Chillispot

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 18:16, 3 October 2006 (edit)
AycheKay (Talk | contribs)
(Configuration)
← Previous diff
Revision as of 05:17, 13 October 2006 (edit) (undo)
Whiteboy (Talk | contribs)
(Configuration)
Next diff →
Line 32: Line 32:
* Your Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair it or disable it and then enable it again) it to get the new Chillispot IP addresses. * Your Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair it or disable it and then enable it again) it to get the new Chillispot IP addresses.
-----+==Old Configuration for v23sp1==
- +
-== Deprecated old instructions for v23sp1 ==+
originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten
Line 68: Line 66:
* Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface! * Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!
-=== Troubleshooting ===+==Troubleshooting==
If it does not work, you must connect with ssh or telnet to your router. If it does not work, you must connect with ssh or telnet to your router.
Line 86: Line 84:
You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch. You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch.
-==== Administration/Hotspot/Chillispot tab does not show ====+===Administration/Hotspot/Chillispot tab does not show===
# Make sure you are using a package that includes chillispot (consult [[What_is_%22DD-WRT%22%3F#v23_File_Versions|this table]]). # Make sure you are using a package that includes chillispot (consult [[What_is_%22DD-WRT%22%3F#v23_File_Versions|this table]]).
-'''Comment:''' I am using dd-wrt.v23_vpn_generic.bin on a Linksys WRT54GSv4 and the tab still does not show. What else might I have gotten wrong? -- [[User:Ravn|Ravn]] 23:19, 26 Sep 2006 (CEST) <!-- Please delete the question once it has been fully answered (or I will do so) //-->+===Connection Failed===
- +
-==== Connection Failed ====+
If Chillispot works (you can see the uam page), but you cannot connect, recheck your Chillispot settings. If Chillispot works (you can see the uam page), but you cannot connect, recheck your Chillispot settings.
Line 101: Line 97:
If you need more assistance, you can post on the [[http://worldspot.net/forum/ forum]] If you need more assistance, you can post on the [[http://worldspot.net/forum/ forum]]
-----[http://www.chillispot.org/ Chillispot info]+=External Links=
- +[http://www.chillispot.org/ Chillispot info]
-DD-WRT is basically a prepackaged version OpenWRT white russian that includes the chillispot software, among others. I have enabled the chillispot config on a linksys WRT54G successfully in conjunction with freeradius and apache located on a separate Debian linux installation in my DMZ. For kicks, I also have squid running on that Debian box. All works well except when I turn off ip forwarding in the hopes of just using squid in transparent proxy mode. In that case so far the connections drop from time to time. Anyway, the bottom line is "yes" it does work!+
- +
--jcypher+
- +
-The [edited] babblefish version of Rommels' information is:+
- +
-It is also important to consider that to use Chillispot in DD-WRT it is necessary to have the IP of the Chillispot server which I give him at this point but that everything if it goes has to form with radius gratuitous of Chillispot:+
- +
-radiusserver1 rad01.chillispot.org = 213.66.141.115 I hope that this is of aid to my friends of Hispanic speech+
- +
-Just thought the translation is needed, since this is the English version of this WIKI. Sorry I could not do a better translation, but my Spanish is very poor. ... servant74+
 +[[Category:English documentation]]
[[Category:advanced HOWTO]] [[Category:advanced HOWTO]]
-[[Category:English documentation]] 

Revision as of 05:17, 13 October 2006

Chillispot can be used for hotspot management. It requires a separate webserver to host the redirect url and a separate radius server (these may be installed on the same machine, of course).

You can also use a hosted chillispot portal like http://worldspot.net which is free. It replaces both your radius server and your web server, and brings powerful features. You simply register there and create your hotspot. Then you can get the chillispot configuration settings to enter in the steps below, and you can get your hotspot working in some minutes.

