Hi Guys

I have setup 13 stores country wide with routerboards and hotspots.

They are all done exactly the same as I copied the config from the first board to all others and just updated the script.

The board dials in the pppoe for the ADSL and I have a script running to update the dynamic dns for the public IP.

when i access the dyndns URL in my browser i get the landing page on some boards as I should but not on others.

I need to be able to access userman on each board via the web interface so that the store manager can add/delete users themselves.

I cant see how the one would work and the other doesn't , is there something I am missing?

I will post any logs or anything you guys want to help solve the problem.

PLEASE HELP

Hi there,

Plese post export config from 2 devices, one that work and one that does not

/ip hotspot export
/ip service export
/ip firewall filter export

Pawel

ok cool here we go -


here is the non-working one
/ip hotspot export

/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default rate-limit="" \
smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=gateway.dionwired.co.za hotspot-address=192.168.0.129 html-directory=hotspot http-cookie-lifetime=5m http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=\
hsprof1 nas-port-type=wireless-802.11 radius-accounting=yes radius-default-domain="" radius-interim-update=received radius-location-id="" radius-location-name="" \
radius-mac-format=XX:XX:XX:XX:XX:XX rate-limit="" smtp-server=64.13.232.144 split-user-domain=no use-radius=yes
/ip hotspot
add address-pool=dhcp_pool2 addresses-per-mac=1 disabled=no idle-timeout=5m interface=wlan2 keepalive-timeout=none name=hotspot1 profile=hsprof1
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=4 status-autorefresh=1m transparent-proxy=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot walled-garden
add action=allow comment="place hotspot rules here" disabled=yes
add action=allow comment=twitter disabled=no dst-host=*twitter* server=hotspot1
add action=allow comment=mweb disabled=no dst-host=*mweb* server=hotspot1
add action=allow comment=dionwired disabled=no dst-host=*dionwired* server=hotspot1
add action=allow comment="twitter images" disabled=no dst-host=*twimg* server=hotspot1
add action=allow comment="facebook backend" disabled=no dst-host=*fbcdn* server=hotspot1
add action=allow comment="facebook backend" disabled=no dst-host=*facebook* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*webtrix* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*youtube* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*itunes* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*sony* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*toshiba* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*canon* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*samsung* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*intel* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*apple* server=hotspot1
add action=allow comment="youtube images" disabled=no dst-host=*ytimg* server=hotspot1
add action=allow comment=dionwired disabled=no dst-host=*youtu.be* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*google* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*img* server=hotspot1
/ip hotspot walled-garden ip
add action=accept disabled=no server=hotspot1 src-address=64.13.232.144
add action=accept disabled=no dst-address=64.13.232.144 server=hotspot1
add action=accept disabled=no server=hotspot1 src-address=196.4.160.4
add action=accept disabled=no dst-address=196.4.160.4 server=hotspot1
add action=accept disabled=no server=hotspot1 src-address=66.102.13.101
add action=accept disabled=no dst-address=66.102.13.101 server=hotspot1

_________________________________________________________________________________________

ip service export

/ip service
set telnet disabled=no port=23
set ftp disabled=no port=21
set www disabled=no port=80
set ssh disabled=no port=22
set www-ssl certificate=none disabled=yes port=443
set api disabled=yes port=8728
set winbox disabled=no port=8291
[admin@WoodMead] >

_________________________________________________________________________________
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
[admin@WoodMead] >
__________________________________________________________________________________
__________________________________________________________________________________

And here is the one that does work -

/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default rate-limit="" \
smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=gateway.dionwired.co.za hotspot-address=192.168.0.129 html-directory=hotspot http-cookie-lifetime=5m http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=\
hsprof1 nas-port-type=wireless-802.11 radius-accounting=yes radius-default-domain="" radius-interim-update=received radius-location-id="" radius-location-name="" \
radius-mac-format=XX:XX:XX:XX:XX:XX rate-limit="" smtp-server=64.13.232.144 split-user-domain=no use-radius=yes
/ip hotspot
add address-pool=dhcp_pool2 addresses-per-mac=1 disabled=no idle-timeout=5m interface=wlan1 keepalive-timeout=none name=hotspot1 profile=hsprof1
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=4 status-autorefresh=1m transparent-proxy=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot walled-garden
add action=allow comment="place hotspot rules here" disabled=yes
add action=allow comment=twitter disabled=no dst-host=*twitter* server=hotspot1
add action=allow comment=mweb disabled=no dst-host=*mweb* server=hotspot1
add action=allow comment=dionwired disabled=no dst-host=*dionwired* server=hotspot1
add action=allow comment="twitter images" disabled=no dst-host=*twimg* server=hotspot1
add action=allow comment="facebook backend" disabled=no dst-host=*fbcdn* server=hotspot1
add action=allow comment="facebook backend" disabled=no dst-host=*facebook* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*webtrix* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*youtube* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*itunes* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*sony* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*toshiba* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*canon* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*samsung* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*intel* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*apple* server=hotspot1
add action=allow comment="youtube images" disabled=no dst-host=*ytimg* server=hotspot1
add action=allow comment=dionwired disabled=no dst-host=*youtu.be* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*google* server=hotspot1
add action=allow comment=twitter disabled=no dst-host=*img* server=hotspot1
/ip hotspot walled-garden ip
add action=accept disabled=no server=hotspot1 src-address=64.13.232.144
add action=accept disabled=no dst-address=64.13.232.144 server=hotspot1
add action=accept disabled=no server=hotspot1 src-address=196.4.160.4
add action=accept disabled=no dst-address=196.4.160.4 server=hotspot1
add action=accept disabled=no server=hotspot1 src-address=66.102.13.101
add action=accept disabled=no dst-address=66.102.13.101 server=hotspot1
[admin@HydePark] >
_____________________________________________________________________________________
/ip service
set telnet disabled=no port=23
set ftp disabled=no port=21
set www disabled=no port=80
set ssh disabled=no port=22
set www-ssl certificate=none disabled=yes port=443
set api disabled=yes port=8728
set winbox disabled=no port=8291
_____________________________________________________________________________________
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
[admin@HydePark] >
_____________________________________________________________________________________
_____________________________________________________________________________________
-------------------------------------------------------------------------------------------------

Cool thanks a lot for your help

seem to be ok and same on both ,

Do you have any other equipment routers that are diffrent on both locations ? maybe they bloch access to www on RB

No , all the stores have the exact same setup with Hardware.

We did all the stores in one go , so we bought 13 sets of the exact same equipment , I did the first setup and it worked and then just copied everything across to all other boards.

it is very very strange.

I can winbox into every board no problem , its just the www that doesnt work from WAN!