Did you have the masquerade rule?

Martín Ruiz
Director técnico
902430367 - 669379521
www.ibersystems.es

Enviado desde mi iPhone

El 24/04/2010, a las 02:52, "Stuart Pierce" <[email protected]> escribió:

I have had the same problem and can not or could not nail it down, a cpe would get an ip address from the hotspot dhcp server but would not bring up the hotspot login page or surf the walled garden ip's.

I did have a firewall rule limiting the number of connections per ip address and thought maybe that was the problem. One of my towers is really a bridged client to a tower with a tik box. The client tower has an ap and all of the cpe's look like they are coming from that bridged client ( which seems to get an ip nat'd ), so I figure it was that mac/ip that was causing the problem by having to many connections associated with it.


---------- Original Message ----------------------------------
From: "Ralph" <[email protected]>
Reply-To: Mikrotik discussions <[email protected]>
Date:  Fri, 23 Apr 2010 19:24:30 -0400

No- only the default stuff that the hotspot setup creates.
Only thing we have is some ip binding passthroughs for getting to some of the things behind the hotspot portal from outside on the Internet. We have
these rules at many locations and they haven't been a problem.

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Stuart Pierce
Sent: Friday, April 23, 2010 8:08 PM
To: Mikrotik discussions
Subject: Re: [Mikrotik] Some hotspot radios behind my MT don't get outside
access

Do you have any firewall rules limiting the number of connections from ip
addresses ?

---------- Original Message ----------------------------------
From: "Ralph" <[email protected]>
Reply-To: Mikrotik discussions <[email protected]>
Date:  Fri, 23 Apr 2010 18:39:04 -0400

Hi Josh-

1. About once a year, some of the hotspot radios behind this router begin doing weird things- like giving users MT IP addresses but not allowing them to see the captive portal, or maybe not allowing them to the Internet. The radios are a Tropos mesh system and it is properly meshed and working correctly. It is like the hotspot is blocking them. As a matter of fact, if I put a bypass rule in the hotspot for the user's IP address he gets to the Internet just fine. So it really appears like a hotspot problem and not a basic problem. Most of the time when this happens, we go spend half a day pulling our hair out and then run out of time and rebuild the router (default and start over). Today my guys had to leave after 5 hours and I
am
going to have to do this remotely. BTW- it is running 4.6 as of today. It
was on 4.3 before but was doing the same thing.

2. I am not familiar with that setting.  I even searched the web for
Mikrotik +"on default".  Can you fill me in?

I stared and compared all the firewall rules between this system and one
that works and can see no difference.
I'd love to just have Butch or someone take a quick look and see if they
see
an obvious problem, but it is late on Friday now.



-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Josh Luthman
Sent: Friday, April 23, 2010 6:12 PM
To: Mikrotik discussions
Subject: Re: [Mikrotik] Didn't mean to hijack thread

1) Why do you need to blow it away?

2) You could change the "on default" config.

On 4/23/10, Ralph <[email protected]> wrote:
Sorry- I replied to save typing the address and forgot to change the
subject.

I have a PC running MT 4.6 that I want to "blow away".
It is 100 miles away.
Normally when I do this, I browse to it on the web, do the reset, and it
keeps the WAN info so I can get back in to re-do the rest  of the
parameters.

However this one has PPPoE instead of a straight Ethernet LAN connection.

Does anyone know if the PPPoE credentials are retained like the rest of
the
WAN data when you do this?

Thanks

Ralph


_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
RouterOS



--
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill
_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
RouterOS



_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
RouterOS






________________________________________________________________
Sent via the WebMail system at avolve.net




_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS



_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS






________________________________________________________________
Sent via the WebMail system at avolve.net




_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to