I have Mikrotik RouterOS v4.11 with hotspot and PPPoE in the same interface.


LAN 192.168.1.1/24
Mikrotik DHCP server 192.168.1.0/24
hotspot page 192.168.2.1(www.xxx.com)
hotspot pool 192.168.1.2-192.168.1.254
PPPoE local address : the same as hotspot pool
PPPoE remote address : pppoe-pool 192.168.3.2-192.168.3.254

how can I access the hotspot html page if login using pppoE?

Is it possible?

Can you login via pppoe via that same interface running hotspot? I think one way you can get the hotspot login page is first not to login via pppoe. That way you get redirected to the hotspot login page.

I never used these setup but I always wonder if both pppoe server and hotspot is enabled on the same interface which takes precedence over the other? Or if a user logs in via pppoe then they don't get the hotspot login page and have access to the internet and if they login via hotspot there is no need for pppoe login?

I don't understand why you'd want to mix them in the first place. Both are methods to force users to authenticate before being allowed to use the network. Out of the two PPPoE is more reliable, but the Hotspot allows for easy ad hoc sign ups. They fulfill the same function in different scenarios.

I don't understand why you'd want to mix them in the first place. Both are methods to force users to authenticate before being allowed to use the network.

I understand that perfectly but I have this scenario. I have customers on hotspot and I have got to a point I want to migrate them to pppoe and the change over will take some time and I would want to maintain service to hotspot users as i move then to pppoe. So can they coexist on the same interface and how will they work together?

I don't know. I do remember Mikrotik staff (sergejs, I think?) posting that it isn't supported by them at one point. Of course, that doesn't necessarily mean it doesn't work.
If I were in that scenario I'd try to move people to a different interface, though. If you're already setting them up with a new authentication method it isn't much more work to also migrate them to a new interface, which could be a virtual AP on an existing radio.

Well I know I will be in that situation in a few months. Am planning ahead so I will invest in extra gear to move clients to pppoe and have a mix of both hotspot and pppoe but on different interfaces. Thanks

We have a couple places where we run PPPoE server and hotspot on the same interface at the same time, and it works.

As far as the interface/hotspot are concerned, PPPoE server is a layer 2 thing, while hotspot operates at layer3 for the most part.

Why would we want to do this? because in this situation we have facilities where most users are fine with a hotspot type payment/authentication method with associated nat, but an occasional user who wants long term account without being bothered with hotspot logins and/or needs a public IP, or for other reasons needs to bypass the hotspot. It is easiest for us, and allows us to track, if we put these users on PPPoE connections with their own routers.

Also, allows possibility for our regular users to have a "normal" connection, while allowing "drive-bys" to buy a day or two of time, without having open access, and without having to establish a proper account for them.

Upon re-reading this thread more carefully:

how can I access the hotspot html page if login using pppoE?

We don't do this, as we prefer hotspot OR PPPoE, but you could try making a bridge, adding the hotspot interface to the bridge (and run the hotspot on the bridge), then in PPP profile, specify the same bridge. This is slightly convoluted and may or may not work. It should be ok if you run the PPPoE server either directly on the underlying interface, or on the bridge, but I'd suggest trying the underlying interface first, unless you need multiple physical interfaces bridged together (and you could still run individual PPPoE servers on each physical interface).

You'll have to experiement and see what happens.

We have a couple places where we run PPPoE server and hotspot on the same interface at the same time, and it works.

Just the confirmation I wanted. So when the PPPoE user authenticates the don't get the hotspot login in page right?

Just the confirmation I wanted. So when the PPPoE user authenticates the don't get the hotspot login in page right?

Right, PPPoE users have no idea there is a hotspot. At least the way we set it up, which is we give the router a loopback address and use that for the local address in the PPPoE profile. We also may create a bridge, even if there is only one physical interface in it, and run the hotspot/pppoe server on the bridge. This generally makes it easier if you want to change the port or add/remove ports, as you only have to change the bridge, instead of hotspot/pppoe/dhcp etc.

The PPPoE is also typically using its own pool of IP addresses. Other configurations may or may not work in this way.

(Edited: sometimes we don't create a bridge and run separate PPPoE and/or hotspot servers on each port for isolation reasons. The PPPoE servers can usually share the same IP pool.)

Currently I have all users on hotspot and I am the only one on PPPoE(PPPoE is entered inside a home router that is connected to the Mikrotik router). I can now easily move some users from hotspot to PPPoE if I want to. Also, unlike most users who login for few hours, I am always online and I don't want someone to steal my IP and mac and use the internet. when I change something for hotspot html pages, I need to connect to one of outdoor AP and see how the change look like

Just remembered something I wanted to ask (A little of topic). I want to create a pptp link to a mikrotik at the office but am using a gsm modem remotely and the provider has blocked vpn traffic. I use a linux box so which is the best way to do it. If there is a thread on this just refer me.

Kinda depends on how they're blocking it. You could use change the ports (or use nat rules to change the ports) to something they're not blocking, or create an IPIP tunnel, then create the vpn through the tunnel, or some other type of tunnel. You may have to combine these, depending on how they're blocking it. (for instance, run your IPIP tunnel on port 80, then run the vpn through it).

Around here, we were able to successfully establish pptp connections via cellular, for 5 minutes, then they'd drop. It appeared the cell provider changed the IP every 5 minutes to thwart any kind of long-term connection.

I will look at IPIP and see if it works since cellular carriers here just mess up pptp port until you pay to have vpn access.

I think Question should asked in a new topic. here I am asking about different thing.

Hi Guys if you are implementing PPPOE and Hotspot on the same interface, don't forget to set the 'idle-timeout' value on the Router.

Otherwise you may run into problems like Andrews http://www.mikrotik-routeros.com/?p=130

Capital