Community discussions

MikroTik App
 
mrtur
just joined
Topic Author
Posts: 15
Joined: Fri Nov 10, 2017 1:45 pm

Hotspot HA and load sharing with VRRP

Tue Dec 05, 2017 12:22 pm

Hi,

I recently installed a residential wireless hotspot solution in a student residence with ~150 users allowed to connect with 5 device, so 750 maximum hotspot sessions.
My config is based on 2x Mikrotik RB1100AHx4 for the routing/dhcp/hotspot part, and Unifi for the switching and wireless part (cf. attached schema).

I have two Gigabit FTTH WAN lines from two different ISP, and I wanted to maximize bandwidth but also provide HA, so I went to a VRRP based config (2 VRRP in load sharing mode).

I've splitted the wireless network with 2 SSID, and users have been told to register on both, so they can 'roam" when moving inside the (large) residence.
SSID XXX1 is tagged on VLAN 100, and SSID XXX2 is tagged on VLAN200, each VLAN being handled by a different router for load sharing and failover (each router can also handle both VLAN).

It works well, but I would prefer a similar solution with only one SSID.

I've tried, but with 2 different subnets there is an issue when users roam because they don't ask for a new DHCP lease (for the device it is still the same SSID, so the same network). Lets say user A connects to SSID XXX1, he his served by DHCP on router 1 in the subnet 172.16.0.0/22, Ip 172.16.0.10, gw 172.16.0.1. Now he moves on SSID XXX2, he is now handled by router 2, but keep its ip. As VRRP200 is in different subnet (172.16.4.0/22), client can't reach its gateway/network anymore.

In the other hand, if I keep only one subnet, one VLAN, I don't know how to tell to the DHCP server "give this client gateway A, this one gateway B". Maybe I could just put 2 DHCP servers on the VLAN, each one serving the same network but sending a different gateway, but I'm not sure it will works and load balance clients equally among both routers.

I precise that RADIUS MAC Auth on the DHCP server is not an option (I could have sent gateway via RADIUS attrs), because I authorize and authenticate users at hotspot level (login/pwd) and don't want to handle user's devices MAC.

Any idea to keep load sharing, HA and one one SSID?

Thanks!
You do not have the required permissions to view the files attached to this post.
 
tangram
Member Candidate
Member Candidate
Posts: 133
Joined: Wed Nov 16, 2016 9:55 pm

Re: Hotspot HA and load sharing with VRRP

Fri Dec 08, 2017 2:22 pm

Why do you need load-sharing on 2 RB1100 when one device could easily handle this setup? You can use the second in active/passive setup, with vrrp, and achieve what you need.
You can always bond interfaces, even if you get another uplink and want to move over 2Gb I think one 1100 can handle that.
 
mrtur
just joined
Topic Author
Posts: 15
Joined: Fri Nov 10, 2017 1:45 pm

Re: Hotspot HA and load sharing with VRRP

Mon Dec 11, 2017 5:29 pm

Hi,
Thanks for the reply and sorry for the delay.

I use 2xRB1100 because based on my tests the hotspot part of routeros can only deliver 600-650Mbps on RB1000AHx4, not 2Gbps.
Maybe I had an issue in my setup, but I've done a lot of bandwidth tests (iperf, Mikrotik BT tool, file transfers...), either with online or local servers (of course with > 1Gbps links), and as soon as my test client is behind Mikrotik hotspot, the bandwidth tops to 650Mbps. When bypassing hotspot, I have almost 1Gbps (950-980Mbps).

A I wrong? Is it possible to achieve 2Gbps (or at least more thant gigabit) behind one RB1000AHx4's hotspot?
 
User avatar
spippan
Member Candidate
Member Candidate
Posts: 100
Joined: Wed Nov 12, 2014 1:00 pm

Re: Hotspot HA and load sharing with VRRP

Tue Mar 06, 2018 1:59 pm

..... tell to the DHCP server "give this client gateway A, this one gateway B". ....
maybe you can do this with DHCP Options (Option 4 ? ) - so lease Client1 has Option 4 with router A, lease Client2 has Option 4 with router B, ...and so on

for DHCP options this list may help
https://www.iana.org/assignments/bootp- ... ters.xhtml
---
raiffeisen data center infrastructure and security
...stay curious
 
haik01
Member
Member
Posts: 406
Joined: Sat Mar 23, 2013 10:25 am
Location: Netherlands

Re: Hotspot HA and load sharing with VRRP

Tue Mar 06, 2018 8:19 pm

Where are the VLAN's needed for?

Who is online

Users browsing this forum: martinclaro, sindy and 128 guests