Hi there,
I have a hotspot server on local interface 10.10.0.2 and 5 clients who do connecting via hotspot (10.10.1.1-10.10.1.5). I want to every of them have his own public IP. I try with below way, but it's not working. Does anyone know why? What's wrong with this?
/ip address add address=87.250.108.135/32 interface=Public
/ip firewall nat add chain=dstnat dst-address=87.250.108.135 action=dst-nat \
to-addresses=10.10.1.1
/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat \
to-addresses=87.250.108.135
After I do that, then I go from computer 10.10.1.1 on http://www.whatismyip.com, it's shows me a IP of mikrotik (87.250.126.210) instead 87.250.108.135
I still have a problem. There's block of IP addresses and I want that every client who is connecting via hotspot have his own public IP. With rule which I add in this topic that dont works. Does anyone know what is the problem? To all my clients which are connected via hotspot, when they go on http://www.whatismyip.com it show 87.250.126.210 (main ip of mikrotik)
-------------I still have a problem. There's block of IP addresses and I want that every client who is connecting via hotspot have his own public IP. With rule which I add in this topic that dont works. Does anyone know what is the problem? To all my clients which are connected via hotspot, when they go on http://www.whatismyip.com it show 87.250.126.210 (main ip of mikrotik)
Hai, Rope....
Oooooooooo...
You will do marrige and replace IP 'DHCP' with 'Static', that's simple question but complicated rules. I think better to make authentication with 'PPPoE' than 'Hotspot', you can make many 'PPPoE Interfaces' is not confuse....
That's problem is, when your one of clients or other restart, The Host send New Free IP to Client. and your rule is not valid [this's my logica], i think DHCP[hotspot] same mean 'Dynamic Host Configuration Protocol', isn't it?
That is very very responsible from host [router].
Tips..!, you can visit our website, you can get screen your 'Real IP' at http://www.balimore.com
regards
Hasbullah.com
----------------
I understand. I dont want that my clients have static IP, I want them to have dinamic. What I want to do is maping of local IP addresses 10.10.1.1-10.10.1.128 to public 87.250.108.128-87.250.108.255. About DHCP server, I dont even use mikrotik DHCP server. I use some other that is running on other machine, since I have two gateways in my network (prepaid and postpaid) and mikrotik DHCP dont have
that option with who I could reserv some IP and add him using of some other gateway and dns.
what I want to do is 128 rules and they will do a maping of local ip to public ip
that option with who I could reserv some IP and add him using of some other gateway and dns.
what I want to do is 128 rules and they will do a maping of local ip to public ip
-------------I understand. I dont want that my clients have static IP, I want them to have dinamic. What I want to do is maping of local IP addresses 10.10.1.1-10.10.1.128 to public 87.250.108.128-87.250.108.255. About DHCP server, I dont even use mikrotik DHCP server. I use some other that is running on other machine, since I have two gateways in my network (prepaid and postpaid) and mikrotik DHCP dont have
that option with who I could reserv some IP and add him using of some other gateway and dns.
what I want to do is 128 rules and they will do a maping of local ip to public ip
I am so sorry sir....!, maybe someone else can help you....
I didn't understand about your problem, cause first post you want to supply Public IP to every client via hotspot authentication.... and last your post you want to supply them...with dynamical IP..
as far as i know 'Dynamic' divide two one is 'Dynamic by manually' and other one 'Dynamic by Host' [DHCP],...again, so sorry i cann't help you. and maybe i am wrong.
peace all
regards
Hasbullah.com
-------------
is the ip dynamic or static? that's irelevant. I want to maping
local 10.10.1.1 on public 87.250.108.130
local 10.10.1.2 on public 87.250.108.131
local 10.10.1.3 on public 87.250.108.132 etc...
Rule below should do that, but in my case that dont work:
/ip address add address=87.250.108.130/32 interface=Public
/ip firewall nat add chain=dstnat dst-address=87.250.108.130 action=dst-nat \
to-addresses=10.10.1.1
/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat \
to-addresses=87.250.108.130
local 10.10.1.1 on public 87.250.108.130
local 10.10.1.2 on public 87.250.108.131
local 10.10.1.3 on public 87.250.108.132 etc...
Rule below should do that, but in my case that dont work:
/ip address add address=87.250.108.130/32 interface=Public
/ip firewall nat add chain=dstnat dst-address=87.250.108.130 action=dst-nat \
to-addresses=10.10.1.1
/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat \
to-addresses=87.250.108.130
---------------------------is the ip dynamic or static? that's irelevant. I want to maping
local 10.10.1.1 on public 87.250.108.130
local 10.10.1.2 on public 87.250.108.131
local 10.10.1.3 on public 87.250.108.132 etc...
