Hotspot reply-only one-to-one nat to public ip problem

/ip hotspot profile
add dns-name=test.com hotspot-address=192.168.56.1 html-directory=
my-hotspot login-by=http-chap,http-pap name=hsprof1
radius-interim-update=30s use-radius=yes
/ip hotspot
add disabled=no interface=my-mesh name=hotspot1 profile=hsprof1
/ip hotspot user profile
set [ find default=yes ] address-pool=public-ip-pool idle-timeout=5m
keepalive-timeout=2m

/ip dhcp-server
add add-arp=yes address-pool=hs-pool-7 disabled=no interface=my-mesh lease-time=1h name=dhcp1
/ip dhcp-server network
add address=192.168.56.0/22 comment=“hotspot network” dns-server=192.168.56.1 gateway=192.168.56.1 netmask=32everything works fine when arp=enabled but when interface my-mesh changes to arp=arp-only unauthenticated users can surf but right after authentication they can not open anything .
routeros 5.25