Radius + VLAN + Hotspot

Good time of a day dear Sirs!

I’m trying to build a hotspot with radius authorization and happened to get stuck a bit.
The setup is as follows:
RB433 connected to Dlink switch with 2 Vlans on port 10(control) and 25(inet). Hotspot offers authorization via Radius and successfully assigns IP for user but I can’t reach inet. I think that 25vlan have to be untagged on hotspots side or may be I miss something.
Googling for 3 days didn’t help.

Thank you for your time in advance.

check your firewall rules and masquerade.
your hotspot client can send ping to routerOS gateway? and to the radius?

Check DNS. Also have a look at assigned IP, gateway, DNS on client connection to give you an idea. Ping and tracert from client maybe helpful. Hotspot on vlan 25.