MikroTik

Community discussions
https://forum.mikrotik.com/

Hotspot - No internet access - Driving me mad!

https://forum.mikrotik.com/viewtopic.php?t=105104

Page 1 of 1

Hotspot - No internet access - Driving me mad!  [SOLVED]

Posted: Mon Feb 22, 2016 1:45 pm
by mbrtonpye
Guys, can someone PLEASE show me what I am doing wrong?
I have been fighting this setup for a while now and can not get the problem resolved.

Firstly, when I scan for an access point, I can connect to the network but I don't automatically get a login screen, what I do get though is a valid IP address BUT I get a totally ridiculous Subnet Mask of 255.255.0.0. How does that happen?
IPDetails.jpg
If I try to ping the router from my connected PC, I get perfectly good response times
Code: Select all
ping 192.168.30.1

Pinging 192.168.30.1 with 32 bytes of data:
Reply from 192.168.30.1: bytes=32 time=1ms TTL=64
Reply from 192.168.30.1: bytes=32 time=1ms TTL=64
Reply from 192.168.30.1: bytes=32 time=1ms TTL=64
Reply from 192.168.30.1: bytes=32 time=1ms TTL=64

Ping statistics for 192.168.30.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms
but if I try to ping form my PC to the internet I get total failure
Code: Select all
ping 213.153.32.129

Pinging 213.153.32.129 with 32 bytes of data:
PING: transmit failed. General failure.
PING: transmit failed. General failure.
PING: transmit failed. General failure.
PING: transmit failed. General failure.

Ping statistics for 213.153.32.129:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)
If I try to ping from the router to the internet, I get a good response
ping.jpg
So I can see that the router can see the outside world and, indeed, I can connect to the router from a remote location using Winbox.

So, I can connect from the PC to the router but get no access to the internet but the router can access the internet an I can access the router remotely so the problem has to be the routing or firewall?

I have 3 other routers with the same configuration and they all work fine, all running V6.33.5!

Does anyone have any ideas for me? PLEASE?

The build is as follows...
Code: Select all
interface print detail without-paging 
Flags: D - dynamic, X - disabled, R - running, S - slave 
 0  R  ;;; Interfaces to WAN
       name="Cable Modem" default-name="ether3" type="ether" mtu=1500 actual-mtu=1500 mac-address=00:16:17:7B:2D:A1 fast-path=no last-link-up-time=feb/21/2016 20:20:46 link-downs=0 

 1  R  ;;; Interfaces to Guest Internet
       name="Guest Internet" default-name="ether2" type="ether" mtu=1500 actual-mtu=1500 mac-address=00:30:BD:B9:47:9B fast-path=no last-link-up-time=feb/21/2016 20:20:46 link-downs=0 

ip address print detail 
Flags: X - disabled, I - invalid, D - dynamic 
 0   address=192.168.0.10/24 network=192.168.0.0 interface=Cable Modem actual-interface=Cable Modem 

address=192.168.30.1/23 network=192.168.30.0 interface=Guest Internet actual-interface=Guest Internet

ip dns print 
	servers: 213.153.32.129,213.153.32.1
	dynamic-servers: 
	allow-remote-requests: yes
	max-udp-packet-size: 4096
	query-server-timeout: 2s
	query-total-timeout: 10s
	cache-size: 2048KiB
	cache-max-ttl: 1w
	cache-used: 16KiB

ip route print detail without-paging 
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 
 0 A S  dst-address=0.0.0.0/0 gateway=192.168.0.1 gateway-status=192.168.0.1 reachable via  Cable Modem distance=1 scope=30 target-scope=10 

 1 ADC  dst-address=192.168.0.0/24 pref-src=192.168.0.10 gateway=Cable Modem gateway-status=Cable Modem reachable distance=0 scope=10 

 2 ADC  dst-address=192.168.30.0/23 pref-src=192.168.30.1 gateway=Guest Internet gateway-status=Guest Internet reachable distance=0 scope=10

ip hotspot print detail 
Flags: X - disabled, I - invalid, S - HTTPS 
0   name="Hirschenwirt Guest Internet" interface=Guest Internet address-pool=Hirschenwirt Guest Internet profile=Hirschenwirt Guest Internet idle-timeout=5m keepalive-timeout=none login-timeout=none 
     addresses-per-mac=1 ip-of-dns-name=192.168.30.1 proxy-status="running"

ip hotspot profile print
Flags: * - default 
 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no 
     use-radius=no 

