Community discussions

MikroTik App
 
ccesconetto
just joined
Topic Author
Posts: 3
Joined: Mon Sep 05, 2016 11:24 pm
Location: Brazil

Help with separation of internet traffic by different links.

Fri Oct 20, 2017 3:23 pm

Greetings;
I'm having trouble getting traffic to split two distinct links using an RB2011iAS routerboard. I used the method of set up in the mangle (routing connection) creating two routes each leaving a link, and it even works, the problem is that when I get the hotspot configuration stops working. Can someone help me?
 
User avatar
lbachero
newbie
Posts: 38
Joined: Wed Oct 08, 2014 4:39 pm
Location: Dublin
Contact:

Re: Help with separation of internet traffic by different links.

Sat Oct 21, 2017 8:19 pm

Can you post your firewall config?
 
ccesconetto
just joined
Topic Author
Posts: 3
Joined: Mon Sep 05, 2016 11:24 pm
Location: Brazil

Re: Help with separation of internet traffic by different links.

Mon Oct 23, 2017 8:15 pm

Can you post your firewall config?
[MikroTik] > ip firewall filter print terse
0 D chain=forward action=jump jump-target=hs-unauth hotspot=from-client,!auth
1 D chain=forward action=jump jump-target=hs-unauth-to hotspot=to-client,!auth
2 D chain=input action=jump jump-target=hs-input hotspot=from-client
3 D chain=input action=drop protocol=tcp hotspot=!from-client dst-port=64872-64875
4 D chain=hs-input action=jump jump-target=pre-hs-input
5 D chain=hs-input action=accept protocol=udp dst-port=64872
6 D chain=hs-input action=accept protocol=tcp dst-port=64872-64875
7 D chain=hs-input action=jump jump-target=hs-unauth hotspot=!auth
8 D chain=hs-unauth action=reject reject-with=tcp-reset protocol=tcp
9 D chain=hs-unauth action=reject reject-with=icmp-net-prohibited
10 D chain=hs-unauth-to action=reject reject-with=icmp-host-prohibited
11 X comment=place hotspot rules here chain=unused-hs-chain action=passthrough

[MikroTik] > ip firewall nat print terse
0 D chain=dstnat action=jump jump-target=hotspot hotspot=from-client
1 D chain=hotspot action=jump jump-target=pre-hotspot
2 D chain=hotspot action=redirect to-ports=64872 protocol=udp dst-port=53
3 D chain=hotspot action=redirect to-ports=64872 protocol=tcp dst-port=53
4 D chain=hotspot action=redirect to-ports=64873 protocol=tcp hotspot=local-dst dst-port=80
5 D chain=hotspot action=redirect to-ports=64875 protocol=tcp hotspot=local-dst dst-port=443
6 D chain=hotspot action=jump jump-target=hs-unauth protocol=tcp hotspot=!auth
7 D chain=hotspot action=jump jump-target=hs-auth protocol=tcp hotspot=auth
8 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=80
9 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=3128
10 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=8080
11 D chain=hs-unauth action=redirect to-ports=64875 protocol=tcp dst-port=443
12 D chain=hs-unauth action=jump jump-target=hs-smtp protocol=tcp dst-port=25
13 D chain=hs-auth action=redirect to-ports=64874 protocol=tcp hotspot=http
14 D chain=hs-auth action=jump jump-target=hs-smtp protocol=tcp dst-port=25
15 X comment=place hotspot rules here chain=unused-hs-chain action=passthrough
16 chain=srcnat action=masquerade src-address=10.10.130.0/24 out-interface=ether1 log=no log-prefix=""
17 chain=srcnat action=masquerade src-address=10.10.230.0/24 out-interface=ether5 log=no log-prefix=""
 
User avatar
lbachero
newbie
Posts: 38
Joined: Wed Oct 08, 2014 4:39 pm
Location: Dublin
Contact:

Re: Help with separation of internet traffic by different links.

Mon Oct 23, 2017 9:34 pm

The option "Transparent Proxy" on User Profiles is checked?
 
ccesconetto
just joined
Topic Author
Posts: 3
Joined: Mon Sep 05, 2016 11:24 pm
Location: Brazil

Re: Help with separation of internet traffic by different links.

Tue Oct 24, 2017 3:41 pm

The option "Transparent Proxy" on User Profiles is checked?
Yes the option is checked.

[MikroTik] > ip hotspot user profile print terse
1 name=uprof2 address-pool=dhcp_pool2 idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 add-mac-cookie=yes mac-cookie-timeout=3d address-list="
" transparent-proxy=yes open-status-page=always advertise=no
2 name=uprof1 address-pool=dhcp_pool1 idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 add-mac-cookie=yes mac-cookie-timeout=3d address-list="
" transparent-proxy=yes open-status-page=always advertise=no

Who is online

Users browsing this forum: aeronell, cyrq, vaskoss and 33 guests