Good morning friends, I am with the following problem, after putting my mikrotik to authenticate customers by radius my web proxy stopped work and along with it any control over port 80, until my load balance by static routes operate less to port 80 , so I type the following rule that range ip will exit by such link and so and leaves everything but the port 80 after the setup for the radius, one interesting fact hotspot and did use a test to make a server to see if with pppoe it happened and it did not happen, it is really something to hotspot and radius, someone already went through this? Thanks friends …
can you post your configuration? only the relevant sections
Have to do the work load balance, I am still more problems with web proxy and hotstpot no control over the port 80 works. For instance if I want to lock the door 80 of a given ip not working, ja tested, 3 servers mikrotik and all three happened the same problem. Now able to do the redirect of the door using the following rule
ip firewall add pre-hotspot-address src = 192.168.200.0/24 tcp protocol = dst-port = 80
Hotspot = auth action = redirect to-3128 comment = “” disabled = yes
I wonder if this form of redirect incorrect or if this is a bug even among hostpost and web proxy?
Below my settings
radius
add service=ppp,hotspot,wireless called-id=“” domain=“”
address=192.168.3.5 secret=“test521” authentication-port=1812
accounting-port=1813 timeout=2s accounting-backup=no realm=“” comment=“”
disabled=no
/ radius incoming
set accept=yes port=1700
/ ip hotspot service-port
set ftp ports=21 disabled=no
/ ip hotspot profile
set default name=“default” hotspot-address=0.0.0.0 dns-name=“”
html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d
split-user-domain=no use-radius=no
add name=“hsprof1” hotspot-address=192.168.5.1 dns-name=“”
html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=mac,http-chap,http-pap split-user-domain=no
use-radius=yes radius-accounting=yes radius-interim-update=1m
nas-port-type=wireless-802.11 radius-default-domain=“”
radius-location-id=“” radius-location-name=“”
/ ip hotspot user profile
set default name=“default” idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 transparent-proxy=no
add name=“uprof1” address-pool=pool1-hotspot idle-timeout=none
keepalive-timeout=2m status-autorefresh=1m shared-users=unlimited
transparent-proxy=no
/ ip firewall nat
add chain=srcnat src-address=192.168.75.0/24 action=masquerade
comment=“masquerade hotspot network” disabled=no
add chain=srcnat src-address=192.168.74.0/28 action=masquerade
comment=“masquerade hotspot network” disabled=no
add chain=srcnat src-address=192.168.200.0/24 action=masquerade
comment=“masquerade hotspot network” disabled=no
add chain=pre-hotspot src-address=192.168.200.0/24 protocol=tcp dst-port=80
hotspot=auth action=redirect to-ports=3128 comment=“” disabled=yes
/ ip firewall mangle
add chain=prerouting src-address=192.168.75.0/24 action=mark-routing
new-routing-mark=link2 passthrough=no comment=“” disabled=no
/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10
comment=“” disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.3.1 scope=255 target-scope=10
routing-mark=link2 comment=“” disabled=no
Best regards
Gilberto Andrade
??? please???