Hi, We are running a hotspot at a hotel. We are having an occasional problem with some users where they do not get presented with the login page.
They cannot ping the hotspot.
They do get an IP.
They are showing under hosts on the hotspot.
But cannot browse to anything.
The hotspot cannot ping them.
But if i try another device its working fine.
here is our config.
I hope someone can help i am out of ideas on how to fix the issue.
nov/06/2017 10:25:07 by RouterOS 6.38.1
software id =
/interface bridge
add name=bridge-local
add name=bridge-wifi
/caps-man interface
add disabled=no mac-address=4C:5E:0C:47:A0:43 master-interface=none name=cap1
radio-mac=4C:5E:0C:47:A0:43 rates.vht-basic-mcs=""
rates.vht-supported-mcs=""
/ip neighbor discovery
set ether1 discover=no
/caps-man configuration
add datapath.bridge=bridge-wifi mode=ap name=HolidayWiFi
security.authentication-types="" security.encryption="" ssid=HolidayWiFi
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] login-by=http-chap,mac-cookie
add hotspot-address=10.20.30.1 login-by=http-chap,mac-cookie name=hsprof1
use-radius=yes
add dns-name=router hotspot-address=10.20.30.1 name=hsprof2
/ip pool
add name=dhcp ranges=10.19.1.200-10.19.1.254
add name=dhcp_pool2 ranges=10.20.30.2-10.20.30.254
/ip dhcp-server
add address-pool=dhcp interface=bridge-local name=default
/ip pool
add name=dhcp_pool1 next-pool=dhcp_pool2 ranges=10.20.31.2-10.20.31.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge-wifi lease-time=1d
name=dhcp1
/ip hotspot
add address-pool=dhcp_pool1 disabled=no interface=bridge-wifi
keepalive-timeout=1h name=hotspot1 profile=hsprof2
/ip hotspot user profile
set [ find default=yes ] address-pool=dhcp_pool1 keepalive-timeout=1h
mac-cookie-timeout=4w2d shared-users=2
/port
set 0 name=serial0
set 1 name=serial1
/tool user-manager customer
set admin access=
own-routers,own-users,own-profiles,own-limits,config-payment-gw password=
xxxxxxxxxxx signup-allowed=yes
/tool user-manager profile
add name=30d name-for-users=30d override-shared-users=off owner=admin price=0
starts-at=logon validity=4w2d
add name=5m name-for-users=5m override-shared-users=off owner=admin price=0
starts-at=logon validity=5m
add name=7d name-for-users=7d override-shared-users=off owner=admin price=0
starts-at=logon validity=1w
add name=1825d name-for-users=1825d override-shared-users=2 owner=admin
price=0 starts-at=logon validity=260w5d
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=test
owner=admin rate-limit-burst-rx=5939200B rate-limit-burst-time-rx=5s
rate-limit-burst-time-tx=5s rate-limit-burst-treshold-rx=1228800B
rate-limit-burst-treshold-tx=1331200B rate-limit-burst-tx=5529600B
rate-limit-min-rx=1228800B rate-limit-min-tx=1228800B rate-limit-rx=
3481600B rate-limit-tx=3276800B transfer-limit=0B upload-limit=0B
uptime-limit=0s
/caps-man aaa
set interim-update=30s
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=HolidayWiFi
name-prefix=bridge-wifi-ap slave-configurations=*1
/dude
set enabled=yes
/interface bridge port
add bridge=bridge-local interface=ether1
/ip address
add address=10.2.1.70/24 interface=ether1 network=10.2.1.0
add address=10.20.30.1/23 interface=bridge-wifi network=10.20.30.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=
ether1
/ip dhcp-server lease
add address=10.20.30.237 client-id=1:2c:33:61:a5:96:1f mac-address=
2C:33:61:A5:96:1F server=dhcp1
add address=10.20.30.205 client-id=1:b4:8b:19:77:dc:b6 comment="Tony Rhodes"
mac-address=B4:8B:19:77:DC:B6 server=dhcp1
add address=10.20.31.249 client-id=1:b8:53:ac:11:cd:3c comment=
"Charlie's Iphone" mac-address=B8:53:AC:11:CD:3C server=dhcp1
/ip dhcp-server network
add address=10.20.30.0/23 gateway=10.20.30.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=10.2.1.70 name=router
/ip firewall filter
add action=accept chain=output comment="radius testing" dst-port=3799
