Mikrotik drives me grazy

Hi,
I want to use a RB951G-2Hnd
But it is not working and drives me grazy.
I want 3 Virtual Access Points.
3 bridges
3 vlans
each vlan his own accesspoint
use on one vlan a hotspot.
This all I get working but I cant get good internet connection.

I can upload my configuration if that is a good thing

Bridge the wireless LAN to the vlan. You’ll create three vlan interfaces like E1-V10, E1-V11, etc then create a bridge for each network. Add each vlan and wireless LAN to that bridge. This will take non-vlan traffic and tag it when it crosses from the wireless lab to the vlan interface. Hopefully that helps.

Hi,
The problem is in the hotspot I think
I have three VLANS
The bridges I created and I create 3 Virtual AP’s
That all is ok
On one bridge I have the hotspot running
There is the problem
IF I connnect to a normal bridge and try to internet it is going fast and good
But if I login on the hotspot than the PAIN starts.
Internet is not working.
Or I only can reach http://www.google.nl
What can it be?

This is my config
If someone can help I will really like that

MMM MMM KKK TTTTTTTTTTT KKK

MMMM MMMM KKK TTTTTTTTTTT KKK

MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK

MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK

MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK

MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK

SW01 Setup met Router, AP en Usermanagement

Set Identity

/system identity set name=SW01

Set Ether names

/interface ethernet set 0 name=ether1-public
/interface ethernet set 1 name=ether2-local
/interface ethernet set 2 name=ether3-local
/interface ethernet set 3 name=ether4-local
/interface ethernet set 4 name=ether5-local

Create bridges

/interface bridge add name=BR-LAN
/interface bridge add name=BR-MOBILE
/interface bridge add name=BR-GAST

Create VLANs

/interface vlan add name=VLAN-MOBILE vlan-id=10 interface=ether5-local disabled=no
/interface vlan add name=VLAN-GAST vlan-id=20 interface=ether5-local disabled=no

Add security profiles (WLAN)

/interface wireless security-profile add name=TNW.LOCAL authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key=“PASSWORD” mode=dynamic-keys
/interface wireless security-profile add name=GAST authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key=“GUEST_PASSWORD” mode=dynamic-keys
/interface wireless security-profile add name=MOBILE authentication-type=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key=“MOBILE_PASSWORD” mode=dynamic-keys

Add virtual AP’s

/interface wireless add master-interface=wlan1 ssid=TNW.LOCAL security-profile=TNW.LOCAL name=VAP-LAN wmm-support=enabled disabled=no
/interface wireless add master-interface=wlan1 ssid=GAST security-profile=GAST name=VAP-GAST wmm-support=enabled disabled=no
/interface wireless add master-interface=wlan1 ssid=MOBIL security-profile=MOBILE name=VAP-MOBILE wmm-support=enabled disabled=no

Add ports to bridges

/interface bridge port add interface=ether2-local bridge=BR-LAN disabled=no
/interface bridge port add interface=VAP-LAN bridge=BR-LAN disabled=no
/interface bridge port add interface=VAP-GAST bridge=BR-GAST disabled=no
/interface bridge port add interface=VLAN-GAST bridge=BR-GAST disabled=no
/interface bridge port add interface=VAP-MOBILE bridge=BR-MOBILE disabled=no
/interface bridge port add interface=VLAN-MOBILE bridge=BR-MOBILE disabled=no

Add ether ports to switch

/interface ethernet set ether3-local master-port=ether2-local
/interface ethernet set ether4-local master-port=ether2-local
/interface ethernet set ether5-local master-port=ether2-local

Set IP addresses to the Interfaces

/ip address add address=192.168.1.1/24 disabled=no interface=ether1-public
/ip address add address=192.168.201.245/24 disabled=no interface=BR-LAN
/ip address add address=192.168.10.1/24 disabled=no interface=BR-GAST
/ip address add address=192.168.20.1/24 disabled=no interface=BR-MOBILE

Set Route

/ip route add dst-address=0.0.0.0/0 gateway=192.168.1.254 scope=30 target-scope=10 disabled=no distance=1

Set NAT masquerade

/ip firewall nat add action=masquerade chain=srcnat disabled=no out-interface=ether1-public

Set DNS

/ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=64 server=194.109.6.66

Turn on WLAN

/interface wireless enable wlan1

Hide SSID wlan1 (mikrotik)

/interface wireless set wlan1 hide-ssid=yes

Set wireless mode

/interface wireless set mode=ap-bridge wlan1 band=2ghz-b/g/n ht-txchains=0,1 ht-rxchains=0,1 wmm-support=enabled

