/interface wireless

set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=SISWA

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add hotspot-address=192.168.200.1 name=hsprof1
/ip pool
add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.100
add name=dhcp_pool1 ranges=10.10.10.2-10.10.10.254
add name=hs-pool-1 ranges=192.168.200.2-192.168.200.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether2 name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether1 name=dhcp2
add address-pool=hs-pool-1 disabled=no interface=wlan1 lease-time=1h name=\
dhcp3
/ip hotspot
add address-pool=hs-pool-1 disabled=no interface=wlan1 name=hotspot1 profile=\
hsprof1
/interface detect-internet
set detect-interface-list=all
/ip address
add address=192.168.100.1/24 interface=ether2 network=192.168.100.0
add address=192.168.200.1/24 interface=wlan1 network=192.168.200.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=192.168.100.0/24 gateway=192.168.100.1
add address=192.168.200.0/24 comment="hotspot network" gateway=192.168.200.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=128.199.188.0 name=mikrotik.com
add address=128.199.188.0 name=www.mikrotik.com
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=drop chain=input dst-address=192.168.1.253 protocol=icmp \
src-address=192.168.100.2-192.168.100.50
add action=drop chain=input dst-address=192.168.100.1 protocol=icmp \
src-address=192.168.100.2-192.168.100.50
add action=drop chain=input dst-address=192.168.200.1 protocol=icmp \
src-address=192.168.100.2-192.168.100.50
add chain=input log=yes log-prefix=login
add action=drop chain=forward dst-port=!80,443 in-interface=ether2 \
out-interface=ether1 protocol=tcp
add action=drop chain=forward content=mikrotik
# inactive time
add action=drop chain=forward in-interface=wlan1 out-interface=ether1 time=\
19h-23h59m59s,sun,mon,tue,wed,thu,fri,sat
# inactive time
add action=drop chain=forward in-interface=wlan1 out-interface=ether1 time=\
0s-7h,sun,mon,tue,wed,thu,fri,sat
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=192.168.200.0/24
add action=redirect chain=dstnat dst-port=80 in-interface=wlan1 protocol=tcp \
to-ports=8080
/ip hotspot user
add name=admin
/ip proxy
set enabled=yes
/ip proxy access
add action=deny dst-host=*linux.or.id
add action=deny path=*.mp3*
add action=deny path=*.mkv*
/ip route
add distance=1 gateway=10.10.10.1
/system clock
set time-zone-name=Asia/Jakarta
/system ntp client
set enabled=yes server-dns-names=id.pool.ntp.org
/system routerboard settings
set silent-boot=no