Setting up public Internet access in five minutes

    Hello, Habr! Today we will tell you how restaurant and cafe owners can avoid fines for violating the law governing the organization of public Internet access. Recall that last summer there was a decree of the Russian government No. 758 , according to which the organizer of public Wi-Fi access should carry out user identification. The usual anonymous entrance to the network is now illegal.


    Violators face large fines: from 5 to 50 thousand rubles for individual entrepreneurs and from 100 to 200 thousand rubles for legal entities. In practice, a visitor to a cafe or restaurant can identify himself on the network in two ways: send SMS or data from the public services portal. Non-SNILS, for example, will be enough, lawmakers say.

    The legislative initiative appeared, firstly, to block resources from the “black list” of Roskomnadzor (it’s very easy to get around these locks, but not about that today) and, secondly, to organize the filtering of content that is undesirable for children.

    Let's look at the real situation using the example of our product Traffic Inspector Restaurant Edition. Suppose that in a restaurant or cafe there are several stationary computers for which employees work; In addition, there is public Wi-Fi that is distributed to visitors.

    1. The first thing to do is to split user groups. To do this, two groups are created in the Traffic Inspector: Workstations and Visitors. In the "Users and groups" section, we find the item "Add a group", give it the name "Users".




    2. In the settings of the new group, we redirect all traffic through the proxy server and do not forget to block all HTTP requests that go past the proxy:


    3. Remember that in the group "Visitors" should be configured to automatically add users and SMS-identification. To do this, create a new rule for networks and specify a range of IP addresses. If necessary, set a separate IP for each computer on the network.


    4. We indicate the type of network as “Public” using SMS verification:


    5. Allow auto-add users and specify the group "Visitors" in which they will be added. User authorization is possible by account, IP address and MAC address. If it is necessary (for example, you don’t want the visitor in the cafe to order coffee for half a day), set the user to automatically turn off after a certain time.


    6. Specify the used SMS gateway. To send free SMS messages, the Traffic Inspector can use one of two SMS gateways - sms.ru or smstraffic.ru.


    7. Next, create a NetPolice rule, set the rule name to “Deny by Category” and select the categories of prohibited content. Then we select the rule type “Deny access”.






    This completes the configuration of user groups, a public WiFi network and content restriction.

    From the user’s side, access will be as follows.

    1. A visitor to a cafe or restaurant connects to the network from his device, gets to the identification page and enters his mobile phone number to get a unique code:


    2. Receive an SMS message with an access code:


    3. The user inserts the code and confirms that he is already 18 years old:


    4. After that, it gets to the page with clear instructions and goes online:


    Setting up wireless access in a cafe takes no more than five minutes, of which three minutes will be spent on buying a license and two more on setting up the Traffic Inspector. These five minutes in the future will save the owner of the institution from headaches and serious losses in the form of fines, the size of which we have already said.

    It remains to add that the system administrator can see the network statistics of any user, including the amount of traffic, time spent on the network and resources visited.

    In addition, not so long ago there was an opportunity to modify the portal page Traffic Inspector. Admin can add to page 192.168.0.1: 8081 / portal advertisement, banner, information on discounts and special offers or a feedback form to receive feedback on the quality of service, which for a cafe or restaurant can be an additional opportunity to promote and increase brand awareness. You can place links to groups and pages of the institution on social networks on this page. The visitor should like the page, add to the group or check in, after which he gets into the network. Or provide an opportunity for a regular visitor to create a personal page on the institution’s website.

    Also popular now: