Looking for software for guest access

[Techie-Micheal]

Much like the same way hotels and hotspots require you to register and then login in order to use their WLAN. I've found a few hardware packages, but I need a software package we can stick on an existing server. Some requirements:

- Student database
- Passthrough to AD for faculty/staff
- Web login page (customizable)
- DHCP request/ACK
- Clientless
- Ability to monitor bandwidth usage/app usage per user and boot them off if necessary manually

If this is the wrong forum here, please move it. :)

[golfnut]

If you wanted to design this yourself,

Linux, FreeRadius, Dialup Admin, MySQL, Apache, and PHP

Greg

[Techie-Micheal]

Thanks. I am looking for a Windows solution. Do you of any WPS solutions out there? I haven't been able to find any, and I only know PHP/MySQL/etc. and not enough .Net to do anything useful. I meant to reply earlier, but for some reason I never saw the reply notiification.

[golfnut]

Michael,

You can run MySQL, PHP, and Apache Web Server on a Windows machine and it's a little easier to configure than on a Linux box. You still need a Radius server.

You'll also need a hardware authentication controller (i.e. DLink DSA3100 or Zyxel VSG1200, etc.) to firewall access until authentication. They can do MAC ID or Static IP passthrough and they have a feature to redirect to a web server for authentication with Radius.

Also checkout the Netgear WG102. It can redirect to a web server....

Greg

[Techie-Micheal]

I know I can run PHP/Apache/MySQL on a Windows box. Heck, I have a box here that runs that for my IDS. www.phpbb.com/about.php and note my name there. ;) FreeRadius however, cannot run on Windows natively. Radius requires (typically) 802.1x, which in my case is going to cause problems as I can't going around installing certificates on PC's/laptops/handhelds that I don't have control over. Unless I can make use of WPS or something similar. Using products like Netgear and the like is unfortunately out of the question. I can't go playing around like that with a production government network. I need something that works and works well.

[golfnut]

Just for clarification, you don't need to install client certificates to make 802.1x work. You can use the server cert....

I know FreeRadius doesn't work on Windows but if you know how to setup and configure the other windows components and your SQL database, a Linux box running FreeRadius is a suggestion that works and will save you a lot of money.

If money is not an issue, consider www.aradial.com

Greg

[Techie-Micheal]

Okay, how would I make it work with a server cert? FreeRadius will not work. I'm unfortunately held to Windows-only. I've been talking with Aradial, but I'm starting to not like them very much.

[golfnut]

If you're already using Microsoft Server, you could use PEAP as a means of authenticating using a server based certificate.

Here's a link describing the various methods...

http://support.intel.com/support/wireless/wlan/sb/cs-008413.htm

As for deploying 802.1x in a Windows environment, search for 802.1x at microsoft.com as they have a few good step-by-step guides.

Greg