Hello,
We currently use the Mikrotik Hotspot service to authenticate users via their MAC addresses.
Our customer devices typically will receive two IP addresses from our Mikrotiks via their DHCP servers, one address will be a publicly routable internet address, the other, management.
NAT is done on the customer end devices (nanobridges, powerbeams, epmp1000s and other cambium/ubnt gear)
The customer end devices are typically setup with NAT/WDS enabled.
We allow two sessions to be authenticated via the user’s MAC (One should be their internet IP, the other their management IP), but we are running into an issue where we are seeing foreign internet IPs showing up in the ip hotspot hosts (facebook/ google IPs etc).
Authentication is being done via user manager.
Any idea why these internet IPs are being displayed under hosts?
Because of this, our simultaneous hotspot user session is being reached.
/ip hotspot export
add disabled=no idle-timeout=12h interface=vlan100 login-timeout=2m name=
ispaccess-v100
/ip hotspot profile
set [ find default=yes ] hotspot-address=xxx login-by=
mac,http-chap,trial nas-port-type=ethernet radius-interim-update=30m
radius-location-id=ARC radius-mac-format=XXXXXXXXXXXX trial-uptime-limit=1d
trial-uptime-reset=4w use-radius=yes
/ip hotspot user profile
set [ find default=yes ] insert-queue-before=placeholder rate-limit=
524288/524288
add insert-queue-before=placeholder name=RES queue-type=customer-queue
shared-users=unlimited
add insert-queue-before=placeholder name=DED queue-type=customer-queue
shared-users=unlimited
add insert-queue-before=placeholder name=BUS queue-type=customer-queue
shared-users=unlimited
add insert-queue-before=placeholder name=WIF queue-type=customer-queue
shared-users=unlimited
/ip hotspot walled-garden
add comment=“place hotspot rules here” disabled=yes
/ip hotspot walled-garden ip
add action=accept disabled=no src-address=10.0.0.0/8