Contents

Configuration

DD-WRT v23 sp2 corrected some annoying bugs. Now, setting up chillispot is Really SIMPLE!!! The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore. Now, you simply setup your router as usual, then you enable Chillispot. Your LAN (the wired switch ports) will not accessible by your Hotspot users. This means that your privacy is respected. (Well, forced to be respected. :-) )

  • Install DD-WRT v23sp2 (v24 worked for me also but might have some bugs left)
  • Connect the Internet (modem or existing router) to the Hotspot router using the WAN port
  • Connect your computer to one of the LAN ports. (Disable your static IP and let DHCP automaticaly configure your IP.)
  • Now you should be able to connect to your router's web management screen at http://192.168.1.1/
  • Check to make sure that you can connect to the Internet from your computer. If not, configure your Internet connection.
    • If you're using an existing router for your Internet, instead of a modem, your Hotspot router must use an IP address in a different subnet. Supposing you're existing router's IP address is 192.168.1.1, then change your Hotspot router's IP address to something like 192.168.2.1.
  • Once your Internet is working, setup your wireless LAN. Disable encryption for your Hotspot users.
  • Now check to make sure you can connect to the internet from a wireless client device.
  • If everything works, then simply enable Chillispot with the given settings in Administration/Hotspot/Chillispot
    • Enable Chillispot
    • Enable "Separate WiFi from the LAN bridge". This enables your wired LAN to connect directly to the Internet without going through Chillispot. Your LAN (the wired switch ports) will also be unaccessable by your WiFi users.
    • On the DHCP interface, select WLAN.
    • Set RADIUS server 1 to be the IP address of a your primary RADIUS server.
    • set RADIUS server 2 to be the IP address of a your secondary RADIUS server (use the same as server 1 or leave the zeros if you only have one)
    • Set DNS server to be the IP address of a DNS server
    • In Shared Key, put your RADIUS secret password
    • RADIUS NASID is the RADIUS name of your Hotspot
    • Redirect URL is the address of the UAM Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect URL and the Hotspot.
    • UAM Allowed is a list of websites that unauthenticated users are allowed to access.
  • Save and reboot your router.
  • Your Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair it or disable it and then enable it again) it to get the new Chillispot IP addresses.

Old Configuration for v23sp1

originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten

Draft Configuration Guide for using DD-WRT as a Hot Spot

These instructions are valid when you already have an Internet connection that is shared by another router (doing NAT). Then DD-WRT WAN port must be connected in the LAN. Of course you can also connect the WAN port directly to your modem (I haven't tested this yet.)

Note: It is strongly recommended that you use v23sp2 version to enable the option: "separate wifi from the wireless bridge" This is required to ensure security of your Hotspot (your LAN won't be visible)

  • In Setup / Basic Setup: Set the IP address on the WAN port to a static IP Address or somehow be able to know the IP address. This is necessary if you want to connect to the web management interface. You could also use DHCP to set the ip to a known value.
    • IMPORTANT: you must choose a WAN ip address which is not in the same subnet than the LAN port of DDWRT. For example, if you connected from the LAN port at address 192.168.1.1, and your gateway IP is in the same subnet (192.168.1.x), you must change your lan IP address to somethink else like: 192.168.10.1 (assuming that your ip masks are 255.255.255.0)
  • In Administration / Management / Remote Access: Configure the router for remote management. (save settings)
  • Reconnect to the router via the WAN port. This is required because you will now disable DHCP on the Main setting page.
  • Disable DHCP on the Basic Setup page
  • configure Chillispot in Administration / Hotspot / Chillispot: fill the values that depend on your setup (you can get them from http://worldspot.net)
    • set Radius server 1 to be the ip address of a your primary radius server
    • set Radius server 2 to be the ip address of a your secondary radius server (use the same as server 1 or leave the zeros if you only have one)
    • set dns server to be the ip address of a dns server
    • in Shared Key, put your radius secret password
    • set dhcp interface to be LAN and WLAN
    • radius NASID is the radius name of your hotspot
    • Redirect Url is the address of the Uam Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect Url and the hotspot.
    • UAM Allowed is a list of website that unauthenticated users are allowed to use.
  • Now enable Chillispot and reboot router
  • Chillispot will not start unless it can see the dns server specified the chillispot settings.
  • Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!

Troubleshooting

If it does not work, you must connect with ssh or telnet to your router.

login: root 
password: <your password>

First, check that you have internet access:

ping google.com

if you don't have any ping return, check the output of "ifconfig", and post it on the [forum]

If internet work from your router but you don't have chillispot working, check first that the chillispot process is launched with

ps -ef

You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch.

Administration/Hotspot/Chillispot tab does not show

  1. Make sure you are using a package that includes chillispot (consult this table).

Connection Failed

If Chillispot works (you can see the uam page), but you cannot connect, recheck your Chillispot settings.

If the UAM secret is bad, you will have an authentication failure.

If the RADIUS shared secret is bad, the login process will hang.

If you need more assistance, you can post on the [forum]

External Links

Chillispot info