Hi all,

We have several MT accesspoints running hotspot in rural areas all of which are authenticated at a central MT hotspot via EoIP. The problem is that we can not identify where the client is connecting to the hotspot center, i.e. from which access point. Is there any possibility to tag the EoIP packets or otherwise so we can see where the clients are connecting from?

Regards,
Daniel G.

I suppose you are bridging all the EoIPs in one single bridge, then you have a single service on the HotSpot Bridge...
If you want to see where are they coming from, you might need to not bridge them all and set an hotspot service for each EoIP termination..

Or you can look for the mac address of the client in /bridge hosts.
There you have a table with all the mac adresses with the EoIP tunnel from where it is coming.

Esteban

Your various access points could syslog to a central location so you could track where people are signing in. Mac address of the customer would match from the logs to the hotspot tables.

How do you bridge the clients layer2 connections to the actual APs back to the HotSpot? I think this is not possible.

For example, if you have a Wi-Fi device acting as an AP to which the clients associate, and then directly to it connected over Ethernet - the HotSpot MT box - all clients coming from that Wi-Fi device will have the same MAC address on its Etnernet side - the MAC of the AP device.

And even if you had all MT APs - you would still need WDS for this to work!

So how do you set up this kind of bridging?

It is possible since i've this working configuration http://forum.mikrotik.com/viewtopic.php?f=2&t=31169
But i'm encountering the same problem of danniemax, recognizing where the users are coming from...
ATM i don't have much time to setup a syslog or a mangling firewall.. so i leave it as it is.
Usermanager is tracking connection by himself and i'm logging with netflow all the traffic...

So its working because its a bridge with wlan1 and the EoIP interface on an MikroTik device? And then that EoIP goes to the HotSpot?

Exactly!
WLAN > EoIP ------\/
WLAN > EoIP > HotSpot Bridge > HotSpot Service > Radius
WLAN > EoIP ------/\

This is GOOD that we can use it like this. Because we can establish an EoIP from a MT to a MT.

But what If I need to sue a non-MT device for the Wi-Fi? Which devices work, and how? If any? Maybe none lol. Only MT + EoIP tunnel.

why should you NEED to use a non-mikrotik equipment?
Also it goes out of topic...

Cheaper + easier to deploy in this case.

dont forget you dont really have to use bridging for hotspot. You can just route users thru the hotspot interface from anywhere. Routing is more efficient and then you know where things are coming from as well. It does use more IP addresses, but on a hotspot private IPs are no big deal usually.

Oh hello changeip, nice to see you posting and helping mate

So, let's say - I put up a generic Wi-Fi AP device (a stupid little Bullet device for example) in routing mode and behind it a big powerful MikroTik Router (that unforutnately has only eth ports and no Wi-Fi). So the generic Wi-Fi device I setup in ... what mode, so the HotSpot will see each user as .... what ? A different IP address coming from the same MAC address?

aaaaaahh. i see your point. Hotspot works on MAC addresses. Doh!

A buddy of mine told me (guaranteed - tested) that it fnckiug works with any Wi-Fi device in ap bridge mode. Fnck if I knew this earlier. Fnck.