Centralized network topology fails

aferreiro · Joined: 21 Mar 2006 Posts: 8 Location: Tampico, Mexico

Hi, I will apreciate your support in this cuestion, because solving this problem will give the decission to buy a full license of firstspot.

First of all, I'll like to apologize for my english, it's not good.

I've intalled firstspot in a centralized network topology. I want to offer the service over a cable network I manage.

I have firstspot in 10.7.2.1, and my cable modem termination system in 10.20.7.2 (firstspot server interface) and 20.20.1.1 (cable network interface). I have a router (nat is disabled) in my cpe network at 20.20.6.80, and 10.20.8.0/24 on lan side, and all routers are configure. A static route to 10.20.8.0 through my cmts (10.20.7.2) is programmed in firstspot server, a static route to 10.20.8.0/24 trought 20.20.6.80 is programmed in my cmts, and a route map is programmed in my cmts to redirect all incoming traffic from 10.20.8.0/24 to 10.20.7.1

I can see firstspot server from 10.20.8.100, and even I can manage it remotely using vnc. I also can do pings from firstspot server to a client pc in the remote router and vice versa.

So... I have full ip connectivity from behind my remote router behind a cable modem and my firstspot server. Firstspot is also configuren to use ip bassed session handling, and, in multiple networks segments, I've programmed 10.20.8.1 255.255.255.0 with gateway 10.20.7.2 (my cmts). I tried programming also 10.20.8.0 255.255.255.0.

Even I have full connectivity to firstspot trough my cable network, I can't go further. Theres no way I can see the captive portal page and surf the net, even my remote router can resolve dns names!!

Please, I'll apreciate your support. The buying decision is already made, and it's only waiting for a working demo of the system.

Thanks.

aferreiro · Joined: 21 Mar 2006 Posts: 8 Location: Tampico, Mexico

One more thing I think must be important.

Even I'm not redirected to the captive portal, I was able to perform a login going directly to the login page, writing http://10.20.7.1:5786, witch redirects me to http://10.20.7.1:5788/login_form.php?&desturl=http%3A%2F%2F10.20.7.1%2F%3A5786&patronsoft1=1678251018&patronsoft2=0.

Permorming the login, now I appear as connected in the status page at the server, but the client ip must be 10.20.8.100 and appears as 0.0.0.0. It seems the server doesn't register the correct client ip, so it can't find the path back to it.

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

First, your Multiple Network Segment setting should be 10.20.8.1 255.255.255.0 10.20.7.2 (instead of 10.20.8.0 255.255.255.0 10.20.7.2).

Please check out technical FAQ article http://www.patronsoft.com/forum/viewtopic.php?t=1086 and http://www.patronsoft.com/forum/viewtopic.php?t=1088 .

If you still have difficulties, please pass me:
1) config.ini file
2) ipconfig/all for FirstSpot
3) ipconfig/all for client PC
_________________
~ Patronsoft Limited ~

aferreiro · Joined: 21 Mar 2006 Posts: 8 Location: Tampico, Mexico

Hi Alan, as you requested, this are the configurations of server and remote computer. I post also trace routes and pings so you can see we have ip connectivity.

I made an adicional test, connecting a client computer directly in the same subnet of the server, 10.20.7.0/24, and it works fine, but it keeps with the same problem when I try to access internet from another subnet behind a remote router, from 10.20.8.100.

On the other side, I solved the offloading issue. I run firstspot on a Dell 1850 with two Intel pro/1000 MT network interfaces. Even I disabled all offloading tcp/ip receive/transmit cheksums, stills presents the same problem from a remote network (not from the same subnet of the server on the hotspots side).

If you need access to the server, please let me know, to pass you off the forum the way to remotely control it.

