Mikrotik - control access to the Internet through the hotspot using SOCIFI
In the event that we use Mikrotik devices registered in SOCIFI and we want to control access to the Internet for some devices, we can use built-in function of used hotspot service. This feature is called IP Bindings (IP / Hotspot / IP Bindings).
For this functionality, we can use the "resources recognition" (client device) either by its MAC address or by its IP address. Furthermore, this device can be either blocked (type = blocked) to access the Internet, or vice versa grant it an exception (type = bypassed) and not to have to use SOCIFI connection during login.
For example, we set the MAC address of the client device (01: 23: 45: 67: 89: AB) that we want to allow exceptions so that device skirts SOCIFI connection when accessing to the Internet.
This can be used for example to create exceptions to allow access to the Internet for devices for which is SOCIFI connection unwanted (e. g. technical equipment for network management, mobile phones of restaurant staff, etc ...).
In the event that we would like to use the recognition by IP addresses, we must either assign the IP address to the client's device manually or book his MAC address and the IP address in DHCP server used for this network. Anyway, let's not forget this IP address to remove from the IP range (IP pools) of DHCP server.
Example of IP address 192.168.88.5 reservation in the DHCP server for the MAC address of device (01: 23: 45: 67: 89: AB).
Comments
Post a Comment