I have had the same problem and can not or could not nail it down, a cpe would get an ip address from the hotspot dhcp server but would not bring up the hotspot login page or surf the walled garden ip's.
I did have a firewall rule limiting the number of connections per ip address and thought maybe that was the problem. One of my towers is really a bridged client to a tower with a tik box. The client tower has an ap and all of the cpe's look like they are coming from that bridged client ( which seems to get an ip nat'd ), so I figure it was that mac/ip that was causing the problem by having to many connections associated with it. ---------- Original Message ---------------------------------- From: "Ralph" <[email protected]> Reply-To: Mikrotik discussions <[email protected]> Date: Fri, 23 Apr 2010 19:24:30 -0400 >No- only the default stuff that the hotspot setup creates. >Only thing we have is some ip binding passthroughs for getting to some of >the things behind the hotspot portal from outside on the Internet. We have >these rules at many locations and they haven't been a problem. > >-----Original Message----- >From: [email protected] >[mailto:[email protected]] On Behalf Of Stuart Pierce >Sent: Friday, April 23, 2010 8:08 PM >To: Mikrotik discussions >Subject: Re: [Mikrotik] Some hotspot radios behind my MT don't get outside >access > >Do you have any firewall rules limiting the number of connections from ip >addresses ? > >---------- Original Message ---------------------------------- >From: "Ralph" <[email protected]> >Reply-To: Mikrotik discussions <[email protected]> >Date: Fri, 23 Apr 2010 18:39:04 -0400 > >>Hi Josh- >> >>1. About once a year, some of the hotspot radios behind this router begin >>doing weird things- like giving users MT IP addresses but not allowing them >>to see the captive portal, or maybe not allowing them to the Internet. The >>radios are a Tropos mesh system and it is properly meshed and working >>correctly. It is like the hotspot is blocking them. As a matter of fact, >>if I put a bypass rule in the hotspot for the user's IP address he gets to >>the Internet just fine. So it really appears like a hotspot problem and not >>a basic problem. Most of the time when this happens, we go spend half a >>day pulling our hair out and then run out of time and rebuild the router >>(default and start over). Today my guys had to leave after 5 hours and I >am >>going to have to do this remotely. BTW- it is running 4.6 as of today. It >>was on 4.3 before but was doing the same thing. >> >>2. I am not familiar with that setting. I even searched the web for >>Mikrotik +"on default". Can you fill me in? >> >>I stared and compared all the firewall rules between this system and one >>that works and can see no difference. >>I'd love to just have Butch or someone take a quick look and see if they >see >>an obvious problem, but it is late on Friday now. >> >> >> >>-----Original Message----- >>From: [email protected] >>[mailto:[email protected]] On Behalf Of Josh Luthman >>Sent: Friday, April 23, 2010 6:12 PM >>To: Mikrotik discussions >>Subject: Re: [Mikrotik] Didn't mean to hijack thread >> >>1) Why do you need to blow it away? >> >>2) You could change the "on default" config. >> >>On 4/23/10, Ralph <[email protected]> wrote: >>> Sorry- I replied to save typing the address and forgot to change the >>> subject. >>> >>> I have a PC running MT 4.6 that I want to "blow away". >>> It is 100 miles away. >>> Normally when I do this, I browse to it on the web, do the reset, and it >>> keeps the WAN info so I can get back in to re-do the rest of the >>> parameters. >>> >>> However this one has PPPoE instead of a straight Ethernet LAN connection. >>> >>> Does anyone know if the PPPoE credentials are retained like the rest of >>the >>> WAN data when you do this? >>> >>> Thanks >>> >>> Ralph >>> >>> >>> _______________________________________________ >>> Mikrotik mailing list >>> [email protected] >>> http://www.butchevans.com/mailman/listinfo/mikrotik >>> >>> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik >>RouterOS >>> >> >> >>-- >>Josh Luthman >>Office: 937-552-2340 >>Direct: 937-552-2343 >>1100 Wayne St >>Suite 1337 >>Troy, OH 45373 >> >>"Success is not final, failure is not fatal: it is the courage to >>continue that counts." >>--- Winston Churchill >>_______________________________________________ >>Mikrotik mailing list >>[email protected] >>http://www.butchevans.com/mailman/listinfo/mikrotik >> >>Visit http://blog.butchevans.com/ for tutorials related to Mikrotik >RouterOS >> >> >> >>_______________________________________________ >>Mikrotik mailing list >>[email protected] >>http://www.butchevans.com/mailman/listinfo/mikrotik >> >>Visit http://blog.butchevans.com/ for tutorials related to Mikrotik >RouterOS >> > > > > > >________________________________________________________________ >Sent via the WebMail system at avolve.net > > > > >_______________________________________________ >Mikrotik mailing list >[email protected] >http://www.butchevans.com/mailman/listinfo/mikrotik > >Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS > > > >_______________________________________________ >Mikrotik mailing list >[email protected] >http://www.butchevans.com/mailman/listinfo/mikrotik > >Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS > ________________________________________________________________ Sent via the WebMail system at avolve.net _______________________________________________ Mikrotik mailing list [email protected] http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
