Community discussions

MikroTik App
  4. RouterOS
  5. General

user manger not working on dual wan dual lan

Post Reply
 
User avatar
jamalmikrotik2019
just joined
Topic Author
Posts: 5
Joined: Fri Sep 27, 2019 10:12 pm

user manger not working on dual wan dual lan

Fri Sep 27, 2019 10:32 pm

i have dual wan and dual lan ,(Hotspot,pppoe) is run in good status but when i config user manger and create user on it the login page display as this pic,I use Rb3011,Rb750Gr3,Rb1100x4,Rb850gx2
Image ---> https://ibb.co/bX55YPX
my config as pic is here
Image --->https://ibb.co/crnWSWz
Image --->https://ibb.co/YdV6mCw
Image --->https://ibb.co/R9pF65c
Image --->https://ibb.co/tcGKnWg
Image --->https://ibb.co/m5dHRsG
and this log pic
Image --->https://ibb.co/KKpgBv5

my config as config file is :
Code: Select all
/interface ethernet
set [ find default-name=ether1 ] name=ether1_ISP1
set [ find default-name=ether2 ] name=ether2_ISP2
set [ find default-name=ether3 ] name=ether3_LAN1
set [ find default-name=ether4 ] name=ether4_LAN2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=s.com hotspot-address=192.168.2.1 html-directory=flash/hotspot \
    name=hsprof1 use-radius=yes
add dns-name=s.com hotspot-address=192.168.3.1 html-directory=flash/hotspot \
    name=hsprof2 use-radius=yes
/ip pool
add name=dhcp_pool0 ranges=192.168.2.2-192.168.2.254
add name=dhcp_pool1 ranges=192.168.3.2-192.168.3.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether3_LAN1 lease-time=30m \
    name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether4_LAN2 lease-time=30m \
    name=dhcp2
/ip hotspot
add address-pool=dhcp_pool0 disabled=no interface=ether3_LAN1 name=hotspot1 \
    profile=hsprof1
add address-pool=dhcp_pool1 disabled=no interface=ether4_LAN2 name=hotspot2 \
    profile=hsprof2
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw password=\
    0595272939
/tool user-manager profile
add name=1m name-for-users="" override-shared-users=off owner=admin price=0 \
    starts-at=logon validity=2d
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=1m owner=\
    admin rate-limit-min-rx=262144B rate-limit-min-tx=2097152B rate-limit-rx=\
    262144B rate-limit-tx=2097152B transfer-limit=5368709120B upload-limit=0B \
    uptime-limit=2d
/ip address
add address=192.168.1.5/24 comment=ISP1 interface=ether1_ISP1 network=\
    192.168.1.0
add address=192.168.20.4/24 comment=ISP2 interface=ether2_ISP2 network=\
    192.168.20.0
add address=192.168.5.2/24 comment="Login Port" interface=ether5 network=\
    192.168.5.0
add address=192.168.2.1/24 comment=LAN1 interface=ether3_LAN1 network=\
    192.168.2.0
add address=192.168.3.1/24 comment=LAN2 interface=ether4_LAN2 network=\
    192.168.3.0
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=8.8.8.8 gateway=192.168.2.1
add address=192.168.3.0/24 dns-server=8.8.8.8 gateway=192.168.3.1
/ip dns
set servers=8.8.8.8
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting comment=LAN1 new-routing-mark=ISP1 \
    passthrough=yes src-address=192.168.2.0/24
add action=mark-routing chain=prerouting comment=LAN2 new-routing-mark=ISP2 \
    passthrough=yes src-address=192.168.3.0/24
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.2.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.3.0/24
/ip hotspot user
add name=admin password=admin
/ip route
add distance=1 gateway=192.168.1.1 routing-mark=ISP1
add distance=1 gateway=192.168.20.1 routing-mark=ISP2
/tool user-manager database
set db-path=flash/user-manager
/tool user-manager profile profile-limitation
add from-time=0s limitation=1m profile=1m till-time=23h59m59s weekdays=\
    sunday,monday,tuesday,wednesday,thursday,friday,saturday
/tool user-manager router
add coa-port=1700 customer=admin disabled=yes ip-address=10.10.2.1 log=\
    auth-ok,auth-fail name=r2 shared-secret=0595272939 use-coa=no
add coa-port=1700 customer=admin disabled=yes ip-address=10.10.1.1 log=\
    auth-ok,auth-fail name=r1 shared-secret=0595272939 use-coa=no
/tool user-manager user
add customer=admin disabled=no password=2222 shared-users=1 username=2222 \
    wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
You do not have the required permissions to view the files attached to this post.
Top
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: user manger not working on dual wan dual lan

