Hi!

Please see attached diagrams. I'm trying to setup a hotspot wifi-network on a site. The network consist of a tech/admin part with address 192.168.10.xxx/24 and a guest/hotspot part with address 192.168.20.xxx/22.

The hardware consist of a RB433 that's running the hotspot service. The hotspot is running on the bridge for the local AP on the RB433 and the VPLS bridge to RB951 (used as external AP). Another local network adapter on the RB433 is used to bridge the network with an external SXT-device to a RB951.

When the hotspot service is disabled, users can login and have Internet access on the guest/hotspot network on both AP. Apparently everything is working well in this situation.

However when the hotspot service is enabled users can successfully login to the hotspot service on the local AP (i.e. same unit as the hotspot is running). But when trying to connected to the external AP, clients is redirected to the hotspot server (to login), but cannot reach its addresss on 192.168.20.1. Client will get correct DHCP address on both networks and AP. Also if clients log in at the hotspot service on the local AP and then roam into the external AP whey will continue to have internet access. It's just the hotspot address 192.168.20.1 thats unreachable when the hotspot service is enabled.

If I ping 192.168.20.1 from the external AP VPLS I get "net prohibited" when the hotspot service is enabled. When the hotspot is disabled, I get reply from 192.168.20.1.

What do I miss here, or should I use another setup?

You may have a bridge between the ports that causes the other network is within the hotspot

The Hotspot SSID is bridged to the VPLS interface on the AP, and the VPLS interface is a port of the Hotspot bridge on the router.