Dear Forum,
I’m new to RouterOS, tried to setup a Hotspot Server with RADIUS authentication on my Mikrotik Router at my school. I have a server with dhcp, dns, proxy, radius etc services, i placed my Mikrotik Router between the server and the switches, and setup Hotspot Server on it. I use MAC authentiocation for the teachers desktops and laptops. For the students phones with unregistered MAC addresses, they can have internet access after logging in to the Hotspot server.
The problem: Tried to test my the system, i connected to WIFI with my phone, default login page comes up. I enter the correct username, password, the login is succes, but after the login, it looks like it cannot continue, after a while, the following error comes up:
http://connectivitycheck.gstatic.com/generate_204
ERR_CONNECTION_TIMED_OUT
/ip firewall filter
Flags: X - disabled, I - invalid, D - dynamic
0 D chain=forward action=jump jump-target=hs-unauth hotspot=from-client,!
1 D chain=forward action=jump jump-target=hs-unauth-to hotspot=to-client,
2 D chain=input action=jump jump-target=hs-input hotspot=from-client
3 D chain=input action=drop protocol=tcp hotspot=!from-client
dst-port=64872-64875
4 D chain=hs-input action=jump jump-target=pre-hs-input
5 D chain=hs-input action=accept protocol=udp dst-port=64872
6 D chain=hs-input action=accept protocol=tcp dst-port=64872-64875
7 D chain=hs-input action=jump jump-target=hs-unauth hotspot=!auth
8 D chain=hs-unauth action=reject reject-with=tcp-reset protocol=tcp
9 D chain=hs-unauth action=reject reject-with=icmp-net-prohibited
10 D chain=hs-unauth-to action=reject reject-with=icmp-host-prohibited
/ip firewall nat
Flags: X - disabled, I - invalid, D - dynamic
0 D chain=dstnat action=jump jump-target=hotspot hotspot=from-client
1 D chain=hotspot action=jump jump-target=pre-hotspot
2 D chain=hotspot action=redirect to-ports=64872 protocol=udp dst-port=53
3 D chain=hotspot action=redirect to-ports=64872 protocol=tcp dst-port=53
4 D chain=hotspot action=redirect to-ports=64873 protocol=tcp hotspot=local-dst dst-port=80
5 D chain=hotspot action=redirect to-ports=64875 protocol=tcp hotspot=local-dst dst-port=44>
6 D chain=hotspot action=jump jump-target=hs-unauth protocol=tcp hotspot=!auth
7 D chain=hotspot action=jump jump-target=hs-auth protocol=tcp hotspot=auth
8 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=80
9 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=3128
10 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=8080