Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Wireless HotSpot on LAN

I wanted to have a traditional Wireless network on LAN zone that extends LAN interface via Wifi...Simple, I just added "Home-LAN" Wireless network and set Client Traffic: "Bridge to AP LAN".

I would like to setup a HotSpot voucher on the LAN interface. Guests would be handed a voucher that is only good for 1 day, rather then providing them with the "Home-LAN" wifi password that is unrestricted.

Is this possible?



This thread was automatically locked due to age.
Parents
  • Hello Dan,

    Thank you for contacting the Sophos Community.

    It would be possible, but the users of the LAN would also get asked to enter the Voucher of the day.

    I haven't test, but if you don't want the LAN users to get asked to enter the Voucher of the day, you would need to set the Local computers with static IPs, and create a Firewall rule above the Automatically created Hotspot Firewall rule, for this LAN devices, and below that the Hotspot rule, so the users of the LAN doesn't get asked to enter the Voucher.

    Regards,

Reply
  • Hello Dan,

    Thank you for contacting the Sophos Community.

    It would be possible, but the users of the LAN would also get asked to enter the Voucher of the day.

    I haven't test, but if you don't want the LAN users to get asked to enter the Voucher of the day, you would need to set the Local computers with static IPs, and create a Firewall rule above the Automatically created Hotspot Firewall rule, for this LAN devices, and below that the Hotspot rule, so the users of the LAN doesn't get asked to enter the Voucher.

    Regards,

Children
  • Yep, I setup the hotspot on LAN and all users were redirected to the voucher portal for authentication.

    Makes sense about separating the "local" and "guest" users on LAN via IP assignment, then adding a rule accordingly. 

    Question: is there a way to define a list of known MAC addresses (known clients) so they would be assigned an IP from DHCP Pool 1, then unknown clients (guests on Hotspot) would be assigned IP from DHCP Pool 2?

  • Hello there,

    Not exactly, you need to create STATIC IP MAC mapping in the DHCP using the MAC address and set a static IP address for the known clients, then for the Dynamic Lease this would be use for the Guest users.

    For example: Dynamic IP lease = 172.16.16.200 172.16.16.250

                          Static IP MAC mapping = hostname=PC1 MAC Address = 1A:2b:A0:0A:C1:F0 IP address = 172.16.16.11

    Regards,