 1   name="Hirschenwirt Guest Internet" hotspot-address=192.168.30.1 dns-name="HSG-Hirschenwirt.lukashansl.at" html-directory=Hirschenwirt Guest Internet rate-limit="" http-proxy=0.0.0.0:0 
     smtp-server=213.153.32.141 login-by=cookie,http-chap,mac-cookie http-cookie-lifetime=3d split-user-domain=no use-radius=yes radius-accounting=no nas-port-type=ethernet radius-default-domain="" 
     radius-location-id="" radius-location-name="" radius-mac-format=XX:XX:XX:XX:XX:XX

ip dhcp-server print detail without-paging 
Flags: X - disabled, I - invalid 
 0   name="Hirschenwirt Guest Internet" interface=Guest Internet lease-time=1h address-pool=Hirschenwirt Guest Internet bootp-support=static authoritative=after-2sec-delay lease-script=""

ip pool print detail without-paging 
 0 name="Hirschenwirt Guest Internet" ranges=192.168.30.101-192.168.31.254

ip proxy print without-paging 
	enabled: yes
	src-address: ::
	port: 8080
	anonymous: no
	parent-proxy: ::
	parent-proxy-port: 0
	cache-administrator: administrator/administrator@lukashansl.at
	max-cache-size: 1024000KiB
	max-cache-object-size: 768KiB
	cache-on-disk: no
	max-client-connections: 600
	max-server-connections: 600
	max-fresh-time: 3d
	serialize-connections: no
	always-from-cache: no
	cache-hit-dscp: 4
	cache-path: disk1/web-proxy1

ip firewall nat print detail without-paging 
Flags: X - disabled, I - invalid, D - dynamic 
 0  D chain=dstnat action=jump jump-target=hotspot hotspot=from-client log=no log-prefix="" 

 1  D chain=hotspot action=jump jump-target=pre-hotspot log=no log-prefix="" 

 2  D chain=hotspot action=redirect to-ports=64872 protocol=udp dst-port=53 log=no log-prefix="" 

 3  D chain=hotspot action=redirect to-ports=64872 protocol=tcp dst-port=53 log=no log-prefix="" 

 4  D chain=hotspot action=redirect to-ports=64873 protocol=tcp hotspot=local-dst dst-port=80 log=no log-prefix="" 

 5  D chain=hotspot action=redirect to-ports=64875 protocol=tcp hotspot=local-dst dst-port=443 log=no log-prefix="" 

 6  D chain=hotspot action=jump jump-target=hs-unauth protocol=tcp hotspot=!auth log=no log-prefix="" 

 7  D chain=hotspot action=jump jump-target=hs-auth protocol=tcp hotspot=auth log=no log-prefix="" 

 8  D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=80 log=no log-prefix="" 

 9  D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=3128 log=no log-prefix="" 

10  D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=8080 log=no log-prefix="" 

11  D chain=hs-unauth action=redirect to-ports=64875 protocol=tcp dst-port=443 log=no log-prefix="" 

12  D chain=hs-unauth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix="" 

13  D chain=hs-auth action=redirect to-ports=64874 protocol=tcp hotspot=http log=no log-prefix="" 

14  D chain=hs-auth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix="" 

15 X  ;;; place hotspot rules here
      chain=unused-hs-chain action=passthrough to-addresses=0.0.0.0 log=no log-prefix="" 

16  D chain=hs-smtp action=dst-nat to-addresses=213.153.32.141 in-interface=Guest Internet log=no log-prefix="" 

17    ;;; masquerade hotspot network
      chain=srcnat action=masquerade src-address=192.168.30.0/23 log=no log-prefix="" 

18    chain=dstnat action=redirect to-ports=8080 protocol=tcp dst-port=80 log=no log-prefix=""

Re: Hotspot - No internet access - Driving me mad!

Posted: Mon Feb 22, 2016 2:16 pm
by p3rad0x
Hi,

I think the dhcp server lost its marbles.

The subnet should be 255.255.254.0, the 255.255.0.0 is from a /16 subnet.

If you re configure the dhcp to give addresses on the /23 subnet the issue should be solved

Re: Hotspot - No internet access - Driving me mad!

Posted: Mon Feb 22, 2016 2:42 pm
by mbrtonpye
This is what I thought too but, try as I might, it still gives me a 255.255.0.0 subnet

Re: Hotspot - No internet access - Driving me mad!

Posted: Mon Feb 22, 2016 3:06 pm
by mbrtonpye
So, I thought I would check again, so I had a look at the DHCP Server Networks tab, even though this is set up through the HotSpot Setup/Config.

I found that the Address was set to 192.168.30.0/24 !

Changed it to
Code: Select all
ip dhcp-server network print detail without-paging 
 0 ;;; hotspot network
   address=192.168.30.0/23 gateway=192.168.30.1 dns-server="" wins-server="" ntp-server="" caps-manager="" dhcp-option=""
and suddenly it all started to work again!!!!

It looks like it was simply a typo during the setup and everything should be OK now.

Thanks for reading and pushing me to look again at something that I had clearly overlooked!!!
All times are UTC+03:00
Page 1 of 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/