Thu Aug 30, 2007 6:02 pm
There are several wizards to help you through it if you are a newbie. I have a few methods for quick setup that I like to take. They may not be the best but I can be up and running in 5 minutes by doing it this way.
First, get your addresses and interfaces sorted out. Identify what mirkotik has called ether1/2/etc correctly. Label then on your box for future reference and mark your network cables. Done? Good.
You might want to reset the router with
/system reset
to make sure nothing gets in the way. After that it will reset. Now lets get to making the fastest hotspot system that one can make:
Login (your password will have vanished here but your licence wont) using admin with no passrword using winbox with the correct MAC address as you do not have IP addresses attached at this time.
Step one (according to me) -> set the primary and secondary DNS first (it will stop you from having to do so at future points). DNS falls under IP as in /ip dns. Just use winbox if you cannot, try
/ip dns set pr xxx.xxx.xxx.xxx
(Mikrotik supports Truncated commands very well). and for your seconday
/ip dns set sec xxx.xxx.xxx.xxx
Next you will want to setup your IP addresses. Start with the side thats going to the internet side of things (i.e. your ISP link or another router on your lan. Use setup to get the addresses correct, all you need is THE address and THE subnet mask. If using winbox (which you should), select new terminal and type setup -set as truncated works just as well.
You get an option and type "a" to configure addresses and gateways.
Select the interface you want to be your public, enter address/subnet mask e.g like 10.0.0.0/255.0.0.0 and press enter.
the interface should be say "enabled"
Select "a" again but this time don't set up your private interface yet, select "g" to key in THE gateway. An using capital THE here coz these addresses are the part of your network where you really don't have much control over what they could be.
Now select /tool ping in winbox and try to ping your gateway. Next try a traceroute to your DNS server. If this works then you are on track and will have solved alot of trouble shooting before your system grows in complexity. Worked well? Perfect. If not then look at what could be one of the many many reasons from bad cables to issues with the ISP. Whatever these may be, let them not be your wrong wiring between your private and public interface (i.e. crossed cables). don't laugh, it happens.
Since the router is "sure" of the fact that it can achieve internet connectivity, you should know that your hotspot will not break. Back to the wizards.
Go through the second step for your other interface(s) by providing "a" (small a) address which will run on the hotspot side. This could be in whatever IP space you wish, lets put it as 192.168.0.1/255.255.255.0 for simplicity. And also assume that this is ether2 while the public side is ether1.
Mikrotik will add these addresses with the caption "added by setup" under your /ip addresses print (use winbox to verify). see /ip route as well to verify that the routes have been created and are valid (i.e) nothing in coloured text. Verified? Good. Next, you probably what DHCP to make life a bit easy - especially if laptops and other mobile devices are involved.
Click IP navigate to DHCP SERVER and pick SETUP. There will be a guided dialogue requiring you set the interface first. Select ether2 and click next. Its okey to keep clicking next unless you need a more user defined address allocation space e.g. 192.168.0.150-192.168.0.254.
Done. Easy isn't it? Now you can select IP HOTSPOT and again use the setup wizard. If in winbox this should be very simple. Everything suggested will be optimal except for the certificate part and and the SMPT server options. Enter the right information here to suite your network. It will end with a suggestion for a "sample" user called admin without a password. Accept this.
Run to the cafeteria for a cup of coffee and while there phone your boss with a "by the way the hotspot is working".
Try connect via DHCP. if using windows, check out your ipconfig/all and see what it has, especially for the default gateway and all else. Test that SMPT is being correctly forwarded. Then move on to the hardest part (again according to me) which is building customized login pages, walled gardens etc.
I've been running a mid sized network with 4 routers (2 mikrotik and 2 Cisco) for 2 years now. If there ever is an quicker way of building a hotspot (without scripting -i.e. no cheating) then let this tread go on. The faster we can get this done, the faster we can all recover from a MAJOR crash.
Not that Mikrotik crashes often, but thats another thread.