Hi,
My clients doesnt have access to the internet as soon as my hotspot is on
when it is off or when i am using the ip binding everything works well
I have tried everything the only thing i noticed is that people using the hotspot cannot access the internet
Kindly assist
Baddie
You have got an error in your configuration.
Kind of hard to be more specific until you post your configuration, along with a network diagram.
Thanks for your reply Please find below as asked
\
/interface ethernet
set 0 arp=enabled auto-negotiation=yes cable-settings=default comment=“” disable-running-check=yes disabled=no full-duplex=yes mac-address=00:04:75:D3:27:8E
mtu=1500 name=Lan speed=100Mbps
set 1 arp=enabled auto-negotiation=yes cable-settings=default comment=“” disable-running-check=yes disabled=yes full-duplex=yes mac-address=
00:50:BA:0F:0B:ED mtu=1500 name=xxx speed=100Mbps
set 2 arp=enabled auto-negotiation=yes cable-settings=default comment=“” disable-running-check=yes disabled=no full-duplex=yes l2mtu=1600 mac-address=
00:0E:A6:30:F9:F0 mtu=1500 name=Wireless speed=100Mbps
/interface wireless security-profiles
set default authentication-types=“” eap-methods=passthrough group-ciphers=“” group-key-update=5m interim-update=0s management-protection=disabled
management-protection-key=“” mode=none name=default radius-eap-accounting=no radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=
disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none
static-key-0=“” static-key-1=“” static-key-2=“” static-key-3=“” static-sta-private-algo=none static-sta-private-key=“” static-transmit-key=key-0
supplicant-identity=MikroTik tls-certificate=none tls-mode=no-certificates unicast-ciphers=“” wpa-pre-shared-key=“” wpa2-pre-shared-key=“”
/interface wireless
set 0 ack-timeout=dynamic adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=0 antenna-mode=ant-a area=“” arp=enabled band=2.4ghz-b
basic-rates-a/g=6Mbps basic-rates-b=1Mbps burst-time=disabled comment=“” compression=no country=no_country_set default-ap-tx-limit=0
default-authentication=yes default-client-tx-limit=0 default-forwarding=yes dfs-mode=none disable-running-check=no disabled=no disconnect-timeout=3s
frame-lifetime=0 frequency=2437 frequency-mode=manual-txpower hide-ssid=no hw-fragmentation-threshold=disabled hw-protection-mode=none
hw-protection-threshold=0 hw-retries=4 l2mtu=2290 mac-address=00:26:5A:7E:8F:4D max-station-count=2007 mode=station mtu=1500 name=Internet
noise-floor-threshold=default on-fail-retry-time=100ms periodic-calibration=default periodic-calibration-interval=60 preamble-mode=both
proprietary-extensions=post-2.9.25 radio-name=00265A7E8F4D rate-set=default scan-list=default security-profile=default ssid=Belkin_N1_Wireless_9142F7
station-bridge-clone-mac=00:00:00:00:00:00 supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps supported-rates-b=
1Mbps,2Mbps,5.5Mbps,11Mbps tdma-debug=0 tx-power-mode=default update-stats-interval=disabled wds-cost-range=50-150 wds-default-bridge=none
wds-default-cost=100 wds-ignore-ssid=no wds-mode=disabled wmm-support=disabled
/interface wireless manual-tx-power-table
set Internet comment=“” manual-tx-powers=“1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:1
7,HT20-0:0,HT20-1:0,HT20-2:0,HT20-3:0,HT20-4:0,HT20-5:0,HT20-6:0,HT20-7:0,HT40-0:0,HT40-1:0,HT40-2:0,HT40-3:0,HT40-4:0,HT40-5:0,HT40-6:0,HT40-7:0”
/interface wireless nstreme
set Internet comment=“” disable-csma=no enable-nstreme=no enable-polling=yes framer-limit=3200 framer-policy=none
/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default
rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=mydomain.com hotspot-address=192.168.1.1 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=
hsprof2 rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=mydomain.com hotspot-address=192.168.0.1 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=
hsprof3 rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 comment=“” disabled=no enc-algorithms=3des lifetime=30m name=default pfs-group=modp1024
/ip pool
add name=hs-pool-1 ranges=192.168.1.2-192.168.1.254
add name=hs-pool-3 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=hs-pool-1 authoritative=after-2sec-delay bootp-support=static disabled=no interface=Lan lease-time=1h name=dhcp1
add address-pool=hs-pool-3 authoritative=after-2sec-delay bootp-support=static disabled=no interface=Wireless lease-time=1h name=dhcp2
/ip hotspot