protocol=udp
add action=accept chain=output comment="radius testing" dst-port=3799
protocol=tcp
add action=accept chain=forward comment="radius testing" dst-port=3799
protocol=udp
add action=accept chain=forward comment="radius testing" dst-port=3799
protocol=tcp
add action=accept chain=input comment="radius testing" dst-port=3799
protocol=udp
add action=accept chain=input comment="radius testing" dst-port=3799
protocol=tcp
add action=accept chain=input comment="radius testing" dst-port=1812
protocol=tcp
add action=accept chain=output comment="radius testing" dst-port=1812
protocol=tcp
add action=accept chain=forward comment="radius testing" dst-port=1812
protocol=udp
add action=accept chain=forward comment="radius testing" dst-port=1812
protocol=tcp
add action=accept chain=input comment="radius testing" dst-port=1812
protocol=udp
add action=accept chain=output comment="radius testing" dst-port=1812
protocol=udp
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=accept chain=input comment="default configuration" protocol=icmp
add action=accept chain=forward disabled=yes dst-address=10.0.0.0/10
src-address=10.0.0.0/10
add action=accept chain=input disabled=yes dst-address=10.0.0.0/10
src-address=10.0.0.0/10
add action=accept chain=forward dst-address=172.16.0.0/16 src-address=
172.16.0.0/16
add action=accept chain=input comment="default configuration"
connection-state=established
add action=accept chain=input comment="default configuration"
connection-state=related
add action=accept chain=forward comment="default configuration"
connection-state=new dst-address-list=10.0.0.0/8 src-address-list=
10.0.0.0/8
add action=accept chain=forward comment="default configuration"
connection-state=established
add action=accept chain=forward comment="default configuration"
connection-state=related
add action=drop chain=forward comment="default configuration"
connection-state=invalid
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat src-address=10.20.30.0/23
add action=masquerade chain=srcnat comment="masquerade hotspot network"
disabled=yes src-address=10.20.30.0/23
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=10.20.30.0/23
/ip hotspot user
add name=hs1user password=xxxxx
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
/ip hotspot walled-garden ip
add action=accept disabled=no dst-address=77.92.75.219 !dst-port !protocol
server=hotspot1 !src-address
add action=accept disabled=no dst-address=10.20.30.1 !dst-port !protocol
server=hotspot1 !src-address
/ip route
add distance=1 gateway=10.2.1.1
/ip service
set ssh port=222
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=ether1 type=external
add interface=bridge-local type=internal
/radius
add address=127.0.0.1 secret=radiuspolk. service=hotspot
/radius incoming
set accept=yes
/system clock
set time-zone-name=Europe/London
/system identity
set name=CHRTfs-Wifi
/tool sniffer
set filter-mac-address=8C:BF:A6:9C:5D:75/FF:FF:FF:FF:FF:FF
/tool user-manager database
set db-path=/user-manager
/tool user-manager profile profile-limitation
add from-time=0s limitation=test profile=1825d till-time=23h59m59s weekdays=
sunday,monday,tuesday,wednesday,thursday,friday,saturday
/tool user-manager router
add coa-port=3799 customer=admin disabled=no ip-address=127.0.0.1 log=
auth-fail name=Hotspot shared-secret=xxxxxx use-coa=yes
/tool user-manager user
add customer=admin disabled=no password=svdq shared-users=1 username=gc4bcg
wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no password=kbtd shared-users=1 username=gcca4b
wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no password=msfv shared-users=1 username=gccbcg
wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no password=tm98 shared-users=1 username=gct7a2
wireless-enc-algo=none wireless-enc-key="" wireless-psk=""