1 ##############################################################################
3 # Sample ChilliSpot configuration file
5 ##############################################################################
10 # Enable this flag to include debug information.
13 # Re-read configuration file at this interval. Will also cause new domain
14 # name lookups to be performed. Value is given in seconds.
17 # File to store information about the process id of the program.
18 # The program must have write access to this file/directory.
19 option pidfile /var/run/chilli.pid
21 # Directory to use for nonvolatile storage.
22 # The program must have write access to this directory.
23 # This tag is currently ignored
27 # Remote configuration management
30 # If confusername is specified together with confpassword chillispot
31 # will at regular intervals specified by the interval option query the
32 # radius server for configuration information.
33 # Normally you do not need to uncomment this tag.
34 option confusername ""
36 # If confusername is specified together with confpassword chillispot
37 # will at regular intervals specified by the interval option query the
38 # radius server for configuration information.
39 # Normally you do not need to uncomment this tag.
40 option confpassword ""
46 # IP network address of external packet data network
47 # Used to allocate dynamic IP addresses and set up routing.
48 # Normally you do not need to uncomment this tag.
49 option net 192.168.182.0/24
51 # Dynamic IP address pool
52 # Used to allocate dynamic IP addresses to clients.
53 # If not set it defaults to the net tag.
54 # Do not uncomment this tag unless you are an experienced user!
55 #option dynip 192.168.182.0/24
57 # Static IP address pool
58 # Used to allocate static IP addresses to clients.
59 # Do not uncomment this tag unless you are an experienced user!
60 #option statip 192.168.182.0/24
63 # Will be suggested to the client.
64 # If omitted the system default will be used.
65 # Normally you do not need to uncomment this tag.
66 #option dns1 172.16.0.5
68 # Secondary DNS server.
69 # Will be suggested to the client.
70 # If omitted the system default will be used.
71 # Normally you do not need to uncomment this tag.
72 #option dns2 172.16.0.6
75 # Will be suggested to the client.
76 # Normally you do not need to uncomment this tag.
77 option domain key.chillispot.org
79 # Script executed after network interface has been brought up.
80 # Executed with the following parameters: <devicename> <ip address> <mask>
81 # Normally you do not need to uncomment this tag.
82 #option ipup /etc/chilli.ipup
84 # Script executed after network interface has been taken down.
85 # Executed with the following parameters: <devicename> <ip address> <mask>
86 # Normally you do not need to uncomment this tag.
87 #option ipdown /etc/chilli.ipdown
89 # Script executed after a user has been authenticated.
90 # Executed with the following parameters: <devicename> <ip address>
91 # <mask> <user ip address> <user mac address> <filter ID>
92 # Normally you do not need to uncomment this tag.
93 #option conup /etc/chilli.conup
95 # Script executed after a user has disconnected.
96 # Executed with the following parameters: <devicename> <ip address>
97 # <mask> <user ip address> <user mac address> <filter ID>
98 # Normally you do not need to uncomment this tag.
99 #option condown /etc/chilli.condown
105 # Ethernet interface to listen to.
106 # This is the network interface which is connected to the access points.
107 # In a typical configuration this tag should be set to eth1.
110 # Use specified MAC address.
111 # An address in the range 00:00:5E:00:02:00 - 00:00:5E:FF:FF:FF falls
112 # within the IANA range of addresses and is not allocated for other
114 # Normally you do not need to uncomment this tag.
115 #option dhcpmac 00:00:5E:00:02:00
117 # Time before DHCP lease expires
118 # Normally you do not need to uncomment this tag.
125 # IP address to listen to
126 # Normally you do not need to uncomment this tag.
127 #option radiuslisten 127.0.0.1
129 # IP address of radius server 1
130 # For most installations you need to modify this tag.
131 option radiusserver1 rad01.chillispot.org
133 # IP address of radius server 2
134 # If you have only one radius server you should set radiusserver2 to the
135 # same value as radiusserver1.
136 # For most installations you need to modify this tag.
137 option radiusserver2 rad02.chillispot.org
139 # Radius authentication port
140 # The UDP port number to use for radius authentication requests.