add address-pool=hs-pool-1 addresses-per-mac=2 disabled=no idle-timeout=5m interface=Lan keepalive-timeout=none name=hotspot1 profile=hsprof2
add address-pool=hs-pool-3 addresses-per-mac=2 disabled=no idle-timeout=5m interface=Wireless keepalive-timeout=none name=hs-Wireless profile=hsprof3
/port
set 0 baud-rate=9600 data-bits=8 flow-control=hardware name=serial0 parity=none stop-bits=1
/ppp profile
set default change-tcp-mss=yes comment=“” name=default only-one=default use-compression=default use-encryption=default use-ipv6=yes use-mpls=default
use-vj-compression=default
set default-encryption change-tcp-mss=yes comment=“” name=default-encryption only-one=default use-compression=default use-encryption=yes use-ipv6=yes
use-mpls=default use-vj-compression=default
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes comment=“” disabled=no ignore-as-path-len=no name=default out-filter=“” redistribute-connected=no
redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no redistribute-static=no router-id=0.0.0.0 routing-table=“”
/routing ospf instance
set default comment=“” disabled=no distribute-default=never in-filter=ospf-in metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=auto
metric-rip=20 metric-static=20 name=default out-filter=ospf-out redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no
redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 comment=“” disabled=no instance=default name=backbone type=default
/routing ospf-v3 instance
set default comment=“” disabled=no distribute-default=never metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=auto metric-rip=20
metric-static=20 name=default redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no
router-id=0.0.0.0
/routing ospf-v3 area
set backbone area-id=0.0.0.0 comment=“” disabled=no instance=default name=backbone type=default
/snmp
set contact=“” enabled=yes engine-boots=2 engine-id=“” location=“” time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-password=“” authentication-protocol=MD5 encryption-password=“” encryption-protocol=DES name=public read-access=
yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote
/user group
add comment=“” name=read policy=local,telnet,ssh,reboot,read,test,winbox,password,web,sniff,sensitive,!ftp,!write,!policy
add comment=“” name=write policy=local,telnet,ssh,reboot,read,write,test,winbox,password,web,sniff,sensitive,!ftp,!policy
add comment=“” name=full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=default enabled=no keepalive-timeout=60 mac-address=FE:7A:D1:02:FB:D3 max-mtu=
1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=disabled
port=443 require-client-certificate=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 frames-per-second=25
receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name=“” memory-limit=10 multiple-channels=no only-headers=no receive-errors=no streaming-enabled=no
streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=yes address=0.0.0.0/0
/ip address
add address=192.168.1.1/24 broadcast=192.168.1.255 comment=“hotspot network” disabled=no interface=Lan network=192.168.1.0
add address=192.168.0.1/24 broadcast=192.168.0.255 comment=“hotspot network” disabled=no interface=Wireless network=192.168.0.0
/ip dhcp-client
add add-default-route=yes comment=“” default-route-distance=0 disabled=yes interface=xxx use-peer-dns=yes use-peer-ntp=yes
add add-default-route=yes comment=“” default-route-distance=0 disabled=no interface=Internet use-peer-dns=yes use-peer-ntp=yes
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.0.0/24 comment=“hotspot network” gateway=192.168.0.1
add address=192.168.1.0/24 comment=“hotspot network” gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=512 servers=192.168.2.1,41.204.224.2
/ip dns static
add address=208.67.222.222 comment=“” disabled=no name=“Open Dns” ttl=1d
add address=208.67.220.220 comment=“” disabled=no name=“Open Dns” ttl=1d
add address=41.204.224.2 comment=“” disabled=no name=Dopc ttl=1d
add address=41.204.224.131 comment=“” disabled=no name=Dopc ttl=1d
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=10s
tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m
udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“masquerade hotspot network” disabled=no src-address=192.168.1.0/24
add action=masquerade chain=srcnat comment=“masquerade hotspot network” disabled=no src-address=192.168.1.0/24
add action=masquerade chain=srcnat comment=“masquerade hotspot network” disabled=no src-address=192.168.0.0/24
