Dual stack hotspot/captive portal

[Marc Blanchet]

Le 11-02-23 12:39, Ben Jencks a écrit :
> Does anyone have experience setting up dual stack captive portal systems, e.g. for wireless hotspots?

I'm involved in a community that has developed and deployed large 
installations of captive wifi systems (wifidog.org). A new rewrite is 
being done (called authpuppy) and IPv6 is actually being discussed. 
however, currently no design document or else. work in progress.

Apart from you are saying, there are additional issues: it also depends 
on how the captive portal works with connecting to external servers for 
authentication before full access. And how dhcpv6-pd is going to be 
implemented. more work...

Marc.

> The difficulty is in tying the user's identity (as they log into the portal) to *all* of their IP addresses. With v4 it's easy, they only have one address and it's the one they use to log into the captive portal. With dual stack they have at least two: v4 and v6, plus possibly v6 privacy addresses that change over time.
>
> The only option seems to be identifying users by MAC address post-login, but that's still imperfect. With v4 you can use the DHCP lease table to tie MACs to IPs, but with v6 the best I can think of is monitoring the neighbor table. Has anyone come up with any better solutions?
>
> DHCPv6 is not an option; there are too many operating systems in wide use that have no support for it.
>



> -Ben


-- 
=========
IPv6 book: Migrating to IPv6, Wiley. http://www.ipv6book.ca
Stun/Turn server for VoIP NAT-FW traversal: http://numb.viagenie.ca
DTN Implementation: http://postellation.viagenie.ca
NAT64-DNS64 Opensource: http://ecdysis.viagenie.ca