Welcome to ISAserver.org

ISA 2006 as a hotspot

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Misc.] >> 3rd Party Add-ons >> ISA 2006 as a hotspot

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA 2006 as a hotspot - 7.Mar.2007 4:36:13 PM

ABCPL

Posts: 13
Joined: 21.Nov.2006
Status: offline

Hello!

What options do I have if I already have an ISA 2006 with multiple networks attached and I want to add a wireless network to be publicly accessible? Are there solutions that plug into ISA that would allow us to track these users in terms of having them authenticate either to a web site or through a ticket and perhaps limit the amount of time they can stay connected. I don't want to go through Active Directory since these are public users without accounts. I just need to keep track of how many people are on and for how long (can't keep track of what they are accessing for privacy reasons). Has anyone set up a similar hotspot with ISA? Are there any gotchas? How do I handle DHCP for these users? Should this job fall on the AP, ISA or..?

Thank you for your assistance,
Paul

Post #: 1

Featured Links*

RE: ISA 2006 as a hotspot - 13.Mar.2007 6:46:15 PM

mylo

Posts: 138
Joined: 26.Mar.2002
Status: offline

Hi Paul,

Sounds like you need some sort of Captive Portal.... have you had a look at FirstSpot or NoCat (nocat.net).. you could probably drum something up using RADIUS as well.

Regards,
Mylo

(in reply to ABCPL)

Post #: 2

RE: ISA 2006 as a hotspot - 15.Mar.2007 11:38:41 AM

ABCPL

Posts: 13
Joined: 21.Nov.2006
Status: offline

Thanks Mylo!

We are going to look into your suggested options.
Much appreciated,

Paul

(in reply to mylo)

Post #: 3

RE: ISA 2006 as a hotspot - 28.Mar.2007 2:36:07 PM

emueller

Posts: 14
Joined: 15.Mar.2007
Status: offline

Try m0n0wall, its a linux distro. It does have the captive portal also that you are looking for. We use it here for a our "guest" wireless network.

http://m0n0.ch/wall/

(in reply to ABCPL)

Post #: 4

RE: ISA 2006 as a hotspot - 28.Mar.2007 6:04:28 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hi emueller,

i've been reading m0n0wall docs for quite a few days, but i want to ask u few questions.

1- do u use it along with ISA ?? ( ISA Server as an edge Firewall & m0n0wall as a captive portal internally ? )

2- if your answer to question one was YES, do u need 2 nics for m0n0wall ?

3- can you provide a simple diagram of how do u use it in your network with ISA Server.

Thanks.
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to emueller)

Post #: 5

RE: ISA 2006 as a hotspot - 28.Mar.2007 11:28:18 PM

emueller

Posts: 14
Joined: 15.Mar.2007
Status: offline

Currently our guest wireless is configured on Microsoft's Virtual Server. I have a virtual ISA 2004 server and a virtual monowall server. This is all segregated off of our production network ecxept for when it hits the PIX firewall. The ISA server is setup as a backend firewall with two interfaces behind the PIX. I then have a monowall server behind the ISA server with two interfaces also. The monowall server provides DHCP to the clients and acts as a DNS relay. The monowall provides our custom disclaimer page and the users must click on the accept button to continue. You can also set a tim-out on this page to have it pop up again at a certian interval. Since monowall is a firewall and provides NAT translation, you will definitely need two interfaces. Infact I dont think you can set it up with one interface. It very simple to setup. The image can sit on a floppy disk and you can use any old pc that has two interfaces for hardware. Just have it the pc boot from the floppy image. The ISA server is there for caching and web content filtering using SurfControl. I will look for a diagram.

Since we upgraded our production ISA from 2000 to 2006. I will be moving the monowall to a seperate network off of the production ISA server.

< Message edited by emueller -- 28.Mar.2007 11:36:12 PM >

(in reply to elmajdal)

Post #: 6

RE: ISA 2006 as a hotspot - 29.Mar.2007 5:00:53 PM

emueller

Posts: 14
Joined: 15.Mar.2007
Status: offline

.

< Message edited by emueller -- 4.Apr.2007 2:23:32 PM >

(in reply to elmajdal)

Post #: 7

RE: ISA 2006 as a hotspot - 29.Mar.2007 6:20:53 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi emueller,

Thanks for the info.

Will set up a test machine for m0n0wall and try it.

Thanks,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to emueller)

Post #: 8