Hi, I'm curious about the flags in the IP hotspot section. I know what they represent, but I'm not sure what they mean!

I've come across this while searching for my answer, but it only defines them, it doesn't give any more information about what they do. That's what I'm curious about. What I need to understand is the implications of those statuses. What exactly has happened when each is displayed?

Bypassed: Go to IP > Hotspot > IP Bindings > and add a new item. One of the "type" options is bypassed, which simply means they don't have to login. From the wiki, "bypassed - performs the translation, but excludes client from login to the HotSpot" (http://wiki.mikrotik.com/wiki/Manual:IP ... P_Bindings)

Authorized: If someone connects to the hotspot, they show up in the Hosts tab but are not yet authorized. Once they log in, they show up in the Active tab and are now authorized.

DHCP: If your computer is configured for DHCP, when you connect to the hotspot, you will be given an IP address from the hotspot's DHCP pool. On the other hand, if you configure your computer with a static IP address and connect to the hotspot, you will not be given an IP address from the DHCP pool but will use the static one you have configured.

Static / Dynamic: I am not entirely sure about these two in context. They could be referring to static and dynamic IP addresses (http://wiki.mikrotik.com/wiki/Manual:IP/Address#Summary), but possibly something else. Maybe someone else can comment?

HTH

Thanks for the reply, skot. I have another scenario that I need to understand better.

I have run across users who are listed on the Hosts tab with a status of either "D" or "AD," and they are not on the Active tab, but they are provisioned correctly in the radius server. Do you know what can cause this? In the past, I have had some luck kicking out of the Hosts tab to force them to reassociate with the AP, but I would like to understand how that can occur.

I want t point out that all of our users go through the Hotspot and use the radius server for authentication. The Hostpot and radius server are also both configured properly and function the way they should for 98% of the users in my networks.

Thanks.

I'm really curious about the dynamic / static options. Do they refer to ip addresses?


(Sorry about bumping a 5 month old topic, it's just important that I figure this out)

If you have the lease set as a static dhcp lease (assigns same ip every time device requests one) it shows as static. That is in "/ip dhcp-server lease" using "make-static".

Dynamic is normally an ip that is not issued an ip from the dhcp server on that localnet, either a dhcp lease that hasn't expired, or a static ip set on the client device. The hotspot will translate that to a localnet ip if the hotspot NAT has not been disabled.

This is just from my experience.

Hi


I have the same problem with hotspot. Most of the time my users hosts are "H" or "AH" as normal. My DHCP server is set to:

Authoritative: yes, Bootp support: static.

I enable trial users on my hotspot for 15 mininutes with MAC cookies. Sometimes i get users showing flag "D" and the users starts downloading/browsing internet heavy like 10Mbits around that , is not authorized. Why this happens? Does anyone know what can cause that?

Hotspot is not working like it should. I am not happy for mikrotik.


Thanks

@tombee79: There was no problem mentioned in this thread, just a question about the flags.

If the user has a "D" flag, then that ip is assigned static in the client (host) or has not renewed the lease from the last network.

How are you seeing the 10Mbit traffic? Upload and download is not shown in the host list, only in active. Are you sure that traffic is getting through the hotspot if the client is not logged in? Just as a quick test, try "/tool torch" on your WAN interface to check if that 10Mbit traffic is getting through the hotspot.

Hi

Thanks for you input. I don't have any body at the moment with the "D" but i have few hours before. The user was not active at all. But before i had user that was downloading surfing the net etc. no problem.

I use MAC COOKIES for trial users. Do you think the someone could just reconnect and finish the trial session time to the end.?

I think that is why he/she got the flag "D". BUT,,,,, base on my hotpot DHCP i use AUTHORITATIVE:YES

so this should or should not take place?

What do you think? It should ask for ip or it should not and finish the trail MAC SESSION tile left over.?

Thanks for you advice.

I don't know about the trial users. I don't use that feature. I don't use cookies either.

DHCP lease renewal is up to the client end. Some renew immediately when they connect to a new network, and some apparently wait for the renewal time (half the expiration).

If the client (host) is using dhcp, the "D" is normally very temporary. I will sometimes see a mac address with two entries, one "D" and one "H". The "D" entry should disappear in a while. To be honest, I've not paid attention to how long it takes a "D" to be removed from the host list once the client renews the dhcp lease.

But before i had user that was downloading surfing the net etc. no problem.

How did you determine that?

Dear friends i must remove regularly
unauthorised !authorise and if dhcp

i found this
/ip hotspot host remove [find where !authorised && DHCP || dynamic ]

but this removes authorised dhcp clients as well

find unauthorised + dhcp

Flags: S - static, H - DHCP, D - dynamic, A - authorized, P - bypassed
# MAC-ADDRESS ADDRESS TO-ADDRESS SERVER IDLE-TIMEOUT
0 DA E8:11:32:xx:86:AD 192.168.15.134 192.168.15.134 default
1 D E8:11:32:xx:87:AC 192.168.15.139 192.168.15.139 default ---> this will be deleted only


thanks in advanced for any help
regards

@dahili: Why do you want to do that? You can delete it, and in a few seconds it will be back. If the hotspot is on a wireless interface and you really want that user/device gone, use "/interface wireless access-list" and block that mac address from connecting.