Hi all,
I’m new to mikrotik, still learning, would very much appreciate your help.
I have two hotspot systems one is on RouterBoard (not officially deployed yet) and the other is PheeNet WAS-105r (already in use for long time).
I intend to use MK hotspot to handle monthly subscribers a feature my current hotspot system lacks, I’m using the PheeNet hotspot where I distribute voucher cards (single line passcodes) , to the local market,my clients use them and through, simple login prospective , no username no passwords.
After creating MK hotspot, I gave my monthly subscribers a set range of static IPs, they login using MK login page then routed to ISP1 , I did ip binding for the rest of IPs where the usual users get routed to my old hotspot system.
My only problem at the moment is with natting, the PheeNet hotspot only sees the MK subscribing, it takes only one user to login to the old hotspot then the rest of “usual” users get free access because the PheeNet hotspot sees only one IP logged in and can’t see any other devices.
How can I solve this problem. Is there a way to not NAT just route and pass-through, not getting blocked by the hotspot.
I would really appreciate your help and enlighten me with any ideas would help me combine the two hotspots.
Here is a copy of my configuration:
/interface ethernet
set 0 comment=INTERNET
set 1 comment=OLD_Hotspot
set 2 comment=LAN
/ip neighbor discovery
set ether1 comment=INTERNET
set ether2 comment=OLD_Hotspot
set ether3 comment=LAN
/ip hotspot profile
add dns-name=www.aplus-wifi.net hotspot-address=192.168.0.1 login-by=
mac,cookie,http-chap mac-auth-password=password name=hsprof1
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip pool
add name=Pool1 ranges=192.168.0.2-192.168.0.199
add name=hs-pool-3 ranges=192.168.0.2-192.168.0.199
/ip dhcp-server
add address-pool=Pool1 disabled=no interface=ether3 name=server1
/ip hotspot
add address-pool=hs-pool-3 disabled=no interface=ether3 name=hotspot1
profile=hsprof1
/ip address
add address=192.168.0.1/24 interface=ether3 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
add dhcp-options=hostname,clientid disabled=no interface=ether2
/ip dhcp-server lease
add address=192.168.0.20 client-id=1:0:c:29:6e:91:48 mac-address=
00:0C:29:6E:91:48 server=server1
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall address-list
add address=192.168.0.200-192.168.0.254 list=Monthly_Subscribers
add address=192.168.0.2-192.168.0.199 list=USUAL_USERS
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=USUAL_USERS
src-address-list=USUAL_USERS
/ip firewall nat
add action=masquerade chain=srcnat disabled=yes out-interface=ether2
src-address=192.168.0.253
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment=“masquerade hotspot network”
src-address=192.168.0.0/24 to-addresses=0.0.0.0
/ip hotspot ip-binding
add address=192.168.0.2-192.168.0.199 server=hotspot1 type=bypassed
/ip route
add distance=1 gateway=192.168.2.254 routing-mark=USUAL_USERS