Setup guide

auth-mac-password: no
auth-http-cookie: yes
http-cookie-lifetime: 1d
allow-unencrypted-passwords: no
login-mac-universal: no
split-user-domain: no
[admin@Wandy] ip hotspot>
HotSpot User Profiles
ip hotspot profile
Description
HotSpot User profiles are used for common user settings. Profiles are like user groups, they are
grouping users with the same limits.
Property Description
name (name) - profile reference name
session-timeout (time; default: 0s) - session timeout (maximal session time) for client
0 - no timeout
idle-timeout (time; default: 0s) - idle timeout (maximal period of inactivity) for client
0 - no timeout
shared-users (integer; default: 1) - maximal number of simultaneously logged in users with the
same username
tx-bit-rate (integer; default: 0) - transmit bitrate (for users it is download bitrate)
0 - no limitation
rx-bit-rate (integer; default: 0) - receive bitrate (for users it is upload bitrate)
0 - no limitation
incoming-filter (name) - name of the firewall chain applied to incoming packets
outgoing-filter (name) - name of the firewall chain applied to outgoing packets
mark-flow (name) - traffic from authorized users will be marked by firewall mangle with this flow
name
login-method - the login method user will be using
dhcp-pool - login by changing IP address via DHCP server
enabled-address - login by enabling access for client's existing IP address
smart - choose best login method for each case
keepalive-timeout (time; default: 2m) - keepalive timeout for client
0 - no timeout
Notes
To use enabled-address method, mark-flow should be set. To use dhcp-pool method, dhcp
software package must be installed
idle-timeout is used to detect, that client is not using outer networks (e.g. Internet), i.e., there is NO
TRAFFIC coming from that client and going through the router. keepalive-timeout is used to
detect, that the computer of the client is still alive and reachable. If check will fail during this
period, client will be logged out. session-timeout is an unconditional uptime limit