How do we force incomming wireless to logon first?

[veger]

HI! I have a few room mates with laptops that I want to share internet with but I want them to logon to my PC first ( So I can Monitor/limit or give quota's to there bandwidth.) before going on the internet.

Question:1 I need to give them the WEP but I don't want them to be able to connect to the internet without loggin in first. Is this done VIA the router?

Question:2 I am using software to administer there connection, should I be configuring my software to look for a specific MAC address and/or Port?

I know I have to get there MAC address and I also will have to setup there computer to be able to log on to my home network. I created a setup disk.

I have a simple setup.
( Linksys WRT54g using DD-WRT SP2) and Window ( XP PRO Sp3 ) with modem. :)

Veger

[johnwill]

You need to have something like a Radius Server on your machine. That's normally run on a server, so I'm not sure if there is a solution for XP workstation.

[veger]

HI! Is there a version that you recommend? I found a few free versions. Is there specific thing I should look for in the software other than working on XP PRO?

Paul

[johnwill]

Perhaps you could post links to what you're considering and we can see if it makes sense.

[veger]

HI! I was just thinking of that :)

Paul

[veger]

HI! I am considering this one. It also supports ms free SQL server. What do you think

http://www.supershareware.com/info/tekradius.html
PS. Its also freeware Freeware

Paul

[veger]

HI! Here are some of the features this software has. NOTE its Freeware and can be used for both commercial or personal use. They only ask you to provide feedback.

2. Major features

• Supports features described in RFC 2865 and RFC 2866 (RADIUS protocol).
• Logs system messages, errors and session information to a log file and limit number of simultaneous sessions (See notes).
• All parameters can be configured and RADIUS Dictionary can be edited through TRManager GUI.
• Authentication and Accounting ports are user selectable.
• You can create SQL database and tables through TRManager GUI.
• You can map RADIUS Accounting attributes to Accounting table fields.
• You can run TekRADIUS in Authentication only or Authorization only mode.
• You can define which RADIUS attribute will be used for User-Name substitute.
• You can define own Authorization query string.
• PAP, CHAP, MS-CHAP v1, MS-CHAP v2, EAP-MD5, EAP-MS-CHAP v2 and PEAPv0-EAP-MS-CHAP v2 (As implemented in Windows XP SP1), Digest (draft-sterman-aaa-sip-00.txt) authentication methods are supported.
• Generates MS-MPPE Keys.
• You can specify an Expire-Date and User-Credit for the users and use Authentication method as a RADIUS check item.
• You can specify how much time user account will be valid after the first logon (Time-Limit) and you can specify allowed logon days and hours (Login-Time).
• You can authenticate users against Windows Domain or Active Directory.
• Command line utility for adding, deleting and modifying user profiles and RADIUS clients. You can start/stop and query status of TekRADIUS service using the command line utility (trcli.exe).
• User level restrictions to GUI access. Windows users in "Administrators" group can access to all functions on TekRADIUS Manager GUI but Windows users in built-in "Users" group can access restricted set of functions on TekRADIUS Manager GUI.
• Simple reporting interface for browsing Accounting records.
• Disconnects users with Packet of Disconnect (Pod) or user defined kill command.
• TekRADIUS can disable user profile after user configurable number of unsuccessful login attempts.
• Quick and easy installation.

[johnwill]

Well, that certainly looks like it should do the trick. Provide some feedback here as well.

[veger]

HI! I will post all my findings as I go and give a full "How To" once its all up and running as I am sure that there are a lot of other out there that are in the same situation

For now I have installed the TekRadius software and MS- SQL Express version 2005 and I have enabled IIS server.

I had a problem logging in with sa as a login so I found some documentation that suggested that I configure SQL server to use Mixed Authentication as apposed to only Windows Authentication. I also created a win.config ( in notepad ) and added in the following in it.

<system.web>
<identity impersonate="true"/>
</system.web>

and I put this file into the inetpub root and in the WWWroot folder.

Now I am able to login as "sa" in SQL from TekRadius, I still have to create the Databases so I will get back here and post what happens :)

PaulD

[johnwill]

Sounds like you're on the right road.