Hello,
Here u go:
/interface bridge
add admin-mac=00:0C:42:FB:D4:85 auto-mac=no comment=“BRUG Interfeest GEK!” l2mtu=1598 name=bridge-local protocol-mode=rstp
/interface ethernet
set 0 comment=“WAN Interfeest Ziggo Zakelijk” mtu=1400 name=ether1-gateway
set 1 auto-negotiation=no comment=“LAN #1 Interfeest, default scope” name=ether2-master-local
set 2 disabled=yes master-port=ether2-master-local name=ether3-slave-local
set 3 comment=“Interfeest Kassa VLAN " disabled=yes master-port=ether2-master-local name=ether4-slave-local
set 4 master-port=ether2-master-local name=ether5-slave-local
/interface 6to4
add comment=“HE IPv6 Tunnel Interfeest” disabled=no local-address=... mtu=1280 name=sit1 remote-address=216.66.84.46
/interface vlan
add disabled=yes interface=ether4-slave-local name=“Kassa/AP VLAN” vlan-id=5
/interface wireless security-profiles
set [ find default=yes ] group-ciphers=“” unicast-ciphers=“”
add authentication-types=wpa2-psk eap-methods=passthrough group-ciphers=tkip management-protection=allowed mode=dynamic-keys name=mpr2 supplicant-identity=“” unicast-ciphers=tkip wpa2-pre-shared-key=*
add authentication-types=wpa-psk,wpa2-psk eap-methods=passthrough management-protection=allowed name=profile1 supplicant-identity=”"
/interface wireless
set 0 antenna-gain=10 band=2ghz-b/g/n channel-width=20/40mhz-ht-above comment=“Private WLAN Interfeest, default scope” disabled=no ht-rxchains=0,1 ht-supported-mcs=
mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-14,mcs-15 ht-txchains=1 l2mtu=2290 mode=ap-bridge rate-selection=legacy security-profile=mpr2 ssid=mpr2-ap tx-power=18 tx-power-mode=card-rates
wireless-protocol=any
add comment=“Public WLAN Interfeest, 10.5.50.0 scope” disabled=no l2mtu=2290 mac-address=02:0C:42:FB:D4:89 master-interface=wlan1 name=wlan2 ssid=“Gast Schuttershuske” wds-cost-range=0 wds-default-cost=0
/interface wireless manual-tx-power-table
set wlan1 comment=“Private WLAN Interfeest, default scope”
set wlan2 comment=“Public WLAN Interfeest, 10.5.50.0 scope”
/interface wireless nstreme
set wlan1 comment=“Private WLAN Interfeest, default scope”
set wlan2 comment=“Public WLAN Interfeest, 10.5.50.0 scope”
/ip hotspot profile
set [ find default=yes ] use-radius=yes
add hotspot-address=10.5.50.1 login-by=cookie,http-chap,http-pap name=hsprof1 use-radius=yes
/ip pool
add name=default-dhcp ranges=10.0.2.100-10.0.2.200
add name=hs-pool-8 ranges=10.5.50.2-10.5.50.254
add name=“Kassa/AP pool” ranges=10.10.10.20-10.10.10.250
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=default
add address-pool=hs-pool-8 disabled=no interface=wlan2 lease-time=1h name=dhcp1
add address-pool=“Kassa/AP pool” interface=“Kassa/AP VLAN” name=“kassa ap”
/ip hotspot
add address-pool=hs-pool-8 interface=wlan2 name=hotspot1 profile=hsprof1
/ip hotspot user profile
set [ find default=yes ] address-pool=hs-pool-8 idle-timeout=none keepalive-timeout=2m
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
add bridge=bridge-local
/interface pptp-server server
set authentication=mschap2 enabled=yes
/ip address
add address=10.0.2.1/24 comment=“default configuration” interface=bridge-local
add address=* interface=ether1-gateway
add address=10.5.50.1/24 comment=“hotspot network” interface=wlan2
add address=10.10.10.1/24 disabled=yes interface=“Kassa/AP VLAN”
/ip dhcp-server network
add address=10.0.2.0/24 comment=“default configuration” dns-server=10.0.2.1 gateway=10.0.2.1
add address=10.5.50.0/24 comment=“hotspot network” gateway=10.5.50.1
add address=10.10.10.0/24 comment=Kassa/AP gateway=10.10.10.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=212.54.35.25,212.54.40.25
/ip dns static
add address=8.8.8.8 name=“Google dns”
/ip firewall filter
add chain=input comment=“IPSEC RULE” src-address=*