141 # The same port number is used for both radiusserver1 and radiusserver2.
142 # Normally you do not need to uncomment this tag.
143 #option radiusauthport 1812
145 # Radius accounting port
146 # The UDP port number to use for radius accounting requests.
147 # The same port number is used for both radiusserver1 and radiusserver2.
148 # Normally you do not need to uncomment this tag.
149 #option radiusacctport 1813
151 # Radius shared secret for both servers
152 # For all installations you should modify this tag.
153 #option radiussecret testing123
155 # Radius NAS-Identifier
156 # Normally you do not need to uncomment this tag.
157 #option radiusnasid nas01
159 # Radius NAS-IP-Address
160 # Normally you do not need to uncomment this tag.
161 #option radiusnasip 127.0.0.1
163 # Radius Called-Station-ID
164 # Normally you do not need to uncomment this tag.
165 #option radiuscalled 00133300
167 # WISPr Location ID. Should be in the format: isocc=<ISO_Country_Code>,
168 # cc=<E.164_Country_Code>,ac=<E.164_Area_Code>,network=<ssid/ZONE>
169 # Normally you do not need to uncomment this tag.
170 #option radiuslocationid isocc=us,cc=1,ac=408,network=ACMEWISP_NewarkAirport
172 # WISPr Location Name. Should be in the format:
173 # <HOTSPOT_OPERATOR_NAME>,<LOCATION>
174 # Normally you do not need to uncomment this tag.
175 #option radiuslocationname ACMEWISP,Gate_14_Terminal_C_of_Newark_Airport
178 # Radius proxy parameters
181 # IP address to listen to
182 # Normally you do not need to uncomment this tag.
183 #option proxylisten 10.0.0.1
185 # UDP port to listen to.
186 # If not specified a port will be selected by the system
187 # Normally you do not need to uncomment this tag.
188 #option proxyport 1645
190 # Client(s) from which we accept radius requests
191 # Normally you do not need to uncomment this tag.
192 #option proxyclient 10.0.0.1/24
194 # Radius proxy shared secret for all clients
195 # If not specified defaults to radiussecret
196 # Normally you do not need to uncomment this tag.
197 #option proxysecret testing123
200 # Universal access method (UAM) parameters
203 # URL of web server handling authentication.
204 option uamserver https://radius.chillispot.org/hotspotlogin
206 # URL of welcome homepage.
207 # Unauthenticated users will be redirected to this URL. If not specified
208 # users will be redirected to the uamserver instead.
209 # Normally you do not need to uncomment this tag.
210 #option uamhomepage http://192.168.182.1/welcome.html
212 # Shared between chilli and authentication web server
213 #option uamsecret ht2eb8ej6s4et3rg1ulp
215 # IP address to listen to for authentication requests
216 # Do not uncomment this tag unless you are an experienced user!
217 #option uamlisten 192.168.182.1
219 # TCP port to listen to for authentication requests
220 # Do not uncomment this tag unless you are an experienced user!
223 # Comma separated list of domain names, IP addresses or network segments
224 # the client can access without first authenticating.
225 # It is possible to specify this tag multiple times.
226 # Normally you do not need to uncomment this tag.
227 #list uamallowed www.chillispot.org
228 #list uamallowed 10.11.12.0/24
230 # If this flag is given unauthenticated users are allowed to use
232 # Normally you do not need to uncomment this tag.
239 # If this flag is given users will be authenticated only on their MAC
241 # Normally you do not need to enable this flag.
244 # List of MAC addresses.
245 # The MAC addresses specified in this list will be authenticated only on
247 # This tag is ignored if the macauth tag is given.
248 # It is possible to specify this tag multiple times.
249 # Normally you do not need to uncomment this tag.
250 #list macallowed 00-0A-5E-AC-BE-51
251 #list macallowed 00-30-1B-3C-32-E9
253 # Password to use for MAC authentication.
254 # Normally you do not need to uncomment this tag.
255 #option macpasswd password
257 # Suffix to add to MAC address in order to form the username.
258 # Normally you do not need to uncomment this tag.
259 #option macsuffix suffix