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot ip-binding
add address=192.168.1.9 comment=“” disabled=no type=bypassed
add comment=“” disabled=no mac-address=00:A0:B0:60:2A:50 type=bypassed
add comment=“” disabled=no mac-address=00:02:A5:75:AB:C7 type=bypassed
add comment=“” disabled=no mac-address=00:1E:EC:FA:A0:FA
add comment=“” customer=admin disabled=no name=L1hrvmc password=ehss28 shared-users=1
add comment=“” customer=admin disabled=no name=L1hr5i4 password=gaxcqj shared-users=1
add comment=“” customer=admin disabled=no name=L1hrcxp password=hgqt5w shared-users=1
add comment=“” customer=admin disabled=no name=L1hr5yf password=zxxzui shared-users=1
add comment=“” customer=admin disabled=no name=L1hrwg8 password=nkyrqn shared-users=1
add comment=“” customer=admin disabled=no name=L1hr6rd password=e47cpf shared-users=1
add comment=“” customer=admin disabled=no name=L1hrgp3 password=fxr7ts shared-users=1
add comment=“” customer=admin disabled=no name=L1hrh3m password=9myihs shared-users=1
add comment=“” customer=admin disabled=no name=L1hrkq4 password=d3ah4k shared-users=1
add comment=“” customer=admin disabled=no name=L1hrxhd password=6gkni8 shared-users=1
add comment=“” customer=admin disabled=no name=L1hrqih password=7a2m99 shared-users=1
add comment=“” customer=admin disabled=no name=L1hrisv password=ajt3hq shared-users=1
add comment=“” customer=admin disabled=no name=L1hr7rk password=rc5p2h shared-users=1
add comment=“” customer=admin disabled=no name=L1hrn3p password=yeh3iv shared-users=1
add comment=“” customer=admin disabled=no name=L1hrkxz password=73yxss shared-users=1
add comment=“” customer=admin disabled=no name=L1hr9b4 password=wac4dh shared-users=1
add comment=“” customer=admin disabled=no name=L2hafi2 password=u96gyp shared-users=1
add comment=“” customer=admin disabled=no name=L2himxg password=en4td9 shared-users=1
add comment=“” customer=admin disabled=no name=L2hpurf password=ynicm3 shared-users=1
add comment=“” customer=admin disabled=no name=L2hxiai password=xdrhwi shared-users=1
add comment=“” customer=admin disabled=no name=L2ha2df password=ijhm3s shared-users=1
add comment=“” customer=admin disabled=no name=L2h82vu password=b84aju shared-users=1
add comment=“” customer=admin disabled=no name=L2hyzfj password=j7wgjw shared-users=1
add comment=“” customer=admin disabled=no name=L2hteg9 password=mqdqmk shared-users=1
add comment=“” customer=admin disabled=no name=L2htmpa password=2jiamy shared-users=1
add comment=“” customer=admin disabled=no name=L2h6tke password=pxwz2a shared-users=1
add comment=“” customer=admin disabled=no name=L2h99ig password=tpkmr7 shared-users=1
add comment=“” customer=admin disabled=no name=L2h9eky password=2x62rb shared-users=1
add comment=“” customer=admin disabled=no name=L2h6t8z password=jet2p7 shared-users=1
add comment=“” customer=admin disabled=no name=L2huwhn password=m9p5yz shared-users=1
add comment=“” customer=admin disabled=no name=L2h9ypq password=8muhiv shared-users=1
add comment=“” customer=admin disabled=no name=L2h84h5 password=rz6hpw shared-users=1
add comment=“” customer=admin disabled=no name=L2hndpm password=362hfp shared-users=1
add comment=“” customer=admin disabled=no name=L2hcjdy password=y34qfr shared-users=1
add comment=“” customer=admin disabled=no name=L2hcuj8 password=5jcdg7 shared-users=1
add comment=“” customer=admin disabled=no name=L2hkig8 password=gt9ekb shared-users=1
add comment=“” customer=admin disabled=no name=1Mtht4x4 password=87aabbr shared-users=1
add comment=“” customer=admin disabled=no name=1Mth9vd2 password=7e9zc9t shared-users=1
add comment=“” customer=admin disabled=no name=1Mthuprr password=zn2jptx shared-users=1
add comment=“” customer=admin disabled=no name=1Mthju4g password=ninfirs shared-users=1
add comment=“” customer=admin disabled=no name=1Mthi55s password=pth2yqh shared-users=1
add comment=“” customer=admin disabled=no name=azeez password=badmus shared-users=1
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no
These are my config settings hope it will help
Here in my diagram the internet port is tru Wirelss card initialy was through the ethernet card “xxx”
Here Netwrk 1.0/24 is on hotspot likewise 0.0/24
0.0/24 is not connected yet as i am still tryin to let 1.0/24 work 1st
hotpot doesn’t even automatically redirect to login page
kindly assist
I don’t see the problem. Reset to factory settings, apply just a WAN IP and run the set up wizard for Hotspots, and see what happens.
