Do you recognize a good idea when you see one? We want to hear from you!
Header Image

I suggest you ...

Guest WLAN (Hotspot) - "DHCP Address Assignment Required" Option

If guests change their IP adresses, it is not possible to track them in the logs. After a simple IP change, we have no possibility to connect an IP address to a MAC and then to a Voucher/Guest. So you can bypass the logging. This is an importion feature for guest wlan / hotspot feature!

113 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    GuyFawkesGuyFawkes shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    2 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...
      • Michel from NetworkGuy.deMichel from NetworkGuy.de commented  ·   ·  Flag as inappropriate

        Hi Mr. Becker,

        we and our customers are giving internet access to guests via Guest WLAN combined with vouchers. So when someone connects to the free wifi, he gets an IP address from the dhcp scope. After this he needs to enter a voucher code (we write down the name of the guest before we give them the code) to access the internet. In Germany the registered owner of the internet line is fully liable for all risks. In case of an abuse, we need to find out who has done this with digitial forensic tracing (web protection log or application log -> IP address -> DHCP release -> Mac Address -> hotspotlog -> Voucher -> name of the user). But that forensic can be broken if a guest changes his IP address so we are never able to find out who abuse the internet access.

        We think that could be done with given technics. You could configure an option or an automatic firewall rule so only the device with the given voucher code is allowed by an mac address firewall filter rule. If the option is selected, clients must obtain an IP address via the internal DHCP and only this mac and this IP can pass traffic. Any other clients (static IP address) in this network isn’t allowed.

        Additional wish: Easier digital forensic tracing for guest vouchers.

        Thanks in advance

        Michel & GuyFawkes

      Feedback and Knowledge Base