Topic: Wirelsss client needs auth via smeserver

[daley]

Hey,

Is it a possible to setup the wireless client to request auth to access internet/intranet via the smeserver?

Pls advise.

Daley

[gregswallow]

Do you have a wireless router or access point?  I think what you're asking is if you can allow only certain people to access the internet/intranet, right?  I think most access points or routers have as part of the ir security settings, the ability to allow only certain mac addresses to connect (my US Robotics wireless router does anyways).  That's pretty secure I think.

[lguzman]

I’m also interested in software able to authenticated wireless client with user and password to get the connection. In the area that I get hotspot they use nomadix but this is a hardware auth and I searching for something that can be integrated with SME. There still much that I want to do with SME but I’ll keep open individual Post. Daley I hope some one answers soon.

[gregswallow]

What you're looking for is called a 'captive portal'.  Search contribs.org and you'll find earlier discussion about it.

Here is a captive portal software that could probably be installed on SME called NoCatAuth:
http://nocat.net/

This also look cool, as an alternative to installing it on SME:
http://www.publicip.net/

[lguzman]

gregswallow
Excellent I’ll try it today and I’ll post the results.

[dhardy]

m0n0wall is excellent -

http://m0n0.ch/wall

We are using m0n0wall on 11 sites to provide wifi to laptop users and visitors. Its using passthrough to allow access to our website and mail server without authentication. The captive portal and RADIUS control access to the wider web. The way I have it setup there is no direct access to the LAN from the wifi subnets.



We are using FWAP-3680 1U server units and netgear 54g access points.

m0n0wall is a FreeBSD distro that is configured (like SME) via a browser. We have had issues with multiple pptp passthrough - one client can passthrough without problems, 2 clients won't work. Its easy to solve though, you just configure m0n0wall as a pptp server and spoof the 'normal' pptp server's dns name. Dead easy to setup, PM me if you need more info.

HTH

David.

[shanen]

Here are a couple more.
Chillispot
MikroTik
Some Ap's use radius for auth.

If you install the radius contrib, you can use SME's user database to auth your clients.
http://sme.swerts-knudsen.com/downloads/Radius/