Did yoou see if you have a “hotspot” folder in menú “files” ¿?
If not, select the hotspot in ip/hotspot/server and reset HTML.
If the folder is there, try to make what fewi said.
You only need to configure a IP in wan connection, a gateway in ip/route and DNS in IP/dns. Then click in the hotspot wizard.
See youu.
Thanks for your reply
What I did was to run the hotpot widazrd which automaticaly added dhcp roue andadresses togeda wit the pool as well as dns
After wards I tried browsing the hotspot page pops den login with admin and then try surfing the internet it den dispalys no page found but if I type in an ip adress it goes ( well only tried once )
If I turn off d hotspot it works but wen I put it on back it doesn’t
Thanks for ur time
If you can load pages by IP address but not by DNS then the servers you set under IP > DNS are bad.
I thinks if it is the dns it will not even work when the hotspot server is off
Kindly give me a step by step guide right from reset so that i will do same and revert back
Thank you for your help
I seriously thinkits has somfing to do with the firewall cos the firewall connection is not establishing when using hotspot it tries to connect then times out dat is when i check the firewall settings
Thans
There’s nothing wrong with the firewall configuration in the export you posted higher up.
To reset run “/system reset-configuration”. Then apply the WAN IP address, configure “/ip dns”, set up a default route and run the Hotspot wizard.
Thanks I have done as adviced and this is the result
[admin@MikroTik] > export
/interface ethernet
set 0 arp=enabled auto-negotiation=yes cable-settings=default comment=“” disable-running-check=yes disabled=no full-duplex=yes l2mtu=1600 mac-address=
00:50:BA:0F:0B:ED mtu=1500 name=Lan speed=100Mbps
/interface wireless security-profiles
set default authentication-types=“” eap-methods=passthrough group-ciphers=“” group-key-update=5m interim-update=0s management-protection=disabled
management-protection-key=“” mode=none name=default radius-eap-accounting=no radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=
disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none
static-key-0=“” static-key-1=“” static-key-2=“” static-key-3=“” static-sta-private-algo=none static-sta-private-key=“” static-transmit-key=key-0
supplicant-identity=MikroTik tls-certificate=none tls-mode=no-certificates unicast-ciphers=“” wpa-pre-shared-key=“” wpa2-pre-shared-key=“”
/interface wireless
set 0 ack-timeout=dynamic adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=0 antenna-mode=ant-a area=“” arp=enabled band=2.4ghz-b
basic-rates-a/g=6Mbps basic-rates-b=1Mbps burst-time=disabled comment=“” compression=no country=no_country_set default-ap-tx-limit=0
default-authentication=yes default-client-tx-limit=0 default-forwarding=yes dfs-mode=none disable-running-check=no disabled=no disconnect-timeout=3s
frame-lifetime=0 frequency=2437 frequency-mode=manual-txpower hide-ssid=no hw-fragmentation-threshold=disabled hw-protection-mode=none
hw-protection-threshold=0 hw-retries=4 l2mtu=2290 mac-address=00:26:5A:7E:8F:4D max-station-count=2007 mode=station mtu=1500 name=wlan1
noise-floor-threshold=default on-fail-retry-time=100ms periodic-calibration=default periodic-calibration-interval=60 preamble-mode=both
proprietary-extensions=post-2.9.25 radio-name=00265A7E8F4D rate-set=default scan-list=default security-profile=default ssid=Belkin_N1_Wireless_9142F7
station-bridge-clone-mac=00:00:00:00:00:00 supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps supported-rates-b=
1Mbps,2Mbps,5.5Mbps,11Mbps tdma-debug=0 tx-power-mode=default update-stats-interval=disabled wds-cost-range=50-150 wds-default-bridge=none
wds-default-cost=100 wds-ignore-ssid=no wds-mode=disabled wmm-support=disabled
/interface wireless manual-tx-power-table
set wlan1 comment=“” manual-tx-powers=“1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17,H
T20-0:0,HT20-1:0,HT20-2:0,HT20-3:0,HT20-4:0,HT20-5:0,HT20-6:0,HT20-7:0,HT40-0:0,HT40-1:0,HT40-2:0,HT40-3:0,HT40-4:0,HT40-5:0,HT40-6:0,HT40-7:0”
/interface wireless nstreme
set wlan1 comment=“” disable-csma=no enable-nstreme=no enable-polling=yes framer-limit=3200 framer-policy=none
