MT Hotspot Page as a Gateway/Firewall

RouterOS General
1

Is it possible to use a single mikrotik router as a hotspot gateway. Say all the routers in the network route to a central mikrotik, all on the same interface.

I want many users to authenticate on this gateway. Obviously they will all be using the same mac address which is the one from the router on the Hotspot Gateway’s ethernet interface.

But can I set it to allow more than one connection from the same mac. Will it then use the User’s IP address for authentication purposes.

A good example of a system similar to the one described is pfsense’s captive portal.

2

well, you can simply set all routers to bridge mode, so MAC addresses will be unchanged

3

Will this create a situation where a single packet sent at one point of the wireless network will propagate throughout the whole network?

so that a transfer on the one side of the network will create a lot of traffic all over the network?

4

if bridge knows dst-mac-address, it will send the packet to only that direction

5

Ok I have tried this, but I can’t get the mac addresses to pass through a router.

Lets say we have A—>X<----B

with A and B and X all mikrotik routers

A and B are on different subnets and interfaces. If I create a bridge then add both these interfaces to the bridge, both router A and B cant see each other’s MAC addresses. This is when I look in the ARP list, aswell as IP-Neighbour

Is this all I have to do to create the bridge? or is there more to allow MAC passthrough?

6

what do you mean “A and B are on different subnets”? can A ping B? can A ping B if you replace X with simple switch?

7

X has eth1 and eth2 with eth1 = 172.16.55.1/24 and eth2 = 172.16.50.1/24
A is on eth1 with 172.16.55.2/24
B is on eth2 with 172.16.50.2/24

A and B can ping between each other
When I add a bridge on X, and add eth1 and eth2 to it, A can still not see what B’s MAC address is. And vice versa.

They can’t ping each other with a switch in the middle, but shouldn’t the two routers still see each other under IP–>Neighbour? or ARP list?

8

if your routers are on different subnets, you must use routing.

if you want to use bridge, you should first do the same subnet for both routers

9

in Neighbours… I think, they should. but not in ARP