PPTP with proxy logging

I have setup pptp connections for hotspot users to use for more security. When they establish the pptp session with the router, I am no longer receiving “web proxy info” message on that user.

I thought that since the user was logged into hotspot and then created pptp on top of hotspot login, that traffic between user and AP would be secured and then the router would pass the traffic along afterward as if they were a nromal hotspot user.

I guess I was wrong. It seems that once the pptp tunnel is created, the router treats the connection no longer as a hotspot user and therefore does not pass the traffic through web proxy. Do you think this is true?

If so, can anyone give me some ideas to try that may allow me to log at the router once the traffic comes out of the pptp tunnel? or alternatively make sure the traffic still passes through the web proxy so that it gets logged?

it’s always possible to use RADIUS authentication/accounting on ppp-type connections.

just try “radius” search on the forum…

I am not sure you understand what logging I an talking about. Radius accounting will give me uptime and packets transfered. I do not think it can give me web-proxy logs.

yes, sorry. completely misunderstood.

I suppose once the tunnel is terminated by the router and it then routes the traffic toward its destination, there should be some way to have the http traffic passed through the web-proxy service first, the same way the hotspot transparent proxy works.

Maybe I would need to set a firewall rule to send the traffic to the hotspot proxy? Can someone provide me some guidance on how I might accomplish this? I guess I would be sending all traffic from port 80 to port 8080 where the proxy resides?? Someone who has any ideas, please advise.

Just posting what I determined through another post.

0 I chain=dstnat in-interface=pptp-in1 protocol=tcp dst-port=80 action=dst-nat to-addresses=10.100.3.1 to-ports=8080

Just a little more info. To have all pptp sessions with different interface names I use.

0 I chain=dstnat in-interface=!wlan1 protocol=tcp dst-port=80 action=dst-nat to-addresses=x.x.x.x (ip of proxy) to-ports=8080

Please send support output file from router to support@mikrotik.com to see your whole configuration.

My 2 posts from above explain that I figured out this particular issue. Thanks