Hi My Dear collegues,


This is Sathish running mikrotik hotspot service succesfully with 1000 users, Only back log is ," Iam using static Ip's and i disabled DHCP server, intresting problem is When a customer had changed the Ip of their PC they are also able to get authenticated after changing the Ip ,

Please give me the clear config if theres any , I user Static ARP option etc, My requirement is the hotspot User and Hotspot password should be authenticated from only aloocated static IP PC which i allocated to my clients

All the professionla help is highly Aprrecaited, Thanks and regard in advance

Thank u,
Sathish

Switch to dynamically assigned IP addresses to the HotSpot clients and dont use any arp techniques with HotSpot - it does that for you. For security - SSL it...

1000 users in the same broadcast domain ? With wireless this can be an issue, one AP - one collision domain for 1000 users. More APs bridged together - problems with broadcast traffic...

Hi,


Thanks for ur time for reply, If i use the DHCP also client can forcely make it static , this is the problem

Please give me the other solution

Thanks
Sathish

what about 'ARP Mode = reply-only' + 'Add ARP for Leases' in DHCP Server?.. no more static =)

Very nice idea Chupaka.

HotSpot is meant to automate all this and it should not be needed to do additional IP address asignment etc arp etc work. Its supposed to be plug and play, simple configuration

But its good that one can customize the config if one needs to. If it is really necessary.

P.S. actually, And Im speaking from memory here, the HotSpot NAT rules are there to take traffic from any IP address - that is what makes it so cool for letting any user with misconfiguration on his station - be your working client without the need to reconfig something. Its a feature of the HotSpot, right? If I remember correctly.

So to achieve your thing do what Chupaka suggested (genius mate) and take a look at those NAT rules - maybe disabling one or two of them will make clients with misconfig IPs - not work with HotSpot - if that is the goal - I understand it is.

Cheers