viperm
Carpe Diem
Premium
join:2002-07-09
Winchester, CA
3 edits | 2 Hotspots on Mikrotik OS
Anyone ever configure 2 radios cards on a routerboard with dual hotspots? am I going about this wrong or is there some trick.
We can get one side to work but the other side will not redirect to our external webpage or radius server its almost like there is no route to it?
We have it like this a single public ip on Lan 2 WLAN 1 is set as hotspot 1 dhcp 10.5.50.xxx wlan2 is set up same way except we had changed DHCP to be 10.6.60.xxx
If we leave the hotspot on the default configs with out any external redirects or radius auth it works perfect but as soon as we go to direct the second hotspot away from the MK to an external server it will now work. Either blocking it or not routing correctly?
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 ADC 10.5.50.0/24 10.5.50.1 wlan1
1 ADC 10.6.60.0/24 10.6.60.1 wlan2
2 ADC 204.8.139.128/25 204.8.139.186 ether2
3 A S
0.0.0.0/0 r 204.8.1xx.xxx ether2
Any hints or questions would be greatly appreciated..
Update! Okay I figured part of it out I forgot to put in a walled garden ip of our external server for hotspot2.
Now our webage comes up and allows me to try and log in but it keeps redirecting me back to the login page as if my user name and password are incorrect..
Update # 2
Okay here is the the problem I have hotspot 2 hitting our external server spash page but what happens is once a user name and password are sent it trys to redirect back to 10.5.50.1 which is the default gateway for all hotspot users on hotspot server 1
I set up a test on another server and changed the spalsh page to show
form name="login" action="http://10.6.60.1/login" method="post
BANG it works.. Now here is the question how do I get both the 60.1 and 50.1 into our external webpage to redirect to either one? or do I have to figure out a way do do it by DNS name instead??
Update 3 Okay what I did was change the IP addres to be hotspot.com and changed the DNS setting on the hotspot to reflect the same and it works for both now. Now I will have to implment it on our live server...
--
ComTrain Certified Tower Climber. American Tower Certified approved contractor |
|
harvSki
Premium
join:2004-03-09
Suffolk, UK | DO you need 2 radio cards? you can set up multiple virtual AP on the one card - provided the card supports this. I'm sure you know this and have other reasons for using 2 cards. |
|
viperm
Carpe Diem
Premium
join:2002-07-09
Winchester, CA | reply to viperm
I would have done it that way except these are sector ant's pointing opposite directions frome each other.
--
ComTrain Certified Tower Climber. American Tower Certified approved contractor |
|
lutful
Premium
join:2005-06-16
Ottawa, ON | reply to viperm
Can you run Dual-AP and HotSpot in separate MT boxes?
That is the usual method people use to run multiple APs with single hotspot controller. |
|
viperm
Carpe Diem
Premium
join:2002-07-09
Winchester, CA
| reply to viperm
I guess I dont understand do you mean run the ap's in bridge mode and run another MK device internally to point those bridged AP's to for the Hotspot I.E. via EIOP???
--
ComTrain Certified Tower Climber. American Tower Certified approved contractor |
|
lutful
Premium
join:2005-06-16
Ottawa, ON | This simple approach should work:
- set ether2 as the hotspot interface.
- use same address range (say 10.11.22.1/24) for hotspot clients and also the external APs connected to ether2 via a small switch.
No need for EoIP. |
|
viperm
Carpe Diem
Premium
join:2002-07-09
Winchester, CA
| reply to viperm
I thought of that but we also have a dedicated customer off the mikrotik, the owner of the building so we dont want him going thru the hotspot to get online..
--
ComTrain Certified Tower Climber. American Tower Certified approved contractor |
|
lutful
Premium
join:2005-06-16
Ottawa, ON | You can provide hotspot "bypass" to some MAC addresses using /ip firewall mangle
add src-mac-address=CPE_MAC action=passthrough mark-flow=hs-auth disabled=no |
|
