Syed Jahanzaib Personnel Blog to Share Knowledge !

February 12, 2012

Mikrotik PCC with HOTSPOT

Filed under: Mikrotik Related — Tags: , , , — Syed Jahanzaib / Pinochio~:) @ 12:45 PM

I received many emails regarding hotspot not working with PCC. Its very simple to run hotspot and PCC together on same Mikrotik Server.

(Personally I don’t like hotspot due to various security reasons, but still its useful in many environment)

First configure your mikrotik with PCC and HOTSPOT. Then Just add hotspot=auth in every pcc rules and it will work like a charm.
For example . . .

/ip fi man

add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN1_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0

add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN2_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1

Cheer’s

Syed Jahanzaib

28 Comments »

  1. جزاك اللهُ خيراً
    Sir Agar Pcc+Hotspot Key Saat Enternal Web proxy Enable karny ka Bata deh?

    Comment by Manzor — February 13, 2012 @ 12:06 PM

  2. aur dhcp main kiakare ge

    Comment by MANI — February 15, 2012 @ 9:39 AM

  3. I tried this it working with 2 Lines but i cant get it work with 3&4 Adsl Lines,
    i Added the hotspot auth to the 16 code in mangle(with pcc load balancing for 4 lines ).

    Comment by Ahmed Fathi — February 24, 2012 @ 4:27 PM

  4. I guess the article was very clear about where to add the rules.

    Add hotspot=auth in PCC rules

    for example.

    /ip firewall mangle

    add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN1_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0

    add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN2_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1

    Comment by Syed Jahanzaib / Pinochio~:) — February 25, 2012 @ 12:44 PM

  5. Ok thanks it works after a few tries ,btw idk what wrong i did before , i just did a fresh set up and everything looks find,
    Thanks for your help.

    Comment by Ahmed Fathi — February 25, 2012 @ 4:57 PM

  6. everything looks fine **

    Comment by Ahmed Fathi — February 25, 2012 @ 4:59 PM

  7. pcc method working well for me thanks jahanzaib bhai…

    Comment by waqar — February 29, 2012 @ 9:03 AM

  8. ASSLAM-0-ALIKUM sir aek pc main lodblasing aor hotspot chla sakty hain? kia aek sath sahi kam kareen gy agar han to plz is ki seting b bta deen very very thanxxxx.

    Comment by Ijaz Marhal — March 13, 2012 @ 10:24 AM

  9. Asalam o alakum.. bro you done excellent job of writing these tut…
    i have a problem with hotspot login page
    i use Vmware 7 workstation for test purpose and config hotspot on mikrotik 2.97, 3.2, 3.3, 5.8
    but all of these fail to show the login page of hotsopt
    i tried by giving ip http://10.10.10.1/login
    but browser show page cant not be displayed
    what is problem
    thax in adv

    Comment by Abdur Rehman — March 21, 2012 @ 6:05 PM

    • Make sure your Mikrotik can resolve DNS query, otherwise user will not get the login page.

      Comment by Syed Jahanzaib / Pinochio~:) — March 22, 2012 @ 8:47 AM

      • jahanzaib bhae DNS setting main primary DNS 10.10.10.1 dia hai. kia ye tek nahi hai?? ya koi aur setting karni hai.?
        2nd kia main VMware se physical network ko mikrotik se serve kar sakta ho?? aur ye kia stable hoga?

        Comment by Abdur Rehman — March 24, 2012 @ 10:31 PM

      • If you are using hotspot, then primary dns of client MUST be pointing to Mikrotik server.

        Comment by Syed Jahanzaib / Pinochio~:) — March 25, 2012 @ 4:46 PM

      • i want to serve physical network from mikrotik install on vmware workstastion 7 (host OS is XP pro). would it be stable for this purpose?? like this
        Internet —> LAN1 (Host OS XP pro) vmware 7 –> Mikrotik –> Physical AP on (LAN2) –> Client/user

        Sys Spac (DELL GX 620, 3.6 GHz HT, 2 GB RAM, 500 GB HDD)

        Comment by Abdur Rehman — March 26, 2012 @ 3:15 PM

      • Yes Mikrotik / TMG and other servers are successfully working in Virtual’ized environment. I my self using TMG and many other servers in Microsoft HYPER-V and VMWARE ESXi 4

        But you have to read a lot to consider some security related concepts in order to secure and protect the virtual’ized environment from outer world. use separate Network interfaces for LAN / WAN . Make sure your concepts are clear on how things works in virtual world :)

        Comment by Syed Jahanzaib / Pinochio~:) — March 27, 2012 @ 10:41 PM

      • Thank you so much jahanzaib bhae for your kind support…
        now i want to know about Wifi Mini ISP setup
        which devices/equipment would be required for covrage of 1.5 – 2 Km radius area and
        approximate cost of the setup???

        Comment by Abdur Rehman — March 29, 2012 @ 10:41 PM

      • Sorry I don’t have any idea o wireless field.

        You can contact Following for WIFI related equipments.

        Dreams Network Technology
        Karachi , Pakistan
        Asia

        Office : A-1349 Gulshan-e-Hadeed Phase-1 Karachi
        Contact No: +923132118237 , +923332828526
        Email: info@dreamnw.com

        Comment by Syed Jahanzaib / Pinochio~:) — March 31, 2012 @ 3:34 PM

  10. sir main nay mikrotik install kiya hua hai.. Main nay load balancing karne hai… Ap mujhay yay bata dain k main sirf yay do lines mikrotik mian dalnay say load balancing ho jae ge ya nahi… Ap nay yay jo script de hai wo mukamal hai? agr nahi do mukamal bata dain…. Plzzz

    Comment by Owais Malik — March 26, 2012 @ 7:45 PM

    • It’s complete, just don’t go blindly for it, read it and try to understand it, once you get it, then modify it as per your network scheme, then deploy it.

      Comment by Syed Jahanzaib / Pinochio~:) — March 27, 2012 @ 10:34 PM

  11. salam. pcc rules kahan par hotay hain and 2 WAN k liye jo ooper ap nay example di hai /ip fi man

    add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN1_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0

    add action=mark-connection chain=prerouting disabled=no dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN2_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1

    yahi buhat hai ya aur b rules hotay hain jin main yay add krna paray ga ??

    Comment by Shafqat Farhan — April 5, 2012 @ 4:50 PM

  12. jahanzaib bahi kya yeh userman hum use ker saktay hain wifi network per
    aur mainay pochana tha k yeh kis tarha se apply ker saktay hain
    tareqa bata dain plz

    Comment by Taher Ahmed Ghouri — May 7, 2012 @ 2:08 AM


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s

Theme: Silver is the New Black. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.

Join 250 other followers