I have setup a hotspot on 2 MicroTiks, one works great. The other (which I thought I set up the same), does not. To create the most simple of tests, I have a single client (172.31.236.247) connect to the hotspot and open a browser and enter the IP of the mikrotik (HTTP://172.31.236.1). The attempt to view the page times out. I tried to capture traffic by logging any packet to/from 172.31.236.247 (top of the input and top of the output chain) on the mikrotik:
Or at this URL (in case image doesn’t show) https://postimg.cc/BLJCGZCy
Yet on the client browser times out, “This site can’t be reached. 172.31.236.1 took too long to respond”
In case it helps attempts to ping the mikrotik (172.31.236.1 ) from the client (172.31.236.247) fail as “destination net unreachable”, yet sent=4 received=4. And the packets appear in/out the mikrotik log:
Or at this URL (in case image doesn’t show) https://postimg.cc/CRNGsp0s
But this may be normal for an unauthenticated hotspot user. Can anyone explain why the client & mikrotik can’t communicate for browsing to the login page on the portal? My hotspot config is pretty simply:
[admin@firewall-k] > /ip hotspot print
Columns: NAME, INTERFACE, ADDRESS-POOL, PROFILE, IDLE-TIMEOUT
# NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
0 siteb Hotspot vlan40-guestwifi Guest Wifi Pool siteb-profile 5m
[admin@firewall-k] > /ip hotspot profile print
Flags: * - default
0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot html-directory-override="" rate-limit="" http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
1 name="siteb-profile" hotspot-address=172.31.236.1 dns-name="hotspot-k.mydomain.ca" html-directory=hotspot html-directory-override=""
rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap,https,http-pap http-cookie-lifetime=3d ssl-certificate=none
https-redirect=no split-user-domain=no use-radius=no
I am using HTTP to view the login page, not HTTPS