hotspot users can't acces internet.

brosky · Thu Jan 06, 2011 9:05 pm

Hi.

I run several hotspots and I have a weird problem to only one installation.

Hardare setup:
Internet -> RB750G with basic hotspot config -> managed switch -> fiber to the locations -> Wireless AP -> ~~ CPE -> Customer Computer.

When as customer requires a DHCP IP, he appears on the RB with his CPE MAC.
After 60 seconds of DHCP requests, i got a "limited or no conectivity" message, and right after that, the customer computer gets his correct IP from the hotspot.
This happents with all customers computers.

At random times, some users get ip from the dhcp server, but they cannot access everything , i can only see the mac from the hotspot, and that's all.
If i disable the hotspot, the internet works, after I enable it, after a few seconds, the user has no internet access.
I repeat, this happents at very random times, at random users. Some users experience this problem after several months without any problems.

I have ROSv4.16, masquerade, basic dhcp setup, basic hotspot setup with no trial, just http auth.

I have other 5 hotspot servers with the same configuration and none present this problem.

For now, i disabled the hotspot and put a pcc queue to limit the basterds

Any ideeas on how to solve this ?

fewi · Thu Jan 06, 2011 10:02 pm

Try setting the address-pool on the Hotspot to 'none'. When an address pool is set, the Hotspot double NATs the user - which can be useful when people come in with statics that are invalid on your network, but can have negative side effects when everyone is using DHCP anyway. Setting the address pool to 'none' disabled the Universal NAT feature, which I do on all my Hotspots, always.

richedav · Thu Jan 06, 2011 10:13 pm

Nice tip,

How does the user get a DHCP address then, do we just set up a main dhcp server service and then tell hotspot to not use it?

SurferTim · Thu Jan 06, 2011 10:17 pm

Nice tip,

How does the user get a DHCP address then, do we just set up a main dhcp server service and then tell hotspot to not use it?

Yes.

brosky · Thu Jan 06, 2011 11:31 pm

I will sure give it a try, thank you very much.

Can you suggest a starting point to have a centralized user management for
my hotspots ? I know it's RADIUS, but I never worked with it.... Looking more
for a solution suitable for WISP's.
So far, each area has his own hotspot setup, but i would like one setup if possible.

richedav · Thu Jan 06, 2011 11:57 pm

We use Freeradius and MySQL, and a custom setup we coded for user management, payment processing and billing etc - although you could use phpmyadmin to add users manually if you wished.

There is an open source package called DaloRadius if you wanted something you could add to / expand or there's full packages like DMASoftlabs which have everything all setup for you.

regards

brosky · Sat Jan 08, 2011 7:55 pm

well, it seems that seting the address-pool to none it does not solve the problem.

For a more detailed description, i paste here the config:

[admin@N] > ip hotspot print detail
 0 X name="hotspot1" interface=bridge1 profile=default idle-timeout=5m keepalive-timeout=none proxy-status="" 

[admin@N] /ip hotspot profile> print 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=1w split-user-domain=no use-radius=no 

[admin@N] /ip hotspot user profile> print 
 0 * name="default" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 rate-limit="3M/3M" 
     transparent-proxy=no 
 1   name="doua-calculatoare" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=2 
     rate-limit="3M/3M" transparent-proxy=yes open-status-page=always advertise=no 
 2   name="unlimited" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=100 
     transparent-proxy=no 

[admin@N] /ip> dhcp-server print detail
Flags: X - disabled, I - invalid 
 0   name="dhcp1" interface=bridge1 lease-time=3d address-pool=dhcp_pool1 bootp-support=static authoritative=yes 

[admin@N] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; place hotspot rules here
     chain=unused-hs-chain action=passthrough 
 1   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=10.0.12.0/24 
 2   ;;; Hora TV
     chain=dstnat action=dst-nat to-addresses=10.0.12.3 to-ports=1234 protocol=udp dst-address=94.52.xx.xx
     dst-port=1234 
 3   ;;; TV Bistrita
     chain=dstnat action=dst-nat to-addresses=10.0.12.4 to-ports=1235 protocol=udp dst-address=94.52.xx.xx 
     dst-port=1235

any ideeas ?

Last resort, i'll do a backup, /system reset-configuration, and restore from backup.

SurferTim · Sat Jan 08, 2011 8:19 pm

[admin@N] /ip hotspot profile> print
0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=1w split-user-domain=no use-radius=no

Maybe if you post "/ip address" would help. The hotspot address should not be zeros. It should be the ip assigned to bridge1.

brosky · Sat Jan 08, 2011 10:22 pm

ok, i change that to:

admin@N] > ip hotspot profile print detail 
Flags: * - default 
 0 * name="default" hotspot-address=10.0.12.1 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=1w split-user-domain=no use-radius=no

and the ip address

[admin@N] > ip address print 
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE                                                  
 0   10.0.12.1/24       10.0.12.0       10.0.12.255  bridge1                                                    
 1   94.52.xxx.230/25   94.52.xxx.128   94.52.xxx.255   ether1                                                     
 2   192.168.12.1/24    192.168.12.0    192.168.12.255  bridge1                                                    
 3   192.168.1.111/24   192.168.1.0     192.168.1.255   bridge1                                                    
 4 D 10.0.0.4/32        10.0.0.1        0.0.0.0         pptp-out1

It's not a NAT/ADDR/ROUTE problem, IMHO... because this happent's to random users... users who usually don't have problems accessing the internet, and suddenly they can't.

Once I went to a customer place and tried to figure it out... no luck.

I think it may have something to do with the MAC of the packets...

hotspot users can't acces internet.

hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Re: hotspot users can't acces internet.

Who is online