Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

New network in multi tenant house


  • Please log in to reply
7 replies to this topic

#1 randomwalsh

randomwalsh

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:38 PM

Posted 07 November 2016 - 04:02 PM

Hi,

 

I have a new project from a potential client that I am struggling with.

 

He has a house with 8 tenants who are currently connected to the same WIFI and there is no management on that WIFI.

 

He wants to be able to restrict each "room" to have 10gb internet usage per room. So that means somehow I need to create Room 1 as a zone and then allocate only 10gb usage per month to that zone. It must also be noted that Room 1 might have 4 devices that connect to that zone and the 10gb is shared between the usage of the 4 devices. It also must be noted that tenants can change from month to month so a solution that involves adding mac addresses for identification isn't practical at this point.

 

Any thoughts?



BC AdBot (Login to Remove)

 


#2 Kilroy

Kilroy

  • BC Advisor
  • 3,382 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:01:38 PM

Posted 07 November 2016 - 04:51 PM

Welcome to Bleeping Computer.

 

Wireless doesn't lend itself well to desired ranges.  Using either separate SSIDs or implementing a user name and password required solution is probably the best method.

 

Next you will have to consider how many access points you will need to use.  That will be determined by the building construction and size.  This might show you if using a separate network for each unit would be better or not.



#3 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 07 November 2016 - 07:00 PM

The question isn't specific enough.

 

For example 10gb per month in data usage or 10gb limited bandwidth per month?

 

I really doubt you mean 10gb bandwidth since that is not in ISP offerings concerning bandwidth.  Be clear on the differences.

 

It would be ideal to setup a control router /bandwidth control per link if you were to go wired to each unit and put a wifi router in each apt.  You would never setup a system that required adding mac addresses/devices unless you like an administrative nightmare.  You wouldn't need to do that if you setup the apt routers correctly.

 

There are routers that track data usage [for isps that charge you per gig when you go over the limit] that you can set to cut off internet if they reach that 10gb quota as well as sending them warning pre expiration.



#4 randomwalsh

randomwalsh
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:38 PM

Posted 08 November 2016 - 04:30 AM

Thank you for the welcome!

 

So the general direction is where I was going with a central router (like a mikrotik) with physical connections to the rooms where we would install APs. Each AP would then be set with a static ip that would be managed by the central router. 

 

The 10gb limit is referring to internet usage per room.


Edited by randomwalsh, 08 November 2016 - 04:33 AM.


#5 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 08 November 2016 - 11:22 AM

Your setup would instantly put the tenants at risk from each other since they would all be on the same lan / same subnet.

 

It will take a more sophisticated router/firewall to be able to track data usage per port and it will need to have policies that allow you to either cut off or restrict internet access when that port reaches the threshold.

 

mikrotik only seems to be able to do this per user which will be an admin nightmare to you with the constantly changing devices.

http://wiki.mikrotik.com/wiki/Limiting_a_user_to_a_given_amount_of_traffic_II

 

Think about the math.  You have 10gig per unit per month.  That is approx. .33gig per day.  How many devices in the unit?  Lets say 5.  Now you take that .33 and divide it by 5 with results of .066gig per device per day.

 

The unaddressed issue is bandwidth control.  You can't just let one tenant take up all the bandwidth which means you need QoS.  How much bandwidth up/down does the building have?

 

If you want easy then put in routers instead of AP's in each unit that have quota management of the internet connection.

You would set the quota to 10gb for each with warnings at 9.5gig to give them a heads up they are about to run out.

 

Set each one to have its own SSID/ unique password and set the dhcp scope to a limited amount of devices like 15 with 72 hour leases

Example:

SSID = Unit 1 Subnet 192.168.1.0/24

SSID = Unit 2 Subnet 192.168.2.0/24

SSID = Unit 3 Subnet 192.168.3.0/24

 

The advantages of this are as follows:

1. You never have to add devices to the routers.  They can do that [though you would never give them the admin password to the router] by inputting their ssid and password.

2. Quota of 10gb per month would be automatic

3. Each units lan network is secure from the other units lan networks.

 

These routers would connect to the central microtek which will handle the QoS per router wan mac address.

Configure QoS example:

Lets say you have a 100 down 25 up internet connection.  You would configure each to have 12.5/3.125 mbps this way everyone gets a equal share of the bandwidth.


Edited by Wand3r3r, 08 November 2016 - 11:26 AM.


#6 randomwalsh

randomwalsh
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:38 PM

Posted 08 November 2016 - 03:16 PM

Wow, thank you Wand3r3r!

 

I think this is much better. 

 

The house only has a 10mb fibre coming in. So there isn't much bandwidth to play with. 

 

Yes definitely will need a QoS in. I was under the impression that the QoS could handle the bandwidth requirements dynamically for example if there is only one person in the house, they could effectively use the whole 10mb until another person joins and then it swifts the load.

 

So now that eliminates the need for POE switches as the routers will be powered in each room. And the cost comes down more. Yay!

 

Is there an alternative to the Mikrotik as the central router that you have had experience with?

 

P.s. How do you report you for awesomeness on this forum?


Edited by randomwalsh, 08 November 2016 - 03:17 PM.


#7 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 08 November 2016 - 03:36 PM

I would say the mikrotik is pretty good considering some of the scripts it can run concerning bandwidth.   If the script can look at the wan port of each router based on mac address as a user you have it made. 



#8 randomwalsh

randomwalsh
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:38 PM

Posted 08 November 2016 - 04:07 PM

Excellent. Thank you very much for your valuable input.

 

So it looks like I will be putting the RB951G-2HnD as the central router and connect it to a 16 port switch and in turn connect to 8 hEX lite or hEX


Edited by randomwalsh, 08 November 2016 - 04:14 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users