MikroTik Hotspot + Cisco Core Architecture

📄 ENTERPRISE NETWORK DOCUMENT

MikroTik Hotspot + Cisco Core Architecture

🧠 1. Network Overview

یہ setup ایک enterprise hotspot architecture ہے جس میں:

  • Cisco Layer 3 Switch (10.10.24.1) → Core Gateway + Routing
  • MikroTik Router (10.10.24.2) → Hotspot + User Authentication
  • Internet uplink Cisco کے ذریعے manage ہوتا ہے
  • MikroTik صرف user login + NAT handle کرتا ہے

🔄 Traffic Flow

Internet
   │
Cisco Core (10.10.24.1)
   │
MikroTik Hotspot (10.10.24.2)
   │
Users (WiFi / LAN)

⚙️ MikroTik Role

  • Captive Portal (Hotspot Login)
  • DHCP Server
  • NAT (User → Internet)
  • User authentication (MAC / Web login)
  • Traffic control (optional)

⚙️ Cisco Role

  • Default Gateway (SVI)
  • Inter-VLAN routing
  • Static routing back to MikroTik
  • Core network control

💾 2. MIKROTIK FULL CONFIG (NOTEPAD SCRIPT)

👉 Save file as:
mikrotik-hotspot.rsc

########################################
# ENTERPRISE HOTSPOT CONFIG
# MikroTik RouterBOARD 750G r2
########################################

# =========================
# INTERFACES
# =========================
/interface ethernet
set [find default-name=ether1] name=WAN comment="To Cisco Core"
set [find default-name=ether2] name=LAN comment="Hotspot LAN"

# =========================
# IP ADDRESSING
# =========================
/ip address
add address=10.10.24.2/23 interface=LAN comment="Hotspot LAN"
add address=172.16.50.2/24 interface=WAN comment="Uplink to Cisco"

# =========================
# ROUTING
# =========================
/ip route
add gateway=172.16.50.1 comment="Default Route to Cisco Core"

# =========================
# DNS
# =========================
/ip dns
set servers=8.8.8.8,1.1.1.1 allow-remote-requests=yes

# =========================
# DHCP SERVER
# =========================
/ip pool
add name=hotspot_pool ranges=10.10.24.10-10.10.25.200

/ip dhcp-server
add name=dhcp_hotspot interface=LAN address-pool=hotspot_pool lease-time=1h disabled=no

/ip dhcp-server network
add address=10.10.24.0/23 gateway=10.10.24.2 dns-server=10.10.24.2

# =========================
# NAT
# =========================
/ip firewall nat
add chain=srcnat out-interface=WAN action=masquerade comment="Internet NAT"

# =========================
# FIREWALL SECURITY
# =========================
/ip firewall filter
add chain=input connection-state=established,related action=accept comment="Allow Established"
add chain=input protocol=icmp action=accept comment="Allow Ping"
add chain=input src-address=10.10.24.0/23 action=accept comment="Allow LAN Access"
add chain=input in-interface=WAN action=drop comment="Drop WAN Access"

# =========================
# HOTSPOT SETUP
# =========================
/ip hotspot profile
add name=hsprof hotspot-address=10.10.24.2 login-by=mac,cookie,http-chap

/ip hotspot
add name=hotspot1 interface=LAN address-pool=hotspot_pool profile=hsprof disabled=no

# =========================
# HOTSPOT USER EXAMPLE
# =========================
/ip hotspot user
add name=admin password=Admin@123

# =========================
# DISABLE UNSAFE SERVICES
# =========================
/ip proxy set enabled=no
/ip service disable telnet
/ip service disable ftp

🧱 3. CISCO CONFIG (NOTEPAD SCRIPT)

