Problem with 2 IP ranges in Hotspot

hamed89156 · September 19, 2009, 7:35am

i have an RB 450g with RouterOS 3.23 with Hotspot configured. (with private IP of 192.168.200.2)

I have two different Private IP ranges in my LAN , one range is 192.168.200.X that hotspot and it’s clients are using and the other is 153.69.254.X that some other PCs are using.

so if you get an IP address from mikrotik DHCP server with the range of 192.168.200.X and want to access a web server with IP range of 153.169.254.X , you face http://192.168.200.2/login?dst=http%3A%2F%2F153.169.254.101%2F and you cant access that web server .

Even if you ping any other PCs with range of 153.69.254.X the reply is Reply from 192.168.200.2: Destination net unreachable.

i want to allow just the 192.168.200.X can access hotspot and any other request in any other range get denied .

i dont know how to solve this problem , any help is appreciated ,

Thanks

Chupaka · September 20, 2009, 6:48pm

what’s task? to allow 153.69.254.X’s to freely access all resources, or what?

what’s your Hotspot configuration?

hamed89156 · September 21, 2009, 6:33am

to disallow 153.69.254.X to access hotspot.

Chupaka · September 21, 2009, 9:38am

remove address pool from Hotspot settings?..

hamed89156 · September 21, 2009, 9:52pm

i dint understand what you said ,maybe i couldn’t explain it well.

i want to block all IP ranges except 192.168.200.X to be in Hotspot>Active list ( that’s the way i want to solve my problem in the first post which i explained.

Chupaka · September 22, 2009, 9:32pm

I meant,

/ip hotspot set XXX address-pool=none

hamed89156 · September 23, 2009, 9:15pm

so what is that ?

and how can this help me to solve my problem ?

Chupaka · September 24, 2009, 7:04am

I think, your users won’t be captured by Hotspot then =)

hamed89156 · September 25, 2009, 11:18am

can you tell me what that command does exactly ?

Chupaka · September 25, 2009, 6:44pm

disables ‘Universal Client’, I believe

hamed89156 · November 17, 2009, 2:33pm

can you give me the wiki page of “/ip hotspot XXX set address-pool=none”

Chupaka · November 17, 2009, 2:51pm

http://www.mikrotik.com/testdocs/ros/3.0/pnp/hotspot.php

hamed89156 · November 17, 2009, 7:55pm

I think that is not the thing which i want.

I want that hotspot respond to requests only from 192.168.200.X .

and nothing more.

fewi · November 17, 2009, 8:45pm

Then that’s what you want. If you disable Universal NAT, only clients that are on the network the Hotspot is configured on are able to access the Hotspot. If the Hotspot is configured to run on an interface with an address on 192.168.200.0/24 and there is no Universal NAT, only clients on 192.168.200.0/24 wit the Hotspot interface IP as the gateway are able to use the Hotspot. If Universal NAT is enabled, any IP address behind the Hotspot interface will work. To disable Universal NAT, do as Chupaka said and configure the address pool on the Hotspot to be ‘none’.