Hi all,

so I have a working vrrp config on my master and backup router. what I now want to do is enable hotspot on both the master and backup interface of the routers. As soon as I do this vrrp seems to be blocked by the hotspot firewall rules. Anyone come across a way to pinhole through?
I have read about scripts on up / down to enable hotspots but that leaves me with the problem once the vrrp is master it will not get any broadcasts from the true master once this recovers.
VRRP works perfectly through the existing firewall with no hotspots configured.

Any ideas? Or is this not possible?

Thanks in advance, sterb.

Maybe try either adding a specific firewall rule that permits all vrrp/igmp traffic and moving it above the dynamic rules, or add those protocols to the walled-garden IP level.

The hotspot service blocks every ip that is not logged in. The way I prefer to allow access without a login is through "/ip hotspot ip-binding"
/ip hotspot ip-binding
add mac-address=xx:xx:xx:xx:xx type=bypassed

I have tried that for both the IPs of the routers, VRRP IP and all respective MACs including the virtual one with no success...