add chain=forward comment=GRE dst-port=500 protocol=udp
add chain=forward comment=GRE dst-port=1723 protocol=tcp
add chain=input comment=“Winbox management WAN” dst-port=8291 protocol=tcp
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=established
add chain=input comment=“default configuration” connection-state=related
add action=reject chain=forward comment=“hotspot naar Switch” dst-address=10.0.2.6 src-address=10.5.50.0/24
add action=reject chain=forward comment=“hotspot naar Printer” dst-address=10.0.2.3 src-address=10.5.50.0/24
add action=reject chain=forward comment=“hotspot naar centralen” dst-address=10.0.2.4 src-address=10.5.50.0/24
add action=reject chain=forward comment=“hotspot naar mikrotik” dst-address=10.0.2.1 src-address=10.5.50.0/24
add action=reject chain=forward comment=“hotspot naar mikrotik” dst-address=10.0.2.2 src-address=10.5.50.0/24
add action=drop chain=input comment=“default configuration” in-interface=ether1-gateway
/ip firewall nat
add chain=srcnat dst-address=10.0.1.0/24 src-address=10.0.2.0/24
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment=“default configuration” out-interface=ether1-gateway to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment=“masquerade hotspot network” src-address=10.5.50.0/24
add action=masquerade chain=srcnat comment=“Kassa/ap test” src-address=10.10.10.0/24
add action=redirect chain=dstnat comment=“Webproxy hotspot” dst-port=80 in-interface=wlan2 protocol=tcp to-ports=8080
/ip hotspot user
add name=admin password=*
add name=* password=*
/ip hotspot walled-garden
add dst-host=*
add dst-host=*
add dst-host=*
add dst-host=*
/ip ipsec peer
add address=* secret=*
/ip ipsec policy
add dst-address=10.0.1.0/24 sa-dst-address=* sa-src-address=* src-address=10.0.2.0/24 tunnel=yes
/ip neighbor discovery
set ether1-gateway disabled=yes
set ether3-slave-local disabled=no
set ether4-slave-local disabled=no
set wlan1 disabled=yes
set wlan2 disabled=yes
/ip proxy
set cache-administrator=Schutterspark enabled=yes max-cache-size=none
/ip proxy access
add action=deny dst-host=porn
add action=deny disabled=yes dst-host=speedtest
add action=deny dst-host=microsoft
/ip route
add distance=1 gateway=*
/ipv6 address
add address=* interface=sit1
/ipv6 route
add distance=1 dst-address=2000::/3 gateway=2001:470:1f14:f36::1
/queue interface
set ether1-gateway queue=ethernet-default
set ether2-master-local queue=ethernet-default
set ether3-slave-local queue=ethernet-default
set ether4-slave-local queue=ethernet-default
set ether5-slave-local queue=ethernet-default
/radius
add address=127.0.0.1 disabled=yes secret=* service=hotspot
/snmp
set contact=NOC enabled=yes location=Schutterspark trap-community=public
/system clock
set time-zone-name=Europe/Brussels
/system leds
set 0 interface=wlan1
/system logging
add topics=radius,debug
/system ntp client
set enabled=yes mode=unicast primary-ntp=194.109.22.18
/system scheduler
add interval=1d name=“Wifi open” on-event=“interface wireless enable wlan2” policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api start-date=apr/29/2012 start-time=11:00:00
add interval=1d name=“Wifi Close” on-event=“interface wireless disable wlan2” policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api start-date=apr/28/2012 start-time=18:00:00
/tool graphing interface
add interface=wlan1
add interface=wlan2
/tool graphing resource
add allow-address=10.0.2.0/24
/tool mac-server
add disabled=no interface=ether2-master-local
add disabled=no interface=ether3-slave-local
add disabled=no interface=ether4-slave-local
add disabled=no interface=ether5-slave-local
add disabled=no interface=wlan1
add disabled=no interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local