I am struggling with trying to make an access point which is using the hotspot to use the existing DHCP server on the lan. Does someone here know if that is possible or not?
Thanks
If the Hotspot is sitting between the client and the DHCP server in a bridged mode try adding udp/67 and udp/68 to the walled garden IP configuration as allowed. If it is not and clients can reach it without going through the Hotspot it should ‘just work’. If it’s a routed network away of course you’ll have to set up the DHCP relay.
Not sure about configuring the hotspot. When setting it up it asks for a range and a pool. Iam hoping someone else has done a similar setup and can provide instruction… 
This document should help you out some:
http://www.mikrotik.com/testdocs/ros/2.9/ip/hotspot.php
What fewi has told you is what you want to know.
Most likely you have created a bridge, and added the Ether interface and the Wlan interface, right?
if so..
then you need to follow fewi’s instructions and go to ip → hotspot → walled garden
click the plus sign, action=allow, port=67,68 click ok.
now whoever access the mikrotik from the wlan side should see traffic on ports udp 67/68 from your dhcp server without needing hotspot authentication.
then you can use the dhcp-relay feature in ip → DHCP Relay for your mikrotik to forward DHCP info from your server straight to your hotspot users so they get an ip.
Sorry. One item I left out is I need to use Radius auth. Does that matter? I will look at the article.
Thanks,
So I set everything up as I think I should have. For some reason my machine can connect to the AP and access the network and no auth or web page redirection occurs… It is as if even though I configured hotspot and enable everything it still does not work…
See attached…
config.txt (15.6 KB)
There are a few things that could be wrong, but the hotspot profile is incorrect. The profile hsprof1 does not exist.
/ip hotspot
set 0 profile=default
Also, set the “/ip dns” settings or the hotspot will not redirect.
The hotspot is assigned to bridge1 with ether1 and wlan1 as interfaces on that bridge. Which interface on the router is the WAN interface? The entry in “/ip route” indicates it is ether1. That won’t work. The hotspot must be on LAN interfaces.
This is an RB/411 with one ethernet port. IT is an access point. Ether1 and wlan are bridged. ether1 is connected to the internal network.
The RB411 has a level 3 license. I’m not sure if that supports the hotspot service. (edit: Level 3 license states 1 user maximum for the hotspot, so it may.)
But despite that, ether1 is your WAN interface. You can’t have the hotspot on the WAN, and by bridging the two interfaces, that is what you are doing. The only interface that would be capable of running a hotspot on your RB411 would be wlan1. That is your only LAN interface. You would need to remove the bridge to do that.
If the hotspot is running on the 411, bridging eth1 and wlan1 will conflict with its hotspot configuration. The hotspot and internal network should be on separate subnets, and routed rather than bridged.
With a L3 license, it will be limited to one hotspot client. Other radios may try to associate, but they will never succeed–a frustrating prospect. Of course, the board could have been upgraded to a L4 license; you’d have to find out. Use “/ system license print”.
Did you ever get this resolved? I am also interested as I do not want to have to carve up my subnets and NAT is not an option as I need to be able to keep everything on a single subnet due to IPAD printing needs and Bonjour protocol cannot traverse subnets…
Hi, can i have above settings but hotspot user still need to authenticate before using internet?