Core Switch 26 POE Port.
I have 1-15 Ruckus AP’s.
All wireless APS are tagged for VLAN 100 for traffic.
25- Goes to ETH7 FOR MGMT
26 - Goes to ETH8 for LAN Traffic
There is times when a user that has Windows Vista they’r not able to receive a DHCP off my network for some odd reason. What I have to do is remove VLAN10 and put vlan10 to the Mikrotik and he is able to obtain an IP address after that. I have alot of Mikrotiks deployed in a lot of places and I have to do this often. I have tried several firmware but no firmware fixes that issue.
I have tried many adjustments on the DHCP sever but it makes no change. I even created input rules for port 67,68 and no change either. I have a use a Bridge. I have tried it with a bridge and without a bridge same stuff. I do have RSTP turned off since i don’t use that. I have that turned off throughout my switch.
I have a Terms of agreement page. There is times where users have a hard time seeing the tos page and there users who have no issues at all. So once they connect to the wifi, they should be taken to my disclaimer page but that does not happen. I know at times we have them go a page that is not cache or anything like that. We have them go to abc.com and it redirects them to my disclaimer page. 95% that works and at times it does not work.
Is there a way that I can make it when they connect to the wireless network it forces them to go to my terms of service page?
If anyone can help that would be great.
I will throw it out there. I have a Nomadix at a property same setup as with a CCR and I have no DHCP issues with Vista/Windows7 Enterprises PC’s. I also have no issues with guest seeing my tos page.
If you guys need a config of my CCR please let me know.
As long as the ip, dhcp server and hotspot server are all set on either the same vlan or bridge interface it shouldn’t make no difference vs using a bridge with just the vlan por added. BTW, why horizon=1?
I have never experienced the problems with vlan interfaces you mention.
What is the CCR firmware (System > Routerboard) ? Is up todate? (latest is 3.27 on CCRs).
What is the POE switch brand/model?
In order to troubleshoot this, you need to torch or capture/wireshark ether8 to check for vlan tags presence, or the vlan interface (no vlan tags) for the specific client mac not getting DHCP. Seems sometimes packets aren’t reaching the CCR with the proper tags.
It’s gets very irritating because I have a lot of sites where I have Mikrotiks deployed and I have this issues in a lot of them. I have different users throughout the world. I hate removing the vlan and readding the vlan because I really shouldn’t have to do that.
I’m not sure if anyone else have this same issue or not, not sure if they have a similiar setup like I do or not.
I would really want my DHCP to work perfectly with every device and os. Vista, Windows 7, Windows 7 Enterprise , WIndws 8 , Windows 10.
I mean I have removed a Mikrotik in the past and put a regular router. It works fine. No issues with the DHCP for Vista users and Windows 7 Enterprise guest. -
Also, I have issues when user have VPN software on there PC/ goverment laptop/ work laptop they can’t see my Terms Of Service Page because the VPN software does not let them.
The VPN software requires them have * Internet* access before doing anything. Is there a way around this?
I’ve had users with VPN software still be able to manage to my TOS page and get passed my TOS page. Once they passsed my TOS page they can access there VPN and do work stuff.
Looks to me you edited the export, is this the case?
When I advised to torch or do a capture for later analysis with wireshark I referred to the mikrotik router, not the users PC.
Regarding horizon, do you add vlans to that bridge? try this: if you don’t need that bridge, put the service on top of the vlan interface directly, just in case RSTP is being triggered for whatever reason on that bridge causing you such problems.
Trying to guess what could be the issue in your case, never experienced problems with DHCP on vlans, but again I haven’t seen a vista PC in years. No problem with either Windows xp, 7, 8, 10, os X 10.6 onwards, ios 7 onwards, or android devices.
Regarding VPN please provide more detail… you’ll had to reverse engineer what “internet probe” is such VPN software trying to access, and add it to the walled garden…
Yes, I did edit the export. I removed the unnecessary stuff from it.
I have done a dhcp debugging. It seems the Mikrotik dhcp does the offer but nothing back from the user. Not sure if the packet is going all the way through or not. Ofcourse i cant do wireshark on a user laptop.
Yes , I do add vlans to the bridge. I need that bridge due to my hotspot network. It’s just weird. I can remove the Mikrotik and put a different router and works fine.. No dhcp issues at all.
I am puzzled by your problem, have routers (my own home router for example) doing software VLANs for years, zero problems.
If you’re using latest ROS, latest firmware, and have netinstalled the router, and still experience the problem, generate a supout in that same moment and send it to support with a precise description of the problem, or a link to this post.
If you truly experience this on ALL your routers, then I think the common denominator should be on the configs… your problems could be related to MTU.
Yes, I am having major issues with this. I thought it was my config at first, but I manually setup this ups. I’ve been done a simple config, no vlans or anything and same shit. I can take away the Mikrotik and put a diff router and bam works fine. I don’t use netinstall.
I am, with Hap AC Lite on ROS 6.43.4. The router is connected to an office switch and a public area switch (both Unifi US-24-250W devices). The 5 APs are all Unifi. 1 Native mgmt vlan and 7 tagged vlans.
I have tried:
Making sure admin mac is enabled
Switching bridge between none, STP and RSTP
Switching off bridge fast forward, fast path and unchecked use IP Firewall
Increasing dhcp lease time to 6 hours
We are re-crimping the cables to see if it will solve the issue.
Update : The issue is not mikrotik. There is an unexpected rogue dhcp server in the form of a hdmi over ip transmitter in one of the vlans. What I don’t understand is why it prevents clients in other vlans getting dhcp requests from the mikrotik.