MikroTik

Configure a MikroTik hotspot safely

Create customer WiFi, choose LAN ports, apply voucher access, and verify the captive portal without changing the WAN by mistake.

14 minutesFor techniciansMikroTik RouterOSUpdated Sep 27, 2026

Before you start

  • Connect to the MikroTik WiFi or LAN for the first setup.
  • Identify the WAN port and every customer LAN or WiFi interface.
  • Export or verify a backup and keep local administrator access.
  • Do not select an ISP/WAN port as a hotspot customer port.

Procedure

Follow these steps in order

1

Add the MikroTik to the correct branch

Open Internet Devices, choose MikroTik, enter the local RouterOS address and administrator credentials, and run identity discovery.

2

Review discovery

Check RouterOS version, model, existing hotspot objects, bridges, DHCP, interface roles, and conflicts. Resolve ambiguous port roles before applying changes.

3

Choose customer ports

Open Ethernet ports and select only the LAN ports used by customers or downstream access points. The WAN port must remain excluded. You can uncheck a port before applying.

4

Set customer WiFi

Choose the SSID and either a WiFi password or Open WiFi. Open WiFi is intended only when the hotspot login page controls customer access.

5

Create internet packages

Create the required speed, time, data, sharing, and expiry policies. Assign packages to the branch or device before generating vouchers.

6

Deploy the login page

Choose a saved WiFi login page that belongs to the same customer and branch, preview it, then deploy it to the selected MikroTik. Do not deploy while device identity is unverified.

7

Apply and verify

Confirm the maintenance warning, apply the hotspot configuration, reconnect a test phone, open a new webpage, and sign in with a test voucher.

Verify success

  • Existing internet access still works on staff networks.
  • A new customer device is redirected to the login page.
  • The voucher is accepted and receives the configured speed and time.
  • A reboot preserves the SSID, hotspot, packages, and portal.

Troubleshooting

Hotspot setup is blocked by device mode

RouterOS may require a physical confirmation for a device-mode change. Complete that action locally, refresh discovery, and retry only after the router reports the required capability.

The login page does not open

Confirm the phone received DHCP and DNS from the customer network, disable private DNS or VPN for the test, verify the hotspot interface, and redeploy the portal only after device identity succeeds.

Vouchers take too long to install

Check the live device connection and package mapping, then push a small test batch. Do not repeatedly submit a large batch while a previous installation is still pending.

Official vendor references

Was this guide helpful?

Your response helps the system owner prioritize documentation updates.