CLIENT COMPUTER:

C:\WINDOWS\system32>ping 10.20.7.1

Haciendo ping a 10.20.7.1 con 32 bytes de datos:

Respuesta desde 10.20.7.1: bytes=32 tiempo=14ms TTL=126
Respuesta desde 10.20.7.1: bytes=32 tiempo=14ms TTL=126
Respuesta desde 10.20.7.1: bytes=32 tiempo=42ms TTL=126
Respuesta desde 10.20.7.1: bytes=32 tiempo=44ms TTL=126

Estadísticas de ping para 10.20.7.1:
Paquetes: enviados = 4, recibidos = 4, perdidos = 0
(0% perdidos),
Tiempos aproximados de ida y vuelta en milisegundos:
Mínimo = 14ms, Máximo = 44ms, Media = 28ms

C:\WINDOWS\system32>ping 10.20.7.2

Haciendo ping a 10.20.7.2 con 32 bytes de datos:

Respuesta desde 10.20.7.2: bytes=32 tiempo=38ms TTL=254
Respuesta desde 10.20.7.2: bytes=32 tiempo=37ms TTL=254
Respuesta desde 10.20.7.2: bytes=32 tiempo=26ms TTL=254
Respuesta desde 10.20.7.2: bytes=32 tiempo=10ms TTL=254

Estadísticas de ping para 10.20.7.2:
Paquetes: enviados = 4, recibidos = 4, perdidos = 0
(0% perdidos),
Tiempos aproximados de ida y vuelta en milisegundos:
Mínimo = 10ms, Máximo = 38ms, Media = 27ms

C:\WINDOWS\system32>tracert -d 10.20.7.1

Traza a 10.20.7.1 sobre caminos de 30 saltos como máximo.

1 19 ms 1 ms 1 ms 10.20.8.1
2 107 ms 10 ms 64 ms 10.10.1.1
3 68 ms 11 ms 12 ms 10.20.7.1

Traza completa.

C:\WINDOWS\system32>tracert -d 148.245.57.5

Traza a 148.245.57.5 sobre caminos de 30 saltos como máximo.

1 5 ms 1 ms 1 ms 10.20.8.1
2 30 ms 18 ms 11 ms 10.10.1.1
3 * * * Tiempo de espera agotado para esta solicitud.
4 37 ms 11 ms 24 ms 148.245.57.5

Traza completa.

C:\WINDOWS\system32>ipconfig /all

Configuración IP de Windows

Nombre del host . . . . . . . . . : AurelioLap
Sufijo DNS principal . . . . . . :
Tipo de nodo . . . . . . . . . . .: difusión
Enrutamiento habilitado. . . . . .: No
Proxy WINS habilitado. . . . . : No
Lista de búsqueda de sufijo DNS: cablenext

Adaptador Ethernet Conexiones de red inalámbricas :

Sufijo de conexión específica DNS : cablenext
Descripción. . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection
Dirección física. . . . . . . . . : 00-13-CE-53-9A-E5
DHCP habilitado. . . . . . . . . : No
Autoconfiguración habilitada. . . : Sí
Dirección IP. . . . . . . . . . . : 10.20.8.100
Máscara de subred . . . . . . . . : 255.255.255.0
Puerta de enlace predeterminada : 10.20.8.1
Servidor DHCP . . . . . . . . . . : 10.20.8.1
Servidores DNS . . . . . . . . . .: 10.20.8.1
Concesión obtenida . . . . . . . : Miércoles, 22 de Marzo de 2006 12:39:17
Concesión expira . . . . . . . . .: Jueves, 23 de Marzo de 2006 12:39:17

FIRSTSPOT SERVER:

Ethernet adaptador Conexión de área local 2:

Sufijo DNS específico de la conexión. :
Descripción . . . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Con
nection #2
Dirección física. . . . . . . . . . . : 00-11-43-36-33-F2
DHCP habilitado . . . . . . . . . . . : No
Dirección IP. . . . . . . . . . . . . : 10.20.7.1
Máscara de subred . . . . . . . . . . : 255.255.255.0
Puerta de enlace predeterminada . . . :
Servidores DNS. . . . . . . . . . . . : 10.20.7.1

Ethernet adaptador Conexión de área local:

Sufijo DNS específico de la conexión. :
Descripción . . . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Con
nection
Dirección física. . . . . . . . . . . : 00-11-43-36-33-F1
DHCP habilitado . . . . . . . . . . . : No
Dirección IP. . . . . . . . . . . . . : 148.245.57.5
Máscara de subred . . . . . . . . . . : 255.255.255.0
Puerta de enlace predeterminada . . . : 148.245.57.1
Servidores DNS. . . . . . . . . . . . : 201.161.171.5

