Hi How to create a hotspot on VAP, with rb411ar?

Have a look at this article - http://wiki.mikrotik.com/wiki/Hotspot_server_setup

Just be sure to add an IP address to your VAP and specify the VAP as the Hotspot Interface during setup.

every time i try, every thing goes in red. The VAP is attached to the bridge, could that be the problem.

The VAP is attached to the bridge

What bridge? This is a RB411, right? You shouldn't need a bridge for this. You should have the wlan set as the localnet interface and the ether as the WAN interface. They should not be bridged to set up a hotspot.

Im not getting hotspot page and no internet. Under hotspot host i can see my laptop with the dhcp ip address but nothing else is happening.

Do you get a redirect attempt? Does it try to load the login page and can't? If that is the case, what URL is showing in the address bar of your browser when it tries to redirect? Is it the router's ip on that interface?

You should post "/ip hotspot profile print". We'll start there.
add: I forgot about that bridge. Post "/ip address", "/interface bridge" and "/interface bridge port" also.

I disable the bridge because hotspot goes into red when enable.

Flags: * - default
0 * name="default" hotspot-address=0.0.0.0 dns-name=""
html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no
use-radius=no

1 name="hsprof1" hotspot-address=10.10.10.1 dns-name=""
html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no
use-radius=no

0 10.10.10.1/24 10.10.10.0 wlan2
1 192.168.0.2/24 192.168.0.0 ether1


Flags: X - disabled, R - running
0 X name="bridge" mtu=1500 arp=enabled
mac-address=00:0C:42:4B:8A:6E protocol-mode=none
priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00
max-message-age=20s forward-delay=15s transmit-hold-count=6
ageing-time=5m

Flags: X - disabled, I - inactive, D - dynamic
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 I ether1 bridge 0x80 10 none
1 I wlan2 bridge 0x80 10 none

That part looks ok. Two more things to check. Please post these:
/ip route
/ip firewall nat

There should be a default route. There should be a srcnat or masquerade.

Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.0.1 1
1 ADC 10.10.10.0/24 10.10.10.1 bridge 0
2 ADC 192.168.0.0/24 192.168.0.2 bridge 0

Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough to-addresses=0.0.0.0

1 ;;; masquerade hotspot network
chain=srcnat action=masquerade to-addresses=0.0.0.0
src-address=10.10.10.0/24

I use this masquerade: Also, the routes for those ip addresses are assigned to "bridge".

Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.0.1 1
1 ADC 10.10.10.0/24 10.10.10.1 bridge 0
2 ADC 192.168.0.0/24 192.168.0.2 bridge 0

I change all those setting and still no luck. any other suggestions?

How did you set up the hotspot? When it asked you about the security certificate, did you select "none"? When it tries to redirect, what is the URL?
Is it http://192.168.0.1/login
Or is it https://192.168.0.1/login

I selected none.
when i try to goto google.com, i got the web page is not available with http://www.google.com in the address bar.

Disable the hotspot. Can you access the internet without the hotspot?

no i have to enable bridge to get internet.

Then your setup is faulty. I suggest you start over. That is what I use to get started. Get that working. No bridge!
Then install the hotspot
All default answers are ok except these:
masquerade network? no
security certificate? none

should i use the gateway ip as the dns?

should i use the gateway ip as the dns?

Only if your ISP told you to use that. I don't know what kind of account you have with your ISP. If you have a static ip, you should have been issued an ip, netmask, gateway, and dns servers (normally two).

If you have a dhcp account, then all that (including dns) would be issued to the router by the dhcp server.

ok thanks i got it to work What does share users mean under hotspot user profile?

The "shared-users" setting allows more than one computer/device to log in with the same username/password. If you set "shared-users=2", then two computers could login with the same username.

The "shared-users" setting allows more than one computer/device to log in with the same username/password. If you set "shared-users=2", then two computers could login with the same username.

Thanks again SurferTim, Is there a way to expire a session after a certain period?