Here is the process I used to get to this point:
1.Setup DHCP client on public side of MT box.
2.Setup DHCP server on private side of MT box.
3.Set date & time.
4.Enter command: ip hotspot setup
- Hotspot interface: ether1
Local address of network: 192.168.88.1/24
Masquerade network: yes
Address pool of network: 192.168.88.10 – 192.168.88.100
Select certificate: none
IP address of smtp server: y.y.y.y
dns servers: z.z.z.z, a.a.a.a
dns name: www.mydomain.com
Name of local hotspot user: admin
Password for the user: hotspot
5.Setup router to run both User Manager (UM) and HotSpot service on same box.
- Enter command: ip hotspot profile set hsprof1 use-radius=yes
Enter command: radius add service=hotspot address=127.0.0.1 secret=123456
Enter command: tool user-manager router add subscriber=admin ip-address=127.0.0.1 shared-secret=123456
6.In UM, I edit the subscriber admin's properties as follows:
- Enter a value for Public ID: SWN
Enter a value for Public Host: x.x.x.x (Public IP address of UserMan router)
Enter a value for Email (under Private Information): myname@something.com
4.Enter a value for Currency:
$
5.Enter a value for Time Zone:
7.In UM, create user credits Full Price and Extended Price.
8.In UM, create user “
testuser”.
- Password: test
Poolname: dhcp-pool-1
Time: Full Price
Save.
Check box and click “Edit > Enable”
9.At this point, I can access Internet through hotspot login as both admin and testuser.
10.On a Linux box, I create the private key and a self-signed certificate.
- Enter Command: openssl genrsa -des3 -out privkey.pem 2048
Enter Command: openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
Country: US
State: Texas
Locality: Some City
Organization Name: Bad Company, Inc
Organizational Unit: .
Common Name: www.mydomain.com
Email Address: myname@something.com
11.Copy cacert.pem and privkey.pem to root of MT box via ftp.
12.On the MT box, I enter command:
certificate import
13.Enter command:
certificate print. It shows
name=”cert1”
14.I rerun the command:
ip hotspot setup. I keep all the values entered previously, except for “
select certificate”. The value shown there is the Common Name on the certificate which is
www.mydomain.com, which I accept.
15.Enter command:
ip hotspot profile set hsprof1 login-by=https ssl-certificate=cert1
16.Enter command:
ip service print. This command shows that the “www-ssl” service and the “api” service are disabled.
17.To enable the www-ssl and api service, enter the commands:
- ip service enable www-ssl
ip service enable api
18.Enter command:
ip service set www-ssl certificate=cert1
19.Enter command:
ip hotspot profile set hsprof1 login-by=https ssl-certificate=cert1
20.I try to login as hotspot admin, the dialog box appears asking me if I want to accept the certificate. I click “Accept this certificate temporarily for this session”, and click OK. The little padlock also is displayed in the lower right corner of the browser.
21.The MT login screen appears, I login as admin with hotspot password. Internet comes up.
22.I go to my laptop and try to access internet. Accept certificate, and login as testuser, password “test”, and I get “invalid name or password”. I verified the name and password several times to no avail.
