Can it be done? RouterOS WLAN routed direct to internet?
What I am wondering is this.
I have a Small Office Network (No Wireless) Can I use a RouterBoard with RouterOS to run a Hotspot that will allow my waiting area clients to connect to the internet without access to my office network?
Current Network:
Buffalo WHR-HP-G54
WAN is Brighthouse Cable (Road Runner) single dynamic IP
LAN is 192.168.50.1 with dhcp services turned off (all office computers are static IP’s)
WLAN is disabled
I have one port open on the Buffalo and want to run CATV out to the waiting area and put Wireless in for those waiting on thier vehicle to be worked on. The Buffalo and data line are paid for by the Franchiser. I can’t change them but I am allowed to add devices.
Maybe use the Crossroads and run hotspot?
I would appreciate any ideas?
Ok when you are ready with the HotSpot you can filter all requests to the Office network IP addresses in RouterOS and the wi-fi users will not have any access to them.
For example, if your office computers are 192.168.50.3 to 192.168.50.254 and your Router is 192.168.50.1 (Gateway) then you can filter the office addresses by adding a subnet mask of /30 - and do a NAT in the RouterOS device so all HotSpot users will have IP addresses that are different from 192.168.50.x. This way all requests to 192.168.50.1 and 50.2 will be OK but all requests to 192.168.50.3-254 will return “no route to host”. Even no firewall rules needed. 
p.s. This is so simple that I will tell you step by step:
Let’s say all PCs have a gateway of 192.168.50.1 so you are sure that this is your internet Gateway in the network.
See if 192.168.50.2 is free. If it’s not - go to the device that is using it and change it to something else that is free.
Connect the MikroTik device to the free port. From a PC on your network run WinBox and connect to the MAC of the MikroTik device, add an IP address to the ether interface that you just plugged. It must be 192.168.50.2 with a subnet mask /30.
Now connect to the Web interface through that IP address. You won’t be able to because your IP would now be beyond the scope if the /30 subnet mask. Go back with WinBox MAC and temporarily change it to /24 to allow yourself IP access to the web interface.
Click on all the requred options in the Web interface, NAT, etc. etc.
Go in with WinBox again and run the HotSpot wizard to enable the HotSpot on the wireless interface.
Test the wifi access with a laptop or something.
If its working - go in winbox and change the subnet mask of ether1 to /30
Test to ping to 192.168.50.3 and 192.168.50.200 or whatever. You should receive “no route to host”.
Enjoy.
p.s. you could easily run into a problem - just ask here then.
Sure! Just set it up! NO prob.