Page Comparison

Service Controller Altai is based on the same firmware version as Mikrotik devices. Both devices use RouterOS system. The settings of the Altai Service Controller 1600 is based on the same setup guide as for the standard Mikrotik. There is only one difference: Altai Service Controller has a serial number which SOCIFI uses for the device identification. For the identification of the device the mac address of the first ethernet device has to be used

...

1) Time synchronization - Setting SNTP client

The first step is a configuration of time synchronization. It is configured in the SNTP client (time) on the menu:
System > SNTP Client

Enabled: Checked
Mode: Unicast
Primary NTP Server: 0.north-america.pool.ntp.org (for example)
Secondary NTP Server: 1.north-america.pool.ntp.org (for example)

Please set servers that are as close to your location as possible. You can find NTP list here: http://www.pool.ntp.org/en/

Enable the correct time zone System > Clock > Time Zone Name:
America/Montreal (or according to your location):

Image Modified

The time is automatically synchronized after the correct termination of LAN configuration.

2) Radius settings

The second step is a configuration of a client for the external SOCIFI RADIUS server. It is necessary for authentication and managing parameters of clients connections. Here are necessary to be enabled the communication from the Altai Service Controller to the SOCIFI RADIUS servers for the UDP packets on the standard radius ports (1812/udp and 1813/udp). This must be enabled on each device in the way between controller device and the SOCIFI RADIUS server

Add primary radius server (RADIUS Server 1):
Radius + General tab

Servis
hotspot: checked
Called ID :
Domain:
Address: rad-1-euw-1.socifi.com (for example)

Secret: socifi
Authentication port: 1812
Accounting port: 1813
Timeout: 300 ms
Accounting Backup: unchecked
Src. Address:

Image Modified

Image Modified

Add secondary radius server (RADIUS Server 2):
Radius + General tab

Servis
hotspot: checked
Called ID :
Domain:
Address: (for example)

Secret: socifi
Authentication port: 1812
Accounting port: 1813
Timeout: 300 ms
Accounting Backup: unchecked
Src. Address:

Image Modified

 3) Bridge settings

As the third step must be created a new bridge interface. This new bridge interface will be used as the virtual input interface for the SOCIFI hotspots system.
Bridge > Bridge tab > +

New Interface: General tab
Name:bridge-HS
OK

For the connection between the new bridge interface and some physical input interface with data for SOCIFI platform, must be added this physical interface to the new bridge interface. For example, physical ether2 interface will be added to the new bridge interface:

Bridge > Ports tab > +

New Bridge Port: General tab
Interface: ether2 
all on Bridge:bridge-HS

When it used some VLAN for SOCIFI data from input devices then must be added this VLAN interface to the new bridge.

...

The number of IP addresses should submit their license (L4 = 200 addresses). See notes at the end of the manual.

Hotspot Setup:

1. HotSpot Interface: bridge-HS
2. Local Address of Network: 10.50.5.1/24
3. Address Pool of Network: 10.50.5.2 - 10.50.5.254
4. Select Certificate: none
5. IP Address of SMTP Server: 0.0.0.0
6. DNS Servers: 10.50.5.1 / 8.8.4.4 / 4.4.4.4 (or will be better using our DNS servers from your site or your provider)
   First DNS server address must be the interface address!!
7. DNS Name: hotspot.socifi.com (required)
   This domain could be adjusted to fit your needs. For example hotspot.mydomain.com
8. Name of Local HotSpot User: user

...

The changes in the Hotspot settings

Remove Shared User (default = 1):
IP > Hotspot  > User ProfilesDefault , General Tab

Shared Users: clear
OK

Addresses per MAC = 1 (default = 2 )    

...

Change the Name from the default value of hotspot1 to value "AL_ <mac_address_of_first_ethernet_interface>", for example "AL_3F0602DFA144". 

OK

Change the method of the Authentication:
IP > Hotspot > Server Profiles select hsprof1

Hotspot Server Profile <hsprof1> Login Tab
HTTP PAP: checked

Use RADIUS: Checked
Default Domain:
Location ID:
Location Name:
Mac Format: XX:XX:XX:XX:XX:XX
Accounting: Checked
Interim-Update: 00:01:00
Nas Port Type: 19 (wireless-802.11)

5) Scripts WalledGarden and ReplaceLogin

...

Create WalledGarden script: System > Scripts +
Name: WalledGarden

Copy & paste following script:  

The result is a list of servers:

Image Modified

Creating a definition for hotspot login

...

We generate a hotspot / login.html file the same way: System > Scripts > +
Name: ReplaceLogin

Click Apply and then run script: Run Script (change takes the effect by changing the date and time of the file: File hotspot/login.html). Copy & paste following script:

...