Greetings,
probably it is something very basic that I am missing.
Mikrotik has 3 interfaces:
1. WAN
2. Guest network (VLAN IF2-192.168.1.1)
3. Normal network (IP IF3-192.168.2.10)

I have a wireless network connected to a mikrotik router for guest devices (IF2, VLAN).
mikrotik allocates a DHCP IP to a guest.
mikrotik is also connected to normal network via IF3
Then to authenticate guest needs to access an ip on 192.168.2.0 network (e.g. 192.168.2.20). 192.168.2.20 uses 192.168.2.1 as default gateway
So guest with IP 192.168.1.0/24 needs to access 192.168.2.20 port 80 somehow.

I am thinking to forward queries to 192.168.1.1 port 80 to 192.168.2.20 port 80. How is it possible to solve this or maybe there is a better way?


Thanks.

Are you nating or routing from 192.168.2.20 or is it just authentication
One thing you can do is create a mangle rule identifying 192.168.1.0/24 port 80 traffic - mark it as guest and then put in a NAT rule dst-nat - packet mark-guest action=dst-nat 192.168.2.20.
this means all port 80 traffic from guest network will be traversing 192.168.2.20 prior to being routed via 192.168.2.1.
Im thinking though that you only want to authenticate via 192.168.2.20 in that case you should be using something like hotspot with external authentication server.