i have an RB 450g with RouterOS 3.23 with Hotspot configured. (with private IP of 192.168.200.2)


I have two different Private IP ranges in my LAN , one range is 192.168.200.X that hotspot and it's clients are using and the other is 153.69.254.X that some other PCs are using.

so if you get an IP address from mikrotik DHCP server with the range of 192.168.200.X and want to access a web server with IP range of 153.169.254.X , you face http://192.168.200.2/login?dst=http%3A% ... 254.101%2F and you cant access that web server .


Even if you ping any other PCs with range of 153.69.254.X the reply is Reply from 192.168.200.2: Destination net unreachable.

i want to allow just the 192.168.200.X can access hotspot and any other request in any other range get denied .

i dont know how to solve this problem , any help is appreciated ,

Thanks

what's task? to allow 153.69.254.X's to freely access all resources, or what?

what's your Hotspot configuration?

what's task? to allow 153.69.254.X's to freely access all resources, or what?

what's your Hotspot configuration?

to disallow 153.69.254.X to access hotspot.

remove address pool from Hotspot settings?..

remove address pool from Hotspot settings?..

i dint understand what you said ,,,,maybe i couldn't explain it well.

i want to block all IP ranges except 192.168.200.X to be in Hotspot>Active list ( that's the way i want to solve my problem in the first post which i explained.

I meant,

I meant,

Code: Select all

/ip hotspot set XXX address-pool=none

so what is that ?

and how can this help me to solve my problem ?

I think, your users won't be captured by Hotspot then =)

can you tell me what that command does exactly ?

disables 'Universal Client', I believe

can you give me the wiki page of "/ip hotspot XXX set address-pool=none"

I think that is not the thing which i want.


I want that hotspot respond to requests only from 192.168.200.X .

and nothing more.

Then that's what you want. If you disable Universal NAT, only clients that are on the network the Hotspot is configured on are able to access the Hotspot. If the Hotspot is configured to run on an interface with an address on 192.168.200.0/24 and there is no Universal NAT, only clients on 192.168.200.0/24 wit the Hotspot interface IP as the gateway are able to use the Hotspot. If Universal NAT is enabled, any IP address behind the Hotspot interface will work. To disable Universal NAT, do as Chupaka said and configure the address pool on the Hotspot to be 'none'.