So, the network topology I want is fairly simple. I have Mikrotik routers at both sites connected by ISP Intranet. I want to centralize hotspot on my primary router i.e. Site A. Site B hotspot users should be able to connect through Hotspot network created in Site A Mikrotik router.
Site A configuration
Code: Select all
/interface bridge
add name=Loopback
add name=bridge1 vlan-filtering=yes
/interface vlan
add interface=bridge1 name="Hotspot VLAN" vlan-id=105
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=abc.test hotspot-address=10.10.10.1 name=hsprof1
/ip pool
add name=hs-pool-13 ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add address-pool=hs-pool-13 disabled=no interface="Hotspot VLAN" lease-time=\
1h name=dhcp1
/ip hotspot
add address-pool=hs-pool-13 disabled=no interface="Hotspot VLAN" name=\
hotspot1 profile=hsprof1
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
/interface bridge vlan
add bridge=bridge1 tagged=bridge1 untagged=ether1 vlan-ids=105
/ip address
add address=192.168.1.1/28 interface=ether1 network=192.168.1.0
add address=10.10.10.1/24 interface="Hotspot VLAN" network=10.10.10.0
add address=105.5.5.1/24 interface=bridge1 network=105.5.5.0
add address=127.0.0.1/31 interface=Loopback network=127.0.0.0
/ip dhcp-server network
add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1
/ip dns
set servers=8.8.8.8
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.10.0/24
/ip hotspot user
add name=admin
/system identity
set name=R1
/interface bridge
add name=bridge1
/interface vlan
add interface=bridge1 name=vlan1 vlan-id=105
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether6
/ip address
add address=192.168.1.2/28 interface=ether10 network=192.168.1.0
/ip route
add distance=1 gateway=192.168.1.1
/system identity
set name=R2
/tool romon
set enabled=yes
Network topology diagram is https://prnt.sc/R6YeeaIxDlu7 .
What's working?
Since, I am using intranet (direct connection in a lab as simulation) eth1 is connected to Intranet at Site A and eth10 is connected to Intranet at Site B, I can successfully ping to all network and IP of Site A.
VLAN 105 is Hotspot VLAN. I can ping its IP too.
What I want to achieve?
I want to use VLAN 105 from Site A at ether 6 port on Site B router so that I can tag VLAN 105 at my APs at ether 6.
Please help me with this. Thanks.
I want