# feb/13/2023 21:22:44 by RouterOS 6.39.

# so ware id = FFTB-U2IU

/interface ethernet

set [ find default-name=ether1 ] name=INTERNET

set [ find default-name=ether2 ] name=LAN

/interface wireless

set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=\

irfan@ProxyUKK

/interface wireless security-profiles

set [ find default=yes ] supplicant-iden ty=MikroTik

/ip hotspot profile

add dns-name=irfan.com hotspot-address=192.168.200.1 login-by=h p-chap name=\

hsprof1

/ip pool

add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.100

add name=hs-pool-5 ranges=192.168.200.2-192.168.200.100

/ip dhcp-server

add address-pool=dhcp_pool0 disabled=no interface=LAN name=dhcp1

add address-pool=hs-pool-5 disabled=no interface=wlan1 lease- me=1h name=\

dhcp2

/ip hotspot

add address-pool=hs-pool-5 disabled=no interface=wlan1 name=hotspot1 profile=\

hsprof1

/ip hotspot user profile

add address-pool=hs-pool-5 name=uprof1 rate-limit=512/1024 shared-users=5

/ip address

add address=192.168.100.1/25 interface=LAN network=192.168.100.0

add address=192.168.200.1/24 interface=wlan1 network=192.168.200.0

/ip dhcp-client

add dhcp-op ons=hostname,clien d disabled=no interface=INTERNET

/ip dhcp-server network

add address=192.168.100.0/25 gateway=192.168.100.1

add address=192.168.200.0/24 comment="hotspot network" gateway=192.168.200.1

/ip dns

set allow-remote-requests=yes servers=8.8.8.8

/ip firewall filter

add ac on=passthrough chain=unused-hs-chain comment=\

"place hotspot rules here" disabled=yes

add ac on=drop chain=input comment="Blok ping router" dst-address=\

192.168.100.0/25 protocol=icmp src-address=192.168.100.2-192.168.100.50

add ac on=drop chain=input comment="Blok ping hotspot" dst-address=\

192.168.200.0/24 protocol=icmp src-address=192.168.100.51-192.168.100.100

add ac on=log chain=input comment=logging log=yes log-prefix=akses_router

add ac on=drop chain=forward out-interface=INTERNET src-address=\

192.168.200.0/24 me=16h-7h,sun,mon,tue,wed,thu,fri,sat

/ip firewall nat

add ac on=passthrough chain=unused-hs-chain comment=\

"place hotspot rules here" disabled=yes

add ac on=masquerade chain=srcnat out-interface=INTERNET

add ac on=masquerade chain=srcnat comment="masquerade hotspot network" \

src-address=192.168.200.0/24

add ac on=redirect chain=dstnat dst-port=80 in-interface=wlan1 protocol=tcp \

to-ports=8080

/ip hotspot user

add name=admin

add name=user1 password=user1 profile=uprof1 server=hotspot1

/ip proxy
set cache-administrator=irfan@sekolah.sch.id cache-on-disk=yes enabled=yes

/ip proxy access

add ac on=deny dst-host=linux.org dst-port=80

add ac on=deny dst-port=80 path=*.mp3

add ac on=deny dst-port=80 path=*.mkv

/snmp

set enabled=yes

/system clock

set me-zone-name=Asia/Jakarta

/system iden ty

set name="Router Irfan"

/system logging

add ac on=disk prefix=akses_router

/system ntp client

set enabled=yes server-dns-names=id.pool.ntp.org,asia.pool.ntp.org