hello every one , i wish you are doing fine
i recently implemented an HOTSPOT on the new HEX S router , and i am willing it to use it along with an RB2011 , this is not the matter
i did the following configuration on the HEX S for the HOTSPOT with load balancing
/interface bridge
add fast-forward=no name=LAN
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] poe-out=forced-on speed=100Mbps
/interface list
add name=WANs
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
add dns-name=www.wi-sat.net hotspot-address=10.0.10.1 html-directory=\
flash/hotspot login-by=https name="WI-SAT HOTSPOT" split-user-domain=yes \
ssl-certificate=cert_export_WI-SAT.crt_0 use-radius=yes
/ip pool
add name=CLIENTS-LAN ranges=10.0.1.0-10.0.10.0
/ip dhcp-server
add address-pool=CLIENTS-LAN disabled=no interface=LAN name=DHCPLAN-CLIETNS
/ip hotspot
add address-pool=CLIENTS-LAN disabled=no idle-timeout=none interface=LAN \
name=WI-SAT profile="WI-SAT HOTSPOT"
/interface bridge filter
add action=accept chain=forward in-bridge=LAN out-interface=ether5
add action=accept chain=forward in-interface=ether5 out-bridge=LAN
add action=accept chain=forward in-interface=ether5 out-interface=ether4
/interface bridge port
add bridge=LAN interface=ether4
add bridge=LAN interface=ether5
/interface list member
add interface=ether1 list=WANs
add interface=ether2 list=WANs
add interface=ether3 list=WANs
/ip address
add address=10.0.0.1/8 interface=LAN network=10.0.0.0
add address=192.168.5.10/24 interface=ether1 network=192.168.5.0
add address=192.168.3.10/24 interface=ether3 network=192.168.3.0
add address=192.168.4.10/24 interface=ether2 network=192.168.4.0
add address=192.168.200.1/24 disabled=yes interface=ether1 network=\
192.168.200.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.0.0/8 dns-server=10.0.0.1 gateway=10.0.0.1 netmask=8
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
/ip firewall address-list
add address=www.xnxx.com list=porn
add address=www.xhamster.com list=porn
add address=www.youtube.com list=youtube
/ip firewall filter
add action=accept chain=forward in-interface=LAN out-interface=LAN
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall mangle
add action=accept chain=prerouting comment="accept local" dst-address=\
192.168.1.0/24
add action=accept chain=prerouting comment="accept local" dst-address=\
192.168.2.0/24
add action=accept chain=prerouting comment="accept local" dst-address=\
192.168.3.0/24
add action=accept chain=prerouting comment="accept local" dst-address=\
192.168.4.0/24
add action=accept chain=prerouting comment="accept local" dst-address=\
192.168.5.0/24
add action=mark-connection chain=input comment=WAN1-cnx hotspot=auth \
in-interface=ether1 new-connection-mark=WAN1 passthrough=yes
add action=mark-connection chain=input comment=WAN2-cnx hotspot=auth \
in-interface=ether2 new-connection-mark=WAN2 passthrough=yes
add action=mark-connection chain=input comment=WAN3-cnx hotspot=auth \
in-interface=ether3 new-connection-mark=WAN3 passthrough=yes
add action=mark-routing chain=output comment=WAN1-rt connection-mark=WAN1 \
hotspot=auth new-routing-mark=WAN1-rt passthrough=yes
add action=mark-routing chain=output comment=WAN2-rt connection-mark=WAN2 \
hotspot=auth new-routing-mark=WAN2-rt passthrough=yes
add action=mark-routing chain=output comment=WAN3-rt connection-mark=WAN3 \
hotspot=auth new-routing-mark=WAN3-rt passthrough=yes
add action=mark-connection chain=prerouting comment=WAN1-cnx connection-mark=\
no-mark dst-address-type=!local hotspot=auth in-interface=LAN \
new-connection-mark=WAN2 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting comment=WAN1-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN1 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/0 src-address-list=admins
add action=mark-connection chain=prerouting comment=WAN2-cnx connection-mark=\
no-mark dst-address-type=!local hotspot=auth in-interface=LAN \
new-connection-mark=WAN2 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting comment=WAN2-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN2 passthrough=yes per-connection-classifier=\
