I’m currently using a MikroTik RB4011 running RouterOS v7.10 to manage a hotspot network. I have set up a 30-day profile for all users. However, I’ve noticed that when users connect to the hotspot, the expiry date is not displayed.
Interestingly, I have another MikroTik router with the same configuration running on ARM architecture with RouterOS v7.9.2, and it displays the expiry date correctly. The RB4011 is running the default firmware version (v7.10), and unfortunately, I cannot downgrade it to v7.9.2.
Has anyone else encountered this issue, and is there a known fix for it?
Here is configuration:
# 2024-08-26 15:36:03 by RouterOS 7.10
# software id = **ELIDED**
#
# model = RB4011iGS+
# serial number = **ELIDED**
/interface bridge
add name=bridge-HS
add name=bridge-LOCAL
/interface vlan
add interface=ether1 name=Etisalat vlan-id=**
/interface pppoe-client
add add-default-route=yes disabled=no interface=Etisalat name=pppoe-etisalat \
user=*******
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot1
add dns-name=login.net hotspot-address=10.10.0.1 html-directory=xnuae3 \
login-by=mac,http-chap,https,http-pap,mac-cookie name=hsprof1
/ip pool
add name=dhcp ranges=10.10.0.2-10.10.7.254
add name=dhcp_pool1 ranges=10.10.24.2-10.10.31.254
add name=vpn ranges=192.168.89.2-192.168.89.255
/ip dhcp-server
add address-pool=dhcp interface=bridge-HS lease-time=1h name=dhcp1
add address-pool=dhcp_pool1 interface=bridge-LOCAL name=direct-server
/ip hotspot
add address-pool=dhcp addresses-per-mac=1 disabled=no interface=bridge-HS \
name=hotspot1 profile=hsprof1
/ip hotspot user profile
set [ find default=yes ] address-pool=dhcp mac-cookie-timeout=4w2d \
shared-users=3
add address-pool=dhcp name=30-DAY on-login=":put (\",remc,30,30d,30,,Enable,\"\
); {:local date [ /system clock get date ];:local year [ :pick \$date 7 11\
\_];:local month [ :pick \$date 0 3 ];:local comment [ /ip hotspot user ge\
t [/ip hotspot user find where name=\"\$user\"] comment]; :local ucode [:p\
ic \$comment 0 2]; :if (\$ucode = \"vc\" or \$ucode = \"up\" or \$comment \
= \"\") do={ /sys sch add name=\"\$user\" disable=no start-date=\$date int\
erval=\"30d\"; :delay 2s; :local exp [ /sys sch get [ /sys sch find where \
name=\"\$user\" ] next-run]; :local getxp [len \$exp]; :if (\$getxp = 15) \
do={ :local d [:pic \$exp 0 6]; :local t [:pic \$exp 7 16]; :local s (\"/\
\"); :local exp (\"\$d\$s\$year \$t\"); /ip hotspot user set comment=\$exp\
\_[find where name=\"\$user\"];}; :if (\$getxp = 8) do={ /ip hotspot user \
set comment=\"\$date \$exp\" [find where name=\"\$user\"];}; :if (\$getxp \
> 15) do={ /ip hotspot user set comment=\$exp [find where name=\"\$user\"]\
;}; /sys sch remove [find where name=\"\$user\"]; :local mac \$\"mac-addre\
ss\"; :local time [/system clock get time ]; /system script add name=\"\$d\
ate-|-\$time-|-\$user-|-30-|-\$address-|-\$mac-|-30d-|-30-DAY-|-\$comment\
\" owner=\"\$month\$year\" source=\$date comment=mikhmon; [:local mac \$\"\
mac-address\"; /ip hotspot user set mac-address=\$mac [find where name=\$u\
ser]]}}" parent-queue=none
add address-pool=dhcp name=15-DAY on-login=":put (\",remc,15,15d,15,,Enable,\"\
); {:local date [ /system clock get date ];:local year [ :pick \$date 7 11\
\_];:local month [ :pick \$date 0 3 ];:local comment [ /ip hotspot user ge\
t [/ip hotspot user find where name=\"\$user\"] comment]; :local ucode [:p\
ic \$comment 0 2]; :if (\$ucode = \"vc\" or \$ucode = \"up\" or \$comment \
= \"\") do={ /sys sch add name=\"\$user\" disable=no start-date=\$date int\
erval=\"15d\"; :delay 2s; :local exp [ /sys sch get [ /sys sch find where \
name=\"\$user\" ] next-run]; :local getxp [len \$exp]; :if (\$getxp = 15) \
do={ :local d [:pic \$exp 0 6]; :local t [:pic \$exp 7 16]; :local s (\"/\
\"); :local exp (\"\$d\$s\$year \$t\"); /ip hotspot user set comment=\$exp\
\_[find where name=\"\$user\"];}; :if (\$getxp = 8) do={ /ip hotspot user \
set comment=\"\$date \$exp\" [find where name=\"\$user\"];}; :if (\$getxp \
> 15) do={ /ip hotspot user set comment=\$exp [find where name=\"\$user\"]\
;}; /sys sch remove [find where name=\"\$user\"]; :local mac \$\"mac-addre\
ss\"; :local time [/system clock get time ]; /system script add name=\"\$d\
ate-|-\$time-|-\$user-|-15-|-\$address-|-\$mac-|-15d-|-15-DAY-|-\$comment\
