How do I enable unauthenticated users to ping the gateway?

RouterOS General
1

Hi all,

I had setup the MikroTik Hotspot successfully. How do I enable unauthenticated users to ping the gateway?

Regards,
rootlinux

2

To allows specific resoursces without authentication, you need to use ‘walled-garden’. For your case ‘ip hotspot walled-garden ip’.

3 



add chain=hs-input dst-address=10.1.1.3 protocol=icmp action=accept comment="" disabled=no

10.1.1.3 is your Gateway address.

hope it helps

4

Use chain=pre-hs-input for this to work

5

Once again,
‘ip hotspot walled-garden ip’ allows to accomplish the same thing, there is no reason to create static NAT rules and think about specific chain to put them.
rootlinux
walled-garden is feature that you need, as it was designed specially to allow specific resources without authentication for HotSpot clients.

6

Walled garden is dangerous item to play with!

maybe he doesn’t want full connection to that destined IP address
putting that in walled garden may be vulnerable to scan the server for open ports.

it can also be used to do free surfing through that open gateway.

7

As far as I know, walled-garden allows access to SPECIFIED resources for the HotSpot users without authentication, e.g. to allow ICMP from user A to server B,
‘/ ip hotspot walled-garden ip add action=allow protocol=icmp src-address=A dst-address=B’.

Using NAT rules, you have more chances to add incorrect rules, that might cause
“full connection to that destined IP address
t can also be used to do free surfing through that open gateway.”.[/i]