Hi,
The problem is in the hotspot I think
I have three VLANS
The bridges I created and I create 3 Virtual AP's
That all is ok
On one bridge I have the hotspot running
There is the problem
IF I connnect to a normal bridge and try to internet it is going fast and good
But if I login on the hotspot than the PAIN starts.
Internet is not working.
Or I only can reach
http://www.google.nl
What can it be?
This is my config
If someone can help I will really like that
# MMM MMM KKK TTTTTTTTTTT KKK
# MMMM MMMM KKK TTTTTTTTTTT KKK
# MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
# MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
# MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
# MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
#
# SW01 Setup met Router, AP en Usermanagement
# Set Identity
/system identity set name=SW01
# Set Ether names
/interface ethernet set 0 name=ether1-public
/interface ethernet set 1 name=ether2-local
/interface ethernet set 2 name=ether3-local
/interface ethernet set 3 name=ether4-local
/interface ethernet set 4 name=ether5-local
# Create bridges
/interface bridge add name=BR-LAN
/interface bridge add name=BR-MOBILE
/interface bridge add name=BR-GAST
# Create VLANs
/interface vlan add name=VLAN-MOBILE vlan-id=10 interface=ether5-local disabled=no
/interface vlan add name=VLAN-GAST vlan-id=20 interface=ether5-local disabled=no
# Add security profiles (WLAN)
/interface wireless security-profile add name=TNW.LOCAL authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key="PASSWORD" mode=dynamic-keys
/interface wireless security-profile add name=GAST authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key="GUEST_PASSWORD" mode=dynamic-keys
/interface wireless security-profile add name=MOBILE authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key="MOBILE_PASSWORD" mode=dynamic-keys
# Add virtual AP's
/interface wireless add master-interface=wlan1 ssid=TNW.LOCAL security-profile=TNW.LOCAL name=VAP-LAN wmm-support=enabled disabled=no
/interface wireless add master-interface=wlan1 ssid=GAST security-profile=GAST name=VAP-GAST wmm-support=enabled disabled=no
/interface wireless add master-interface=wlan1 ssid=MOBIL security-profile=MOBILE name=VAP-MOBILE wmm-support=enabled disabled=no
# Add ports to bridges
/interface bridge port add interface=ether2-local bridge=BR-LAN disabled=no
/interface bridge port add interface=VAP-LAN bridge=BR-LAN disabled=no
/interface bridge port add interface=VAP-GAST bridge=BR-GAST disabled=no
/interface bridge port add interface=VLAN-GAST bridge=BR-GAST disabled=no
/interface bridge port add interface=VAP-MOBILE bridge=BR-MOBILE disabled=no
/interface bridge port add interface=VLAN-MOBILE bridge=BR-MOBILE disabled=no
# Add ether ports to switch
/interface ethernet set ether3-local master-port=ether2-local
/interface ethernet set ether4-local master-port=ether2-local
/interface ethernet set ether5-local master-port=ether2-local
# Set IP addresses to the Interfaces
/ip address add address=192.168.1.1/24 disabled=no interface=ether1-public
/ip address add address=192.168.201.245/24 disabled=no interface=BR-LAN
/ip address add address=192.168.10.1/24 disabled=no interface=BR-GAST
/ip address add address=192.168.20.1/24 disabled=no interface=BR-MOBILE
# Set Route
/ip route add dst-address=0.0.0.0/0 gateway=192.168.1.254 scope=30 target-scope=10 disabled=no distance=1
# Set NAT masquerade
/ip firewall nat add action=masquerade chain=srcnat disabled=no out-interface=ether1-public
# Set DNS
/ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=64 server=194.109.6.66
# Turn on WLAN
/interface wireless enable wlan1
# Hide SSID wlan1 (mikrotik)
/interface wireless set wlan1 hide-ssid=yes
# Set wireless mode
/interface wireless set mode=ap-bridge wlan1 band=2ghz-b/g/n ht-txchains=0,1 ht-rxchains=0,1 wmm-support=enabled
# Set wireless channel
/interface wireless set wlan1 channel-width=20/40mhz-ht-above
# Set wirless protocol
/interface wireless set wlan1 wireless-protocol=any
# Add NTP server
/system ntp client set primary-ntp=192.168.201.5 mode=unicast enabled=yes
# DHCP Server BR-MOBILE
# DHCP Pool setup
# UIT OMDAT DIT VIA STATIC LEASE MOET GAAN
#/ip pool add name="DHCP-MOBILE" ranges=192.168.202.2-192.168.220.253
# Setup DHCP Server
/ip dhcp-server add name="DHCP-MOBILE" interface=BR-MOBILE lease-time=1h address-pool=static-only authoritative=after-2sec-delay bootp-support=none disabled=no
# Setup DHCP Network
/ip dhcp-server network add address=192.168.20.0/24 gateway=192.168.20.1
# Add static addresses
/ip dhcp-server lease add address=192.168.20.2 mac-address=00:00:00:00:00:01 server=DHCP-MOBILE
# DHCP Server GAST
# DHCP Pool setup
/ip pool add name="DHCP-POOL-GAST" ranges=192.168.10.2-192.168.10.253
# Setup DHCP Server
/ip dhcp-server add name="DHCP-GAST" interface=BR-GAST lease-time=1h address-pool="DHCP-POOL-GAST" authoritative=after-2sec-delay bootp-support=static disabled=no
# Setup DHCP Network
/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1
#############################################################################################################################
# Setup HOTSPOT server with Radius for GUESTS
# Setup Hotspot Profile
/ip hotspot profile add name="GAST-PROFILE" hotspot-address=192.168.10.1 dns-name="" html-directory=hotspot http-proxy=0.0.0.0:0 login-by=http-chap,cookie use-radius=yes radius-accounting=yes
# Setup Hotspot Server
/ip hotspot add name="HOTSPOT-GAST" interface=BR-GAST address-pool="DHCP-POOL-GAST" profile="GAST-PROFILE" disabled=no
# Setup Radius
/radius add service=hotspot address=127.0.0.1 secret=123456
# Add user (Manger voor usermanager)
/ip hotspot user add name=admin password=HOTSPOT
# Enable Graphs
/tool graphing interface add interface=BR-LAN
/tool graphing interface add interface=BR-GAST
/tool graphing interface add interface=BR-MOBILE
# Set Admin password
/user set admin password=password
# Set Ether speed 1GB/s
/interface ethernet set ether1 speed=1Gbps
/interface ethernet set ether2 speed=1Gbps
/interface ethernet set ether3 speed=1Gbps
/interface ethernet set ether4 speed=1Gbps
/interface ethernet set ether5 speed=1Gbps
# End of file