/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default
rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=test.com hotspot-address=172.18.0.1 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=hsprof1
rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 comment=“” disabled=no enc-algorithms=3des lifetime=30m name=default pfs-group=modp1024
/ip pool
add name=hs-pool-1 ranges=172.18.0.2-172.18.0.254
/ip dhcp-server
add address-pool=hs-pool-1 authoritative=after-2sec-delay bootp-support=static disabled=no interface=Lan lease-time=1h name=dhcp1
/ip hotspot
add address-pool=hs-pool-1 addresses-per-mac=2 disabled=yes idle-timeout=5m interface=Lan keepalive-timeout=none name=hotspot1 profile=hsprof1
/port
set 0 baud-rate=9600 data-bits=8 flow-control=hardware name=serial0 parity=none stop-bits=1
/ppp profile
set default change-tcp-mss=yes comment=“” name=default only-one=default use-compression=default use-encryption=default use-ipv6=yes use-mpls=default
use-vj-compression=default
set default-encryption change-tcp-mss=yes comment=“” name=default-encryption only-one=default use-compression=default use-encryption=yes use-ipv6=yes
use-mpls=default use-vj-compression=default
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes comment=“” disabled=no ignore-as-path-len=no name=default out-filter=“” redistribute-connected=no
redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no redistribute-static=no router-id=0.0.0.0 routing-table=“”
/routing ospf instance
set default comment=“” disabled=no distribute-default=never in-filter=ospf-in metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=auto
metric-rip=20 metric-static=20 name=default out-filter=ospf-out redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no
redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 comment=“” disabled=no instance=default name=backbone type=default
/routing ospf-v3 instance
set default comment=“” disabled=no distribute-default=never metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=auto metric-rip=20
metric-static=20 name=default redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no
router-id=0.0.0.0
/routing ospf-v3 area
set backbone area-id=0.0.0.0 comment=“” disabled=no instance=default name=backbone type=default
/snmp
set contact=“” enabled=no engine-boots=0 engine-id=“” location=“” time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-password=“” authentication-protocol=MD5 encryption-password=“” encryption-protocol=DES name=public read-access=
yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote
/user group
add comment=“” name=read policy=local,telnet,ssh,reboot,read,test,winbox,password,web,sniff,sensitive,!ftp,!write,!policy
add comment=“” name=write policy=local,telnet,ssh,reboot,read,write,test,winbox,password,web,sniff,sensitive,!ftp,!policy
add comment=“” name=full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=default enabled=no keepalive-timeout=60 mac-address=FE:57:D9:57:A8:41 max-mtu=
1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=disabled
port=443 require-client-certificate=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 frames-per-second=25
receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name=“” memory-limit=10 multiple-channels=no only-headers=no receive-errors=no streaming-enabled=no
streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=172.18.0.1/24 broadcast=172.18.0.255 comment=“hotspot network” disabled=no interface=Lan network=172.18.0.0
/ip dhcp-client
add add-default-route=yes comment=“” default-route-distance=0 disabled=no interface=wlan1 use-peer-dns=yes use-peer-ntp=yes
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=172.18.0.0/24 comment=“hotspot network” gateway=172.18.0.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=512 servers=192.168.2.1,41.204.224.2
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=10s
tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m
udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“masquerade hotspot network” disabled=no src-address=172.18.0.0/24
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot user
add comment=“” disabled=no name=admin password=“” profile=default
