Hotspot in VRF

RouterOS General
1

Hello,
I need to add a hotspot to a VRF, but when I add it to the VRF the login page becomes inaccessible and I’m stuck.
I found a related forum post on this, while the solutions is explained I’m not sure how to achieve this, anyone can help?

Ref forum post http://forum.mikrotik.com/t/hotspot-in-vrf/88605/1

  1. Firstly, it is important to understand what is the source of this problem.

  2. The hotspot relies on two built-in services: DNS and Web server.

  3. When the interface is placed in the vrf, every packet entering the router will be marked with the routing-mark of that vrf.

  4. VRF routing table doesn’t have access to the main routing table.

  5. Built-in services are accessible from the main routing table only.

  6. Now, the solution becomes obvious. We need to:

  7. remove VRF marking from packets going to DNS server on the router,

  8. remove VRF marking from packets going to WEB server on the router,

  9. mark the packets going out from the DNS to public DNS server with the vrf mark,

  10. mark the packets from the router’s web server with the vrf mark.

Hopefully someone will get this and could help suggest the settings to add to get this working.

Running ROS 7.14.1 on RB5009

2

Nobody? Support?

3

try this:

/ip firewall mangle
add action=mark-connection chain=prerouting connection-state=new new-connection-mark=hotspot_conn src-address=LAN passthrough=no
	
	/ip firewall mangle 
add action=mark-routing chain=prerouting connection-mark=hotspot_conn \
    in-interface=WAN new-routing-hotspot_rout
4

Hi Nichky,
Thanks for the reply, what would these mangle rules achieve?
Cheers

5

basically to use the correct VRF.

See how it goes, you need some sort rules on /ip/magle or /routing/rule/ in order to reach the Hotspot