Hotspot login sahifasini PCC bilan barqaror qilish

⏱ O‘qish vaqti: 2 daqiqa

Qisqacha

Hotspot login sahifasining yo‘qolishini oldini olasiz
PCC muvozanatida hotspot auth trafikini NAT orqali ruxsat berasiz
Mangle qoidalari bilan lokal trafikni bypass qilasiz
Qoida tartibini to‘g‘ri joylashtirish muhim

PCC load balancing ishlatganingizda hotspot login sahifasi ko‘rinmasligi yoki avtomatik yo‘naltirilmasligi keng tarqalgan muammo. Bu sahifa foydalanuvchi autentifikatsiyasini to‘xtatadi va tarmoqdan foydalanishni qiyinlashtiradi. Quyidagi sozlamalar NAT va mangle qoidalari orqali bu muammoni bartaraf etadi. Natijada hotspot sahifasi har doim to‘g‘ri ko‘rinadi.

Talablar

RouterOS 6 yoki 7 versiyasi
Hotspot va PCC load balancing sozlangan bo‘lishi
Administrator huquqi bilan routerga kirish
Terminal yoki WebFig orqali firewall sozlamalariga kirish

Sozlash bosqichlari

1. NAT qoidasi qo‘shish

Hotspot autentifikatsiya trafikini bloklamaslik uchun pre-hotspot zanjirida accept amalini qo‘shamiz. Bu qoidada dst-address-type=!local va hotspot=auth filtrlaridan foydalaniladi. Kod blokida ko‘rsatilgan tarzda NAT qoidasini qo‘shing.

Having trouble with the Hotspot Login Page in PCC Load Balancing which often fails to appear or doesn't automatically redirect?

Just add this in NAT for hotspot=auth

Still failing too? we play a little with hotspot = auth in Load balancing PCC in mangle, adjust it to each condition, for example like this, just add hotspot=auth

/ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth
Still failed too? delete all the above methods and try to bypass all local traffic, make sure it is located at the top of the mangle (LOCAL-IP respectively, enter in the add-list)

add action=mark-connection chain=prerouting dst-address-list=!IP-LAN dst-address-type=!local hotspot=auth new-connection-mark=E1-WAN_connmark passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 src-address-list=IP-LAN
add action=mark-connection chain=prerouting dst-address-list=!IP-LAN dst-address-type=!local hotspot=auth new-connection-mark=E2-WAN_connmark passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 src-address-list=IP-LAN
Credit: Unknown

2. Mangle qoidalari bilan trafikni belgilash

Agar NAT qoidasidan keyin ham muammo davom etsa, prerouting zanjirida mark-connection amali bilan ikki alohida qoidani qo‘shamiz. Har bir qoidada per-connection-classifier=both-addresses-and-ports:2/0 yoki 2/1 orqali PCC ning ikkita yo‘nalishi ajratiladi. Bu hamma lokal trafikni bypass qiladi va hotspot sahifasini ko‘rsatadi.

Having trouble with the Hotspot Login Page in PCC Load Balancing which often fails to appear or doesn't automatically redirect?

Just add this in NAT for hotspot=auth

Still failing too? we play a little with hotspot = auth in Load balancing PCC in mangle, adjust it to each condition, for example like this, just add hotspot=auth

/ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth
Still failed too? delete all the above methods and try to bypass all local traffic, make sure it is located at the top of the mangle (LOCAL-IP respectively, enter in the add-list)

add action=mark-connection chain=prerouting dst-address-list=!IP-LAN dst-address-type=!local hotspot=auth new-connection-mark=E1-WAN_connmark passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 src-address-list=IP-LAN
add action=mark-connection chain=prerouting dst-address-list=!IP-LAN dst-address-type=!local hotspot=auth new-connection-mark=E2-WAN_connmark passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 src-address-list=IP-LAN
Credit: Unknown

3. Qoidalarni to‘g‘ri joylashtirish

Yuqoridagi mangle qoidalarini zanjir boshiga, ya’ni boshqa barcha qoidalardan oldinga qo‘ying. Agar avvalgi usullar qo‘shilgan bo‘lsa, ularni o‘chirib, yangi qoidalarni birinchi o‘ringa joylashtiring.

Tekshirish

Routerga foydalanuvchi sifatida ulanib, hotspot login sahifasi normal ravishda ochilishini tekshiring; autentifikatsiya muvaffaqiyatli bajarilishi kerak.

Diqqat:

Qoida tartibi muhim – NAT va mangle qoidalari yuqorida bo‘lishi kerak
Mangle qoidalari boshqa trafikga ta’sir qilishi mumkin, ehtiyot bo‘ling
Qoida qo‘shgandan keyin hotspot xizmatini qayta ishga tushiring

Muammolar va yechimlar

Login sahifasi hali ham ko‘rinmayapti

Barcha oldingi usullarni o‘chirib, lokal trafikni bypass qilish uchun mangle qoidalarini zanjir boshiga qo‘ying.

NAT qoidasi ishlamayapti

dst-address-type=!local va hotspot=auth parametrlarini to‘g‘ri kiritilganligini tekshiring.

Xulosa

Bu NAT va mangle qoidalari PCC muvozanatida hotspot login sahifasining barqaror ishlashini ta’minlaydi. Qoidalarni to‘g‘ri joylashtirish va kerakli filtrlarni qo‘llash muhim. Endi foydalanuvchilar sahifani muammosiz ko‘ra oladi.

Manba: Solution For Hotspot Login Page with LB PCC — mikrotiktool.github.io