/interface bridge

add name=bridge-com-hotspot
add name=bridge-sem-hotspot
add fast-forward=no name=bridge1 protocol-mode=none
/interface pppoe-client
add add-default-route=yes allow=pap,chap disabled=no interface=ether1-gateway \
keepalive-timeout=60 max-mru=1492 max-mtu=1492 name=pppoe-out1 password=\
mariliashopping user=rbgerenciaunifi@life.com.br
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot
add disabled=no interface=bridge-com-hotspot keepalive-timeout=2m name=\
00:0C:42:C0:9B:A5
/ip hotspot profile
set [ find default=yes ] login-by=http-pap,mac-cookie radius-interim-update=15m \
radius-mac-format=XX-XX-XX-XX-XX-XX use-radius=yes
/ip hotspot user profile
set [ find default=yes ] idle-timeout=1h keepalive-timeout=1m \
mac-cookie-timeout=1h shared-users=unlimited
/ip pool
add name=pool1 ranges=192.168.88.2-192.168.88.254
add name=dhcp_pool-wspot ranges=10.97.0.2-10.97.15.254
add name=dhcp_pool-sem-hotspot ranges=10.96.0.2-10.96.15.254
/ip dhcp-server
add add-arp=yes address-pool=pool1 authoritative=after-2sec-delay interface=\
bridge1 lease-time=10h name=dhcp1
add address-pool=dhcp_pool-wspot disabled=no interface=bridge-com-hotspot \
lease-time=30m name=dhcp-com-hotspot
add address-pool=dhcp_pool-sem-hotspot disabled=no interface=bridge-sem-hotspot \
lease-time=30m name=dhcp-sem-hotspot
/snmp community
set [ find default=yes ] addresses=201.62.64.100/32 name=unifi@life
/ip address
add address=192.168.88.1/24 interface=bridge-com-hotspot network=192.168.88.0
add address=10.97.0.1/20 interface=bridge-com-hotspot network=10.97.0.0
add address=10.96.0.1/20 interface=bridge-sem-hotspot network=10.96.0.0
add address=179.96.131.34/29 disabled=yes interface=ether1-gateway network=\
179.96.131.32
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid interface=\
ether1-gateway
/ip dhcp-server lease
add address=10.97.0.2 client-id=1:f0:9f:c2:f6:3e:c9 mac-address=\
F0:9F:C2:F6:3E:C9 server=dhcp-com-hotspot
add address=10.97.0.3 client-id=1:f0:9f:c2:f6:47:7e mac-address=\
F0:9F:C2:F6:47:7E server=dhcp-com-hotspot
add address=10.97.0.4 client-id=1:f0:9f:c2:f6:3f:df mac-address=\
F0:9F:C2:F6:3F:DF server=dhcp-com-hotspot
add address=10.97.0.5 client-id=1:3c:2e:ff:1e:6b:b9 mac-address=\
3C:2E:FF:1E:6B:B9 server=dhcp-com-hotspot
/ip dhcp-server network
add address=10.96.0.0/20 dns-server=8.8.8.8,201.62.64.10,201.62.64.11,8.8.4.4 \
gateway=10.96.0.1
add address=10.97.0.0/20 dns-server=8.8.8.8,201.62.64.11,201.62.64.10,8.8.4.4 \
gateway=10.97.0.1
/ip dns
set servers=201.62.64.10,201.62.64.11
/ip dns static
add address=8.8.8.8 name=Google1
add address=8.8.4.4 name=Google2
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=dst-nat chain=dstnat comment=AP-01 disabled=yes dst-address=\
177.105.137.255 dst-port=8001 protocol=tcp to-addresses=10.97.0.2
add action=dst-nat chain=dstnat comment=AP-02 disabled=yes dst-address=\
177.105.137.255 dst-port=8002 protocol=tcp to-addresses=10.97.0.4 to-ports=\
80
add action=dst-nat chain=dstnat comment=AP-03 disabled=yes dst-address=\
177.105.137.255 dst-port=8003 protocol=tcp to-addresses=10.97.0.3 to-ports=\
80
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
add dst-host=*wspot*
add dst-host=*facebook.com*
add dst-host=*akamai*
add dst-host=*facebook.net*
add dst-host=*fbcdn.net*
add dst-host=*twitter*
add dst-host=*twimg*
add dst-host=*fastly.net*
add dst-host=*edgecastcdn.net*
add dst-host=*doubleclick.net*
add dst-host=www.google.com
add dst-host=www.google.com.br
add dst-host=*life.com.br*
add dst-host=201.62.64.0/24
/ip hotspot walled-garden ip
add action=accept disabled=no !dst-address !dst-address-list !dst-port \
!protocol src-address=10.97.0.2 !src-address-list
add action=accept disabled=no !dst-address !dst-address-list !dst-port \
!protocol src-address=10.97.0.3 !src-address-list
add action=accept disabled=no !dst-address !dst-address-list !dst-port \
!protocol src-address=10.97.0.4 !src-address-list
add action=accept disabled=no !dst-address !dst-address-list !dst-port \
!protocol src-address=10.97.0.5 !src-address-list
/ip service
set telnet port=2300
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/radius
add address=54.207.48.161 secret="wide\$123" service=hotspot timeout=3s
add address=54.207.62.56 secret="wide\$123" service=hotspot timeout=3s
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=00-0C-42-C0-9B-A5
/system ntp client
set enabled=yes primary-ntp=200.192.112.8 secondary-ntp=200.129.0.46
/system routerboard settings
set silent-boot=no
[admin@00-0C-42-C0-9B-A5] >