Internet is working without Login/Pass

Hello Mates,

I have an issue that my internet is working without Login:Password ,
any body plz Help me that how can i stop Unwanted usage of my bandwidth.

Thanks

Are you certain it is not working? Check “/ip hotspot active” and see if anyone is logged in.

In “/ip hotspot profile”, did you change the “login-by=cookie,http-chap”? If not, your clients may think they are not logging in, but they may be by cookie. If you want to disable that, change that to “login-by=http-chap”.

If that is not it, then post “/ip hotspot” and “/ip hotspot profile”.

Thanks for your Kind reply,
I have checked it and You can check it too,
Please tell me how to change it by " Complete Command "

[admin@XXX] ip hotspot profile> print 
Flags: * - default 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot 
     rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 
     login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no 
     use-radius=no 

 1   name="hsprof1" hotspot-address=192.168.0.1 dns-name="" 
     html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d 
     split-user-domain=no use-radius=no
/ip hotspot profile
set 1 login-by=http-chap

Do you see any of your clients logged in under “/ip hotspot active”?
Are there any log entries showing clients logging in?

  1. No there is no any clients shown in hotspot active.
  2. also no any log entries showed in logging.

Please post “/ip hotspot”.

ADD: If the hotspot interface is on a bridge, please post “/interface bridge” and “/interface bridge port”.

thanks for every body
i had this proplem one time but i found out that the hotspot activation was the main issue

Thanks for your Reply, How you resolve it?
how to disable hotspot ?
i am not using any wireless devices or anything yet, if i disable hotspot , will everything will be fine?

The first hotspot is assigned to a disabled interface (wlan1) and the second has been disabled.

[admin@test] /ip hotspot> pri
Flags: X - disabled, I - invalid, S - HTTPS
#    NAME        INTERFACE   ADDRESS-POOL   PROFILE  IDLE-TIMEOUT
0 I  test        wlan1       dhcp_pool1     hsprof1   5m
1 X  hs-ether2   ether2      dhcp_pool2     hsprof2   5m
[admin@test] /ip hotspot>

That is why I wanted you to post “/ip hotspot”.
In this case I disabled the hotspot by

/ip hotspot
print
disable 1

ADD: You do not want to disable the hotspot. That will allow your clients free access. You want it enabled.
To enable the second hotspot in my example

/ip hotspot
print
enable 1

I have removed both profiles by winbox,but it didn’t. you can see this also. it’s after removing profiles.

[admin@XXX] ip hotspot profile> print 
Flags: * - default 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot 
     rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 
     login-by=http-chap split-user-domain=no use-radius=no 

 1   name="hsprof1" hotspot-address=192.168.0.1 dns-name="" 
     html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no 
     use-radius=no

I don’t want to give free and unauthorized access to anyone.

[admin@XXX] ip hotspot> print 
Flags: X - disabled, I - invalid, S - HTTPS 
 #   NAME                           INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
[admin@XXX] ip hotspot>

Kindly tell me how to block internet access without Login:Password (PPPOE Service) ?
Post the command’s what ever you want to know.

You do not have a hotspot set up on any interface.

/ip hotspot setup

Answer the questions. Most should be correct. If you do not have a security certificate, select “none” at that prompt.

But i don’t want to give free access to them, net surfing can be possible only with login and password.
if don’t have user name and password then no access to internet.
so kindly tell me how to disable direct access to internet without L:P.
Here are some prints,

[admin@XXX] > ip pool print 
 # NAME                                         RANGES                         
 0 users_pool                                   192.168.2.14-192.168.2.254     
 1 dhcp_pool2                                   192.168.0.2-192.168.0.254      
[admin@XXX] > ip firewall nat print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=srcnat out-interface=WAN src-address=192.168.2.0/24 
     action=masquerade 

 1   ;;; masquerade hotspot network
     chain=srcnat src-address=192.168.0.0/24 action=masquerade 

 2   ;;; masquerade hotspot network
     chain=srcnat src-address=192.168.0.0/24 action=masquerade 
[admin@XXX] > ip address print 
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE
 0   192.168.0.1/24     192.168.0.0     192.168.0.255   LAN      
 1 D 192.168.1.2/24     192.168.1.0     192.168.1.255   WAN

Here can you please tell me how to do it?

When router switch on it dynamically assign ip from modem like 192.168.1.77 with dns 202.99.132.240 .
1 . When any client turn on there PC they automatically get an ip by dhcp server.like 10.0.0.2 for Pc1 , 10.0.0.3 Pc2 , 10.0.0.4 Pc3 and so on,but they unable to use internet.
2 . when they use there login and password to connect for use the internet then it automatically get another ip,
3. i want to share three rate limits 512Kb , 1Mb and 2Mb, client with different limits get different ip ranges, like 192.168.77.2 for 512 , 192.168.88.2 for 1Mb and 192.168.99.2 for 2Mb.
In pic it shows 9 PC so PC 1,5,8 get ip 192.168.77.2,3,4 and so on.
PC 2,6,9 get 192.168.88.2,3,4 and so on.
PC 3,4,7 get 192.168.99.2,3,4 and so on.
4 . i want to add 1 more PC as my media server that my clients can access data from this PC by daily data limit.but it’s can only accessible when they connect there login:password.
5 . How to add Queue for clients?

So what will be it’s complete procedure by command?
netdiag1.gif

please answer the questions you were asked above! nobody can help you if you don’t answer.

currently you have not enabled hotspot anywhere.

I suggest you to hire a consultatant who can configure this for you, or attend the basic training.

The hotspot service will prevent (stop) internet access unless you log in.
If you do not have a hotspot installed, you are giving away your services free. Nobody needs to log in.
Install one hotspot and see if it does what you want.
This should install a hotspot on LAN interface. The only entries I change from the defaults are
hotspot interface: LAN
masquerade network: no (default = yes)
select certificate: none (default =import-other-certificate)

[admin@test] /ip hotspot> setup
Select interface to run HotSpot on

hotspot interface: LAN
Set HotSpot address for interface

local address of network: 192.168.0.1/24
masquerade network: no
Set pool for HotSpot addresses

address pool of network: 192.168.0.2-192.168.0.254
Select hotspot SSL certificate

select certificate: none
Select SMTP server

ip address of smtp server: 0.0.0.0
Setup DNS configuration

dns servers: x.x.x.x,y.y.y.y
DNS name of local hotspot server

dns name:

[admin@test] /ip hotspot>

Change the dns servers to yours. I used x.x.x.x,y.y.y.y as an example.
Your first install will also ask for a default user. Enter the appropriate user/password for a test user.

Thanks for your kind reply Sir,
yes i want to attend the basic training, how i can get it and from where?
Thanks in Advance

here is a list of upcoming trainings:
http://www.mikrotik.com/training/?training_site=next_training

here is a list of all our training partners:
http://www.mikrotik.com/training/?training_site=partners

I already checked these many times but didn’t find anything because there is no any Trainings and No Partners in my country.
you already know from where i am.
So is any other way to get training only Not Certificate.

Here is latest print

[admin@XXX] > ip hotspot print 
Flags: X - disabled, I - invalid, S - HTTPS 
 #   NAME                           INTERFACE    ADDRESS-POOL    PROFILE IDLE-TIMEOUT
 0   hotspot1                       LAN              dhcp_pool1          hsprof1 5m

Now you’re working! No ‘I’ or ‘X’ after the line number.
If your network accessed the internet ok before, you should be ready to go. Try to go to Google or Yahoo on a client computer on that localnet. A default login page should appear. Use the test user and password you entered during the setup.