This is how I did it with Mikrotik back in the 2000's.  It's how Powercode
has done it since at least 2008.  With SSL grabbing anything and
everything, you typically get the bad cert page but when customers see that
they call to complain rather than unplug things.  A "Error no internet"
makes people move wires.  Any more it's a tool to avoid a truck roll
because the customer did something they shouldn't after they didn't pay
their bill (I believe "these people" often go together like PBnJ).

As far as captive portals, phones do a great job these days with their
internet check to msft/Google/Apple.

On Mon, Feb 28, 2022 at 10:12 AM Carl Peterson <cpeter...@portnetworks.com>
wrote:

> We use QinQ per customer SVLAN/CVLAN which is easy to set on cambium.  If
> the account isn't valid, radius returns reject to the BNG and the circuit
> isn't authorized.  Never bothered to do a splash page with it but it would
> be easy enough to put disabled accounts into a routing instance that
> directed to a splash page.  For people who do this, how effective is it?
> It feels like half our customers don't use their laptops more than
> occasionally unless they work from home.  It's mostile apps on the phone
> and you need to deliberately go to a http site on a web browser if you want
> to catch a splash page.  Back when we did tons of MDU Wi-Fi we pretty much
> had someone spending 1/4 of their time keeping up with captive portal
> stuff to make it work with every new OS / web browser version.
>
> On Mon, Feb 28, 2022 at 8:32 AM Josh Luthman <j...@imaginenetworksllc.com>
> wrote:
>
>> VLAN sounds great for Cambium.  Not sure about Ubnt, I don't think the
>> interface is ready for that.
>>
>> On Sat, Feb 26, 2022 at 2:27 PM Forrest Christian (List Account) <
>> li...@packetflux.com> wrote:
>>
>>> We set up a special van 404 for this.
>>>
>>> Customers get assigned to this vlan for any reason that necessitates
>>> action before being turned back on.
>>>
>>> At the headend there is a tik set up on this vlan which gives a splash
>>> page asking them to call the office.    It also gives them an option to pay
>>> their bill through the (whitelisted) billing portal.
>>>
>>> On Wed, Feb 23, 2022, 12:05 PM Josh Luthman <j...@imaginenetworksllc.com>
>>> wrote:
>>>
>>>> I'd also not turn customers off by disabling ethernet ports.  This is a
>>>> small example but a bigger one still would be when the customer starts
>>>> changing cables because their internet doesn't work.  Having a redirect
>>>> page (SSL errors be damned) is way better.
>>>>
>>>> On Wed, Feb 23, 2022 at 9:04 AM <dmmoff...@gmail.com> wrote:
>>>>
>>>>> I absolutely understand being busy and having multiple windows open
>>>>> and the dangers that can occur if you mix up which window is for which
>>>>> task.  Anybody can have an issue in those conditions with any kind of
>>>>> hardware.
>>>>>
>>>>>
>>>>>
>>>>> The fact this person did it 6 times in quick succession means someone
>>>>> gave them access they shouldn’t have to devices they didn’t understand.
>>>>> And yeah 6 total.  There were 5 when I first wrote the bewildered email
>>>>> about it.  That does make me consider which person might deserve the
>>>>> proposed the knee breaking accident.
>>>>>
>>>>>
>>>>>
>>>>> Two were the 450i which have the very convenient recovery mode
>>>>> feature.  Three of the others we got back by getting in through the
>>>>> wireless side with an SM.   The last was a 3.5ghz 450 (not 450i).  So no
>>>>> recovery mode, and you know since the AP can’t talk to the SAS no SM could
>>>>> be authorized and an SM without a SAS grant doesn’t bridge traffic.  That
>>>>> one was a tower climb with a default plug…….no other choice.  I don’t know
>>>>> what individual did it, but I hope they are mercilessly heckled by their
>>>>> coworkers.  And I do appreciate the mafioso knee breaking jokes, but I
>>>>> don’t actually wish them any injury.
>>>>>
>>>>>
>>>>>
>>>>> -Adam
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> *From:* AF <af-boun...@af.afmug.com> *On Behalf Of *castarritt
>>>>> *Sent:* Tuesday, February 22, 2022 6:06 PM
>>>>> *To:* AnimalFarm Microwave Users Group <af@af.afmug.com>
>>>>> *Subject:* Re: [AFMUG] The weirdest coincidence
>>>>>
>>>>>
>>>>>
>>>>> There are rumors that I might on occasion reboot the 450 AP when I
>>>>> mean to reboot an SM, but nothing proven...  I also came this >< close to
>>>>> rebooting core NAT router once before I realized the winbox session I was
>>>>> looking at wasn't the one I had open for that customer's managed wi-fi
>>>>> router.
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Feb 22, 2022 at 2:22 PM Steve Jones <thatoneguyst...@gmail.com>
>>>>> wrote:
>>>>>
>>>>> Sounds like maybe you send me an address and maybe a noob takes a few
>>>>> weeks off to let a knee injury heal. Just sayin, noobs are clumsy
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Feb 22, 2022, 1:21 PM Colin Stanners <cstann...@gmail.com>
>>>>> wrote:
>>>>>
>>>>> That brings up big questions of why the noob thought they'd have
>>>>> permission to do that, and why someone gave them a password with AP 
>>>>> control
>>>>> access.
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Feb 22, 2022 at 12:23 PM <dmmoff...@gmail.com> wrote:
>>>>>
>>>>> Nevermind.  Some noob was shutting off Aps trying to disable users.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> *From:* dmmoff...@gmail.com <dmmoff...@gmail.com>
>>>>> *Sent:* Tuesday, February 22, 2022 1:07 PM
>>>>> *To:* 'AnimalFarm Microwave Users Group' <af@af.afmug.com>
>>>>> *Subject:* The weirdest coincidence
>>>>>
>>>>>
>>>>>
>>>>> I just had five different PMP450 AP’s go down at the same time at five
>>>>> different towers.  In all cases the switch reports link, but I get zero Rx
>>>>> traffic.  Power cycle doesn’t bring any of them back up.
>>>>>
>>>>>
>>>>>
>>>>> WTF just happened?  Some kind of bug?
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> AF mailing list
>>>>> AF@af.afmug.com
>>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>>
>>>>> --
>>>>> AF mailing list
>>>>> AF@af.afmug.com
>>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>>
>>>>> --
>>>>> AF mailing list
>>>>> AF@af.afmug.com
>>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>>
>>>>> --
>>>>> AF mailing list
>>>>> AF@af.afmug.com
>>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>>
>>>> --
>>>> AF mailing list
>>>> AF@af.afmug.com
>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>
>>> --
>>> AF mailing list
>>> AF@af.afmug.com
>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>
>
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to