Why I cannot access anything beyond the router?

Hi all
We are trying to build a hotspot using routerOs (tried 2 versions:4.11 and 3.20), i configure it according to
http://www.mikrotik.com/documentation/manual_2.7/Basic/Basic.html
also:
http://www.marlwifi.org.nz/projects/basic-mt-hotspot

there is a network (10.10.1.0) where the routerOS pc (10.10.1.223) is connected to. A wireless access point connected to a second interface on the pc, that network address is 192.168.1.0
the problem is:
without hotspot, i can't access internet or my internal network (10.10.1.0) from devices connected to the access point. from the router i can ping my internal network (10.10.1.0) but can't ping any internet website.

with hotspot enabled, on windows xp, when trying to access the internet it goes the hotspot landing page, i log in, then again can't access the website (website not available...). on win 7, i can't see the hotspot page and of course no internet access.

I checked the wiki entry: Why I cannot access anything beyond the router?, and tried the solution of masquerade, it doesn't make any difference

any help is appreciated.

Post the relevant configuration.

[admin@Mikrotik] > ip address add address=10.10.1.223/24 interface=ether2
[admin@Mikrotik] > ip address add address=192.168.1.2/24 interface=ether1
i can ping devices connected to these interfaces
i also add this, and removed it, doesn’t make any difference:
[admin@MikroTik] ip route> add gateway=10.10.1.1
and:
ip firewall nat> add action=masquerade out-interface=ether2
sometimes i add a hotspot on interface ether1 (where my access point is connected), and as i said before, it works on win xp (but still no internet access) but doesn’t work on win 7 (i guess because there is no internet access any way)

one last thing, we don’t have DNS server, we are using public dns ( 8.8.8.8 ) sometimes i add the confg. for this, but still no difference.

/ip route
add dst-address=0.0.0.0/0 gateway=10.10.1.1

yes of course I add dst-address=0.0.0.0/0

today i can ping internet websites from the router,but still can’t from devices connected through the router
and the moment i connect to the access point win 7 shows the “no internet access” sign on the connection…

Then post the ACTUAL configuration. What you posted is lacking that argument.

Have you set up a DHCP server, or applied static IPs on the PCs?

sorry for that, i missed it, but everything else is exactly as i said.
no haven’t set up any DHCP, also have no static IPs for the PCs (i guess you mean the PCs that are connected to the router through the access point), i can ping those PCs from the router anyway

I am confused. If you didn’t manually assign IP addresses on those PCs and aren’t handing out IP addresses via DHCP, how did those PCs behind the router get their IP addresses?

the access point (a wireless router) has a fixed IP (192.168.1.1) other devices connect to it and have their IP of the same network.
i tried to plug a pc directly to the router interface (where the access point was before connected) then my PC couldn’t get address (of course). configured it manually (IP gateway DNS), after that sometimes I can access the internet, and I can access my internal network (10.10.1.0) all the time

Let me get the network layout correctly then.

First you have a MikroTik that connects to other Routers that are handing out DHCP etc to the people behind them correct? Then that is the very source of your problems, double NATing traffic can usually cause a lot of problems, especially with home grade routers. At the same time most consumer routers hate being behind another router such as a MikroTik and this causes further issues. Another thing to keep in mind, the MikroTik has NO way of seeing individual clients behind another router, all it will see is the router itself. So if anyone signs into the hotspot from behind that router, then anyone that connects to that router will also be signed in.

As a temporary fix you can trick the routers into being access points by turning off their DHCP servers and plugging the uplink cable into one of the LAN ports and leaving the WAN port unplugged, but this is at best a band-aid. You are asking for serious problems if you leave it like that, you will have no way to remotely monitor or manage those routers, and if any one of them should ever factory default then you will all of the sudden have two devices doing DHCP on the network and causing even more problems for you.

Basically it comes down to this, if you want your hotspot to run and run well, you need to invest in the proper hardware to get it to do so. This means devices that are actually designed to act as access points at the very least, and you should seriously consider getting good managed switches as well. If you are going to leave that network as it is, don’t expect it to work or if you somehow manage to get it to work, to be very stable or usable by people. You will spend a lot more time and money supporting the network as it is than if you invested in some decent hardware in the first place.

maybe draw a network layout map with all the ip addresses on it :slight_smile: seems like people have trouble understanding your setup

it is simple. and this is done for demo purpose only, so any workaround is acceptable at this point…

now the problem is: i can’t access the internet if i connect through the access point, but if i connected directly to routerOS, sometimes I can access internet.

If your access point is also a router, like I said before, this is likely a source of your problems.

Please run these commands and paste the results, we might be able to help more from there.

/ip address export
/ip route export
/ip firewall export