HotSpot, different users - different rights

RouterOS Wireless Networking
1

Hi!

Is there a way to make a difference between 2 user groups on a hotspot, so that the first group is only allowed to do “internet surfing” but the second group is also allowed to access the LAN behind the hotspot?

My HotSpot LAN on wlan1 is 192.168.0.0/24, the LAN behind the Hotspot on eth1 is 172.23.10.0/24.

In the standard configuration all users are allowed to see the LAN on eth1.

Do I have to mark users and then do filtering?

Or is there a simpler way in a layer2 network?

Regards, Martin

2

Recent versions have an “Add to address list” option in the user profiles. When a user logs in his IP is added to that list, and it’s removed again on logout. You can then build firewall rulesets based on those address lists.