Hi all,
Currently i set up ros4.11 hotspot for our hotel guest internet access, we have 2 adsl connections,
I follow RouterOS - RouterOS - MikroTik Documentation and it doesnt work if I enable :
/ ip firewall nat
add chain=srcnat out-interface=WAN1 action=masquerade
add chain=srcnat out-interface=WAN2 action=masquerade
if I disable them everything is working perfectly..
ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 chain=srcnat action=masquerade out-interface=WAN1
2 chain=srcnat action=masquerade out-interface=WAN2
ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=mark-connection new-connection-mark=WAN1_conn passthrough=yes in-interface=WAN1
1 chain=input action=mark-connection new-connection-mark=WAN2_conn passthrough=yes in-interface=WAN2
2 chain=output action=mark-routing new-routing-mark=to_WAN1 passthrough=yes connection-mark=WAN1_conn
3 chain=output action=mark-routing new-routing-mark=to_WAN2 passthrough=yes connection-mark=WAN2_conn
4 chain=prerouting action=accept dst-address=192.168.10.0/24 in-interface=GuestLAN
5 chain=prerouting action=accept dst-address=61.221.104.0/24 in-interface=GuestLAN
6 chain=prerouting action=mark-connection new-connection-mark=WAN1_conn passthrough=yes dst-address-type=!local in-interface=GuestLAN
per-connection-classifier=both-addresses:2/0
7 chain=prerouting action=mark-connection new-connection-mark=WAN2_conn passthrough=yes dst-address-type=!local in-interface=GuestLAN
per-connection-classifier=both-addresses:2/1
8 chain=prerouting action=mark-routing new-routing-mark=to_WAN1 passthrough=yes in-interface=GuestLAN connection-mark=WAN1_conn
9 chain=prerouting action=mark-routing new-routing-mark=to_WAN2 passthrough=yes in-interface=GuestLAN connection-mark=WAN2_conn
ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 X S 0.0.0.0/0 192.168.10.1 1
1 X S 0.0.0.0/0 61.221.104.254 1
2 A S 0.0.0.0/0 192.168.10.1 1
3 S 0.0.0.0/0 61.221.104.254 2
4 ADC 10.100.0.0/16 10.100.0.80 CorpLAN 0
5 ADC 61.221.104.0/24 61.221.104.173 WAN2 0
6 ADC 192.168.10.0/24 192.168.10.254 WAN1 0
7 ADC 192.168.20.0/24 192.168.20.254 GuestLAN 0
ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
ip hotspot print
Flags: X - disabled, I - invalid, S - HTTPS
NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
0 hotspot1 GuestLAN dhcp_pool1 hsprof1 5m
what could be wrong, can someone give me a hint ? I tried to look on wiki..but just not be able to find out what I did bad in the config.
any help would be greatly appreciated..
sorry for my English
thanks