Winbox

Kompatibilnost

Cubonetics je testiran i dokazano radi na sljedećim konfiguracijama:

Verzije RouterOS-a (usmjerivača):

• 6.x

• 7.5 i noviji, testirano do 7.12.1 (hotspot ne radi na RouterOS 7.x ispod verzije 7.5)

Routeru (usmjerivaču) treba pristupiti pomoću softvera WinBox (može se preuzeti na web mjestu proizvođača).

Ako konfigurirate na Mac-u, trebali biste preuzeti ovaj alternativni softver dizajniran za macOS.

Povezivanje uređaja s Internetom

Router s tvorničkim postavkama trebao bi biti spojen na Internet na prvom ethernet priključku (PoE in). Postupak vraćanja tvorničkih postavki možete pronaći ovdje.

Router mora biti spojen na internetski izvor i, ovisno o modelu, uključen s odgovarajućim switch-em.

Pristup administracijskoj ploči uređaja

Računalo bi trebalo biti povezano s drugim ethernet priključkom uređaja koji konfigurirate. Od njega bi trebao primati IP adresu iz raspona 192.168.88.2-192.168.88.254.

Nakon pokretanja programa morat ćete pronaći usmjerivač na popisu i prijaviti se pomoću admin za prijavu i ostaviti polje lozinke praznim.

Ako se nakon prijave u prozor koji sadrži zadanu konfiguraciju pojavi, pritisnite ENTER i zatvorite prozor terminala.

Konfiguracija uređaja

Konfiguriranje mrežnih postavki

Interfaces → + → Bridge

Name	sw
OK

IP → Addresses → +

Address	10.8.0.1/16
Network	10.8.0.0
Interface	sw
OK

IP → Pool → +

Name	dhcp_pool_sw
Addresses	10.8.0.2-10.8.255.254
OK

IP → DHCP Server → +

Name	dhcp_sw
Interface	sw
Lease Time	3d 00:00:00
Address Pool	dhcp_pool_sw
OK

IP → DHCP Server → Networks → +

Address	10.8.0.0/16
Gateway	10.8.0.1
OK

Bridge → Ports

Ukloni sučelje: wlan1

Sučelje možete ukloniti tako da jednom kliknete na njega i odaberete ikonu — (minus) na traci iznad popisa.

U slučaju da nije vidljivo sučelje wlan1, to najvjerojatnije znači da vaš MikroTik ne pruža WiFi sam po sebi i trebat će vam neke pristupne točke povezane s njim. Preskočite sve korake koji spominju wlan1 i slijedite vodič o dodavanju dodatnih pristupnih točaka nakon završetka ovog vodiča.

Bridge → Ports → +

Interface	wlan1
Bridge	sw
OK

Konfiguriranje RADIUS-a

Da bi Social WiFi funkcionirao, morate prenijeti datoteke na svoj MikroTik uređaj. Da biste to učinili, otvorite prozor Novi terminal (New Terminal):

Kopirajte i zalijepite sljedeću skriptu na terminal:

{ 
    :local downloadEndpoint "https://login.socialwifi.com/installation/mikrotik/download";
    :local fileNames {"login.html"; "rlogin.html"; "alogin.html"; "flogin.html"; "md5.js"}
    :local destinationDirectory "";
    :if ([:len [/file find name="flash" type="disk"]] > 0) do={
        :set destinationDirectory "/flash/";
    }
    :local ether1Mac ([/interface get [find name="ether1"]]->"mac-address");
    :foreach fileName in=$fileNames do={
        :put "Downloading file: $downloadEndpoint/$fileName\?mac=$ether1Mac"
        /tool fetch url="$downloadEndpoint/$fileName\?mac=$ether1Mac" dst-path="$destinationDirectory$fileName"
    }
} 
 

Nakon pokretanja skripte datoteke se automatski preuzimaju. Prijavite se na svoj račun na Nadzornoj ploči Cubonetics-a(Cubonetics Dashboard).

