Mikrotik routeros 7 hotspot not redirecting to login page

[Inoch.Katu]

I have created two hotspot:

1. hotspot10
2. hotspot20

Can someone help me fix hotspot10 and hotpsot20 cannot reach their respective cusstomizelogin.html page through their respective SSID's but are redirected to rlogin.html then giving net:ERR_CONNECTION_TIMED_OUT.
I am using a miktrotik router with routeros v7.18. I have upgraded it from v6 to v7

[normis]

Post the full config export of your setup

[jaclaz]

Instructions here:

Forum rules

Hello and welcome to the Mikrotik forum For all new users that uses RouterOS for the first time and have some questions regarding their config here is short tutorial on how to access RouterOS configuration using "WinBox" and how to export their configuration and posting it properly in their topic. So after you unpack your new device and connect it to the power supply you need to connect it to the PC. Be careful when connecting because to access your new router you need to use one of…

[anav]

Are you channelling me

[Inoch.Katu]

Sorry I was out of the Office so I could not reply. But I really appreciate your reply. Below is the configuration of my mikrotik router. I downgraded it back to routeros v6.

feb/05/2026 13:37:27 by RouterOS 6.49.18

model = RB750Gr3

/interface bridge
add ingress-filtering=yes name=bridge-LAN vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-EAP
set [ find default-name=ether3 ] name=ether3-Admin
set [ find default-name=ether4 ] name=ether4-RPi1
set [ find default-name=ether5 ] name=ether5-RPi2
/interface vlan
add interface=bridge-LAN name=vlan10 vlan-id=10
add interface=bridge-LAN name=vlan20 vlan-id=20
add interface=bridge-LAN name=vlan30 vlan-id=30
add interface=bridge-LAN name=vlan40 vlan-id=40
add interface=bridge-LAN name=vlan88 vlan-id=88
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=login.hotspot10.lan hotspot-address=192.168.10.1 html-directory=
flash/hotspot10 login-by=cookie,http-chap,http-pap name=Hotspot10-prof
add dns-name=login.hotspot20.lan hotspot-address=192.168.20.1 html-directory=
flash/hotspot20 login-by=cookie,http-chap,http-pap name=Hotspot20-prof
/ip pool
add name=pool88 ranges=192.168.88.10-192.168.88.100
add name=pool10 ranges=192.168.10.10-192.168.10.200
add name=pool20 ranges=192.168.20.10-192.168.20.200
add name=pool30 ranges=192.168.30.10-192.168.30.200
add name=pool40 ranges=192.168.40.10-192.168.40.200
add name=pool50 ranges=192.168.50.10-192.168.50.200
/ip dhcp-server
add address-pool=pool88 disabled=no interface=vlan88 name=dhcp88
add address-pool=pool10 disabled=no interface=vlan10 name=dhcp10
add address-pool=pool20 disabled=no interface=vlan20 name=dhcp20
add address-pool=pool30 disabled=no interface=vlan30 name=dhcp30
add address-pool=pool40 disabled=no interface=vlan40 name=dhcp40
/ip hotspot
add address-pool=pool10 disabled=no interface=vlan10 name=Hotspot10 profile=
Hotspot10-prof
add address-pool=pool20 disabled=no interface=vlan20 name=Hotspot20 profile=
Hotspot20-prof
/interface bridge port
add bridge=bridge-LAN hw=no ingress-filtering=yes interface=ether2-EAP pvid=
88
add bridge=bridge-LAN hw=no interface=ether3-Admin pvid=50
add bridge=bridge-LAN hw=no interface=ether4-RPi1 pvid=88
add bridge=bridge-LAN hw=no interface=ether5-RPi2 pvid=88
/interface bridge vlan
add bridge=bridge-LAN tagged=bridge-LAN,ether2-EAP untagged=
ether4-RPi1,ether5-RPi2 vlan-ids=88
add bridge=bridge-LAN tagged=bridge-LAN,ether2-EAP vlan-ids=10
add bridge=bridge-LAN tagged=bridge-LAN,ether2-EAP vlan-ids=20
add bridge=bridge-LAN tagged=bridge-LAN,ether2-EAP vlan-ids=30
add bridge=bridge-LAN tagged=bridge-LAN,ether2-EAP vlan-ids=40
add bridge=bridge-LAN tagged=bridge-LAN untagged=ether3-Admin vlan-ids=50
/ip address
add address=192.168.88.1/24 interface=vlan88 network=192.168.88.0
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
add address=192.168.20.1/24 interface=vlan20 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan30 network=192.168.30.0
add address=192.168.40.1/24 interface=vlan40 network=192.168.40.0
/ip dhcp-client
add disabled=no interface=ether1-WAN
/ip dhcp-server network
add address=192.168.10.0/24 dns-server=192.168.10.1 gateway=192.168.10.1
add address=192.168.20.0/24 dns-server=192.168.20.1 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=192.168.30.1 gateway=192.168.30.1
add address=192.168.40.0/24 dns-server=192.168.40.1 gateway=192.168.40.1
add address=192.168.50.0/24 dns-server=192.168.50.1 gateway=192.168.50.1
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
/ip dns static
add address=192.168.88.2 name=library.kombris.lan
add address=192.168.88.2 name=info.kombris.lan
add address=192.168.88.2 name=omada.kombris.lan
add address=192.168.10.1 name=login.hotspot10.lan
add address=192.168.20.1 name=login.hotspot20.lan
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=accept chain=input connection-state=established,related
add action=drop chain=input connection-state=invalid
add action=accept chain=input in-interface=vlan88
add action=accept chain=input in-interface=vlan10
add action=accept chain=input in-interface=vlan20
add action=accept chain=input in-interface=vlan30
add action=accept chain=input dst-port=64872 protocol=tcp
add action=accept chain=input comment="Allow Hotspot10 HTTP" dst-port=80,443
in-interface=vlan10 protocol=tcp
add action=accept chain=input comment="Allow Hotspot20 HTTP" dst-port=80,443
in-interface=vlan20 protocol=tcp
add action=accept chain=input in-interface=vlan10 protocol=icmp
add action=accept chain=input in-interface=vlan20 protocol=icmp
add action=accept chain=input dst-port=53 in-interface=vlan10 protocol=udp
add action=accept chain=input comment="Allow Hotspot10 traffic" in-interface=
vlan10
add action=accept chain=input comment="Allow Hotspot20 traffic" in-interface=
vlan20
add action=accept chain=input dst-port=53 in-interface=vlan20 protocol=udp
add action=drop chain=input in-interface=ether1-WAN
add action=accept chain=forward connection-state=established,related
add action=drop chain=forward connection-state=invalid
add action=accept chain=forward dst-address=192.168.88.2 in-interface=vlan30
add action=drop chain=forward in-interface=vlan10 out-interface=vlan88
add action=drop chain=forward in-interface=vlan20 out-interface=vlan88
add action=drop chain=forward in-interface=vlan30 out-interface=vlan88
add action=drop chain=forward in-interface=vlan40 out-interface=vlan88
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1-WAN
/ip hotspot walled-garden
add dst-host=library.kombris.lan server=Hotspot10
add dst-host=info.kombris.lan server=Hotspot10
add dst-host=library.kombris.lan server=Hotspot20
add dst-host=info.kombris.lan server=Hotspot20
add dst-host=.whatsapp.com server=Hotspot20
add dst-host=.facebook.com server=Hotspot20
add dst-host=.messenger.com server=Hotspot20
add dst-host=.google.com server=Hotspot20
add dst-host=login.hotspot10.lan server=Hotspot10
add dst-host=login.hotspot20.lan server=Hotspot20
/system clock
set time-zone-name=Pacific/Port_Moresby

