Hi All,
Im Joel new here in this forum, I decided to post because i am not sure whats wrong with my configuration. My Mikrotik can ping his local ip (192.168.29.1/23) but I cannot ping AP (192.168.29.16/23) using terminal, but when from the host or a device connected to lan or to wireless, I am able to ping all of my AP.
i’ve notice when i make a bridge connection on my eth2 which is my hotspot , i can ping the 192.168.29.16/23 but the hotspot login is no more working.
Please help to advice.
# feb/25/2015 19:34:49 by RouterOS 6.18
# software id = UY6V-GGR0
#
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether5 ] mac-address=00:0C:42:E9:0A:7C name=ether1
set [ find default-name=ether4 ] mac-address=00:0C:42:E9:0A:7D name=ether2-hotspot
set [ find default-name=ether3 ] disabled=yes mac-address=00:0C:42:E9:0A:7E
set [ find default-name=ether1 ] mac-address=00:0C:42:E9:0A:80 name=ether5-management
/interface wireless
set [ find default-name=wlan1 ] l2mtu=2290 name=wlan2
/interface ethernet
set [ find default-name=ether2 ] mac-address=00:0C:42:E9:0A:7F master-port=ether5-management name=ether4-mgmt-slave
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=wifi.rafflesmarina.com hotspot-address=192.168.29.1 login-by=http-chap,http-pap name=hsprof1 radius-accounting=no use-radius=yes
/ip hotspot user profile
set [ find default=yes ] idle-timeout=30m rate-limit=2M/2M shared-users=unlimited transparent-proxy=yes
add name=special rate-limit=10M/10M shared-users=unlimited transparent-proxy=yes
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=dhcp_pool1 ranges=10.10.10.2-10.10.10.25
add name=dhcp_pool2 ranges=192.168.29.50-192.168.29.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether5-management name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=ether2-hotspot lease-time=1h name=dhcp2
/ip hotspot
add address-pool=dhcp_pool2 disabled=no idle-timeout=none interface=ether2-hotspot name=hotspot1 profile=hsprof1
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface bridge port
add bridge=bridge1 disabled=yes interface=ether2-hotspot
/ip address
add address=10.10.10.1/24 disabled=yes interface=ether5-management network=10.10.10.0
add address=192.168.10.3/24 interface=ether1 network=192.168.10.0
add address=192.168.29.1/23 interface=ether2-hotspot network=192.168.28.0
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=192.168.28.0/23 gateway=192.168.29.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,4.4.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat comment="masquerade hotspot network" src-address=192.168.28.0/23 to-addresses=0.0.0.0
add action=dst-nat chain=dstnat comment="L3 Outside rm 17" dst-port=8016 in-interface=ether1 protocol=tcp to-addresses=192.168.29.16 to-ports=443
add action=dst-nat chain=dstnat dst-port=8030 in-interface=ether1 protocol=tcp to-addresses=192.168.29.30 to-ports=443
add action=dst-nat chain=dstnat dst-port=8031 in-interface=ether1 protocol=tcp to-addresses=192.168.29.31 to-ports=443
add action=dst-nat chain=dstnat dst-port=8032 in-interface=ether1 protocol=tcp to-addresses=192.168.29.32 to-ports=443
add action=dst-nat chain=dstnat dst-port=8033 in-interface=ether1 protocol=tcp to-addresses=192.168.29.33 to-ports=443
add action=dst-nat chain=dstnat dst-port=8034 in-interface=ether1 protocol=tcp to-addresses=192.168.29.34 to-ports=443
add action=dst-nat chain=dstnat comment="Lagoon 6" dst-port=8035 in-interface=ether1 protocol=tcp to-addresses=192.168.29.35 to-ports=443
add action=dst-nat chain=dstnat comment="L3 Outside rm 15" dst-port=8017 in-interface=ether1 protocol=tcp to-addresses=192.168.29.17 to-ports=443
add action=dst-nat chain=dstnat comment="L3 Outside rm 9" dst-port=8018 in-interface=ether1 protocol=tcp to-addresses=192.168.29.18 to-ports=443
add action=dst-nat chain=dstnat comment="L3 Outside rm 7" dst-port=8019 in-interface=ether1 protocol=tcp to-addresses=192.168.29.19 to-ports=443
add action=dst-nat chain=dstnat comment="L3 Outside rm 3" dst-port=8020 in-interface=ether1 protocol=tcp to-addresses=192.168.29.20 to-ports=443
add action=dst-nat chain=dstnat dst-port=8021 in-interface=ether1 protocol=tcp to-addresses=192.168.29.21 to-ports=443
add action=dst-nat chain=dstnat dst-port=8022 in-interface=ether1 protocol=tcp to-addresses=192.168.29.22 to-ports=443
add action=dst-nat chain=dstnat comment="On top of the PUB" dst-port=8044 in-interface=ether1 protocol=tcp to-addresses=192.168.29.44 to-ports=443
add action=dst-nat chain=dstnat comment="Ballroom L2" dst-port=8008 in-interface=ether1 protocol=tcp to-addresses=192.168.29.8 to-ports=443
add action=dst-nat chain=dstnat comment="Function Room 1" dst-port=8050 in-interface=ether1 protocol=tcp to-addresses=192.168.29.50 to-ports=80
add action=dst-nat chain=dstnat comment="Lagoon 5 (Asian Lady)" dst-port=8037 in-interface=ether1 protocol=tcp to-addresses=192.168.29.37 to-ports=443
add action=dst-nat chain=dstnat comment="Engenius @ ChartRoom" dst-port=8010 in-interface=ether1 protocol=tcp to-addresses=192.168.29.10 to-ports=80
add action=dst-nat chain=dstnat dst-port=8016 protocol=tcp to-addresses=192.168.29.16 to-ports=8016
/ip hotspot user
add name=icell
add name=rafflesmarina10M profile=special server=hotspot1
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
/ip proxy
set parent-proxy=0.0.0.0
/ip route
add distance=1 gateway=192.168.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
/ip upnp
set allow-disable-external-interface=no
/radius
add address=192.168.10.3 service=hotspot timeout=1s
/radius incoming
set accept=yes port=1700
/snmp
set enabled=yes trap-community=public trap-version=2
/system clock
set time-zone-name=Asia/Singapore
/system identity
set name="Ra"
/system leds
set 0 leds=wlan-led type=wireless-status
/system ntp client
set enabled=yes primary-ntp=203.123.48.218 secondary-ntp=128.199.169.185
/system scheduler
add interval=5d name="Clear logs" on-event="/tool user-manager database clear-log" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
start-time=startup
add disabled=yes interval=4w2d1m name="Rebuild DB" on-event="/tool user-manager database rebuild" policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=startup
/tool netwatch
add disabled=yes host=192.168.28.37
add host=192.168.29.37