Community discussions

MikroTik App
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Hotspot and wep problem...

Fri Apr 01, 2005 12:25 am

I have programmed some automatic billing code for the hotspot login pages and also have it generate a wep key for each MAC that signs up. From there it updates the radio.

My problem is that when hotspot is turned on and you try to use wep at the same time, nothing over port 80 works (possibly others).
I can ping ips and hosts just fine, I just cant hit websites when wep is on. What do I need to do to fix this?
 
wildbill442
Forum Guru
Forum Guru
Posts: 1055
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Fri Apr 01, 2005 6:19 am

disable web-proxy on the hotspot maybe?
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Fri Apr 01, 2005 7:06 pm

I didn't even have the web-proxy package installed... any other ideas?
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Fri Apr 01, 2005 9:07 pm

It seems it has to be a firewall ruleset I'm missing or something. I get an IP via DHCP when I have wep enabled, DNS resolves (I can ping ips/hostnames), but when I try to access any other ports it just hangs. I'm not even seeing a connection to radius when I submit my username/pass from the hotspot page. As soon as I disable wep on the hotspot and client it works fine... what am I missing here? Someone please respond, this problem is taking too much time to fix. Thanks.
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Sun Apr 03, 2005 4:20 am

Why doesn't anyone have an aswer to this? Sure someone has used wep with hotspot turned on?!
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26822
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Thu Apr 07, 2005 9:27 am

why use wep at all? wep is totally insecure (i think even i could crack it, using the many tutorials on the web :) and old-school. just imho
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Thu Apr 07, 2005 9:57 am

I just want an answer to my question, you're stating the obvious... why not post a solution instead?
 
wildbill442
Forum Guru
Forum Guru
Posts: 1055
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Thu Apr 07, 2005 12:11 pm

I just want an answer to my question, you're stating the obvious... why not post a solution instead?
because the solution doesn't accomplish the objective, securing data.
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Thu Apr 07, 2005 12:26 pm

You presumptions are fairly rediculous. You have no idea how much traffic is being used with these keys and for how long they'll be active. Keys can't be cracked in 1-2 hours when a very minimal amount of packets are being used. When you have one wep key issued per client, only issued for a certain amount of time it's perfectly fine to use this. Even once someone cracks a key, they won't be active much longer after that. This is if they crack the key in record breaking time with a very minimal amount of packets to gather dup IVs with.

Everyone knows the wep flaws.
 
tubbs
just joined
Topic Author
Posts: 12
Joined: Tue Mar 01, 2005 11:24 pm

Sat Apr 23, 2005 12:11 am

I found the answer: It just doesn't work with Orinico gold/silver cards (maybe other hermes based cards?). It works fine with all prism chipset based cards. MT is working on this.
 
matt
Member Candidate
Member Candidate
Posts: 127
Joined: Thu Jan 27, 2005 9:29 am
Location: Canterbury, New Zealand
Contact:

Sat Apr 23, 2005 5:16 am

 
john2
just joined
Posts: 20
Joined: Thu Apr 07, 2005 5:55 pm

Sat Apr 23, 2005 12:00 pm

v2.9 beta 19 has AP to station wpa working. It still might need some work before it will fit into everybodies network design/config needs. WDS wpa is in the works. But you can test it now. RouterOS doesn't support Orinoco/Avaya/Proxim cards in AP mode.

John

Who is online

Users browsing this forum: kg4dkf, mrz and 56 guests