Community discussions

MikroTik App
 
raskin
just joined
Topic Author
Posts: 4
Joined: Sun Dec 21, 2014 9:04 am

Regarding https sites not redirected to hotspot portals

Sun Dec 21, 2014 9:50 am

Dear All,

I have installed hotspot in Mikrotik Router OS 6.23 and while users tries to open http sites its being redirected to hotspot portal and if users tries to open any https based sites it does not redirects to hotspot portal.

Information : Normal Hotspot Setup done with no certificate installed either internal or external purchased.If user first time tries to open any http based site it goes to hotspot portal and after successfull login user can open both http and https site without any problem.

Is there any way to get this https site opening and redirection to hotspot is possible?

Thanks
Raskin
 
User avatar
jacekes
Member Candidate
Member Candidate
Posts: 167
Joined: Tue Aug 30, 2011 9:34 am
Location: Poznan, Poland
Contact:

Re: Regarding https sites not redirected to hotspot portals

Mon Dec 22, 2014 1:28 pm

It should work also for secured sites.
Check if you have a redirect rule for dst-port 443 in IP -> firewall -> NAT. This rule should be dynamic and automatically added by the hotspot dialog.
 
raskin
just joined
Topic Author
Posts: 4
Joined: Sun Dec 21, 2014 9:04 am

Re: Regarding https sites not redirected to hotspot portals

Mon Dec 22, 2014 5:35 pm

Hi,

I have those rules dynamically created.No https sites does not redirected to hotspot login.Only http does.

[admin@MikroTik] > /ip firewall nat print dynamic
Flags: X - disabled, I - invalid, D - dynamic
0 D chain=dstnat action=jump jump-target=hotspot hotspot=from-client log=no log-prefix=""

1 D chain=hotspot action=jump jump-target=pre-hotspot log=no log-prefix=""

2 D chain=hotspot action=redirect to-ports=64872 protocol=udp dst-port=53 log=no log-prefix=""

3 D chain=hotspot action=redirect to-ports=64872 protocol=tcp dst-port=53 log=no log-prefix=""

4 D chain=hotspot action=redirect to-ports=64873 protocol=tcp hotspot=local-dst dst-port=80 log=no log-prefix=""

5 D chain=hotspot action=redirect to-ports=64875 protocol=tcp hotspot=local-dst dst-port=443 log=no log-prefix=""

6 D chain=hotspot action=jump jump-target=hs-unauth protocol=tcp hotspot=!auth log=no log-prefix=""

7 D chain=hotspot action=jump jump-target=hs-auth protocol=tcp hotspot=auth log=no log-prefix=""

8 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=80 log=no log-prefix=""

9 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=3128 log=no log-prefix=""

10 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=8080 log=no log-prefix=""

11 D chain=hs-unauth action=redirect to-ports=64875 protocol=tcp dst-port=443 log=no log-prefix=""

12 D chain=hs-unauth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix=""

13 D chain=hs-auth action=redirect to-ports=64874 protocol=tcp hotspot=http log=no log-prefix=""

14 D chain=hs-auth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix=""

Is there any solution for that??

Thanks