I have a RB450G and set up a hotspot + webproxy to block some sites.
My problem is that I need a way to make multiple users that connects through one acc in the hotspot but doesnt get blocked by the webproxy, and i cant really give access by IP or MAC cause its not the same pc/ phone that will be using this login. While, if these users login with the other acc it will have restrictions.
Example:
user x = has blocked websites
user y = free access to everything
Everyone connects through the same interface and i only have 1 link wan.
Do you want to bypass the webproxy by the user’s IP? Is this user going to be logging in with only one device at a time? Are you using the router’s user database to allow access for this user? If so, you can assign an ip to that user in “/ip hotspot user”.
I think you can use a RADIUS server to do the same thing.
As I recall, you must have the hotspot NAT active, and use an ip outside the dhcp server range for that interface/hotspot.
What im trying do make are 2 public accounts, one with restrictions and the other with full access, and this accs will be distributed to clients and such, so it wont be the same device and sometimes it will be more than 1 person using the same acc. We dont have a server for radius, just the RB.
Ive created 2 hotspot user accs and 2 profiles, but i cant make it so mikrotik wont block one of them.
I activated the hotspot and created 2 users and 2 users profiles so its just the default rules that are active.
The webproxy is running on port 3128 with just one site blocked so i can test.
And I didnt express myself well. It will be multiple users using these accs at the same time, and unfortunately we dont have a server or radius.
I was thinking like acc user and acc master, like, if some clients want to user your wifi, u give them the user acc, but if its someone that needs more privileges, u give them the master acc.
Just so I understand…you will have multiple devices logging in with the same username? Are you using the proxy (/ip proxy) in the router? If you want to use the proxy for one group of users, and not for others, assign different user profiles to each user. You can set which profiles use the proxy in “/ip hotspot user profile”.
Exactly, multiple devices logging in with the same username at the same time.
I have 2 hotspot user profiles, master and user. With the user profile i set the ‘transparent proxy’ like in the SS, while the master profile the options isnt marked, but oddly enough the proxy blocked my access with both accs while testing.
About the config for the webproxy, i just enabled it and added 1 site to block, didnt really change anything.