Na kartici "Pristupne točke"(Access Points) pritisnite "Dodaj"(Add) (gornji desni kut), zalijepite MAC adresu koju ste kopirali u obrazac (dodavanje naziva nije obavezno) i kliknite "Stvori"(Create).

U polju Radius Secret kliknite POKAŽI (SHOW) i kopirajte sadržaj.

Otvorite WinBox ponovno, Radius → +.

Service	hotspot
Address	35.205.62.147
Secret	Zalijepite sadržaj kopiran iz radius secreta na nadzornu ploču Cubonetics-a(Cubonetics Dashboard) kako je opisano u prethodnom koraku
Authentication Port	31812
Accounting Port	31813
Timeout	1000
OK

Konfiguracija Walled Garden DNS-a

Novi Terminal (New Terminal) → zalijepite dolje navedene naredbe u terminal (sve naredbe mogu se kopirati i zalijepiti odjednom)

Lijepljenje neće raditi s CTRL+V; Kliknite desnom tipkom miša, a zatim odaberite Zalijepi.

Kopirajte sve dolje navedene sekcije:

# Social WiFi

/ip hotspot walled-garden 
add comment="socialwifi: Allow captive portal main service." dst-host=*.socialwifi.com 
add comment="socialwifi: Allow captive portal main service." dst-host=sw-login.com

# YouTube widget

/ip hotspot walled-garden
add comment="socialwifi: Allow YouTube widget." dst-host=*.youtube.com
add comment="socialwifi: Allow YouTube widget. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow www.youtube.com." dst-host=youtube-ui.l.google.com
add comment="socialwifi: Allow YouTube widget. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow img.youtube.com." dst-host=ytimg.l.google.com
add comment="socialwifi: Allow YouTube widget." dst-host=*.ytimg.com
add comment="socialwifi: Allow YouTube widget." dst-host=*.googlevideo.com
add comment="socialwifi: Allow YouTube widget." dst-host=yt3.ggpht.com
add comment="socialwifi: Allow YouTube widget. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow yt3.ggpht.com." dst-host=*.l.googleusercontent.com

# Facebook remarketing pixel

/ip hotspot walled-garden
add comment="socialwifi: Allow Facebook remarketing pixel." dst-host=*.facebook.com
add comment="socialwifi: Allow Facebook remarketing pixel." dst-host=connect.facebook.net
add comment="socialwifi: Allow Facebook remarketing pixel. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow connect.facebook.net." dst-host=*.fbcdn.net

# Google remarketing tag

/ip hotspot walled-garden
add comment="socialwifi: Allow Google remarketing tag." dst-host=www.googletagmanager.com
add comment="socialwifi: Allow Google remarketing tag. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow www.googletagmanager.com." dst-host=www-googletagmanager.l.google.com
add comment="socialwifi: Allow Google remarketing tag." dst-host=www.googleadservices.com
add comment="socialwifi: Allow Google remarketing tag. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow www.googleadservices.com." dst-host=pagead*.l.doubleclick.net
add comment="socialwifi: Allow Google remarketing tag." dst-host=www.google.*

# Facebook

/ip hotspot walled-garden
add comment="socialwifi: Allow login with Facebook." dst-host=facebook.com
add comment="socialwifi: Allow login with Facebook." dst-host=*.facebook.com
add comment="socialwifi: Allow login with Facebook." dst-host=*.fbcdn.net