I am trying to do a community wifi setup for my project connecting rural marginalized areas as stated below:

Equipments being used:

1. Mikrotik hex routerOS v6.49.18 = 192.168.88.1
2. TP Link EAP (without a switch) = 192.168.88.4
3. Omada Software Controller (installed as a container in Potainer on RPi1=192.168.88.2 with ports=29810-29817, 27001, 19810, 8043, 8843, and 8088)
4. RaspberryPi 1 = 192.168.88.2 =Offline Resources: Wikipedia, Kombris Website, Omada and others (All installed as containers in Portainer
5. RaspberryPi 2 = 192.168.88.3 =FM RADIP BROADCATING

Setup:

1. Mikrotik hex routerOS v6.49.18 (setup with mikrotik commands) =Internet, VLANS, DHCP,DHCP Client, DNS (Full static DNS necessary for the setup), Correct Filter and NAT Rules (Give full rules necessary for the setup to fully work. Take note of dynamic rules) and Hotspot (Correct Full Walled Garden and Walled Garden IP List).

2. Omada Software controller = SSID and Voucher Captive Portal.

3. Two Seperate Networks

• LAN88=192.168.88.1/24 = Management LAN network
• Five VLANS for four SSID created in Omada;
  i. VLAN10 = Kombris Free SSID: Hotspot10 = Offline: Wikipedia=library.kombris.lan and Kombris Website=info.kombris.lan
  ii. VLAN20 = Kombris User SSID: Hotspot20 = Offline: Wikipedia=library.kombris.lan and Kombris Website=info.kombris.lan, and, Online: WhatsApp, Facebook Messanger and Gmail
  iii. VLAN30 = Kombris Voucher SSID: Omada Voucher Captive Portal
  vi. VLAN40 = Tech Admin SSID: Full Internet Access
  v. VLAN50 = ether3-Admin = Filter out Adult/Porn sites

4. Hostpot:

5. Hotspot10 (VLAN10) = Server Profile: Hotspot10-prof; html-directory:flash/hotspot10; DNS Name: login.hotspot10.lan

6. Hotspot20 (VLAN20) = Server Profile: Hotspot20-prof; html-directory:flash/hotspot20; DNS Name: login.hotspot20.lan

7. Interface Ethernet Names:
   ether1=ether1-WAN
   ether2=ether2-EAP (192.168.88.4)
   ether3=ether3-Admin (filter out adult sites) = VLAN50 = 192.168.50.1/24
   ether4=ether4-RPi1 (192.168.88.2)
   ether5=ether5-RPi2 (192.168.88.3)

[fierce87x]

The issue is almost certainly VLAN isolation and DNS resolution. Your Hotspot SSIDs are on separate VLANs, but the walled garden and DNS entries are only partially configured. Clients on VLAN10 and VLAN20 are trying to reach login.hotspot10.lan/login.hotspot20.lan, but the router isn’t properly routing or responding across the VLANs, causing the redirect timeout.

Ensure each VLAN has a matching IP address in /ip address, correct DHCP for clients, and proper hotspot DNS entries. Also, verify firewall rules allow HTTP/HTTPS traffic to the router’s hotspot interface from each VLAN. Once VLAN routing, DNS, and firewall access align, the captive portal will redirect correctly.

[Inoch.Katu]

Can you help me go through the configuration?

My problem is:

1. Router → cannot ping 192.168.10.200
2. Client → cannot ping 192.168.10.1
3. Hotspot login page = timeout

This mean pure VLAN-to-CPU forwarding issue.