# dec/28/2017 08:46:34 by RouterOS 6.41
# software id = 41A0-RV4J
#
# model = 951Ui-2HnD
# serial number = 6BF4070323E1
/interface bridge
add fast-forward=no name="hotspot network"
add fast-forward=no name="local network"
/interface ethernet
set [ find default-name=ether2 ] auto-negotiation=no name=pico
set [ find default-name=ether1 ] auto-negotiation=no name=wan
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
    tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=\
    profile1 supplicant-identity="" unicast-ciphers=tkip,aes-ccm \
    wpa-pre-shared-key=0000000000 wpa2-pre-shared-key=0000000000
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn disabled=no frequency=auto \
    mode=ap-bridge security-profile=profile1 ssid=WIFI
add disabled=no keepalive-frames=disabled mac-address=66:D1:54:CE:56:9F \
    master-interface=wlan1 multicast-buffering=disabled name=wlan2 ssid=\
    hotspot wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip hotspot profile
add dns-name=mt.hotspot.com hotspot-address=192.168.5.1 name=hsprof1
/ip hotspot user profile
set [ find default=yes ] keepalive-timeout=30m status-autorefresh=30s
/ip pool
add name=dhcp ranges=192.168.5.10-192.168.5.254
add name=dhcp_pool1 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool2 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool3 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool4 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool5 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool6 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool7 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool8 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool9 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool10 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool11 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool12 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool13 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool14 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool15 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool16 ranges=192.168.5.2-192.168.5.254
/ip dhcp-server
add address-pool=dhcp_pool16 disabled=no interface="local network" name=dhcp1
add address-pool=dhcp disabled=no interface="hotspot network" lease-time=1h \
    name=dhcp2
/ip hotspot
add address-pool=dhcp disabled=no interface="hotspot network" name=hotspot1 \
    profile=hsprof1
/tool user-manager customer
set myhumi access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw login=\
    myhumi password=009207654675
/tool user-manager profile
add name=test name-for-users="" override-shared-users=off owner=myhumi price=\
    0 starts-at=logon validity=0s
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=aa owner=\
    myhumi rate-limit-min-rx=10485760B rate-limit-min-tx=10485760B \
    rate-limit-rx=10485760B rate-limit-tx=10485760B transfer-limit=0B \
    upload-limit=0B uptime-limit=1h
/interface bridge port
add bridge="hotspot network" interface=wlan2
add bridge="local network" interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set allow-fast-path=no
/interface list member
add interface=wan list=WAN
add interface=pico list=LAN
/interface wireless access-list
add interface=wlan1 mac-address=5C:51:81:B2:45:47 vlan-mode=no-tag
/ip address
add address=192.168.1.4/24 interface=wan network=192.168.1.0
add address=192.168.5.1/24 interface="local network" network=192.168.5.0
add address=192.168.5.1/24 interface="hotspot network" network=192.168.5.0
/ip cloud
set update-time=no
/ip dhcp-server network
add address=192.168.5.0/24 dns-server=\
    192.168.5.1,198.153.192.50,198.153.194.50 gateway=192.168.5.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=198.153.192.50,198.153.194.50
/ip firewall address-list
add address=192.168.5.1 list=no-opendns
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=wan
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=192.168.5.0/24
add action=dst-nat chain=dstnat dst-port=53 protocol=tcp to-addresses=\
    192.168.1.4 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=udp to-addresses=\
    192.168.1.4 to-ports=53
/ip hotspot user
add name=admin password=123
/ip route
add distance=1 gateway=192.168.1.1
/radius
add address=127.0.0.1 secret=1414 service=hotspot
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Manila
/tool user-manager database
set db-path=user-manager
/tool user-manager profile profile-limitation
add from-time=0s limitation=aa profile=test till-time=23h59m59s weekdays=\
    sunday,monday,tuesday,wednesday,thursday,friday,saturday
/tool user-manager router
add coa-port=1700 customer=myhumi disabled=no ip-address=127.0.0.1 log=\
    auth-fail name=routeros shared-secret=1414 use-coa=no
/tool user-manager user
add caller-id=5C:51:81:B2:45:47 customer=myhumi disabled=no password=a \
    shared-users=1 username=a wireless-enc-algo=none wireless-enc-key="" \
    wireless-psk=""