C:\Documents and Settings\Administrador>ping 10.20.7.2

Haciendo ping a 10.20.7.2 con 32 bytes de datos:

Respuesta desde 10.20.7.2: bytes=32 tiempo=1ms TTL=255
Respuesta desde 10.20.7.2: bytes=32 tiempo=1ms TTL=255
Respuesta desde 10.20.7.2: bytes=32 tiempo=1ms TTL=255
Respuesta desde 10.20.7.2: bytes=32 tiempo=1ms TTL=255

Estadísticas de ping para 10.20.7.2:
Paquetes: enviados = 4, recibidos = 4, perdidos = 0 (0% perdidos),
Tiempos aproximados de recorrido redondo en milisegundos:
mínimo = 1ms, máximo = 1ms, promedio = 1ms

C:\Documents and Settings\Administrador>ping 10.20.8.1

Haciendo ping a 10.20.8.1 con 32 bytes de datos:

Respuesta desde 10.20.8.1: bytes=32 tiempo=15ms TTL=63
Respuesta desde 10.20.8.1: bytes=32 tiempo=21ms TTL=63
Respuesta desde 10.20.8.1: bytes=32 tiempo=23ms TTL=63
Respuesta desde 10.20.8.1: bytes=32 tiempo=12ms TTL=63

Estadísticas de ping para 10.20.8.1:
Paquetes: enviados = 4, recibidos = 4, perdidos = 0 (0% perdidos),
Tiempos aproximados de recorrido redondo en milisegundos:
mínimo = 12ms, máximo = 23ms, promedio = 17ms

C:\Documents and Settings\Administrador>ping 10.20.8.100

Haciendo ping a 10.20.8.100 con 32 bytes de datos:

Respuesta desde 10.20.8.100: bytes=32 tiempo=80ms TTL=126
Respuesta desde 10.20.8.100: bytes=32 tiempo=96ms TTL=126
Respuesta desde 10.20.8.100: bytes=32 tiempo=22ms TTL=126
Respuesta desde 10.20.8.100: bytes=32 tiempo=39ms TTL=126

Estadísticas de ping para 10.20.8.100:
Paquetes: enviados = 4, recibidos = 4, perdidos = 0 (0% perdidos),
Tiempos aproximados de recorrido redondo en milisegundos:
mínimo = 22ms, máximo = 96ms, promedio = 59ms

And, this is the config.ini file of firstspot server:

;
; Description : FirstSpot setting ini file
;
; Filename : config.ini
;

; Note: use a backslash to separate directories and files, those lines starting with
; a semi-colon are considered as comments.
;
; Warning : please don't change this file without supervision of a PatronSoft Engineer
; It is highly recommended that you change the FirstSpot setting in the Web-based Configuration Manager

[version]
version=Trial
versionDesc=4.0.1

[MNS]
; number of return paths
num_return_path=1
return_path0=10.20.8.1 255.255.255.0 10.20.7.2

[DHCP]
leasetime=2880
num_ignored_addr=0
ignore_addr0=

[Port Filter]
flt_num=
flt_0=

[QOS]
dl=
ul=
qos_num=
qos_0=

[Client Pass]
num_mac_addr=0
mac_0=
num_ip_addr=0
ip_0=

[proxyARP]
ip_num=
ip_addr0=

;
; Redirect Login Page php file
;
[loginPhp]
Login_enable0=0
Login_php_Num0=

;
; Gateway Settings
;
[gateway]
;Print Log Table
Datasource_Printlog=printlog

;Shared Secret Table Name
Datasource_Shared_Secret_Tablename=fssecret

;maximum timelimit per session in minutes (global), 0 = never
sessionlimit =

;URL tracking, default off
Trace_URL=0

;URL tracking interval, do not log the same url for particular user in x mins
Trace_URL_Interval=30

;URL tracking table
Datasource_URL_Log_Tablename=fsurl

;extra-information field table name
Datasource_extra_field_table = aexlog

;demo_mode=on, off (default)
;
;This demo_mode parameter is for FirstSpot channel partners demonstration purpose
;If demo_mode=on, FirstSpot DNS Server and Web Server will perform a catch-all on all
;requests. After the user login, the client will always see the "firstspotdemo" page.
demo_mode=off