# Google

/ip hotspot walled-garden
add comment="socialwifi: Allow login with Google." dst-host=accounts.google.*
add comment="socialwifi: Allow login with Google. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow accounts.google.co.uk and other regional versions." dst-host=accounts-cctld.l.google.com
add comment="socialwifi: Allow login with Google." dst-host=ssl.gstatic.com
add comment="socialwifi: Allow login with Google." dst-host=fonts.gstatic.com
add comment="socialwifi: Allow login with Google. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow fonts.gstatic.com." dst-host=gstaticadssl.l.google.com
add comment="socialwifi: Allow login with Google." dst-host=fonts.google.com
add comment="socialwifi: Allow login with Google." dst-host=accounts.youtube.com
add comment="socialwifi: Allow login with Google. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow accounts.youtube.com." dst-host=www3.l.google.com
add comment="socialwifi: Allow login with Google." dst-host=content.googleapis.com
add comment="socialwifi: Allow login with Google." dst-host=apis.google.com
add comment="socialwifi: Allow login with Google. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow apis.google.com." dst-host=plus.l.google.com
add comment="socialwifi: Allow login with Google." dst-host=play.google.com
add comment="socialwifi: Allow login with Google." dst-host=www.google.com

# LinkedIn

/ip hotspot walled-garden
add comment="socialwifi: Allow login with LinkedIn." dst-host=linkedin.com
add comment="socialwifi: Allow login with LinkedIn." dst-host=*.linkedin.com
add comment="socialwifi: Allow login with LinkedIn. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow www.linkedin.com." dst-host=*.l-msedge.net
add comment="socialwifi: Allow login with LinkedIn. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow www.linkedin.com." dst-host=*.dc-msedge.net
add comment="socialwifi: Allow login with LinkedIn." dst-host=*.licdn.com
add comment="socialwifi: Allow login with LinkedIn. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow static-exp1.licdn.com." dst-host=*.epsiloncdn.net
add comment="socialwifi: Allow login with LinkedIn. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow static-exp1.licdn.com." dst-host=*.akamai.net

# Twitter

/ip hotspot walled-garden
add comment="socialwifi: Allow login with Twitter." dst-host=twitter.com
add comment="socialwifi: Allow login with Twitter." dst-host=api.twitter.com
add comment="socialwifi: Allow login with Twitter. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow api.twitter.com." dst-host=*.twitter.com
add comment="socialwifi: Allow login with Twitter." dst-host=*.twimg.com
add comment="socialwifi: Allow login with Twitter. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow abs.twimg.com, pbs.twimg.com." dst-host=*.edgecastcdn.net
add comment="socialwifi: Allow login with Twitter. It's a workaround for Mikrotik walled garden bug with CNAME in DNS response. Required to allow abs.twimg.com, pbs.twimg.com." dst-host=*.akahost.net

/

Konfiguracija Captive Portal / Hotspot-a

IP → Hotspot → Server Profiles → default (click twice to access settings)

(in General tab) DNS Name	logging.sw.com
(in General tab) HTML Directory	Promijeni ime u . (točka) (Ako odjeljak Datoteke sadrži mapu "flash", provjerite piše li u ovom polju "flash/." bez upitnika)

Naziv direktorija možete promijeniti tako da istaknete prethodno postavljeni naziv i upišete preko njega.

(na kartici Prijava) Prijava po: HTTP PAP (poništite sve ostalo)

(na kartici RADIUS) Koristi RADIUS: da

Kliknite OK

IP → Hotspot → Servers → +

Name	socialwifi
Interface	sw
Address Pool	none
Idle Timeout	00:05:00
Addresses Per MAC	(maknite vrijednost i ostavite prazno)
OK

IP → Hotspot → User Profiles → zadani (kliknite dvaput na položaj na popisu da biste pristupili njegovim postavkama)

Keepalive Timeout	3d 00:00:00

Kliknite OK

Konfiguriranje WiFi mreža

Sučelja(Interfaces) → wlan1 (kliknite dvaput na položaj na popisu kako biste pristupili njegovim postavkama) → Wireless → promijeniti SSID u Social WiFi, Guest Network ili bilo što drugo što radi za vas i vaše kupce. Kliknite OK.

Reboot

Nakon što ispunite sve gore navedene korake, morat ćete ponovno pokrenuti uređaj.

System → Reboot

Nakon ponovnog pokretanja uređaja, vidljiva WLAN mreža koristit će Social WiFi za prijavu korisnika.