2 hot spots

Hotspot issue…
I use the RB750. ether 1 is the gateway to the internet and is a DHCP client.
ether 2 is the hotspot address and is a DHCP server
This works (very well) because it is a very standard way of doing. I also use userman.

I then set up another hotspot to work on ether 3.
The user get the login screen from this hotspot, give login info but thats it nothing happen at the user after that. In the router I can see the Active host and User and the sessoin cound down info all look fine, except the user has no internet connection?

The config for the 2 hotspot are identical save for the ip pools

It looks like there is no gateway or DNS available…
But I do not know because I am VERY new at this.
I would appreciate pointers as to where to look for my oversite. Please

I have not worked with the terminal so I am not yet that hot with posting “prints”

Thanks

Paul

Edit I have tried to learn as much I could about this issue from a large host of available articles, but so far no luck, I think I lack basic knowledge.

I am better at this with the CLI, but you should check a couple places. You will need to translate this to the API.

Check the “Interface” section to insure the ports are removed from the switch.
Check the “IP” section to insure the ip addresses are valid.
Check the default route in “IP route”.
Check for firewall rules and a masquerade in “IP firewall filter” and “IP firewall nat”.

???

If you have a question or comment, you must be more specific than that.

I am doing a ‘crash’ course on CLI… :slight_smile: so please bear with me.

I did however follow your suggestions:
“Check the “Interface” section to insure the ports are removed from the switch.”
I use Winbox.
On Switch: Port: all the ports are: Switch 1: to VLAN fallback
I do not know/think this mean the ports are switched?

“Check the “IP” section to insure the ip addresses are valid.”
I have followed the following address scheme:

ADDRESS NETWORK INTERFACE

0 10.0.0.3/25 10.0.0.0 Ether Port 5
1 10.0.1.3/25 10.0.1.0 Ether Port 4
2 10.0.2.3/25 10.0.2.0 Ether Port 3 to Villa AP’s
3 10.0.3.3/25 10.0.3.0 Ether Port 2 to AP’s
4 10.0.4.3/25 10.0.4.0 Ether Port 1 to Internet
5 D 192.168.100.23/27 192.168.100.0 Ether Port 1 to Internet

Check the default route in “IP route”.
I do not know if I used the correct CLI command??
This is what is there now:

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADS 0.0.0.0/0 192.168.100.1 0
1 ADC 10.0.0.0/25 10.0.0.3 Ether Port 5 0
2 ADC 10.0.1.0/25 10.0.1.3 Ether Port 4 0
3 ADC 10.0.2.0/25 10.0.2.3 Ether Port 3 to… 0
4 ADC 10.0.3.0/25 10.0.3.3 Ether Port 2 to… 0
5 ADC 10.0.4.0/25 10.0.4.3 Ether Port 1 to… 0
6 ADC 192.168.100.0/27 192.168.100.23 Ether Port 1 to… 0


"Check for firewall rules and a masquerade in “IP firewall filter” and “IP firewall nat”.

The firewall at this stage is still completely new to me so I will have to get more aquainted with it.

I do not want to waste any ones time so maybe there is a forum question somewhere that might deal with this issue, I am very willing to go and study it, please let me know.

Otherwise I will do my best to follow all advice given here.

Thank you.

I think removing some of the confusion may help. Which of these ip/subnets do you want assigned to Port 1?

4 10.0.4.3/25 10.0.4.0 Ether Port 1 to Internet
5 D 192.168.100.23/27 192.168.100.0 Ether Port 1 to Internet

I think the 10.0.4.3/25 assignment should go away.

BTW, the CLI stuff was very good!

Thank you for all the help so far. I got it working… I simply started on a clean slate (complete reset) and reconfig the RB. And the hotspots now work nicely (test environment and trail user) In the new cofig I followed your advice and removed the double address:

[admin@XXXXX] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 D 192.168.100.22/27 192.168.100.0 Ether Port 1 DHCP to Internet
1 10.0.2.1/25 10.0.2.0 Ether Port 2 Static to Hotspot 1
2 10.0.3.1/25 10.0.3.0 Ether Port 3 Static to Hotspot 2
3 10.0.4.1/25 10.0.4.0 Ether Port 4 Static for Dude (Next big thing - Ha Ha)
4 10.0.5.1/25 10.0.5.0 Ether Port 5 Static for Winbox
[admin@XXXXX] >


Alltough I have learnt alot!! I am under pressure to get this working (installed) so I need all the help I can get please.

I however now have a new difficulty:

I have 2 hotspots on 2 eternet ports and they are both set to use RADIUS, because I need to use user-man.

I just can not get the hotspots and the userman RADIUS to talk to each other. Because I am so new at this I find the online instructions very confusing. (dont ask me how I got it going previously???)

So please help me with this, current settings as follows:

RADIUS
[admin@XXXXX] /radius> print
Flags: X - disabled

SERVICE CAL… DOMAIN ADDRESS SECRET

0 hotspot 127.0.0.1 XXX..
[admin@XXXXX] /radius>

USER MAN
[admin@XXXXX] /tool user-manager router> print
Flags: X - disabled
0 customer=admin name=“router1” ip-address=10.0.2.1 shared-secret=“XXX”
log=auth-fail coa-port=1700

1 customer=admin name=“router2” ip-address=10.0.3.1 shared-secret=“XXX”
log=auth-fail coa-port=1700
[admin@XXXXX] /tool user-manager router>

Please let me know if you need more information.

Thanks

Paul

The first link is to the User Manager basic setup, and the second is the one you will want to read.
http://wiki.mikrotik.com/wiki/User_Manager
http://wiki.mikrotik.com/wiki/User_Manager/QA/How_to_make_HotSpot_and_User_Manager_on_the_same_router
Note the /radius address=127.0.0.1 and the subscriber ip-address=127.0.0.1

Thank you for the help. It is now up and working. So the pressure is a little less.

This is/was my 1st encounter with Mikrotik, but certainly not my last.

Now I can start to learn WHY it is working :laughing: