HotSpot as Bridge

Hi,

there is possible run a HotSpot as bridge ?


thank you.


i think is yes,
but don't put public interface into bridge

regards
Hasbullah.com

I think impossible. I tried it but could not success.

It is perfectly possible.

You have to configure hotspot service by bridge1, but be sure that DHCP server works for bridge1 too.

Hi, thanks for all answers.

A question about it: I’ve to work with broute (bridge) table ?
(in order to redirect pakets to bridge)

some body haves an script example ?
thanks !!!

Here is my config:
[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 10.0.10.3/24 10.0.10.0 10.0.10.255 ether1
1 192.168.1.1/24 192.168.1.0 192.168.1.255 ether2

[admin@MikroTik] interface bridge> print
Flags: X - disabled, R - running
0 R name="bridge1" mtu=1500 arp=enabled mac-address=00:13:D3:97:B5:3A protocol-mode=none priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m

[admin@MikroTik] interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic

INTERFACE BRIDGE PRIORITY PATH-COST

0 ether1 bridge1 0x80 10
1 ether2 bridge1 0x80 10

[admin@MikroTik] ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS

NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT

0 I hs bridge1 default 5m



would you show me your config to help me?


yes,
red color or 'I' flag on your result is indicated invalid config for hotspot into bridge
just my suggestion:
put all ip on 'bridge' and dhcp server on bridge too, than don't put public interface into bridge.
good luck..

regards
Hasbullah.com

Dear Balimore,
It’s possible as you suggested, butI have to run both interface in bridge mode. Cause I want to allocate ip address from Linux server.


hai, again
if possible just put one ether nic and say incoming interface, than make route to your linux machine..
anyone else have idea.. come please... :wink:
i think dhcp hotspot should be running on local interface

regards
Hasbullah.com

Yes, It’s ok on bridged local interface. But what about if I want to run both interface on bridge mode to integrate MikroTik with my existing linux DHCP server?

the trick is put attention in chain PRE-HS-INPUT (filter)

[admin@MikroTik-HotSpot] ip firewall filter> export

jul/09/2007 22:32:58 by RouterOS 2.9.27

software id = FAJW-1SN

/ ip firewall filter
add chain=forward in-interface=ether1 action=accept comment=“Download de clientes (necesito esta rule porque esto es un bridge y no hay nat)” disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=icmp icmp-options=0:0 action=accept comment=“Acepto PING REPLY de usuarios no
autenticados” disabled=no
add chain=pre-hs-input in-interface=ether1 action=accept comment=“Acepto trafico entrante al HOT SPOT desde ether 1” disabled=no
add chain=pre-hs-input in-interface=ether2 protocol=icmp icmp-options=0:0 action=accept comment=“Aceptar Ping REPLY de los clientes” disabled=no

Is very importan put attention on Packet Flow diagram:

HOTSPOT INPUT are processed BEFORE Forward and BEFORE INPUT chains… :slight_smile: :slight_smile:

PRE-HS-INPUT chain are provided by Mikrotik Hotpost in order to put my own rules.

How ever, P RE-HS-INPUT chain are not docummented in REFMAN 2.9.

Best regards ..!
Andres.

So there is no solution in this situation?