I allready have one hotspot server with RADIUS set up and working. The hotspot server address is 10.0.4.1/22 and the pool for hotspot server is 10.0.4.63-10.0.7.100.
I want to set up new hotspot server with another addresses 10.60.0.0/24 and RADIUS.
I set up new server and everything is working until I login to hotspot. When I login on second hotspot server it shows that To Address on Hotspot->Hosts is from first servers subnet, but Address is from second address pool. So as address is from wrong pool everything stops working.
In radius server I see that Framed IP address for second hotspot pool is sent from that wrong first servers pool. In radius config there is not set any IP address parameters.
On the second hotspot server address pool is set to right pool and it gives right address until I login and it sets To Address to wrong first servers pool.
So the problem is that after I login then To Address sets to wrong first servers pool and network computer can’t reach anything on network.
Change the address pool in the hotspot server to the what you want, or set it to none.
If you specify the address pool, the hotspot arp-poisons the network which may be desirable if you have a lot of clients with misconfigured IP settings, but can cause some problems. This setting is how it knows what range to assign to the to-address.
That doesn’t help. In both cases if I set pool to what I need or I set it to none, everything works correct only before I login to hotspot. If I login on first hotspot it shows To address from its pool. But when I login on second hotspot it shows that Address is from correct - second servers pool, but To address is from first servers pool and computer can not reach even it’s gateway.
Same device or different devices for this test?
I see in the first post that you mention that your are using a Radius Server to send a framed IP pool, is this correct? Or is there an Address pool set in the user profile locally?
You can try using split user domains to isolate the Radius profiles from each other.
Different devices.
Yes, there is Radius server, but it is only for user authentication. I have not configured any pools in Radius server. But when I look at Radius logs I see, that there is Framed IP address shown so I think maybe it gets that address from router and writes it in logs as Framed IP address. Only place where pool is set, is in hotspot server settings.
There is no domain part in user credentials, there is only user name and password.
Tried to set different secrets for each subnet and added two Radiuses with same IP, it didn’t work.
Found out that Framed-IP address is received in accounting packet from Mikrotik, so router gives wrong address, and it looks like it doesn’t even look at pool setting in hotspot settings.
Ok, found solution here - http://forum.mikrotik.com/t/wrong-framed-ip-address/72185/1
Thank you! Problem solved.