unable to connect to mikrotik unless connected via hotspot

RouterOS Beginner Basics
1

Hi all,

I am having a wierd problem where I can’t connect to my router via winbox, unless i connect via the hotspot.

My setup is PPPoE server on each port running radius through usermanager.
Hotspot setup on 1 interface also using usermanager for authentication.

access to the internet is set via a static route with distance 1 and check gateway set to ping and another route with distance 2 to take over if 1 fails.

only nat rule I have created is srcnat masquerade. then the hotspot setup create a whole lot of rules.

ROS version installed on router is, 3.30

If anyone needs the router setup I can upload if required.

2

mine does this too and I haven’t found a way around it either… I just deal with it, unless you’ve found a workaround.

3

Hi,

Did’nt find a work araound, but did reconfigure the whole router again. Making sure I configured the router correctly as per wiki.

After reconfiguring I had problems with ppp clients authenticating, but just changed the ip of the pppoe server, and all worked again.

I have only had these issues since 3.x version, never had these issues on 2.9.x version.

When I had the problem I checked that I followed the wiki over and over again, didn’t see anything wrong with my config, yet resetting config, and starting from scratch worked.

So the only logical conclusion is that I had done something wrong in my config, although I personally doubt it.

4

If you want to bypass the login and get access to the router for your mac address

/ip hotspot ip-binding
add mac-address=xx:xx:xx:xx:xx:xx type=bypassed

Replace the x’s with your wireless or ethernet mac address.

If you can access the Mikrotik login webpage without this entry or logging in, there may be a security challenge in your system.

5

or you can add your routers IP address in walled garden ip list, so this resource is accessible while not logged in hotspot, other way you access will be cut by hotspot system

6

This is the security challenge I mentioned. Anyone connected (not logged in) can assault your router with a brute force attack, and nothing stops them, unless you already have a backup plan. Do you have one?