Set wireless channel

/interface wireless set wlan1 channel-width=20/40mhz-ht-above

Set wirless protocol

/interface wireless set wlan1 wireless-protocol=any

Add NTP server

/system ntp client set primary-ntp=192.168.201.5 mode=unicast enabled=yes

DHCP Server BR-MOBILE

DHCP Pool setup

UIT OMDAT DIT VIA STATIC LEASE MOET GAAN

#/ip pool add name=“DHCP-MOBILE” ranges=192.168.202.2-192.168.220.253

Setup DHCP Server

/ip dhcp-server add name=“DHCP-MOBILE” interface=BR-MOBILE lease-time=1h address-pool=static-only authoritative=after-2sec-delay bootp-support=none disabled=no

Setup DHCP Network

/ip dhcp-server network add address=192.168.20.0/24 gateway=192.168.20.1

Add static addresses

/ip dhcp-server lease add address=192.168.20.2 mac-address=00:00:00:00:00:01 server=DHCP-MOBILE

DHCP Server GAST

DHCP Pool setup

/ip pool add name=“DHCP-POOL-GAST” ranges=192.168.10.2-192.168.10.253

Setup DHCP Server

/ip dhcp-server add name=“DHCP-GAST” interface=BR-GAST lease-time=1h address-pool=“DHCP-POOL-GAST” authoritative=after-2sec-delay bootp-support=static disabled=no

Setup DHCP Network

/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1

#############################################################################################################################

Setup HOTSPOT server with Radius for GUESTS

Setup Hotspot Profile

/ip hotspot profile add name=“GAST-PROFILE” hotspot-address=192.168.10.1 dns-name=“” html-directory=hotspot http-proxy=0.0.0.0:0 login-by=http-chap,cookie use-radius=yes radius-accounting=yes

\

Setup Hotspot Server

/ip hotspot add name=“HOTSPOT-GAST” interface=BR-GAST address-pool=“DHCP-POOL-GAST” profile=“GAST-PROFILE” disabled=no

Setup Radius

/radius add service=hotspot address=127.0.0.1 secret=123456

Add user (Manger voor usermanager)

/ip hotspot user add name=admin password=HOTSPOT

Enable Graphs

/tool graphing interface add interface=BR-LAN
/tool graphing interface add interface=BR-GAST
/tool graphing interface add interface=BR-MOBILE

Set Admin password

/user set admin password=password

Set Ether speed 1GB/s

/interface ethernet set ether1 speed=1Gbps
/interface ethernet set ether2 speed=1Gbps
/interface ethernet set ether3 speed=1Gbps
/interface ethernet set ether4 speed=1Gbps
/interface ethernet set ether5 speed=1Gbps

End of file

Can you remove the hotspot or disable it to confirm that your bridge config & routing is in good shape?

Hi,
When I disable the Hotspot and connect to the GAST network (where the hotspot was running at) I have internet.
It works fast and good.

I’ve not done much with the hotspot… However if you want to post your hotspot config I can give it a shot.

Setup Hotspot Profile

/ip hotspot profile add name=“GAST-PROFILE” hotspot-address=192.168.10.1 dns-name=“” html-directory=hotspot http-proxy=0.0.0.0:0 login-by=http-chap,cookie use-radius=yes radius-accounting=yes

Setup Hotspot Server

/ip hotspot add name=“HOTSPOT-GAST” interface=BR-GAST address-pool=“DHCP-POOL-GAST” profile=“GAST-PROFILE” disabled=no

Setup Radius

/radius add service=hotspot address=127.0.0.1 secret=123456

Add user (Manger voor usermanager)

/ip hotspot user add name=admin password=HOTSPOT

No one any idea why my hotspot is not working?

Maybe your hotspot address need to be 192.168.10.1/24

No that is not the reason.
There it expects an IP address so if you add /24 you get an error.
But I see I have RX traffic but no TX traffic.
See the picture.
Is that the problem???
hotspot.png

I’m surprised that specifying the size of your subnet on hotspot gateway address is giving you an error. Having a hotspot gateway address that is a /32 wouldn’t work which is what I am concerned that might be happeing. I am not sure that I am reading the config correctly. I have not configured many hotspots so I’ll have to build your config or as close as I can on a machine here in order to be sure. I won’t however have time to get to that for a few days. I hope you can figure things out before that however if you cannot I will be willing to help.

http://wiki.mikrotik.com/wiki/Manual:IP/Hotspot
Manual_IP_Hotspot - MikroTik Wiki.jpg

Hi,
It is still not working.
I have done a complete new setup for a few times.
I allso take a new RB751U and newly set it up.
The same problem.

Setup DHCP Network

/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1

There is no dns server setting in the dhcp network. That could be a problem.