Chillispot

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 21:19, 26 September 2006 (edit)
Ravn (Talk | contribs)
(Troubleshooting - chillispot tab does not show)
← Previous diff
Revision as of 23:35, 2 October 2006 (edit) (undo)
Whiteboy (Talk | contribs)
(introduction style and minor edits)
Next diff →
Line 1: Line 1:
-==Introduction== 
Chillispot can be used for hotspot management. It requires a separate webserver to host the redirect url and a separate radius server (these may be installed on the same machine, of course). Chillispot can be used for hotspot management. It requires a separate webserver to host the redirect url and a separate radius server (these may be installed on the same machine, of course).
Line 5: Line 4:
You simply register there and create your hotspot. Then you can get the chillispot configuration settings to enter in the steps below, and you can get your hotspot working in some minutes. You simply register there and create your hotspot. Then you can get the chillispot configuration settings to enter in the steps below, and you can get your hotspot working in some minutes.
-==New '''simple''' instructions for v23sp2==+= Configuration =
DD-WRT v23 sp2 corrected some annoying bugs. Now, setting up chillispot is Really SIMPLE!!! The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore. Now, you simply setup your router as usual, then you enable chillispot. Your LAN is also no more accessible from your hotspot users. This means that your privacy is respected. DD-WRT v23 sp2 corrected some annoying bugs. Now, setting up chillispot is Really SIMPLE!!! The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore. Now, you simply setup your router as usual, then you enable chillispot. Your LAN is also no more accessible from your hotspot users. This means that your privacy is respected.
Line 93: Line 92:
'''Comment:''' I am using dd-wrt.v23_vpn_generic.bin on a Linksys WRT54GSv4 and the tab still does not show. What else might I have gotten wrong? -- [[User:Ravn|Ravn]] 23:19, 26 Sep 2006 (CEST) <!-- Please delete the question once it has been fully answered (or I will do so) //--> '''Comment:''' I am using dd-wrt.v23_vpn_generic.bin on a Linksys WRT54GSv4 and the tab still does not show. What else might I have gotten wrong? -- [[User:Ravn|Ravn]] 23:19, 26 Sep 2006 (CEST) <!-- Please delete the question once it has been fully answered (or I will do so) //-->
-==== Connection failed ====+==== Connection Failed ====
If chillispot works (you can see the uam page), but you cannot connect, recheck your chillispot settings. If chillispot works (you can see the uam page), but you cannot connect, recheck your chillispot settings.
Line 107: Line 106:
-jcypher -jcypher
- 
- 
----- 
- 
-Es importante conciderar tambien que para usar Chillispot en DD-WRT es necesario tener los IP del servidor de chillispot los cuales le doy en este momento mas que todo si va ha configurar con el radius gratuito de chillispot: 
- 
-radiusserver1 rad01.chillispot.org = 213.66.141.115 espero que esto seha de ayuda a mis amigos de habla hispana 
- 
-Rommel Salas --- WIFI 
The [edited] babblefish version of Rommels' information is: The [edited] babblefish version of Rommels' information is:
Line 126: Line 116:
[[Category:advanced HOWTO]] [[Category:advanced HOWTO]]
- 
[[Category:English documentation]] [[Category:English documentation]]

Revision as of 23:35, 2 October 2006

Chillispot can be used for hotspot management. It requires a separate webserver to host the redirect url and a separate radius server (these may be installed on the same machine, of course).

You can also use a hosted chillispot portal like http://worldspot.net which is free. It replaces both your radius server and your web server, and brings powerful features. You simply register there and create your hotspot. Then you can get the chillispot configuration settings to enter in the steps below, and you can get your hotspot working in some minutes.

Contents

Configuration

DD-WRT v23 sp2 corrected some annoying bugs. Now, setting up chillispot is Really SIMPLE!!! The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore. Now, you simply setup your router as usual, then you enable chillispot. Your LAN is also no more accessible from your hotspot users. This means that your privacy is respected.

  • install DD-WRT v23sp2 (v24 worked for me also but might have some bugs left)
  • connect the internet (WAN) port to your modem or existing router.
  • connect your computer to one of the LAN ports. (disable your static ip and let dhcp automaticaly configure your ip)
  • should should be able to connect to your router web management (http://192.168.1.1)
  • check that you can connect to the internet from your computer. If not, setup your internet connection.
    • If you existing router address is at same address (192.168.1.x) you must change your router IP (like 192.168.2.1)
  • once your internet is working, setup your wireless lan. Disable Encryption for your hotspot users.
  • check that you can connect to the internet from your wireless device
  • if everything works, then simply enable chillispot with the given settings in Administration/Hotspot/Chillispot
    • Enable chillispot
    • Enable "Separate wifi from the lan bridge": This enable your wired lan to connect directly to the internet without going through chillispot. Your LAN is also protected from your wifi users.
    • on DHCP interface, select WLAN.
    • set Radius server 1 to be the ip address of a your primary radius server
    • set Radius server 2 to be the ip address of a your secondary radius server (use the same as server 1 or leave the zeros if you only have one)
    • set dns server to be the ip address of a dns server
    • in Shared Key, put your radius secret password
    • radius NASID is the radius name of your hotspot
    • Redirect Url is the address of the Uam Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect Url and the hotspot.
    • UAM Allowed is a list of website that unauthenticated users are allowed to use.
  • save and reboot your router
  • Your hotspot should work now. If you tested your wifi device before setting up chillispot, restart it to get the new chillispot IPs.

