Setup Mikrotik For Hotspot

several steps to build a hotspot system and user manager
1. Rename interface eth: LAN, LOCAL, INT
[Admin @ Fery-Router]> interface print
Flags: X - disabled, D - dynamic, R - running
# NAME TYPE RX-RATE TX-RATE MTU
Ian R 0 ether 0 0 1500
1 R int ether 0 0 1500
2 R Local ether 0 0 1500
[Admin @ Fery-Router]>
2. setting ip address three interfaces
[Admin @ Fery-Router]> ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 10.8.8.45/24 10.8.8.0 10.8.8.255 Local
1 192.168.10.1/24 192.168.10.0 192.168.10.255 lan
2 202.47.77.24x/28 202.47.77.240 202.47.77.255 int
[Admin @ Fery-Router]>
 
3. setting ip route / gateway
[Admin @ Fery-Router]> ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS pref-SRC G GATEWAY DISTANCE INTERFACE
0 AS 0.0.0.0 / 0 r 10.8.8.1 1 Local
1 AS 0.0.0.0 / 0 r 202.47.77.24x an int
2 ADC 10.8.8.0/24 10.8.8.45 0 local
3 ADC 192.168.10.0/24 192.168.10.1 0 lan
4 ADC 202.47.77.240/28 202.47.77.249 0 int
[Admin @ Fery-Router]>
4. dns settings
[Admin @ Fery-Router]> ip dns print
primary-dns: 202.47.78.8
secondary-dns: 202.47.78.9
allow-remote-requests: yes
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 21KiB
[Admin @ Fery-Router]>
5. setting nat / masquerading
[Admin @ Fery-Router]> ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain = srcnat action = masquerade
1 chain = srcnat action = masquerade src-address = 192.168.10.0/24
2;;; masquerade hotspot network
srcnat chain = action = masquerade src-address = 192.168.10.0/24
[Admin @ Fery-Router]>
6. input address-list nice
7. marking and marking-connection-routing
[Admin @ Fery-Router]> ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain = output action = mark-connection new-connection-mark = mark-local-con passthrough = yes dst-address-list = nice
1 chain = output action = mark-routing new-routing-mark = mark-routing-local passthrough = yes connection-mark = mark-local-con
[Admin @ Fery-Router]>
8. marking the gateway
9. traceroute test local and international sites
10. hotspot setup system [Activate HOTSPOT SYSTEM]
11. RADIUS activate the hotspot server profile [use-radius = yes]
12. add Radius
services = hotspot
address = 202.47.77.24x [IP where the radius / user-manager is]
secret = 123456 [secret must be the same as the user-manager]
SETTING USER-MANAGER [PACKAGE SYSTEM TO BE SEPARATED FROM HOTSPOT]
1. install user-manager package
2. create a user account-manager
[Admin @ MikroTik]> tool user-manager customer add login = "ferry" password = "fery123" permissions = owner
3. to access the user-manager>> http://202.47.77.24x/userman
username = fery
password = fery123
4. router settings
name = fery-router
ip address = 202.47.77.24x [ip address 127.0.0.1 itself can also]
secret = 123456 [secret must be the same with the router]
OK
5. add user accounts to access the system from the client hotspot
>> More complete account settings
6. learn menu user application-manager
user-manager can also be used to log in RouterOS
1. user AAA configuration on the side of RouterOS
# / User aaa set use-radius = yes
2. permissions on the default group should be full
# / User aaa set default-group = full
3. settings ip radius and the secret must be the same as the user-manager
# / Radius add service = login address = 202.47.77.24x secret = 123456
4. test login using a user account-manager [radius]