Sat Sep 28, 2019 11:08 am

I tried your configuration. Radius worked only if port 4 or 3 was added inside a bridge... And then create the profile for that bridge.
Everything else looks fine as far as the hotspot is concerned.
Top
 
User avatar
jamalmikrotik2019
just joined
Topic Author
Posts: 5
Joined: Fri Sep 27, 2019 10:12 pm

Re: user manger not working on dual wan dual lan

Sat Sep 28, 2019 11:20 pm

I tried your configuration. Radius worked only if port 4 or 3 was added inside a bridge... And then create the profile for that bridge.
Everything else looks fine as far as the hotspot is concerned.
i try what are you say and this is the result in pic No Change is found, can you check it?
Image --->https://ibb.co/y6W4QmB

and this my new config file:
Code: Select all
# sep/28/2019 23:18:46 by RouterOS 6.44.5
# 
#
# model = RouterBOARD 750G r3
#  
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1_ISP1
set [ find default-name=ether2 ] name=ether2_ISP2
set [ find default-name=ether3 ] name=ether3_LAN1
set [ find default-name=ether4 ] name=ether4_LAN2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
add dns-name=s.com hotspot-address=192.168.2.1 html-directory=flash/hotspot \
    login-by=mac,cookie,http-chap,http-pap,mac-cookie name=hsprof1 \
    use-radius=yes
/ip pool
add name=dhcp_pool0 ranges=192.168.2.2-192.168.2.254
add name=dhcp_pool1 ranges=192.168.3.2-192.168.3.254
/ip dhcp-server
# DHCP server can not run on slave interface!
add address-pool=dhcp_pool0 disabled=no interface=ether3_LAN1 lease-time=30m \
    name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether4_LAN2 lease-time=30m \
    name=dhcp2
add address-pool=dhcp_pool0 disabled=no interface=bridge1 lease-time=1h name=\
    dhcp3
/ip hotspot
add address-pool=dhcp_pool0 disabled=no interface=bridge1 name=hotspot1 \
    profile=hsprof1
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw password=\
    0595272939
/tool user-manager profile
add name=1m name-for-users="" override-shared-users=off owner=admin price=0 \
    starts-at=logon validity=3w3d
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=1m owner=\
    admin rate-limit-min-rx=262144B rate-limit-min-tx=2097152B rate-limit-rx=\
    262144B rate-limit-tx=2097152B transfer-limit=5368709120B upload-limit=0B \
    uptime-limit=3w3d
/interface bridge port
add bridge=bridge1 interface=ether3_LAN1
/ip address
add address=192.168.10.5/24 comment=ISP1 interface=ether1_ISP1 network=\
    192.168.10.0
add address=192.168.20.4/24 comment=ISP2 interface=ether2_ISP2 network=\
    192.168.20.0
add address=192.168.5.2/24 comment="Login Port" interface=ether5 network=\
    192.168.5.0
add address=192.168.2.1/24 comment=LAN1 interface=bridge1 network=192.168.2.0
add address=192.168.3.1/24 comment=LAN2 interface=ether4_LAN2 network=\
    192.168.3.0
add address=9.9.9.9 interface=ether1_ISP1 network=9.9.9.9
add address=9.9.9.1 interface=ether2_ISP2 network=9.9.9.1
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1_ISP1
add dhcp-options=hostname,clientid disabled=no interface=ether2_ISP2
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=8.8.8.8 gateway=192.168.2.1
add address=192.168.3.0/24 dns-server=8.8.8.8 gateway=192.168.3.1
/ip dns
set servers=8.8.8.8
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting comment=LAN1 new-routing-mark=ISP1 \
    passthrough=yes src-address=192.168.2.0/24
add action=mark-routing chain=prerouting comment=LAN2 new-routing-mark=ISP2 \
    passthrough=yes src-address=192.168.3.0/24
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.2.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.3.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.2.0/24
/ip hotspot user
add name=admin password=admin
/ip route
add distance=1 gateway=192.168.10.1 routing-mark=ISP1
add distance=1 gateway=192.168.20.1 routing-mark=ISP2
/radius
add address=127.0.0.1 secret="100\$100\$" service=hotspot
/radius incoming
set accept=yes port=1700
/system clock
set time-zone-name=Europe/Moscow
/tool user-manager database
set db-path=flash/user-manager
/tool user-manager profile profile-limitation
add from-time=0s limitation=1m profile=1m till-time=23h59m59s weekdays=\
    sunday,monday,tuesday,wednesday,thursday,friday,saturday
/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=127.0.0.1 log=\
    auth-ok,auth-fail name=jamal shared-secret="100\$100\$" use-coa=no
/tool user-manager user
add customer=admin disabled=no password=1212 shared-users=1 username=1212 \
    wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
Top
Post Reply

Who is online

Users browsing this forum: kleshki and 90 guests
  4. RouterOS
  5. General