Chillispot

From DD-WRT Wiki

Revision as of 01:43, 15 February 2007 by Whiteboy (Talk | contribs)
Jump to: navigation, search

Chillispot can be used for hotspot management. It requires a separate webserver to host the redirect url and a separate radius server (these may be installed on the same machine, of course).

You can also use a hosted chillispot portal like http://worldspot.net, which is free for free hotspots or Skyrove (free for free hotspots only). It replaces both your radius server and your web server, and brings powerful features. You simply register there and create your hotspot. Then you can get the chillispot configuration settings [1][2] to enter in the steps below, and you can get your hotspot working in some minutes.

Contents

Configuration

DD-WRT v23 sp2 corrected some annoying bugs. Now, setting up chillispot is Really SIMPLE!!! The problem was that the WLAN and the LAN could not be separated. So you could not access your router from the LAN anymore. Now, you simply setup your router as usual, then you enable Chillispot. Your LAN (the wired switch ports) will not be accessible by your Hotspot users. This means that your privacy is respected. (Well, forced to be respected. :-) )

  • Install DD-WRT v23sp2 (v24 worked for me also but might have some bugs left)
  • Connect the Internet (modem or existing router) to the Hotspot router using the WAN port
  • Connect your computer to one of the LAN ports. (Disable your static IP and let DHCP automaticaly configure your IP.)
  • Now you should be able to connect to your router's web management screen at http://192.168.1.1/
  • If you haven't reset to factory settings after installation, do it then reboot once more. (it is important)
  • Check to make sure that you can connect to the Internet from your computer. If not, configure your Internet connection.
    • If you're using an existing router for your Internet, instead of a modem, your Hotspot router must use an IP address in a different subnet. Supposing you're existing router's IP address is 192.168.1.1, then change your Hotspot router's IP address to something like 192.168.2.1.
  • Once your Internet is working, setup your wireless LAN. Disable encryption for your Hotspot users.
  • Now check to make sure you can connect to the internet from a wireless client device.
  • If everything works, then simply enable Chillispot with the given settings in Administration/Hotspot/Chillispot
    • Enable Chillispot
    • Enable "Separate WiFi from the LAN bridge". This enables your wired LAN to connect directly to the Internet without going through Chillispot. Your LAN (the wired switch ports) will also be unaccessable by your WiFi users.
    • On the DHCP interface, select WLAN.
    • Set RADIUS server 1 to be the IP address of a your primary RADIUS server.
    • set RADIUS server 2 to be the IP address of a your secondary RADIUS server (use the same as server 1 or leave the zeros if you only have one)
    • Set DNS server to be the IP address of a DNS server
    • In Shared Key, put your RADIUS secret password
    • RADIUS NASID is the RADIUS name of your Hotspot
    • Redirect URL is the address of the UAM Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect URL and the Hotspot.
    • UAM Allowed is a list of websites that unauthenticated users are allowed to access.
  • Save and reboot your router.
  • Your Hotspot should work now. If you tested your wireless client device before setting up Chillispot, restart (repair it or disable it and then enable it again) it to get the new Chillispot IP addresses.

Old Configuration for v23sp1 or when you want that chillispot manages your LAN ports

Originaly copied from http://www.jml.lalley.com/chillispot_howto.cfm and rewritten

Draft Configuration Guide for using DD-WRT as a Hot Spot

These instructions are valid when you already have an Internet connection that is shared by another router (doing NAT). It is also useful when you want that chillispot manages your LAN ports, for example when you want to extend your wifi range by adding more APs connected by ethernet (or when you want to connect wired public internet machines)

IMPORTANT: When doing this, chillispot will manage you LAN ports, and may block any access to the DD-WRT admin interface. You must make sure that you can reach DD-WRT admin interface from the WAN port BEFORE setting up chillispot.

Note: It is strongly recommended that you use v23sp2 version to enable the option: "separate wifi from the wireless bridge" This is required to ensure security of your Hotspot (your LAN won't be visible)

  • In Setup / Basic Setup: Set the IP address on the WAN port to a static IP Address or somehow be able to know the IP address. This is necessary if you want to connect to the web management interface. You could also use DHCP to set the ip to a known value.
    • IMPORTANT: you must choose a WAN ip address which is not in the same subnet than the LAN port of DDWRT. For example, if you connected from the LAN port at address 192.168.1.1, and your gateway IP is in the same subnet (192.168.1.x), you must change your lan IP address to somethink else like: 192.168.10.1 (assuming that your ip masks are 255.255.255.0)
  • In Administration / Management / Remote Access: Configure the router for remote management. (save settings)
  • Reconnect to the router via the WAN port. This is required because you will now disable DHCP on the Main setting page.
  • Disable DHCP on the Basic Setup page
  • configure Chillispot in Administration / Hotspot / Chillispot: fill the values that depend on your setup (you can get them from http://worldspot.net)
    • set Radius server 1 to be the ip address of a your primary radius server
    • set Radius server 2 to be the ip address of a your secondary radius server (use the same as server 1 or leave the zeros if you only have one)
    • set dns server to be the ip address of a dns server
    • in Shared Key, put your radius secret password
    • set dhcp interface to be LAN and WLAN
    • radius NASID is the radius name of your hotspot
    • Redirect Url is the address of the Uam Server, the web authentication portal.
    • UAM Secret is a secret password between the Redirect Url and the hotspot.
    • UAM Allowed is a list of website that unauthenticated users are allowed to use.
  • Now enable Chillispot and reboot router
  • Chillispot will not start unless it can see the dns server specified the chillispot settings.
  • Note that after reboot, it can take a certain time before you wifi client will get its ip address. Don't forget to enable automatic ip assignment (dhcp) on your client wifi interface!

Troubleshooting

You get an IP (192.168.182.X) but you see no welcome page

Maybe you are using a PPPOE modem and went into the MTU bug. More info in this forum post

Administration/Hotspot/Chillispot tab does not show

  1. Make sure you are using a package that includes chillispot. Chillispot is not in the micro and mini versions of dd-wrt (consult this table).

Connection Failed

If your client does not recieve 192.168.182.2 address via chillispot you may have touched the Chillispot DHCP Interface. Touching this setting breaks Chillispot on Sp23 V2. A fix is to reset to factory defaults and re-enter all your settings.

Chillispot is operating on the wrt if your client picks up a DHCP address of 192.168.182.2

If Chillispot works (you can see the uam page), but you cannot connect, recheck your Chillispot settings.

If the UAM secret is bad, you will have an authentication failure.

If the RADIUS shared secret is bad, the login process will hang.

If you are using the radius server at www.chillispot.org you may find you can't get past the HotRadius Login page. Then try creating a www.worldspot.net account, it even shows you the exact entrys to copy and paste into your dd-wrt chillispot page.

More things to try

If it does not work, you must connect with ssh or telnet to your router.

login: root 
password: <your password>

First, check that you have internet access:

ping google.com

if you don't have any ping return, check the output of "ifconfig", and post it on the WorldSpot forum

If internet work from your router but you don't have chillispot working, check first that the chillispot process is launched with

ps -ef

You should see a "chilli" process. If not, recheck your chillispot settings. For example, if you put a whitespace in the NASID, the chilli process won't launch.

If you need more assistance, you can post on the WorldSpot forum

External Links

Chillispot info World Spot HotSpot compatable with chillispot on dd-wrt