
ma non funziona, ho tolto l'interfaccia VirtualAP dal bridge (porte), fatto il NAT come mi hai detto, il dhcp va.
quì un piccolo riassunto:

export compact file="backup-config"
# may/13/2016 18:02:57 by RouterOS 6.30.4
# software id = Q9KG-0INS
#
/interface bridge
add admin-mac=E4:8D:8C:51:02:24 auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=\
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=\
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=\
ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
country=italy disabled=no distance=indoors frequency=auto hide-ssid=yes \
l2mtu=1600 mode=ap-bridge ssid="AP Casa" wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
wpa-pre-shared-key=75920192 wpa2-pre-shared-key=75920192
add management-protection=allowed name=ospiti
/interface wireless
add default-ap-tx-limit=1000000 default-client-tx-limit=1000000 disabled=no \
l2mtu=1600 mac-address=E6:8D:8C:51:02:28 master-interface=wlan1 name=\
"AP Ospiti" security-profile=ospiti ssid=Ospiti wds-default-bridge=\
bridge-local
/ip pool
add name=dhcpospiti ranges=192.168.2.100-192.168.2.150
/ip dhcp-server
add address-pool=dhcpospiti disabled=no interface="AP Ospiti" name=server1
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
add bridge=bridge-local interface=ether1-gateway
/ip address
add address=192.168.0.5/24 comment="default configuration" interface=\
ether2-master-local network=192.168.0.0
add address=192.168.2.1/24 interface="AP Ospiti" network=192.168.2.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
bridge-local
/ip dhcp-server network
add address=192.168.0.0/24 comment="default configuration" gateway=\
192.168.0.5 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=192.168.0.5 name=router
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=\
established,related
add action=fasttrack-connection chain=forward comment="default configuration" \
connection-state=established,related
add chain=forward comment="default configuration" connection-state=\
established,related
add action=drop chain=forward comment="default configuration" \
connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.2.0/24
/ip route
add distance=1 gateway=192.168.0.1
/system clock
set time-zone-name=Europe/Rome
/system leds
set 5 interface=wlan1
/system routerboard settings
set protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool romon port
add
# may/13/2016 19:13:45 by RouterOS 6.30.4
# software id = Q9KG-0INS
#
/interface bridge
add admin-mac=E4:8D:8C:51:02:24 auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=\
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=\
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=\
ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
country=italy disabled=no distance=indoors frequency=auto hide-ssid=yes \
l2mtu=1600 mode=ap-bridge ssid="AP Casa" wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
wpa-pre-shared-key=75920192 wpa2-pre-shared-key=75920192
add management-protection=allowed name=ospiti
/interface wireless
add disabled=no l2mtu=1600 mac-address=E6:8D:8C:51:02:28 master-interface=\
wlan1 name="AP Ospiti" security-profile=ospiti ssid=Ospiti \
wds-default-bridge=bridge-local
/ip pool
add name=dhcpospiti ranges=192.168.2.100-192.168.2.150
/ip dhcp-server
add address-pool=dhcpospiti disabled=no interface="AP Ospiti" name=server1
/queue simple
add max-limit=768k/768k name=Ospitilimite target=192.168.2.150/32
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
add bridge=bridge-local interface=ether1-gateway
/ip address
add address=192.168.0.5/24 comment="default configuration" interface=\
ether2-master-local network=192.168.0.0
add address=192.168.2.1/24 interface="AP Ospiti" network=192.168.2.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
bridge-local
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=8.8.8.8 gateway=192.168.2.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=192.168.0.5 name=router
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=\
established,related
add action=fasttrack-connection chain=forward comment="default configuration" \
connection-state=established,related
add chain=forward comment="default configuration" connection-state=\
established,related
add action=drop chain=forward comment="default configuration" \
connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.2.0/24
/ip route
add distance=1 gateway=192.168.0.1
/system clock
set time-zone-name=Europe/Rome
/system leds
set 5 interface=wlan1
/system routerboard settings
set protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool romon port
add
/queue simple
add max-limit=768k/768k limit-at=768k/768k name=Ospitilimite target=192.168.2.150/32
system reset configuration no-default=yes
# may/26/2016 10:04:19 by RouterOS 6.30.4
# software id = Q9KG-0INS
#
/interface bridge
add name=bridge1
/interface wireless security-profiles
add authentication-types=wpa2-psk eap-methods="" management-protection=\
allowed mode=dynamic-keys name=profile1 supplicant-identity="" \
wpa2-pre-shared-key=75920192
/interface wireless
set [ find default-name=wlan1 ] disabled=no hide-ssid=yes l2mtu=1600 mode=\
ap-bridge security-profile=profile1 ssid="AP Casa"
add disabled=no l2mtu=1600 mac-address=E6:8D:8C:51:02:28 master-interface=\
wlan1 name=wlanospiti ssid=Ospiti wds-cost-range=0 wds-default-cost=0
/ip pool
add name=dhcp_pool1 ranges=192.168.2.2-192.168.2.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=wlanospiti name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.0.5/24 interface=bridge1 network=192.168.0.0
add address=192.168.2.1/24 interface=wlanospiti network=192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=8.8.8.8 gateway=192.168.2.1
/ip dns
set servers=8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.2.0/24
/system clock
set time-zone-name=Europe/Rome
/system routerboard settings
set protected-routerboot=disabled
/tool romon port
add
Visitano il forum: Nessuno e 2 ospiti