Hi everyone,
I just set up a hotspot with RouterOS on x86 system. The hotpsot works fine but when I log in I am unable to access the internet even though the internet works when accessed directly without hotspot.
I’ve reset the routerOS a couple of times and started all over again but nothing seems to change.
My hotspot settings is shown below together with a relevant screenshot of DHCP server.
I have also switched interfaces but still nothing works.
Any help as to how i can get the internet to work will be greatly appreciated.
Thanks,
Max
[admin@MikroTik] > ip hotspot
[admin@MikroTik] /ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS
# NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
0 hotspot1 ether2 hs-pool-2 hsprof1 5m
[admin@MikroTik] /ip hotspot> ..
[admin@MikroTik] /ip> pool
[admin@MikroTik] /ip pool> print
# NAME RANGES
0 hs-pool-2 192.168.88.2-192.168.88.254
[admin@MikroTik] /ip pool> ..
[admin@MikroTik] /ip> pool
[admin@MikroTik] /ip pool> /ip
accounting dhcp-client dns ipsec pool service ssh upnp
address dhcp-relay firewall neighbor proxy smb tftp export
arp dhcp-server hotspot packing route socks traffic-flow
[admin@MikroTik] /ip pool> /ip dhcp-server
[admin@MikroTik] /ip dhcp-server> print
Flags: X - disabled, I - invalid
# NAME INTERFACE RELAY ADDRESS-POOL LEASE-TIME ADD-ARP
0 dhcp1 ether2 hs-pool-2 1h
[admin@MikroTik] /ip dhcp-server> /ip firewall nat
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough to-addresses=0.0.0.0
1 ;;; masquerade hotspot network
chain=srcnat action=masquerade to-addresses=0.0.0.0
src-address=192.168.88.0/24
[admin@MikroTik] /ip firewall nat>
[admin@MikroTik] /ip firewall nat>
Thanks but I don’t have problem with the hotspot. I’ve already finished with it. It works, the usermanager/RADIUS also works as well.
I can do everything that i’m supposed to do with my hotspot.
The only problem is that the internet isn’t working after a user has successfully authenticated with login even though the internet works well when connected without mikrotik.
Have you tried accessing the internet by ip rather than domain? May be a dns issue. Check your “/ip dns” settings and insure you have “allow-remote-requests=yes”.
and so I’m unable to use the internet but when I bypass the hotspot via winbox for any device at all then the internet works ok.
What could be the problem please?
Is your RADIUS Server working? Can you Access Userman?
Is hotspot login page accesseble (try typing: 192.168.88.1 it should display login page)
Try disabling RADIUS and use internal hotspot users and profiles.
What does it do when it doesn’t work? What does the web browser display? Do you get a login page? What is in the address bar of the web browser?
I found the redirect to the login page won’t work if the dns-name entry doesn’t resolve to the ip of the hotspot interface, at least on my system. That would be 192.168.88.1 for your setup. Does hispeed.com resolve to 192.168.88.1? Unless you put an entry in “/ip dns static”, it probably doesn’t.
edit: Did you get your router’s dns working? If this still fails, you are going to have problems.
/ip hotspot
addresses-per-mac=253
253???!!!
must be 2…
From my experience, if you have an AP connects a CPE and you have addresses-per-mac to be 2,
only two devices from the CPE can connect to the AP. If you want as much devices to be able to connected via the CPE
then you can set it to 253 so I’m pretty sure that wasn’t the problem.
I have two other hotspots and I always default to using the ISP’s DNS servers but it seems the problem is with using the DNS in the RouterOS because I tried Google DNS and OpenDNS with no luck
/tool user-manager customer
customer is missing from your export, you have cut those lines?
Yes, I cut those lines because I believed they weren’t part of the problem. From the way I understood it, Usermanager may have nothing to do with having DNS resolution issue so I wanted to post only the relevant code.
Thanks though. +1 karma for you all the same for helping.
Upon reading this I decided to place the Google DNS right inside my ADSL router and check. So far everything works well
as expected but I’m still monitoring to see if nothing misbehaves but it’s being up for like 10 hours and I haven’t had any
problem…yet!
The weird thing is I have another connection from the same ISP and I didn’t have to go through this hack to get it working
but I think I will go with it.
Just a FYI: If you decide to add another network to your router, insure you add a masquerade that covers the new subnet. I use this, and it covers any subnets in the router.