;redirect user to cart.php when login fails
redirect_cart=1

;Client Isolation, NetBIOS over TCP/IP, Default is Disabled
netbios=0

;Scenario 2 (Distributed Network Topology)
scenario2=0

; Post-Startup Batch File Path Name
batch_filePath =

; lan's subnet mask (please change this through Configuration Manager only)
;
subnet_mask =255.255.255.0

; domain name server IP address
;
DNS =0.0.0.0

; domain name server IP address
;
preferred_DNS =0.0.0.0

; domain name server IP address
;
alternate_DNS =0.0.0.0

; username
;
user =admin

; password
;
pass =2a6039141114a699f5461f1e7b1f4a2f

;Number of maximum administrator account
max_admin_account = 10

;Administrator username
admin_username0 =
admin_username1 =
admin_username2 =
admin_username3 =
admin_username4 =
admin_username5 =
admin_username6 =
admin_username7 =
admin_username8 =
admin_username9 =

;Administrator password
admin_password0 =
admin_password1 =
admin_password2 =
admin_password3 =
admin_password4 =
admin_password5 =
admin_password6 =
admin_password7 =
admin_password8 =
admin_password9 =

;Administrator parameter
admin_parameter0 =
admin_parameter1 =
admin_parameter2 =
admin_parameter3 =
admin_parameter4 =
admin_parameter5 =
admin_parameter6 =
admin_parameter7 =
admin_parameter8 =
admin_parameter9 =

; network interface card connected to Internet (after modify this, need to restart FirstSpot)
;
publicNIC=Conexin de rea local

; network interface card connected Hotspots or visitor-based networks (after modify this, need to bind the FirstHop driver
; to this new card and unbind the FirstHop driver from ALL other cards, then reboot Windows)
;
privateNIC=Conexin de rea local 2

; data source for user login
;
Datasource =C:\Archivos de programa\FirstSpot\datasource\firstspot.dsn

; datasource table for user login
;
Datasource_Tablename = fsusr

; datasource table for user login
Datasource_Plans_Tablename = fsplans

; enable session logging into the datasource log table
session_log =ON

; datasource table for user session logging
;
Datasource_Log_Tablename = fsusrlog

; datasource table for PayPal
;
Datasource_PayPal_Table=ppal

; port used by Gateway Service
;
port =5786

; port used by Authentication Server
;
auth_port =5788

; port used by ssl site
;
ssl_port =5789

; Greeting message displayed in login page
;
greeting_msg =Welcome to our Hotspot!

; Enable to show InfoBox
;
show_infobox =ON

; Login page picture (filename)
;
loginpage_pic_name=autumn.jpg

; authentication server IP address (please change this through Configuration Manager only)
; Note: different from gateway_IP when it is not installed in gateway (not officially supported in this version)
;
auth_IP =10.20.7.1

; login page filename which dispatcher will call
;
loginpage =login_select.php

; login form filename which login_select.php will call
;
loginform =login_form.php

; anonymous login form filename which login_select.php will call
;
a_loginform =alogin_form.php

; authentication form filename which authentication.php will call
;
reauthenticationform =reauth_form.php

; anonymous authentication form filename which authentication.php will call
;
a_reauthenticationform =alogout_form.php

; idle time (minutes) allowed for authenticated users
;
idle_timeout =10

; private network (please change this through Configuration Manager only)
;
private_IP =10.20.7.0

; gateway IP address (please change this through Configuration Manager only)
;
gateway_IP =10.20.7.1

; allow access to config manager from private network?
;
access_from_private =ON

; allow access to config manager from public network?
;
access_from_public =ON

; license file path
;
licensepath =C:\Archivos de programa\FirstSpot\

; session handling mode, 0 for MAC-based, 1 for IP-based
session_handling =1

; path for dhcp config
dhcppath =C:\Archivos de programa\FirstSpot\dhcp\dhcpservice.ini

; dhcp mode, 0 = auto, 1 = static, 2 = disabled
dhcpmode =2

; for static dhcp only, path of the Ip MAC mapping list
static_dhcp_path =C:\Archivos de programa\FirstSpot\StaticDHCP.txt

