MAC based network access

Hey guy’s.

I was wondering if it is possible (with mikrotik) to assign IP addresses to users based on their MAC addresses.
Now I know what your thinking - hasn’t this guy heard of user manager / hotspot / DHCP server with static address configuration??? I have heard of them and I am using them. The question is how will I use them to do the following…

Wait, lets explain:
What I have is an OPEN network (LAN & Wifi) with a hotspot + userman setup working very nicely. The problem now is that anybody that can access a network point or that has wifi can connect to the network (not the problem), once connected they can’t get to the internet (perfect) but they have access to all the local services on the local network.

What I want to do is have the open network - have any one connect and when they try connecting to the internet…BAM → Hotspot. I also don’t want them to have access to the local LAN without me GIVING them access. I.E. - once they have their hotspot account, I will enable them to have access to the other computers on the network.

Why? Because I want to do it this way - one network with different access levels. Paying users can get both local and internet access, non paying users get hot spotted.

Is this possible? Or rather - how do I do this with mikrotik?

Thanks :slight_smile:

Default HotSpot configuration does not allow access to local network resources.
Make sure you do not use walled-garden.

hey sergejs,
by “default” you mean that hotspot should have an address pool allocated…?

Say I do that then - use a address pool…how will I go about giving my users access to the local net? Will they get access once they’ve authenticated?? Or will I set this up some where else?

Thanks for getting back to me b.t.w.

By default I mean, when HotSpot is configured with ‘ip hotspot setup’ command.
http://www.mikrotik.com/testdocs/ros/2.9/ip/hotspot.php
users will get access to all network (including local) after authentication in HotSpot.

Ok, so there needs to be a IP pool allocated…

Now I guess I should have mentioned just how picky I am… :sunglasses:

This works as you said - now you only get access to each other once both users are authenticated. But now it picks up your local transfers. I just downloaded a 50MB folder from the other computer and now 50megs of my available Internet transfers is gone. Is there a way to configure Hotspot so that it doesn’t include the local data transfers into the calculations?? Just measure Internet traffic - not local + Internet…

:open_mouth:

As far as I know it is not possible now, I guess that even access to local resources without authentication (that is possible with HotSpot) will not help, and transfer between two users from the same network will be accounted.