\" owner=\"\$month\$year\" source=\$date comment=mikhmon; [:local mac \$\"\
mac-address\"; /ip hotspot user set mac-address=\$mac [find where name=\$u\
ser]]}}" parent-queue=none
/port
set 0 name=serial0
set 1 name=serial1
/ppp profile
add change-tcp-mss=yes name=RWB_sstp_profile
set *FFFFFFFE local-address=192.168.89.1 remote-address=vpn
/interface l2tp-client
add connect-to=samplevpn.com disabled=no name=VoicCall profile=\
default user=***********
/routing table
add disabled=no fib name=WhatsApp+IMO
/user group
set write policy="local,read,write,winbox,!telnet,!ssh,!ftp,!reboot,!policy,!t\
est,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api"
/interface bridge port
add bridge=bridge-HS interface=ether2
add bridge=bridge-HS interface=ether3
add bridge=bridge-HS interface=ether4
add bridge=bridge-HS interface=ether5 multicast-router=permanent
add bridge=bridge-HS interface=ether6
add bridge=bridge-HS interface=ether7
add bridge=bridge-HS interface=ether8
add bridge=bridge-LOCAL interface=ether9
add bridge=bridge-LOCAL interface=ether10
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface detect-internet
set detect-interface-list=all
/interface l2tp-server server
set enabled=yes use-ipsec=yes
/interface pppoe-server server
add interface=ether10 service-name=service1
/interface pptp-server server
# PPTP connections are considered unsafe, it is suggested to use a more modern VPN protocol instead
set enabled=yes
/interface sstp-server server
set default-profile=default-encryption enabled=yes
/ip address
add address=10.10.0.1/21 interface=bridge-HS network=10.10.0.0
add address=10.10.24.1/21 interface=bridge-LOCAL network=10.10.24.0
/ip cloud
set ddns-enabled=yes update-time=no
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.10.0.0/21 comment="hotspot network" gateway=10.10.0.1
add address=10.10.24.0/21 comment="local network " gateway=10.10.24.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input disabled=yes dst-port=1194 protocol=udp
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input comment=MyWin protocol=tcp src-port=8291
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input comment="Allow Remote Winbox" disabled=yes \
in-interface=VoicCall
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input disabled=yes dst-port=1194 protocol=udp
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input comment=MyWin protocol=tcp src-port=8291
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input comment="Allow Remote Winbox" disabled=yes \
in-interface=VoicCall
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting dst-port=\
3478,34784,45395,50318,59234,5222,4244,5223,5228,5242,27526,48320 \
new-routing-mark=WhatsApp+IMO passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=\
3478,34784,45395,50318,59234,5222,4244,5223,5228,5242,27526,48320 \
new-routing-mark=WhatsApp+IMO passthrough=no protocol=udp
add action=change-ttl chain=postrouting new-ttl=set:1 out-interface=bridge-HS \
passthrough=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.0.0/21
add action=masquerade chain=srcnat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.0.0/21
add action=dst-nat chain=dstnat dst-port=5060 protocol=udp to-addresses=\
10.25.205.136 to-ports=5060
add action=dst-nat chain=dstnat dst-port=5060 protocol=udp to-addresses=\
10.25.148.173 to-ports=5060
add action=masquerade chain=srcnat comment="masq. vpn traffic" src-address=\
192.168.89.0/24
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.0.0/21
add action=masquerade chain=srcnat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.0.0/21
add action=dst-nat chain=dstnat dst-port=5060 protocol=udp to-addresses=\
10.25.205.136 to-ports=5060
add action=dst-nat chain=dstnat dst-port=5060 protocol=udp to-addresses=\
10.25.148.173 to-ports=5060
add action=masquerade chain=srcnat comment="masq. vpn traffic" src-address=\
192.168.89.0/24
/ip hotspot ip-binding
add comment=Camera-a2 disabled=yes mac-address=48:EA:63:8D:99:4B server=\
hotspot1 type=bypassed
add comment=Camera-a3 mac-address=58:03:FB:1E:7A:C9 server=hotspot1 type=\
bypassed
add comment=alpa disabled=yes mac-address=80:7C:62:33:19:B1 server=hotspot1 \
type=bypassed
add comment=Camera-a1 disabled=yes mac-address=48:EA:63:D1:F8:02 server=\