; anonymous login
anonymous_login =OFF

; secret enable
secret_enable=off

; secret code
secret_code=0aed120c6f7090a5b26a4c93df382b21

; anonymous login user table name
Datasource_Anonymous_Tablename =fsa

; anonymous login log table name
Datasource_Anonymous_Log_Tablename =fsalog

; password offloading mode
pwd_offload = off

; password encryption directory path
encrypt_path =C:\Archivos de programa\FirstSpot\dispatcher\encrypt_pwd.exe

; initial air time in minutes for self signup users
self_sign_up_credit=0

; self signup filtering
self_signup_filter=1

;allow self-signup without an ip/mac, 0=yes, 1=no
self_signup_no_mac=1

; null=no filter, 0 = signup once, >0 after x mins
self_signup_period=

;use 3 party ssl cert 0=yes 1=no
ssl_cert=1

;secure socket layer for authentication
;443 for enabled SSL, auth_port=ssl_auth_port for disabled ssl
ssl_auth_port=5788

;rewrite engine for http to https redirection
rewrite_engine=off

;NAT
nat=0

;maximum fail attempt allowed
max_attempt=

;If user accesses http://10.20.7.1:5788 directly, redirect the request to any non-existing ip,
;so that driver can capture the request properly.
;DO NOT put any unresolvable domain name here
redirect_address=http://148.245.57.5/logged_in.html

;port to handle https request in apache when user is not authenticate
redirect_port=5790

; Allowed Hosts Settings
;
[allowed hosts]
; allowed hosts keywords file path
;
hosts_keywords_path =C:\Archivos de programa\FirstSpot\AllowedHostsKeywords.txt

; allowed hosts IPs file path
;
hosts_ips_path =C:\Archivos de programa\FirstSpot\AllowedHostsIps.txt

; Bandwidth Throttle Settings
[bw_throttle]
; Bandwidth Throttle Mode
bt_mode =0

; Overall Upload Limit (at least 20KB/s recommended)
bt_ul_limit =0

; Overall Download Limit (at least 20KB/s recommended)
bt_dl_limit =0

; low, medium and high definition
bt_low=100
bt_medium=50
bt_high=20
bt_drop_period=2

[bwreset]
bwresetmethod=
bwresetperiod=
lastresetbw=

[creditcard]
payment_method=ppal

[paypal]
; Business id
;
ppal_business=your_business_id@your_email.com

; URL for successful transactions
;
ppal_return=http://10.20.7.1:5788/cart.php

; URL for cancelled transactions
;
ppal_cancel_return=http://10.20.7.1:5788/cart.php

; trust "Pending"=="Complete"?
;
ppal_pending_release=no

; the settlement currency
;
ppal_base_currency=USD

; URL for notify
;
ppal_notify_url=http://fixed_ip:5789

; Starting number for invoice
;
ppal_invoice_start=1

[worldpay]
; Installation id
;
wpay_instID=your_installation_ID

; the settlement currency
;
wpay_base_currency=USD

; URL for notify
;
wpay_notify_url=http://fixed_ip:5789

; Test Mode
; 100 : test mode - always successful validation
; 101 : test mode - always failed validation
; 0 : test mode - live mode, not testing
;
wpay_testmode=0

[AuthorizeNet]

;login id
aNet_id=

;transaction key
aNet_key=

aNet_hash=

aNet_base_currency=USD

; URL for notify
aNet_notify_url=http://fixed_ip

; Test Mode
; 0 : test mode - live mode, not testing
; 1 : test mode - testing only
aNet_testmode=0

[PrinterOn]

PrintSupport=0
SiteURL=
SiteUID=
SiteAuth=
; show siteURL
show_URL_login=1
show_URL_infobox=1

