Community discussions

MikroTik App
 
Jeeva
newbie
Topic Author
Posts: 37
Joined: Fri Sep 01, 2006 12:53 am
Location: Stellenbosch, South Africa
Contact:

MT Hotspot Page as a Gateway/Firewall

Mon Jul 20, 2009 12:26 am

Is it possible to use a single mikrotik router as a hotspot gateway. Say all the routers in the network route to a central mikrotik, all on the same interface.

I want many users to authenticate on this gateway. Obviously they will all be using the same mac address which is the one from the router on the Hotspot Gateway's ethernet interface.

But can I set it to allow more than one connection from the same mac. Will it then use the User's IP address for authentication purposes.

A good example of a system similar to the one described is pfsense's captive portal.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Mon Jul 20, 2009 12:33 am

well, you can simply set all routers to bridge mode, so MAC addresses will be unchanged
 
Jeeva
newbie
Topic Author
Posts: 37
Joined: Fri Sep 01, 2006 12:53 am
Location: Stellenbosch, South Africa
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Mon Jul 20, 2009 9:23 pm

Will this create a situation where a single packet sent at one point of the wireless network will propagate throughout the whole network?

so that a transfer on the one side of the network will create a lot of traffic all over the network?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Tue Jul 21, 2009 11:13 am

if bridge knows dst-mac-address, it will send the packet to only that direction
 
Jeeva
newbie
Topic Author
Posts: 37
Joined: Fri Sep 01, 2006 12:53 am
Location: Stellenbosch, South Africa
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Sun Aug 23, 2009 1:57 pm

Ok I have tried this, but I can't get the mac addresses to pass through a router.

Lets say we have A--->X<----B

with A and B and X all mikrotik routers

A and B are on different subnets and interfaces. If I create a bridge then add both these interfaces to the bridge, both router A and B cant see each other's MAC addresses. This is when I look in the ARP list, aswell as IP-Neighbour

Is this all I have to do to create the bridge? or is there more to allow MAC passthrough?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Mon Aug 24, 2009 1:45 pm

what do you mean "A and B are on different subnets"? can A ping B? can A ping B if you replace X with simple switch?
 
Jeeva
newbie
Topic Author
Posts: 37
Joined: Fri Sep 01, 2006 12:53 am
Location: Stellenbosch, South Africa
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Tue Aug 25, 2009 1:00 pm

X has eth1 and eth2 with eth1 = 172.16.55.1/24 and eth2 = 172.16.50.1/24
A is on eth1 with 172.16.55.2/24
B is on eth2 with 172.16.50.2/24

A and B can ping between each other
When I add a bridge on X, and add eth1 and eth2 to it, A can still not see what B's MAC address is. And vice versa.

They can't ping each other with a switch in the middle, but shouldn't the two routers still see each other under IP-->Neighbour? or ARP list?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Tue Aug 25, 2009 1:59 pm

if your routers are on different subnets, you must use routing.

if you want to use bridge, you should first do the same subnet for both routers
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: MT Hotspot Page as a Gateway/Firewall

Tue Aug 25, 2009 2:00 pm

They can't ping each other with a switch in the middle, but shouldn't the two routers still see each other under IP-->Neighbour? or ARP list?
in Neighbours... I think, they should. but not in ARP

Who is online

Users browsing this forum: anon432, ichyre and 32 guests