Guest WiFi configuration
🤓 Tip: We recommend installing the Winbox software to access your Mikrotik interface.
To configure your guest hotspot, first log into your Mikrotik device, then follow each of the steps below:
From the left-hand menu, click RADIUS and then click on the blue plus
icon. Enter the following settings:Service: Hotspot.
Address: 18.168.231.87
Secret: Contact Support.
Authentication Port: 1812.
Accounting Port: 1813.
Click Apply and Ok to save.
Still in the RADIUS menu window, click the blue plus
icon again, and enter the second RADIUS server details: Service: Hotspot.
Address: 18.134.223.213
Secret: Contact Support.
Authentication Port: 1812.
Accounting Port: 1813.
Click Apply and Ok to save.
Next, from the left-hand menu click IP and then choose Hotspot.
The Hotspot menu window will open, click the Hotspot Setup button. Configure with the below settings:
Hotspot Interface: This should match the same network interface you will use for your guest network, this will usually be either a bridge or VLAN.
Local Address of Network: 10.1.0.1/24
Masquerade Network: Yes.
Address Pool of Network: 10.1.0.2-10.1.0.254
Select Certificate: None.
IP Address of SMTP Server: Leave at default.
DNS Server: 8.8.8.8 and 8.8.4.4
DNS Name: Leave blank.
Click Ok to save.
In the Hotspot window, click on the Servers tab and double-click the hotspot you've just created to load the Hotspot Server Window.
Change the Name to the MAC address of your Mikrotik WAN interface and press OK.
To find the WAN interface MAC, go to Interfaces on the left menu and click on your WAN interface - e.g. ether1-gateway.
⚠️ Important: We will require this MAC to activate the service.
In the Hotspot window click the Server Profiles tab. Double click on the newly created Profile and set the following:
On the General tab:
Hotspot Address: 10.1.0.1
On the Login tab:
HTTP PAP: Ticked
All others: Unticked
On the RADIUS tab:
Use RADIUS: Ticked
MAC Format: XX-XX-XX-XX-XX-XX
Accounting: Ticked
Interim Update: 00:02:00
Click OK to Save.
Still in the Hotspot window click on User Profiles and double click on the default entry. Set the following:
Session Timeout: 24:00:00
Idle Timeout: 00:30:00
Keepalive Timeout: blank (click the up arrow to wipe the value).
On the main Winbox interface, click New Terminal to open the Terminal Window.
Copy the following text and right click to paste in the window:
/ip hotspot walled-garden
add dst-host=*.wireless-social.com
add dst-host=*.amazonaws.com
add dst-host=*cloudfront*
add dst-host=*openweathermap*
add dst-host=*stripe*
add dst-host=*facebook*
add dst-host=*fbcdn*
add dst-host=*akamai*
add dst-host=*twitter*
add dst-host=*twimg*
add dst-host=*edgecastcdn.net
add dst-host=accounts.google.*
add dst-host=fonts.gstatic.com
add dst-host=*.googleapis.com
add dst-host=ssl.gstatic.com
add dst-host=*.googleusercontent.com
add dst-host=play.google.com
add dst-host=www.gstatic.com
add dst-host=appleid.apple.com
add dst-host=appleid.cdn-apple.com
add dst-host=www.apple.com
add dst-host=*.idms-apple.com.akadns.net
add dst-host=*instagram*Finally, you'll need to upload HTML two files to the Mikrotik device to ensure guests are redirected properly. Download the attached text files and save them as login.html and alogin.html on your desktop.
Europe HTML files:
Americas HTML files:
📌 Note: When saving the file, make sure the extension is only .html and .txt is not appended.
To upload the files, from the left-hand menu, click Files and drag and drop the two files into the flash/hotspot folder.
Finally, contact our support team with your Hotspot MAC address.