both-addresses:6/2
add action=mark-connection chain=prerouting comment=WAN3-cnx connection-mark=\
no-mark dst-address-type=!local hotspot=auth in-interface=LAN \
new-connection-mark=WAN3 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/2
add action=mark-connection chain=prerouting comment=WAN3-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN3 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting comment=WAN3-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN3 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting comment=WAN4-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN4 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:3/2
add action=mark-connection chain=prerouting comment=WAN3-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN3 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:7/4
add action=mark-connection chain=prerouting comment=WAN3-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN3 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:5/3
add action=mark-connection chain=prerouting comment=WAN2-cnx connection-mark=\
no-mark disabled=yes dst-address-type=!local hotspot=auth in-interface=\
LAN new-connection-mark=WAN2 passthrough=yes per-connection-classifier=\
both-addresses:6/2
add action=mark-routing chain=prerouting comment=WAN1-rt connection-mark=WAN1 \
hotspot=auth in-interface=LAN new-routing-mark=WAN1-rt passthrough=yes
add action=mark-routing chain=prerouting comment=WAN2-rt connection-mark=WAN2 \
hotspot=auth in-interface=LAN new-routing-mark=WAN2-rt passthrough=yes
add action=mark-routing chain=prerouting comment=WAN3-rt connection-mark=WAN3 \
hotspot=auth in-interface=LAN new-routing-mark=WAN3-rt passthrough=yes
add action=mark-routing chain=output comment=WAN1-rt connection-mark=WAN1 \
hotspot=auth new-routing-mark=WAN1-rt passthrough=yes
add action=mark-routing chain=output comment=WAN2-rt connection-mark=WAN2 \
hotspot=auth new-routing-mark=WAN2-rt passthrough=yes
add action=mark-routing chain=output comment=WAN3-rt connection-mark=WAN3 \
hotspot=auth new-routing-mark=WAN3-rt passthrough=yes
/ip firewall nat
add action=accept chain=srcnat out-interface=ether2
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat disabled=yes out-interface-list=WANs
add action=masquerade chain=srcnat out-interface=!LAN src-address=10.0.0.0/8
/ip hotspot user
add name=khial password=khial
/ip route
add check-gateway=ping disabled=yes distance=1 gateway=8.8.8.8 routing-mark=\
WAN1-rt target-scope=30
add check-gateway=ping disabled=yes distance=1 gateway=8.8.8.8 routing-mark=\
WAN2-rt target-scope=30
add check-gateway=ping disabled=yes distance=1 gateway=8.8.8.8 routing-mark=\
WAN3-rt target-scope=30
add check-gateway=ping distance=1 gateway=192.168.5.1 target-scope=30
add check-gateway=ping disabled=yes distance=1 gateway=8.8.8.8 target-scope=\
30
add check-gateway=ping disabled=yes distance=1 gateway=1.1.1.1 target-scope=\
30
add check-gateway=ping disabled=yes distance=1 dst-address=1.1.1.1/32 \
gateway=192.168.4.1 target-scope=30
/radius
add address=192.168.5.5 secret=white2017 service=ppp,hotspot
add address=192.168.4.5 secret=white2017 service=ppp,hotspot
add address=192.168.4.5 disabled=yes secret=white2017 service=ppp,hotspot
add address=127.0.0.1 disabled=yes secret=white2017 service=ppp,hotspot
/radius incoming
set accept=yes port=1700
/system clock
set time-zone-name=Africa/Algiers
/system identity
set name="WI-SAT HEX S"
what does this do is that i create a bridge and i did set hotspot on bridge LAN , and i did load balancing using PCC
so what i am seeing is very bad perfermance and some werd behaviour , if i start a bandwich thest , it starts and emidiatly disconnects
2nd ; i see the follownig hosts and some times i see google IP address as a host ??
3rd , mostly if i am surfing some sites responds fast , but some times takes long and some times i even have to refresh so many times ?
here is the diagram of the network , tell me what can be wrong ?
