Hotspot / local access points reachable over vpn

RouterOS General
1

Hello,

I have a hotspot setup with vpn connection to radius server and for remote control purpose.
The local access points are in the same subnet like the client ip’s:
infrastructure vom x.x.x.2-32 , hotspot client ip’s from x.x.x.33 - x.x.x.254

All access points have fixed ip’s in the specified range, but also get an ip from the hotspot by dhcp.
I can see them in hotspot / hosts.

For this reason this access points are blocked to reach them over the vpn.
Only when I bind the IP to the mac-address by “ip-Binding” it is working.

Is there maybe another way to specify the range which had to be reachable and not blocked by hotspot masquerading.

kind regards,

Paul

2

You can disable the 1:1 NAT in the hotspot. That way the static ips will not be translated.

/ip hotspot
set 0 address-pool=none

You have a dhcp server on the hotspot interface, correct?

3

Yes the dhcp server is local on the RB.
So I can define a second address pool x.x.x.0/27 which will exclude with your command the ip address from 1-32.

Correct?

Kind regards

Paul