Community discussions

MikroTik App
 
User avatar
jspool
Member
Member
Topic Author
Posts: 468
Joined: Sun Oct 04, 2009 4:06 am
Location: Oregon

CHR VPN Concentrator

Sun Jul 30, 2017 10:25 pm

CHR as a VPN concentrator.

Remote ROS devices are connected to CHR over VPN.

Remote VPN traffic is forced to self register and pay to gain Internet access using Hotspot/Userman on CHR.

How exactly would one setup the CHR Hotspot Interface to accomplish that?

I'm open to ideas. In this scenario I want to authorize all traffic from the remote ROS once they have paid for service. I assume this would be easier to accomplish on the CHR as it will only see the remote ROS device as a single IP.

Thanks.
 
User avatar
jspool
Member
Member
Topic Author
Posts: 468
Joined: Sun Oct 04, 2009 4:06 am
Location: Oregon

Re: CHR VPN Concentrator

Sun Jul 30, 2017 10:38 pm

I am guessing the answer would be to setup a bridge on the CHR and then add that bridge to the ppp profile for VPN users and then setup Hotspot on the bridge interface?
 
User avatar
jspool
Member
Member
Topic Author
Posts: 468
Joined: Sun Oct 04, 2009 4:06 am
Location: Oregon

Re: CHR VPN Concentrator

Thu Aug 03, 2017 3:28 am

Finally managed to get it working as desired. Remote Mikrotik routers are authorized by their MAC address. End users have no access to the Mikrotik interface and are masqueraded by the Mikrotik so there should be no way for them to position themselves to spoof MAC.
 
mattltm
newbie
Posts: 39
Joined: Sun Mar 07, 2010 10:10 pm

Re: CHR VPN Concentrator

Sun Jun 10, 2018 8:49 pm

Would you mind documenting how you did it?

Who is online

Users browsing this forum: No registered users and 10 guests