Deprecated old instructions for v23sp1

originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten

Draft Configuration Guide for using DD-WRT as a Hot Spot

This instructions are valid when you already have an internet connection that is shared by another router (doing NAT). Then DD-WRT WAN port must be connected in the local area network. Of course you can also connect the WAN port directly to your modem (I haven't tested this yet)

Note: it is strongly recommended that you use v23sp2 version to enable the option: "separate wifi from the wireless bridge" This is required to ensure security of your hotspot (your LAN won't be visible)

  • In Setup / Basic Setup: Set the IP address on the WAN port to a static IP Address or somehow be able to know the IP address. This is necessary if you want to connect to the web management interface. You could also use DHCP to set the ip to a known value.
    • IMPORTANT: you must choose a WAN ip address which is not in the same subnet than the LAN port of DDWRT. For example, if you connected from the LAN port at address 192.168.1.1, and your gateway IP is in the same subnet (192.168.1.x), you must change your lan IP address to somethink else like: 192.168.10.1 (assuming that your ip masks are 255.255.255.0)
  • In Administration / Management / Remote Access: Configure the router for remote management. (save settings)
  • Reconnect to the router via the WAN port. This is required because you will now disable DHCP on the Main setting page.
  • Disable DHCP on the Basic Setup page
  • configure Chillispot in Administration / Hotspot / Chillispot: fill the values that depend on your setup (you can get them from http://worldspot.net)
    • set Radius server 1 to be the ip address of a your primary radius server
    • set Radius server 2 to be the ip address of a your secondary radius server (use the same as server 1 or leave the zeros if you only have one)
    • set dns server to be the ip address of a dns server
    • in Shared Key, put your radius secret password
    • set dhcp interface to be LAN and WLAN
    • radius NASID is the radius name of your hotspot
    • Redirect Url is the address of the Uam Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect Url and the hotspot.
    • UAM Allowed is a list of website that unauthenticated users are allowed to use.
  • Now enable Chillispot and reboot router
  • Chillispot will not start unless it can see the dns server specified the chillispot settings.
  • Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!

Troubleshooting

If it does not work, you must connect with ssh or telnet to your router.

login: root 
password: <your password>

First, check that you have internet access:

ping google.com

if you don't have any ping return, check the output of "ifconfig", and post it on the [forum]

If internet work from your router but you don't have chillispot working, check first that the chillispot process is launched with

ps -ef

You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch.

Administration/Hotspot/Chillispot tab does not show

  1. Make sure you are using a package that includes chillispot (consult this table).

Comment: I am using dd-wrt.v23_vpn_generic.bin on a Linksys WRT54GSv4 and the tab still does not show. What else might I have gotten wrong? -- Ravn 23:19, 26 Sep 2006 (CEST)

Connection Failed

If chillispot works (you can see the uam page), but you cannot connect, recheck your chillispot settings.

If the Uam secret is bad, you will have an authentication failure.

If the radius shared secret is bad, the login process will hang.

If you need more assistance, you can post on the [forum]


Chillispot info

DD-WRT is basically a prepackaged version OpenWRT white russian that includes the chillispot software, among others. I have enabled the chillispot config on a linksys WRT54G successfully in conjunction with freeradius and apache located on a separate Debian linux installation in my DMZ. For kicks, I also have squid running on that Debian box. All works well except when I turn off ip forwarding in the hopes of just using squid in transparent proxy mode. In that case so far the connections drop from time to time. Anyway, the bottom line is "yes" it does work!

-jcypher

The [edited] babblefish version of Rommels' information is:

It is also important to consider that to use Chillispot in DD-WRT it is necessary to have the IP of the chillispot server which I give him at this point but that everything if it goes has to form with radius gratuitous of chillispot:

radiusserver1 rad01.chillispot.org = 213.66.141.115 I hope that this is of aid to my friends of Hispanic speech

Just thought the translation is needed, since this is the English version of this WIKI. Sorry I could not do a better translation, but my Spanish is very poor. ... servant74