im having trouble configuring the MT to pass traffic from the internet to A static ip behide the hotspot. We need to manage or monitor our switches and AP’s that are connected to the hotspot interface.
We have done some testing and found that if the ip address is not part of the DHCP-pool, the MT will do NAT to make the traffic look like its comming from that pool.
If your DHCP-pool is 10.10.10.2-10.10.10.20 and you assign 10.10.10.30 to the your swtch, from the outside interface your switch will be on 10.10.10.20 or another ip from the DHCP-pool.
And 10.10.10.30 will not respond to ICMP from the outside interface. If we assign 10.10.10.10 to the device it will be able to respond to IMCP on its own IP.
But only after the device makes a request to the internet.
Switches do not do this. If i send a ping to any IP conneceted to the hotspot interface, the MT never sends out a arp request, I have arp enabled on the interface.
I have also tried to get the traffic around the hotspot:
mangle traffic to hs-auth
foward rule to accept traffic from the devices ip.
If anyone has any Ideas im just about out of them.
Thanks