# jan/13/2016 08:51:07 by RouterOS 6.33.3
# software id = TY0Z-TRGX
#
/interface bridge
add name=bridgeHotspot
add name=bridgeWork
/interface l2tp-client
add allow=chap connect-to=185.41.160.223 disabled=no mrru=1600 name=l2tp-out1 \
    password=DegQswG user=ap_mik366

/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=test
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=CloudWiFi
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    management-protection=allowed mode=dynamic-keys name=wlan2 \
    supplicant-identity="" wpa-pre-shared-key=DegQswGwifi \
    wpa2-pre-shared-key=DegQswGwifi
/interface wireless
add disabled=no hide-ssid=yes master-interface=\
    wlan1 name=wlan2 security-profile=wlan2 ssid=work wds-cost-range=0 \
    wds-default-cost=0
/ip hotspot profile
add hotspot-address=177.10.0.1 login-by=http-chap,trial name=hsprof1 \
    trial-uptime-limit=0s trial-uptime-reset=1m
/ip hotspot user profile
set [ find default=yes ] keepalive-timeout=15m rate-limit=5m/5m shared-users=\
    unlimited
/ip pool
add name=hs-pool-7 ranges=177.10.0.2-177.10.0.254
add name=dhcp_pool1 ranges=177.100.0.2-177.100.0.254
/ip dhcp-server
add address-pool=hs-pool-7 disabled=no interface=bridgeHotspot lease-time=1h \
    name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=bridgeWork lease-time=1d \
    name=dhcp2
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip hotspot
add address-pool=hs-pool-7 disabled=no interface=bridgeHotspot name=hotspot1 \
    profile=hsprof1
/interface bridge port
add bridge=bridgeWork interface=ether3
add bridge=bridgeHotspot interface=wlan1
add bridge=bridgeHotspot interface=ether2
add bridge=bridgeWork interface=wlan2
/ip address
add address=177.10.0.1/24 interface=bridgeHotspot network=177.10.0.0
add address=177.100.0.1/24 interface=bridgeWork network=177.100.0.0
/ip dhcp-server network
add address=177.10.0.0/24 comment="hotspot network" dns-server=177.10.0.1 \
    gateway=177.10.0.1
add address=177.100.0.0/24 gateway=177.100.0.1
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=177.10.0.0/24
add action=masquerade chain=srcnat src-address=177.100.0.0/24
/ip hotspot user
add name=admin
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
/ip hotspot walled-garden ip
add action=accept disabled=no dst-address=185.41.160.223
add action=accept disabled=no dst-host=maxcdn.bootstrapcdn.com
add action=accept disabled=no dst-host=code.ionicframework.com
add action=accept disabled=no dst-host=code.jquery.com
add action=accept disabled=no dst-host=oauth.vk.com
add action=accept disabled=no dst-host=pp.vk.me
add action=accept disabled=no dst-host=login.vk.com
add action=accept disabled=no dst-host=m.vk.com
add action=accept disabled=no dst-host=connect.ok.ru
add action=accept disabled=no dst-host=st.mycdn.me
add action=accept disabled=no dst-host=www.facebook.com
add action=accept disabled=no dst-host=m.facebook.com
add action=accept disabled=no dst-host=static.xx.fbcdn.net
add action=accept disabled=no dst-host=scontent.fhen1-1.fna.fbcdn.net
/system clock
set time-zone-name=Asia/Yekaterinburg
/system identity
set name=4C5E0CB0B92E
/user
set 0 name=ap_mik366

set 0 password=DegQswG

/tool
fetch url=http://185.41.160.223/files/login.html dst-path=hotspot/login.html
fetch url=http://185.41.160.223/files/alogin.html dst-path=hotspot/alogin.html