what is Winbox hotspot host....?

RouterOS Beginner Basics
1

I have Mikrotik routerOs v3.22. I have hotspot user accounts.

In Winbox, when I go to IP–>hotspt–>Hosts
in the first column, there is letters such as AD,AH,D,P,H
what are the possible letters and what do they mean.

In this list I see IPs other than the IPs of the users

2 
ip hotspot host print 
Flags: S - static, H - DHCP, D - dynamic, A - authorized, P - bypassed 
 #    MAC-ADDRESS       ADDRESS         TO-ADDRESS      SERVER
3

I have some users has H and other has D without A. Does that mean that there unauthorized users using the internet? how to prevent this?

4

No,
/ip hotspot host shows all users connected to the HotSpot interface.
D without A means that client is connected to HotSpot interface, but it is not authorized.

/ip hotspot active table should authorized HotSpot users.

5

I once saw in IP–>hotspt–>Hosts a user with P. How to prevent that?

6

if P - bypassed, then you have that host in ip binding… /ip hotspot ip-binding> pr

7

In IP bending, I put the IPs of APs so I can access them if I am behind a router. there was an extra IP for an old AP so I removed it.

8

I have D even for user that has static IP.

9

Hi

I have the same problem with my hotspot.

I have hosts in my “HOST” tab showing “D”
Where that came from? it should be “H”. The ip should be given ( i force users to ask for dhcp ip address otherwise no connection ) by dhcp server.

AND THE PEOPLE ARE ACCESSING INTERNET. !!! Did i just got hacked?


Pls help/advise

THanks

10

If the dhcp server did not issue the ip, then the hotspot host list will show that client as “D”. That applies to clients that have a static ip or a dynamic ip issued by another dhcp server that has not been renewed. If the hotspot 1:1 nat has not been disabled, that will be translated to the “to-address” ip in the host list.

If the dhcp server did issue that ip, the hotspot host list shows that as “H”.

If there is no “A”, then that client is not logged in, and will not have internet access.

11

Ok

I have again user in “Hosts” list with “D”. But why?

I have users to allow users to connect only if they ask for IP from DHCP server first.
DHCP server conf: authoritative: yest, bootp: static.

Or

Maybe the computer shows up with “D” because the computer disconnected for a while and reconnected, while the ip still havent expired yet. I gave the ips for 1Day.

Is this can be the case?


Thanks

12

Maybe the computer shows up with “D” because the computer disconnected for a while and reconnected, while the ip still havent expired yet.

Yes, especially if the computer got its current ip from another dhcp server. Many times I find the “address” is not a localnet address for my network, but the “to-address” will always be a valid localnet ip.

If you need to see the specifics on each lease issued by the dhcp server,

/ip dhcp-server lease
print detail

If you want to see what the hotspot 1:1 nat has used

/ip pool used
print