Hotspot, Mangle, and Policy Routing
Posted: Tue Jan 03, 2006 7:03 pm
Hi All,
For some time I have been attempting to get Policy Routing to work with my ver 2.9 Hotspot system.
We have two ADSL connections, and want to route all port 80/http traffic down one adsl, and the rest down the other. We did this on ver 2.8, using Mangle and Mark Routing and it worked perfectly.
But this approach doesnt seem to work on ver 2.9, and I think its because the Hotspot system has been revamped on the newer version.
Does anyone have any advice?
When I put a mangle rule in, I can see the counters counting the traffic going through, but it just doesnt seem to affect which gateway the packets leave for the internet.
In the HotSpot User AAA chapter of the documentation it refers to a Property "incoming-packet-mark" and "outgoing-packet-mark" under /ip hotspot user profile. Can these marks be used in the same way as Mange "Mark Routing"?
Or should I be using the "Incoming-filter"/"Outgoing-filter" and setting up a rule in the Firewall (if so where).
Any advice would be very gratefully received!!
TIA
rgds Jim Heck
For some time I have been attempting to get Policy Routing to work with my ver 2.9 Hotspot system.
We have two ADSL connections, and want to route all port 80/http traffic down one adsl, and the rest down the other. We did this on ver 2.8, using Mangle and Mark Routing and it worked perfectly.
But this approach doesnt seem to work on ver 2.9, and I think its because the Hotspot system has been revamped on the newer version.
Does anyone have any advice?
When I put a mangle rule in, I can see the counters counting the traffic going through, but it just doesnt seem to affect which gateway the packets leave for the internet.
In the HotSpot User AAA chapter of the documentation it refers to a Property "incoming-packet-mark" and "outgoing-packet-mark" under /ip hotspot user profile. Can these marks be used in the same way as Mange "Mark Routing"?
Or should I be using the "Incoming-filter"/"Outgoing-filter" and setting up a rule in the Firewall (if so where).
Any advice would be very gratefully received!!
TIA
rgds Jim Heck