Any of your networks can be enabled as a hotspot. To enable a hotspot, you need to select a network and set it as a hotspot in Network Settings → WiFi / Local Networks.
NOTE: Although any network can be a hotspot, the router allows only one hotspot.
Hotspot Mode: Choose from the following dropdown options:
- RADIUS/UAM: Allows you to set up external authentication servers.
Local IP Network: A single LAN Group – including both WiFi and Ethernet – can be configured as your hotspot. If you do not already have a LAN Group configured as a hotspot, go to the WiFi / Local Networks page (you can click Configure to link to this page) and set the Routing Mode to “Hotspot” for the LAN Group you want to use.
NOTE: Routing Mode is in the Local Network Editor under the IP Settings tab. Select a network in Network Settings → WiFi / Local Networksand click Edit to open the Local Network Editor. The IP Settings tab will already be open. The Routing Mode dropdown menu is at the bottom.
Allow Service on 3G/4G Modems: Allows you to enable or disable hotspot access to the Internet over a modem. This is often used if the router has a main wired link and a secondary modem for failover (typically with a more expensive/limited data plan). Select this option if you want the router to allow data traffic over the modem if the wired connection goes down.
Disable Service if Ethernet Threshold is met: This will block Hotspot use of the WAN when the threshold is met. This can be used if the router is being used as a backup failover connection to another router with a wired connection. If that other router’s wired connection goes down and it starts using this router for its primary connection, then disable Hotspot use of the WAN connection. Set the limiting Rate (KB/s) and Time Period (seconds).
Redirect HTTPS Requests: This allows initial requests to HTTPS websites to be redirected appropriately.
Hotspot/UAM Authentication Port: Default: 8000. Type in a different port number, or use the slider to change the port.
Simple Mode Settings
- To the URL the user intended to visit.
- To an administrator-defined URL.
Redirect URL: If you have chosen to send users to an administrator-defined URL, you will need to specify the address.
Session Timeout: (Default: 60 minutes.) The amount of time the user may use the router before being forced to authenticate again.
Idle Timeout: (Default: 15 minutes.) If the user is idle for this amount of time, make them re-authenticate.
Bandwidth (upload): (Default: 512 Kbits/sec.) The data rate limit for users uploading data through the hotspot.
Bandwidth (download): (Default: 1024 Kbits/sec.) The data rate limit for users downloading data through the hotspot.
This section allows you to configure a RADIUS and Universal Access Method server. After the user accepts the terms, you can either let him/her continue to the URL they were trying to reach or you can force the user to go to a specified UAM Server or URL once before continuing on.
- Server Address 1: Assigned by RADIUS service.
- Server Address 2: This is an optional backup server.
- Authentication Port: The standard port number, 1812, will usually be sufficient.
- Accounting Port: The standard port number, 1813, will usually be sufficient.
- Shared Secret: Assigned by RADIUS service.
- Redirection On Successful Authentication: Choose from the dropdown list of options for redirection:
- Redirect to the UAM Server.
- Redirect to the URL that the user intends to visit.
- Redirect to the following URL (input the desired URL).
- Session Timeout: (Default: 60 minutes.) The amount of time the user may use the router before being forced to authenticate again. This value can be overwritten by the RADIUS server.
- Idle Timeout: (Default: 15 minutes.) If the user is idle for this amount of time, make them re-authenticate.
- Bandwidth (upload): (Default: 512 Kbits/sec.) The data rate limit for users uploading data through the hotspot.
- Bandwidth (download): (Default: 1024 Kbits/sec.) The data rate limit for users downloading data through the hotspot.
- Login URL: Assigned by UAM service.
- Splash Page URL: Optional URL that can point to an external page that can provide specific information to the user prior to being authenticated. The page MUST provide a link back to the Login URL in order for the user to be authenticated. For example: http://lan ip address:uam port/prelogin or http://192.168.10.1:8000/prelogin.
- Shared Secret: Optional, depending on the UAM service.
- NAS/Gateway ID: Assigned by UAM service.
The HeartBeat, when enabled, sends the following information to the specified URL at the specified time interval so the operator managing the hotspot knows if the router is still functioning:
- mac: The MAC address of the router, i.e. 00-11-22-33-44-55.
- nasid: The NAS/Gateway ID of the router which should be entered in the UAM Settings.
- os_date: A string showing the type of router and the firmware version running, e.g. Cradlepoint_4.1.2.
- uptime: The uptime and system load average of the router
Allowed Hosts Prior to Authentication
Adding hostnames to this list will allow access from your network to any external domain or website prior to being authenticated. For example, a hotel might allow access to its own website prior to authentication.
Click Add to enter new hostnames you wish to allow.
Enter the hostname or domain name of the website you wish to allow, e.g. www.company.com or company.com. To allow all domain and sub-domain options, use a wildcard, e.g. *.company.com.
Click Submit to save your additions.
Authorized MAC Addresses
Add the MAC addresses of trusted machines. This gives them automatic access through the Hotspot portal.