Anonymous January 3, 2012 at 9:12 pm

Ok, works

Provided you enter MAC as XX-XX-XX-XX-XX-XX and not as XX:XX:XX:XX:XX:XX , and also remove the 'root' parameter, so like this (put below into file /etc/crontabs/root )

Code:
1 * * * * /usr/bin/wget http://tech.hotspotsystem.com/up.php?mac=MA-CA-DD-RE-SS-XX&nasid=YOUROPERATORID_YOURLOCATIONID&uptime=`uptime|sed s/” “/%20/g|sed s/:/%3A/g|sed s/,/%2C/g` -O /tmp/up.html
1 3 * * * reboot

PS: note that I also advise to reboot every night at 03h00, but make sure to translate your local 3am into UTC

Also, by adding this to the coova default file, it nicely locally authenticates some MAC addresses, while unknown ones still get a logon (the man page incorrectly lists the second one as macallowed). Multiple MAC should be comma separated:

Code:
# LOCAL MAC addresses
HS_MACALLOWLOCAL=on
HS_MACALLOW=”XX-XX-XX-XX-XX-XX”

Going one step further, you can also set your self-owned equipment into the routers LAN natural (iow, non 182) subnet, but then above MACALLOW will not suffice, as coova will complain about spoofed IP addresses, and drop them. Adding below will solve that. Assuming your hotspot range is 182, and your private range is 20, set this in the configuration.

But move it to the local.conf file rather than the defaults, as I found these “non-hotspot settings” better contained there than the default file. The firewall modification can be done by the ipup.sh script. Here are the ones I am using:

(PS: this is on OpenWRT+Chilli, not sure if other platforms would respond the same)

The default session and default timeout is needed because otherwise the “macallow” sessions are infinite, and hotspotsystems graphs and counters are confused by that.

Code:
# LOCAL static IP range from 96 to 111
statip 192.168.20.96/255.255.255.240

lease 900 # default dhcp lease 900 seconds
leaseplus 300 # 5 minutes extra just in case
defsessiontimeout 90000 # 24 hour sessions for internal equipment (users are set by radius)
defidletimeout 3600 # 1 hour for internal equipment (users are set by radius)

# LOCAL MAC addresses
macallowlocal
macallowed XXXXXXXXXXXX #local device 1
macallowed YYYYYYYYYYY #local device 2

Code:
#!/bin/sh
#
# remove chilli build in added lines to allow native traffic again.
iptables -D INPUT -i br-lan -j DROP # this rule should be deleted
#iptables -D FORWARD -i br-lan -j DROP # leave this as # otherwise duplicate traffic
iptables -D FORWARD -o br-lan -j DROP # this rule should be deleted

Additional, or even instead of, the LOCAL MAC authentication, you can also temporary authenticate an address by one of these example commands:

Code:
chilli_query list
chilli_query authorize ip 192.168.20.xx sessiontimeout 600 username admin_access
chilli_query logout xx-xx-xx-xx-xx-xx

(Yes, with chilli_query you authorize based on IP but you kick them out based on MAC. A bit strange, but so what.)