Community discussions

MikroTik App
 
grenzo
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 79
Joined: Tue Apr 02, 2013 6:54 pm

forward rule...

Tue Jul 16, 2013 9:50 pm

Hi all,
I have a RB750 with hotspot.
The Ether3 has the ip address 10.5.50.1/22 / network 10.5.48.0.
The Ether2 has the ip address 10.6.50.0/24 / network 10.6.50.0 .
The Ether1 has the ip address 192.168.27.1/24 / network 192.168.27.0

in Ether3 I connected the RB711 with ip 10.5.50.x.

Which forward rule I have to do to reach the rb from Ether1?

Thanks
 
User avatar
cbrown
Trainer
Trainer
Posts: 1839
Joined: Thu Oct 14, 2010 8:57 pm
Contact:

Re: forward rule...

Tue Jul 16, 2013 10:05 pm

What rules do you currently have? Post /export compact
 
grenzo
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 79
Joined: Tue Apr 02, 2013 6:54 pm

Re: forward rule...

Wed Jul 17, 2013 4:37 am

What rules do you currently have? Post /export compact
Ok:
---------------------------------------------------------------------------------
# jul/17/2013 01:25:29 by RouterOS 5.18
# software id = 5CW8-R4QM
#
/ip hotspot profile
add hotspot-address=10.5.50.1 login-by=http-pap name=hsprof1 nas-port-type=\
ethernet radius-interim-update=1m use-radius=yes
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m shared-users=\
1000
/ip pool
add name=pool2 ranges=10.5.52.2-10.5.54.254
add name=pool1 next-pool=pool2 ranges=10.5.51.1-10.5.51.254
add name=hs-pool next-pool=pool1 ranges=10.5.48.1-10.5.49.255
/ip dhcp-server
add address-pool=hs-pool disabled=no interface=ether3 lease-time=1h name=\
dhcp1
/ip hotspot
add address-pool=hs-pool disabled=no interface=ether3 name=hotspot1 profile=\
hsprof1
/ip address
add address=192.168.27.181/24 interface=ether1
add address=10.5.50.1/22 interface=ether3
add address=10.6.50.1/24 interface=ether2
add address=10.5.52.1/22 interface=ether3
/ip dhcp-server network
add address=10.5.48.0/22 gateway=10.5.50.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add chain=forward dst-address=10.5.50.2-10.5.50.70
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall nat
add chain=srcnat comment="Nessun nat per gli access-points" disabled=yes \
dst-address=10.5.50.2-10.5.50.70 out-interface=ether3
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat src-address=10.5.48.0/22 to-addresses=\
0.0.0.0
/ip hotspot ip-binding
add address=10.5.50.2-10.5.50.70 type=bypassed
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
add dst-host=www.xxx.it
/ip hotspot walled-garden ip
add action=accept comment=paypal1 disabled=no dst-host=www.paypal.com
add action=accept comment=paypal2 disabled=no dst-host=paypalobjects.com
add action=accept comment=paypal3 disabled=no dst-host=history.paypal.com
add action=accept comment=paypal4 disabled=no dst-host=www.paypalobjects.com
add action=accept disabled=no dst-address=192.168.27.2
/ip route
add distance=1 gateway=192.168.27.247
add distance=1 gateway=10.6.50.100
/radius
add address=192.168.27.2 secret=rb750 service=ppp,hotspot timeout=6s
/radius incoming
set accept=yes
/system ntp client
set enabled=yes mode=unicast primary-ntp=62.101.81.203 secondary-ntp=\
193.204.114.105
-------------------------------------------

Thanks
 
grenzo
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 79
Joined: Tue Apr 02, 2013 6:54 pm

Re: forward rule...

Wed Jul 17, 2013 5:21 am

with this configuration the ping to ip 10.5.50.1-10.5.50.70 works but winbox and the browser does not work.
Is it the hotspot that stops?

Thanks
 
mikb262
just joined
Posts: 20
Joined: Wed Oct 19, 2011 6:34 pm
Location: Attock City

Re: forward rule...

Tue Sep 03, 2013 9:48 am

hi
1st of all soryy for my english
i have a media server like http web server
with address 192.168.7.3
i put a DNS static entry http://www.orientech.net.pk for this http media server
no i m able to get access from 1 ip range only (192.168.7.0/24) & cant acess from other ip like 192.168.8.0/24,or 192.168.10.0/24
i put my network structure print here
so plz help me on this
network Sutructure.JPG
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: No registered users and 42 guests