Rule below should do that, but in my case that dont work:
/ip address add address=87.250.108.130/32 interface=Public
/ip firewall nat add chain=dstnat dst-address=87.250.108.130 action=dst-nat \
to-addresses=10.10.1.1
/ip firewall nat add chain=srcnat src-address=10.10.1.1 action=src-nat \
to-addresses=87.250.108.130
Hai, Rope..
I hope you have point, and i thing your config is correct. just confirm to you about that, I has like your config and it's run as you need to 'MAP' my config running since tree months ago...
see this link: http://www.hasbullah.com/cgi-bin/r/db?p ... olocal#cat
you can see 'Red Block Color' is map like yours and 'Green Color' is my Router assign with Public IP.
regards
Balimore.com
------------------
-----------------so, what do you think that is cousing me so much problems. is it possible that the reason is that I don't use mikrotik DHCP server?
Hello Rope...
No, when are you use DHCP[Hotspot] first you must 'ip-binding' that address, that's way to make access 'bypassed' from DHCP-Server to Dynamic bypassesed address, and when are you using 'Manually-Dynamic-IP' is not many procedure, and put dst-nat like before. i think should be ok.
other methode:
When you want supply client with Public IP without authentication first, just make 'BRIDGE' from Public interface to Local interface.
here i am using: static, dynamic, dhcp[hotspot], pppoe, userman as radius server, and mapping public to local address ..etc.
ok, send me your mail address. maybe i can help you..
you can find my address at: http://www.balimore.com
regards
Hasbullah.com
----------------
I did it, but I still have same problem...You can try to make sure that your NAT rules are ABOVE All your other rules, By that i mean at the top of the list, and the wait about 10 SEC and repair your "Customer SIDE Internet Connection so they get the DHCP address again and then try it, all should be good!
A quick ?
What does your WAN Interface Plug into, a MODEM or something of that sort? and if so can u try and physical plug from the MODEM, I am guess from your ISP. PLug from the moden in to a PC and set the IP of the PC to one of your statics and set up the Gateway and so on. then try and get online like that. If that works then your have something in your router Blocking the NAT rules or something else. Let me know, thanks
Joe H
What does your WAN Interface Plug into, a MODEM or something of that sort? and if so can u try and physical plug from the MODEM, I am guess from your ISP. PLug from the moden in to a PC and set the IP of the PC to one of your statics and set up the Gateway and so on. then try and get online like that. If that works then your have something in your router Blocking the NAT rules or something else. Let me know, thanks
Joe H
-------------I have on same mikrotik pppoe server and pool for pppoe, there's one part of the addresses which are for pppoe users and when those users are connected they get public IP and on net that public IP belong to them, still I only have problems with hotspot
Hello rope..
How are you, other translation at this link: http://forum.mikrotik.com//viewtopic.php?t=10659
I hope you will get point, and hotspot or pppoe i think is 'tool' for user to connect to the network with valid identity.
good luck...!
Regards
Hasbullah.com
-------------
----------------when I disable HotSpot, everything work fine...
Ok,...rope....i think this nice forum
I am so sorry,..
here, when disable hotspot. how to make print out of money..!
until now we are running on Dedicated lan, hotspot-aaa, pppoe-aaa, and userman as radius server centralized AAA over ethernet and wireless with privite and public ip. all interface in one NIC and WORK FINE too. i like mikrotik...system, but we are not enough time to make exploring more mikrotik features.
Just inform to you: with 'userman-radius-server' v2.9.30 more....easy & friendly
again, so i am so sorry.
regards
Hasbullah.com
----------------
I have two gateways, one is mikrotik (10.10.0.2) for postpaid users and the other one is antamedia (10.10.0.5) for prepaid users. On dhcp server which I use I can set that some mac addresses are using one and some others are using other gateway, but with mikrotik dhcp server that is not possible.
I try to create a valid pool and add him to HOTSPOT server but without results
I try to create a valid pool and add him to HOTSPOT server but without results
------------I have two gateways, one is mikrotik (10.10.0.2) for postpaid users and the other one is antamedia (10.10.0.5) for prepaid users. On dhcp server which I use I can set that some mac addresses are using one and some others are using other gateway, but with mikrotik dhcp server that is not possible.
I try to create a valid pool and add him to HOTSPOT server but without results
Hai, Friend
As your first post, i think is correct, you will success add option 'ULDIS' Posted. cause your server is Hotspot server as DHCP for aunt....first.
Uldis wrote:
Try to disable the transparent proxy in the hotspot user profile and check how it is working.
@uldis your post is true...and working
regards,
Hasbullah.com
------------
Who is online
Users browsing this forum: AimiSayo and 77 guests