.168.1.128 through 191 to clients (DHCP)
dynip 192.168.1.128/26
  • Apply Changes/Save, and if needed, reboot your router.
  • Your Chillispot Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair the WLAN in XP, or disable it and then enable it again) to get a new Chillispot-provided IP address.

Notes

IMPORTANT: When doing this, chillispot will manage you LAN ports, and may block any access to the DD-WRT admin interface. You must make sure that you can reach DD-WRT admin interface from the WAN port BEFORE setting up chillispot.

Note: It is strongly recommended that you use v23sp2 version to enable the option: "separate wifi from the wireless bridge" This is required to ensure security of your Hotspot (your LAN won't be visible)

  • Chillispot will not start unless it can see the dns server specified the chillispot settings.
  • Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!
  • Chillispot is operating on the wrt if your client picks up a DHCP address of 192.168.182.2

Troubleshooting

You get an IP (192.168.182.X) but you see no welcome page

Maybe you are using a PPPOE modem and went into the MTU bug. More info in this forum post

Administration/Hotspot/Chillispot tab does not show

  1. Make sure you are using a package that includes chillispot. Chillispot is not in the micro and mini versions of dd-wrt (consult this table).

Connection Failed on Older Firmwares

If your client does not recieve 192.168.182.x address via chillispot you may have changed the Chillispot DHCP Interface. Touching this setting breaks Chillispot on Sp23 V2. A fix is to reset to factory defaults and re-enter all your settings.

If the UAM secret is bad, you will have an authentication failure.

If the RADIUS shared secret is bad, the login process will hang.

If you are using the radius server at www.chillispot.org you may find you can't get past the HotRadius Login page. Then try creating a www.worldspot.net account, it even shows you the exact entrys to copy and paste into your dd-wrt chillispot page.

More things to try

If it does not work, you must connect with ssh or telnet to your router.

login: root 
password: <your password>

First, check that you have internet access:

ping google.com

if you don't have any ping return, check the output of "ifconfig", and post it on the WorldSpot forum

If internet works from your router but you don't have chillispot working, check first that the chillispot process is launched with

ps -ef

You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch.

If you need more assistance, you can post on the WorldSpot forum

For the FON Hotspot

Please see the FON Hotspot page for a guide and advice on setting up a FON hotspot using DD-WRT and Chillispot.

Links for Online Chillispot Back-end Providers

A hosted Chillispot portal can be used to speed-up HotSpot setup and Management, and ease payment and other back-end requirements. Only a router is necessary, the rest is done by third parties listed below.
Disclaimer: While NONE of the following links are endorsements (You are Entirely Responsible Solely for your Choices)

Note: WorldSpot.net has been recommended by many people as having the best support and development. Some of the links are simply ads which were inserted into this Wiki in a badly-organized fashion (HotSpotExpress.In), if this helps inform you about which one to test.

WorldSpot.net. Free for free hotspots. Earn 75% in revenue sharing.
Skyrove free for free hotspots only, otherwise a payed account is required.
HotSpotSystem.com. Free sign up with a revenue share based solution for paid hotspots.
Hotspotexpress HotSpot services to use with Chillispot]

Any of these systems linked above are designed to replace both a local radius server and webserver, and bring powerful features. Simply register online and create your hotspot. Then you can get the chillispot configuration setting:

SkyRove Chillispot Page
Setup DD-WRT for WorldSpot
HotSpotSystem.com to enter in the steps below, and you can get your hotspot working in some minutes.
Chillispot info