How to raise guest Wi-fi with identification in order to comply with Decree No. 758?

Question

WiFi

It was necessary to arrange wifi for visitors in one small local cafe.
I don’t want to get into the check-fine, I want to set everything up right away as it should be - I connected, got to the portal, entered the phone, received the code, got on the Internet. Phone-poppy-time dropped into the sign.
So far I see 3 options:
1. Buy a turnkey solution for ~ 30k per year, which is essentially a regular router with custom firmware.
2. There was a scheme "It's simple - we take a radius server, another server, an access point, an infinity stone and a leprechaun's tail and cleverly connect them." Nice, right, even more money.
3. Skolkhoz on your knee from some budget router with Captive Portal, reasonable enough to be able to shove a script to send SMS there and stick a USB flash drive under the database.
For some reason, the authorities are leaning towards the latter option, so I would be grateful for any recommendations on the topic - router models, success stories, public scripts, pros, cons, pitfalls.

Answer 1

If you have the competence to set up this entire economy and you intend to take responsibility for this solution, then you can build a solution on mikrotik equipment. Google: mikrotik + captive portal + sms + fz. If any of the above you do not understand or is not acceptable to you, then it is worth buying a ready-made solution from professionals.

Answer 2

We take any router + server with a database. The router is set to dumb packet forwarding mode ether <-> ethernet <-> server. And, accordingly, on the server, as it was already written 100500 times where possible, we put a packet filter (through iptables and other delights of linux) of the form: there is an entry in the database - routing to the Internet, no - a local site ala captive portal (on the same server is running) + local same radius server. Thus, all brains are transferred to the software level, and there is no longer any need to spend some crazy useless money on pieces of iron.
Well, the surest method is to use a repeater instead of providing access to visitors like an operator's wi-fi, in order to simply shift all responsibility to the one who gives you the Internet.

Answer 3

I have it raised on UniFi + UniFi soft controller. There, guest wi-fi can be done either on vouchers, or sms light up or social networks.