Hi I have MT 2.9.44 with a basic setup and i cant get this thing work like i want to, I want users with custom filtering profiles, but it seems that they don’t work.
I need an example of somebody doing custom filtering on hotspot by user profile.
user fran: allow web, allow ftp, drop everything else /// the following config it supposed to do that but nothing happen.
/ ip hotspot
add name=“OMC-HOTSPOT” interface=bridge1 address-pool=OMC-POOL profile=hsprof2 idle-timeout=5m keepalive-timeout=none addresses-per-mac=2 disabled=no
/ ip hotspot service-port
set ftp ports=21 disabled=no
/ ip hotspot profile
set default name=“default” hotspot-address=0.0.0.0 dns-name=“” html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
add name=“hsprof1” hotspot-address=192.168.111.1 dns-name=“OMC-DNS” html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
add name=“hsprof2” hotspot-address=192.168.111.1 dns-name=“OMC-DNS” html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0 smtp-server=200.115.134.40
login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
/ ip hotspot user
add server=OMC-HOTSPOT name=“fran” password=“12345” address=192.168.111.50 profile=fran-profile comment=“” disabled=no
add server=OMC-HOTSPOT name=“ricardo” password=“123” address=192.168.111.51 profile=default comment=“” disabled=no
/ ip hotspot user profile
set default name=“default” idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 transparent-proxy=yes open-status-page=always
advertise=no
add name=“fran-profile” idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 outgoing-filter=“fran-outgoing” transparent-proxy=yes
open-status-page=always advertise=no
add name=“ricardo-profile” idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 outgoing-filter=“ricardo-outgoing” transparent-proxy=yes
/ ip hotspot walled-garden
add dst-host=dynupdate.no-ip.com action=allow comment=“dynupdate.no-ip.com” disabled=no
add dst-host=ftp.nai.com action=allow comment=“ftp.nai.com/virusdefs/4.x” disabled=no
add dst-host=windowsupdate.microsoft.com action=allow comment=“windowsupdate.microsoft.com” disabled=no
/ip firewall filter
0 D chain=forward action=jump jump-target=hs-unauth hotspot=from-client,!auth
1 D chain=forward action=jump jump-target=hs-unauth-to hotspot=to-client,!auth
2 D chain=input action=jump jump-target=hs-input hotspot=from-client
3 D chain=hs-input action=jump jump-target=pre-hs-input
4 D chain=hs-input action=accept dst-port=64872 protocol=udp
5 D chain=hs-input action=accept dst-port=64872-64875 protocol=tcp
6 D chain=hs-input action=jump jump-target=hs-unauth hotspot=!auth
7 D chain=hs-unauth action=reject reject-with=tcp-reset protocol=tcp
8 D chain=hs-unauth action=reject reject-with=icmp-net-prohibited
9 D chain=hs-unauth-to action=reject reject-with=icmp-host-prohibited
10 chain=fran-outgoing action=accept dst-port=80 protocol=tcp
11 chain=fran-outgoing action=accept dst-port=21 protocol=tcp
12 chain=fran-outgoing action=drop
13 D chain=hotspot action=jump jump-target=fran-outgoing dst-address=192.168.111.50
Thanks,
Fran