👉 Save as:
cisco-core.txt

########################################
# CISCO CORE L3 CONFIG
########################################

# VLAN Interface (Gateway)
/interface vlan
interface Vlan24
 ip address 10.10.24.1 255.255.254.0
 no shutdown

# Route back to MikroTik hotspot network
ip route 10.10.24.0 255.255.254.0 10.10.24.2

# Optional Security ACL
ip access-list standard HOTSPOT_USERS
 permit 10.10.24.0 0.0.1.255
 deny any

📌 4. HOW TO APPLY (STEP-BY-STEP)

MikroTik:

  1. Winbox login
  2. Open New Terminal
  3. Paste .rsc script
  4. Or import file: 
/import file-name=mikrotik-hotspot.rsc

Cisco:

  1. Paste in CLI
  2. Save config: 
write memory

🔥 5. FINAL RESULT

After setup:

  • Users connect to WiFi/LAN
  • Redirect to Hotspot login page
  • MikroTik authenticates users
  • Traffic goes → Cisco → Internet
  • Secure + controlled + scalable network

Comments

Post a Comment

Popular posts from this blog

Windows 11 rdp problem resolved

Windows 11 rdp problem resolved Remote Desktop Connection  Failed to reconnect to your remote session. Please try to connect again.  [OK]  Error code: 0x1108 Extended error code: 0x0 Timestamp (UTC): 02/16/26 03:36:44 AM Press Ctrl+C to copy. Win10 ➜ Win10 کام کر رہا ہے Win11 24H2 ➜ Win10 پر ہی 0x1108 آ رہا ہے پورٹ 3389 LISTEN کر رہی ہے LAN بھی same ہے تو اب مسئلہ Windows 11 24H2 کے نئے RDP encryption mode کا ہے۔ یہ TLS 1.3 prefer کرتا ہے جبکہ بعض Win10 builds TLS 1.2 پر ہوتے ہیں۔ ہم Win11 کو force کریں گے کہ وہ پرانا compatible mode استعمال کرے۔ 🔴 FINAL COMPATIBILITY FIX (Win11 24H2) یہ صرف Windows 11 پر Admin CMD میں چلائیں: reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v Enabled /t REG_DWORD /d 0 /f reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v DisabledByDefault /t REG_DWORD /d 1 /f reg add "HKLM\SYSTEM\CurrentControlSet\Co...
Read more

Microsoft Activation Scripts (MAS)

  irm https://get.activated.win | iex irm https://massgrave.dev/get | iex Download / How to use it? ​ Method 1 - PowerShell (Recommended) ​ Right-click on the Windows start menu and select PowerShell or Terminal (Not CMD). Copy and paste the code below and press enter irm https://get.activated.win | iex or (deprecated, will be retired on Aug 31 2024, use above instead) irm https://massgrave.dev/get | iex You will see the activation options. Follow the on-screen instructions. That's all. On older Windows builds you may need to run the below command before, [Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12 The Powershell method does not work on Windows 7. Use the Method 2 - Traditional instead. The URL get.activated.win may be blocked by some DNS services because it is a new domain. Method 2 - Traditional ​ Download the file under the code button from  GitHub  or  Bitbucket Right-click on the downloaded zip file and extract In the extracted ...
Read more

Windows 11 ke common RDP issues fix karta hai

  🧾 Use ka tareeqa Notepad kholo Upar wala code paste karo File save karo as: rdp_fix.bat Right-click → Run as Administrator ⚠️ Note Yeh script Windows 11 ke common RDP issues fix karta hai Agar phir bhi issue aaye to network ya server-side config check karna padega -------------------------------------------------------------------------- @echo off title RDP Fix Tool - Windows 11 color 0A echo =============================== echo RDP Fix Script (Win11) echo =============================== echo. :: Run as admin check net session >nul 2>&1 if %errorLevel% NEQ 0 ( echo [ERROR] Please run this script as Administrator! pause exit ) echo [1] Disabling RDP UDP (Fix for disconnect/lag)... reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" /v fClientDisableUDP /t REG_DWORD /d 1 /f echo [2] Enabling Remote Desktop Firewall Rules... netsh advfirewall firewall set rule group="remote desktop" new enable=Yes echo [3] Ope...
Read more