hotspot1 type=bypassed
add mac-address=6C:F1:7E:58:30:84 server=hotspot1 type=bypassed
/ip hotspot user
add comment=vc-777-08.04.24- mac-address=9A:95:F8:9D:B7:4A name=33354497 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=52:1A:CB:2F:8D:95 name=44977848 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=EE:E5:A0:0B:5E:72 name=36892878 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=3E:BA:C8:EC:4B:D4 name=63453586 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=E2:26:9B:0F:16:D2 name=63796349 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=CA:01:7A:F4:E2:4C name=76322875 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=7E:F1:43:6C:90:2A name=35557753 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- name=54858672 profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=1E:B2:92:1F:F7:90 name=93487255 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- name=92574263 profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=60:32:B1:88:75:F3 name=92256585 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=DE:72:01:96:3A:F8 name=73593854 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=E6:8F:FC:BB:E6:93 name=66235978 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=2E:9F:89:15:BD:C7 name=27552674 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=46:E1:B2:84:26:41 name=93772993 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=0E:5E:F6:B1:BE:19 name=52824976 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=96:E6:9D:9C:2E:89 name=57486527 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=DA:CF:2E:04:10:D9 name=63432764 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=96:E6:9D:9C:2E:89 name=83726892 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- name=84739473 profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=02:7C:4D:14:40:52 name=73578225 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=8A:00:E8:1C:4F:55 name=68557889 \
profile=30-DAY server=hotspot1
add comment=vc-777-08.04.24- mac-address=72:5D:78:F9:C6:23 name=39958986 \
profile=30-DAY server=hotspot1
/ip route
add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=VoicCall \
routing-table=WhatsApp+IMO suppress-hw-offload=no
/ip service
set www port=82
/ip socks
set auth-method=password enabled=yes port=5678 version=5
/ppp l2tp-secret
add
/ppp secret
add disabled=yes name=ohidurab service=pppoe
add name=vpn profile=default-encryption service=pptp
add name=vpn profile=default-encryption service=l2tp
add local-address=10.10.0.1 name=aa remote-address=10.10.0.2
/special-login
add disabled=yes port=serial0 user=admin1
/system clock
set time-zone-name=Asia/Dubai
/system identity
set name=WiFi-2
/system logging
add action=disk prefix=-> topics=hotspot,info,debug
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add interval=2m47s name=30-DAY on-event=":local dateint do={:local montharray \
( \"jan\",\"feb\",\"mar\",\"apr\",\"may\",\"jun\",\"jul\",\"aug\",\"sep\",\
\"oct\",\"nov\",\"dec\" );:local days [ :pick \$d 4 6 ];:local month [ :pi\
ck \$d 0 3 ];:local year [ :pick \$d 7 11 ];:local monthint ([ :find \$mon\
tharray \$month]);:local month (\$monthint + 1);:if ( [len \$month] = 1) d\
o={:local zero (\"0\");:return [:tonum (\"\$year\$zero\$month\$days\")];} \
else={:return [:tonum (\"\$year\$month\$days\")];}}; :local timeint do={ :\
local hours [ :pick \$t 0 2 ]; :local minutes [ :pick \$t 3 5 ]; :return (\
\$hours * 60 + \$minutes) ; }; :local date [ /system clock get date ]; :lo\
cal time [ /system clock get time ]; :local today [\$dateint d=\$date] ; :\
local curtime [\$timeint t=\$time] ; :foreach i in [ /ip hotspot user find\
\_where profile=\"30-DAY\" ] do={ :local comment [ /ip hotspot user get \$\
i comment]; :local name [ /ip hotspot user get \$i name]; :local gettime [\
:pic \$comment 12 20]; :if ([:pic \$comment 3] = \"/\" and [:pic \$comment\
\_6] = \"/\") do={:local expd [\$dateint d=\$comment] ; :local expt [\$tim\
eint t=\$gettime] ; :if ((\$expd < \$today and \$expt < \$curtime) or (\$e\
xpd < \$today and \$expt > \$curtime) or (\$expd = \$today and \$expt < \$\
curtime)) do={ [ /ip hotspot user remove \$i ]; [ /ip hotspot active remov\
e [find where user=\$name] ];}}}" policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-time=startup