Hotspot in VRF

RouterOS General
1

Hi,

I am trying to run a hotspot server on an interface that is in a VRF, with little success!

The hotspot setup runs correctly when the interface is removed from the VRF but as soon as it is returned no luck. With the hotspot disabled devices on that interface correctly get internet access.

I guess this is something to do with the web proxy / dns proxy being in a different routing table to the clients or being isolated somehow?

Has anyone got this running in a similar situation or can suggest any next steps?

thanks,

2

Hi.
Faced with a similar problem. It was possible to find a solution?

3

When I searched for this topic I didn’t find other relevant discussions nor any answer to this question so I’ve decided to share the solution.

  1. Firstly, it is important to understand what is the source of this problem.
  2. The hotspot relies on two built-in services: DNS and Web server.
  3. When the interface is placed in the vrf, every packet entering the router will be marked with the routing-mark of that vrf.
  4. VRF routing table doesn’t have access to the main routing table.
  5. Built-in services are accessible from the main routing table only.
  6. Now, the solution becomes obvious. We need to:
  7. remove VRF marking from packets going to DNS server on the router,
  8. remove VRF marking from packets going to WEB server on the router,
  9. mark the packets going out from the DNS to public DNS server with the vrf mark,
  10. mark the packets from the router’s web server with the vrf mark.
4

Good morning, could you give me an example of how to remove the VRF marks and mark the parcel for the DNS server

5

Did anyone manage to solve this and could share their solution?