# oct/01/2019 13:21:26 by RouterOS 6.45.6
# software id = 4L42-C3TX
#
# model = RB941-2nD
# serial number = A1C30A560349
/interface bridge
add name=bridge-hotspot
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=\
    "Hot spot Nasa"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=hot.spot hotspot-address=10.10.4.1 login-by=http-chap name=\
    hsprof1 use-radius=yes
/ip pool
add name=hs-pool-7 ranges=10.10.4.2-10.10.4.254
/ip dhcp-server
add address-pool=hs-pool-7 disabled=no interface=bridge-hotspot lease-time=1h \
    name=dhcp1
/ip hotspot
add address-pool=hs-pool-7 addresses-per-mac=1 disabled=no interface=\
    bridge-hotspot name=hotspot1 profile=hsprof1
/interface bridge port
add bridge=bridge-hotspot interface=wlan1
/ip address
add address=192.168.1.2/24 comment="main subnet router/modem" interface=\
    ether1 network=192.168.1.0
add address=10.10.3.1/24 comment=\
    "subnet 10.10.3.0 \E4\DF\EA\F4\F5\EF mikrotik" interface=ether2 network=\
    10.10.3.0
add address=10.10.4.1/24 comment="ip address assign to bridge" interface=\
    bridge-hotspot network=10.10.4.0
/ip dhcp-server network
add address=10.10.4.0/24 comment="hotspot network" dns-server=10.10.4.1 \
    gateway=10.10.4.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=10.10.4.1 name=hot.spot
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=10.10.4.0/24
add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 \
    in-interface-list=all protocol=tcp to-addresses=10.10.3.231 to-ports=443
/ip hotspot user
add name=admin password=xxxxxxxxxxx
/ip route
add distance=1 gateway=192.168.1.1
add distance=1 dst-address=10.10.10.0/24 gateway=10.10.3.231
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/radius
add address=127.0.0.1 secret="\CE\E9\EC\E1\F1\E1\F35511" service=hotspot
/radius incoming
set accept=yes
/system clock
set time-zone-name=Europe/Athens