Community discussions

MikroTik App
 
bcmdevtl
just joined
Topic Author
Posts: 20
Joined: Sat Mar 27, 2021 2:40 am

Hotspot in VRF

Wed Apr 24, 2024 7:32 am

Hello,
I need to add a hotspot to a VRF, but when I add it to the VRF the login page becomes inaccessible and I'm stuck.
I found a related forum post on this, while the solutions is explained I'm not sure how to achieve this, anyone can help?

Ref forum post viewtopic.php?t=97469
1. Firstly, it is important to understand what is the source of this problem.
  1. The hotspot relies on two built-in services: DNS and Web server.
  2. When the interface is placed in the vrf, every packet entering the router will be marked with the routing-mark of that vrf.
  3. VRF routing table doesn't have access to the main routing table.
  4. Built-in services are accessible from the main routing table only.
2. Now, the solution becomes obvious. We need to:
  1. remove VRF marking from packets going to DNS server on the router,
  2. remove VRF marking from packets going to WEB server on the router,
  3. mark the packets going out from the DNS to public DNS server with the vrf mark,
  4. mark the packets from the router's web server with the vrf mark.
Hopefully someone will get this and could help suggest the settings to add to get this working.

Running ROS 7.14.1 on RB5009
 
bcmdevtl
just joined
Topic Author
Posts: 20
Joined: Sat Mar 27, 2021 2:40 am

Re: Hotspot in VRF

Mon May 06, 2024 5:00 am

Nobody? Support?
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1290
Joined: Tue Jun 23, 2015 2:35 pm

Re: Hotspot in VRF

Mon May 06, 2024 6:42 am

try this:
/ip firewall mangle
add action=mark-connection chain=prerouting connection-state=new new-connection-mark=hotspot_conn src-address=LAN passthrough=no
	
	/ip firewall mangle 
add action=mark-routing chain=prerouting connection-mark=hotspot_conn \
    in-interface=WAN new-routing-hotspot_rout
 
bcmdevtl
just joined
Topic Author
Posts: 20
Joined: Sat Mar 27, 2021 2:40 am

Re: Hotspot in VRF

Mon May 06, 2024 7:26 am

Hi Nichky,
Thanks for the reply, what would these mangle rules achieve?
Cheers
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1290
Joined: Tue Jun 23, 2015 2:35 pm

Re: Hotspot in VRF

Mon May 06, 2024 9:10 am

basically to use the correct VRF.

See how it goes, you need some sort rules on /ip/magle or /routing/rule/ in order to reach the Hotspot

Who is online

Users browsing this forum: BoraHorza, dwiyoga822 and 31 guests