hotspot page not appearing

RouterOS Wireless Networking
1

Hello all.

I have a basic setup with a 14db omni connected to an atheros card.
all is well for the wireless card configuration and i can connect a laptop to the system and get an ip and all however when i come to open a page the hotspot system doesnt load.

all i get on the client side is a timeout.

heres my config:

[admin@MikroTik] interface wireless> print
Flags: X - disabled, R - running 
 0    name="wlan1" mtu=1500 mac-address=00:02:6F:4B:B8:B3 arp=disabled disable-running-check=no 
      interface-type=Atheros AR5213 radio-name="00026F4BB8B3" mode=ap-bridge ssid="Hermaime" area="" 
      frequency-mode=superchannel country=no_country_set antenna-gain=15 frequency=2437 band=2.4ghz-b/g 
      scan-list=default rate-set=default supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps 
      supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps 
      basic-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps 
      basic-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps max-station-count=2007 
      ack-timeout=dynamic tx-power-mode=default noise-floor-threshold=default periodic-calibration=default 
      burst-time=disabled dfs-mode=none antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none 
      wds-ignore-ssid=no update-stats-interval=disabled default-authentication=yes default-forwarding=yes 
      default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=default 
      disconnect-timeout=3s on-fail-retry-time=100ms preamble-mode=both compression=no allow-sharedkey=no 
[admin@MikroTik] interface wireless>




[admin@MikroTik] ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS 
 #   NAME                                                         INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
 0   hs-wlan1                                                     wlan1     hs-pool-2    hsprof1 5m




[admin@MikroTik] ip hotspot> profile 
[admin@MikroTik] ip hotspot profile> print
Flags: * - default 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" 
     http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d 
     split-user-domain=no use-radius=no 

 1   name="hsprof1" hotspot-address=10.5.50.1 dns-name="" html-directory=hotspot rate-limit="" 
     http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d 
     split-user-domain=no use-radius=no 
[admin@MikroTik] ip hotspot profile>




[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE
 0   ;;; added by setup
     192.168.0.50/24    192.168.0.0     192.168.0.255   ether1   
 1   ;;; hotspot network
     10.5.50.1/24       10.5.50.0       10.5.50.255     wlan1




[admin@MikroTik] ip pool> print
 # NAME                                                                            RANGES                         
 0 hs-pool-2                                                                       10.5.50.2-10.5.50.254          
[admin@MikroTik] ip pool>

pls advise

2

anybody?

this is really frustrating.

adding to new developments: if i do ping an external site (http://www.yahoo.com) from the client laptop it DOES resolve the IP however it spits out request time out.

3

how about your NAT config?

4

well ironically in my first install i checked the packages because i was going to do an upgrade and i noticed the “Routing” package was being installed DISABLED.
God knows why.
I enabled that and it worked.

a new problem arose though

when i connect to my wifi network i try to load a page like http://www.yahoo.com then it timesout
if i type in the gateway ip in i can log in
when i try a page again after loggin in it just stalls

[admin@MikroTik] ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; masquerade hotspot network
     chain=srcnat src-address=172.16.0.0/16 action=masquerade 

 1   ;;; masquerade hotspot network
     chain=srcnat src-address=10.0.0.0/8 action=masquerade 
[admin@MikroTik] ip firewall nat>

although i have a feeling it may something to do with the hotspot login auth. … ?

[admin@MikroTik] ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS 
 #   NAME                          INTERFACE ADDRESS-POOL PROFILE  IDLE-TIMEOUT
 0   hs-wlan1                      wlan1     WLANpool     wlanHOT  5m          
 1   hs-ether2                     ether2    ether2pool   etherHOT 5m          
[admin@MikroTik] ip hotspot>




[admin@MikroTik] ip hotspot profile> print
Flags: * - default 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot 
     rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 
     login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no 
     use-radius=no 

 1   name="wlanHOT" hotspot-address=172.16.0.1 dns-name="" 
     html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d 
     split-user-domain=no use-radius=no 

 2   name="etherHOT" hotspot-address=10.0.0.1 dns-name="" 
     html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d 
     split-user-domain=no use-radius=no 
[admin@MikroTik] ip hotspot profile>

what other code would you require me to diagnose this issue?
Thanks

5

Greetings from Miramar Beach, Florida!

If the IP addresses are working (ie 192.168.0.1) and the web addresses/login pages are not (http://www.google.com), check your DNS settings.

/ip dns
set primary-dns=xxx.xxx.xxx.xxx
set secondary-dns=yyy.yyy.yyy.yyy
set allow-remote-requests=yes

That should do it.

6

i see.

I thought i had set right but it appeared the first primary dns was set to 10.0.0.1 which is the second hotspot server.

i changed it to 192.168.0.1 (the linksys gateway) and it seems to be ok now but still a bit sluggish at loading the hotspot loading page.

7

You might want to change the primary-dns setting to the primary dns setting your Linksys router is using, not the local address of the Linksys router. That should speed things up a little.

If the dns does not work when you use the outside DNS server, insure you have masquerading enabled as ether1.

8

so you’re saying i should also masquerade ether1?

cause right now the only masqueraded networks are the two hotspot ones.

first the ip for the interfaces:

[admin@Shahrazad] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE              
 0   172.16.0.1/16      172.16.0.0      172.16.255.255  wlan1                  
 1   10.0.0.1/8         10.0.0.0        10.255.255.255  ether2                 
 2   192.168.0.2/24     192.168.0.0     192.168.0.255   ether1

at first NAT looked like this:

[admin@Shahrazad] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0 X ;;; place hotspot rules here
     chain=unused-hs-chain action=passthrough 

 1   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=172.16.0.0/16 

 2   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=10.0.0.0/8 
[admin@Shahrazad] /ip firewall nat>

and now it looks like this (i added ether1)


[admin@Shahrazad] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0 X ;;; place hotspot rules here
     chain=unused-hs-chain action=passthrough 

 1   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=172.16.0.0/16 

 2   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=10.0.0.0/8 

 3   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=192.168.0.0/24 
[admin@Shahrazad] /ip firewall nat>

how should i notice a difference?

i mean what would be visible as to adding ether1 being masqueraded?

9

My bad! I meant masquerade your other ports as ether1. I use

/ip firewall nat add chain=src-nat action=masquerade out-interface=ether1

10

om so it loox like this now

[admin@Shahrazad] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0 X ;;; place hotspot rules here
     chain=unused-hs-chain action=passthrough 

 1   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=172.16.0.0/16 

 2   ;;; masquerade hotspot network
     chain=srcnat action=masquerade src-address=10.0.0.0/8 

 3   chain=src-nat action=masquerade out-interface=ether1 
[admin@Shahrazad] /ip firewall nat>