Hotspot userman not redictering to login page

RouterOS Beginner Basics
1

Hi,

The problem occurred when a device first connect to a hotpost wifi. Since it is the first user and not yet registered, right after they connecting, they should be redirected to Hotspot login page.

Now the problem is, instead of going to hotspot login page. The user sees microsoft.com website instead and not the hotspot login page. Of course they have no internet access because they are not yet registered right.

Now, when I try to type 192.168.3.1 (hotspot network) I can access the hotspot login page and login normally then I have the internet connection with the profile based on userman i defined.

Below is my config.
[admin@MikroTik] > export

may/24/2018 06:39:03 by RouterOS 6.42.2

software id = UHJX-RK6X

model = 951G-2HnD

serial number = 642F06638E36

/interface bridge
add admin-mac=6C:3B:6B:82:B4:14 auto-mac=no comment=defconf fast-forward=no name=bridge
add name=loopback
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce country=philippines disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=8773886 wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] name=1.Internet
set [ find default-name=ether2 ] name=2.LocalMaster
set [ find default-name=ether3 ] name=3.LocalActive
set [ find default-name=ether4 ] name=4.Local
set [ find default-name=ether5 ] name=5.Hotspot
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=L@moste101 wpa2-pre-shared-key=L@moste101
/ip hotspot profile
add dns-name=hotspot.portal hotspot-address=192.168.3.1 login-by=http-chap name=hsprof1 use-radius=yes
/ip hotspot user profile
set [ find default=yes ] transparent-proxy=yes
/ip pool
add name=dhcp ranges=192.168.2.150-192.168.2.254
add name=hotspotpool ranges=192.168.3.11-192.168.3.254
/ip dhcp-server
add address-pool=dhcp authoritative=after-2sec-delay disabled=no interface=bridge name=defconf
add address-pool=hotspotpool disabled=no interface=5.Hotspot lease-time=1h name=dhcp1
/ip hotspot
add address-pool=hotspotpool disabled=no interface=5.Hotspot name=hotspot1 profile=hsprof1
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/tool user-manager customer
set admin access=own-routers,own-users,own-profiles,own-limits,config-payment-gw password=admin123!@#
/tool user-manager profile
add name=admin name-for-users="" override-shared-users=1 owner=admin price=0 starts-at=logon validity=0s
/interface bridge port
add bridge=bridge comment=defconf interface=2.LocalMaster
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge interface=3.LocalActive
add bridge=bridge interface=4.Local
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=2.LocalMaster list=discover
add interface=3.LocalActive list=discover
add interface=4.Local list=discover
add interface=5.Hotspot list=discover
add interface=wlan1 list=discover
add interface=bridge list=discover
add interface=loopback list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip address
add address=192.168.2.1/24 comment=defconf interface=2.LocalMaster network=192.168.2.0
add address=192.168.1.11/24 interface=1.Internet network=192.168.1.0
add address=10.10.0.1 interface=loopback network=10.10.0.1
add address=192.168.3.1/24 interface=5.Hotspot network=192.168.3.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=1.Internet
/ip dhcp-server lease
add address=192.168.2.158 client-id=1:6c:71:d9:2a:7e:15 mac-address=6C:71:D9:2A:7E:15 server=defconf
/ip dhcp-server network
add address=192.168.2.0/24 comment=defconf gateway=192.168.2.1 netmask=24
add address=192.168.3.0/24 comment="hotspot network" gateway=192.168.3.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.2.1 name=router
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept establieshed,related" connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=1.Internet
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=1.Internet
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=1.Internet
add action=masquerade chain=srcnat comment="masquerade hotspot network" src-address=192.168.3.0/24
add chain=pre-hotspot dst-address-type=!local hotspot=auth
/ip hotspot user
add name=admin password=admin123!@#
/ip proxy
set enabled=yes
/ip route
add distance=1 gateway=192.168.1.1
/radius
add address=10.10.0.1 secret=secret service=hotspot
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Manila
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes server-dns-names=asia.pool.ntp.org
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
/tool traffic-monitor
add interface=3.LocalActive name=tmon1 threshold=0
/tool user-manager database
set db-path=user-manager
/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=10.10.0.1 log=auth-fail name=Mikrotik shared-secret=secret use-coa=no
/tool user-manager user
add customer=admin disabled=no password=admin123!@# shared-users=1 username=admin wireless-enc-algo=none wireless-enc-key="" wireless-psk=""

2

up…

3

Are u sure you are adding /userman to your IP?
x.x.x.x/userman

4

Where do I add the /userman?

5

ff.

6

Hi buildmasterglobal,

Please don’t hi-jack my thread. Create your separate thread so other users can help you properly.

I am still resolving my issue here.

Hope you understand.

Thanks,

7

What type of request was this? An HTTP or HTTPS request? And what was the site that you tried to hit when you were redirected to microsoft.com? Finally, was it https://microsoft.com?

8

Hi,

Http only.

after connecting to hotspot. it was supposed to go login page right. but it goes to Microsoft.com website insteadt and it’s https.

9

OK, so you made an HTTP request to where? Does the Hotspot login page load when you hit it directly via HTTP? Have you tested from another device to reproduce this issue?

10

Please do note this is newly configured Hotspot (my first time).
I think i explained everything already. You keep asking the same thing and I posted also the config and YES i tried with different device already.

11

I keep asking the same thing because you haven’t answer the question. I asked what webpage you went to. Because if you went to http://microsoft.com and then ended up at https://microsoft.com then the Hotspot isn’t “randomly” redirecting you to https://microsoft.com. If you said “I went to http://somesite.com and I end up at https://microsoft.com” then some weird is going on and the device might not be seeing the hotspot on the network.

When you connect to the wifi, do you see your device’s MAC appear in the Hosts table under the Hotspot in Winbox or with a “print” from the CLI?

12

Hi,

I might confused you.

The problem occurred when a device first connect to a hotpost wifi. Since it is the first user and not yet registered, right after they connecting, they should be redirected to Hotspot login page.

Now the problem is, instead of going to hotspot login page. The user sees microsoft.com website instead and not the hotspot login page. Of course they have no internet access because they are not yet registered right.

Now, when I try to type 192.168.3.1 (hotspot network) I can access the hotspot login page and login normally then I have the internet connection with the profile based on userman i defined.

Hope this clears everything.