/ip neighbor discovery
set Lan discover=yes
set wlan1 discover=no
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 cache-on-disk=no enabled=no max-cache-size=none max-client-connections=600
max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 parent-proxy-port=0 port=8080 serialize-connections=no src-address=0.0.0.0
/ip route
add comment=“” disabled=no distance=1 dst-address=0.0.0.0/0 gateway=wlan1 scope=30 target-scope=10
add comment=“” disabled=no distance=1 dst-address=192.168.1.0/24 gateway=wlan1 scope=30 target-scope=10
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip ssh
set forwarding-enabled=yes
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add comment=“” disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0
use-explicit-null=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/queue interface
set Lan queue=ethernet-default
set wlan1 queue=wireless-default
/radius incoming
set accept=no port=3799
/routing bfd interface
set all comment=“” disabled=no interface=all interval=0.2sec min-rx=0.2sec multiplier=5
/routing igmp-proxy
set query-interval=2m5s query-response-interval=10s quick-leave=no
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m gateway-selection=no-gateway origination-interval=5s preferred-gateway=0.0.0.0 timeout=
1m ttl=50
/routing pim
set switch-to-spt=yes switch-to-spt-bytes=0 switch-to-spt-interval=1m40s
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no
redistribute-connected=no redistribute-ospf=no redistribute-static=no routing-table=main timeout-timer=3m update-timer=30s
/routing ripng
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no
redistribute-connected=no redistribute-ospf=no redistribute-static=no timeout-timer=3m update-timer=30s
/store
add comment=“” disabled=no disk=primary-master name=user-manager1 type=user-manager
add comment=“” disabled=no disk=primary-master name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=manual
/system clock manual
set dst-delta=+00:00 dst-end=“jan/01/1970 00:00:00” dst-start=“jan/01/1970 00:00:00” time-zone=+00:00
/system console
add disabled=no port=serial0 term=vt102
set [ find vcno=1 ] disabled=no term=linux
set [ find vcno=2 ] disabled=no term=linux
set [ find vcno=3 ] disabled=no term=linux
set [ find vcno=4 ] disabled=no term=linux
set [ find vcno=5 ] disabled=no term=linux
set [ find vcno=6 ] disabled=no term=linux
set [ find vcno=7 ] disabled=no term=linux
set [ find vcno=8 ] disabled=no term=linux
/system console screen
set line-count=25
/system gps
set channel=0 enabled=no set-system-time=no
/system hardware
set multi-cpu=yes
/system health
set state-after-reboot=enabled
/system identity
set name=MikroTik
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set wlan1 disabled=yes display-time=5s
set Lan disabled=yes display-time=5s
/system logging
add action=memory disabled=no prefix=“” topics=info
add action=memory disabled=no prefix=“” topics=error
add action=memory disabled=no prefix=“” topics=warning
add action=echo disabled=no prefix=“” topics=critical
/system note
set note=“” show-at-login=yes
/system ntp client
set enabled=no mode=unicast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/system ntp server
set broadcast=no enabled=no manycast=yes multicast=no
/system routerboard bios
set
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=0.0.0.0 user=“”
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=100
/tool e-mail
set from=<> password=“” server=0.0.0.0:25 username=“”
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
add disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number=“” channel=0 keep-max-sms=0 receive-enabled=no secret=“”
/tool sniffer
set file-limit=10 file-name=“” filter-address1=0.0.0.0/0:0-65535 filter-address2=0.0.0.0/0:0-65535 filter-protocol=ip-only filter-stream=yes interface=all
memory-limit=10 memory-scroll=no only-headers=no streaming-enabled=no streaming-server=0.0.0.0
At first it didnt work then i turn off the hotspot and it started workin then later put it on
After like 5 min it stopped again
I pinged my DNS but no reply after that i turned it off again then it worked find below the pictures also note th interface used
Final Picture
