Hi everyone, very new to router os so in need of some help.
My network has a VLAN (ip 192.168.101.0/24 gw 192.168.101.1) for wireless access, it works fine but now i need to put a basic log on on this vlan to prevent casual users geting access to the network.
i was thinking about using the mikrotik hotspot service
how would i set this up to redirect/proxy web browser sessions to a proxy server on the main network (192.168.3.200/22) after the wireless user log’s on via the hotspot?
thanks
steve
VLAN interfaces are just like physical interfaces. The hotspot destination NAT rules it requires to function are dynamic and always come first, but allows for hooking via the pre-hotspot chain - so really there is nothing special about your setup. Just make a destination NAT rule in the pre-hotspot chain that forwards traffic from Hotspot clients to the proxy server. To make sure it doesn’t interfere apply it to authenticated clients only
/ip firewall nat
add chain=pre-hotspot hotspot=auth src-address=192.168.101.0/24 protocol=tcp dst-port=80,443,8080,8888 action=dstnat to-address=192.168.3.200
Adjust destination ports as required, depending on what exact proxy you have at that address.