[lang]
; default language file
default_lang_file=lang.php
default_lang_file_attributes=English;en,en-us;iso-8859-1
; number of other language files
lang_fileNumber=0
; other luguage files
lang_file1=
lang_file1_attributes=
lang_file2=
lang_file2_attributes=
lang_file3=
lang_file3_attributes=
lang_file4=
lang_file4_attributes=
lang_file5=
lang_file5_attributes=
; show character encoding
; 0 : hide
; 1 : show
show_charset=1

lang_pack_file=custom_lang.php
cmlang_pack_file=custom_cmlang.php
last_logout=logout
this_logout=logout
last_info=infobox
this_info=infobox
last_cart=cart
this_cart=cart
key_0=
url_0=
signup01=off
signup02=off
signup03=off
signup04=off
signup05=off
signup06=off
signup07=off
signup08=off
signup09=off
signup10=off
ReqSignUp01=off
ReqSignUp02=off
ReqSignUp03=off
ReqSignUp04=off
ReqSignUp05=off
ReqSignUp06=off
ReqSignUp07=off
ReqSignUp08=off
ReqSignUp09=off
ReqSignUp10=off

; Setting of cart description
[cart]
max_slot_open=0

[radius]
use_radius=false
ServerIP=10.20.7.1
AuthPort=1812
AccPort=1813
Secret=secret
FSVendorID=2004
Datasource=C:\Archivos de programa\FirstSpot\datasource\radius.dsn
Datasource_Tablename=fsRadius
Acc_Start=true
Acc_Stop=true
;Acc_FSLogin=true
;Acc_FSLogout=true
;Acc_FSWriteLog=true

[radiusAuthentication]
NAS_IDENTIFIER=FirstSpot
;NAS_IP_ADDRESS=the private nic ip, this can be edited.
;CALLING_STATION_ID=client nic mac or ip, depends on the Firstspot setting, this can not be edited.
;CALLED_STATION_ID=firstspot private nic mac, this can not be edited.

[radiusCustomAttribute]
;Vendor spec type for Firstspot
;fixed value can not be changed.
;
;FS_AUTH_TIMELEFT=1
;FS_AUTH_ACCUMBW=2
;FS_AUTH_BWQUOTA=3
;FS_AUTH_BWCOUNT=4
;FS_AUTH_ULLIMIT=5
;FS_AUTH_DLLIMIT=6
;FS_AUTH_LOGINTIME=7
;FS_AUTH_LOGOUTTIME=8
;FS_AUTH_TIMEDIFF=9
;FS_AUTH_BWUSAGE=10

;Account Status Type Attributes, can be changed.
;
;default ACCT_STATUS_FSLOGIN=217
;default ACCT_STATUS_FSLOGOUT=218
;default ACCT_STATUS_FSWRITELOG=219

[prepaidCard]
random_usr_prefix=usr_
random_usr_suffix_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
random_usr_suffix_length=5
pwd_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
pwd_length=7

[ACL]
num_acl=0

[fssmtp]
smtp =false

[misc]
show_cart=yes
enable_chgpwd=1
block_icmp=off
block_udp=on
_debug=1
pkt_period=20
oem=C:\WINNT\INF\oem9.inf
PublicAdapterIP=148.245.57.5
PublicAdapterIpMask=255.255.0.0
PublicAdapterGateway=148.245.57.1
PrivateMAC=0011433633f2
[DataTransfer]
bwcount_dl=0
bwcount_ul=0

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

In that case, your problem is not related to offloading.

Since you can ping FirstSpot from the client PC, most likely you have a DNS problem.

From your client ipconfig/all, the client DNS setting is not correct. Does the client obtain IP from FirstSpot DHCP server (you need to setup DHCP relay in that case)?

Also, you might want to do issue "nslookup apple.com" in the client PC to make sure the DNS lookup is working correctly from the client PC.
_________________
~ Patronsoft Limited ~

aferreiro · Joined: 21 Mar 2006 Posts: 8 Location: Tampico, Mexico

Hi Alan.

The remote router is the one that resolve names using firstspot server, and assings ip adresses in the remote network. I made some test changing network topology and I found that the problem is with my cmts, not with firstspot. Don't know why, but it seems it changes some header, because if I exchange it for another router, everything works fine, but with my cmts in the route to the client computer, firstspot sees client computers as 0.0.0.0.

I'll install a sniffer to analyze packet by packet to see what's happening. Thanks again for your support, and I hope to be a new satisfied customer as soon as I resolve this issue.