1. Home
  2. Devices & Hardware
  3. Mikrotik Configuration

Mikrotik Configuration

This article describes the installation and configuration steps for Mikrotik routers.

The configuration applies to Mikrotik routers with RouterOS L4 and beyond.

Configuring parameters

Winbox is a small utility that allows the administration of Mikrotik RouterOS using a fast and simple GUI. It is a native Win32 binary but can be run on Linux and MacOS (OSX) using Wine. Winbox loader can be downloaded directly from the router or from the Mikrotik download page.
Login to your Mikrotik using a router MAC address.

Go to Quick Set and set Network Name to the desired one (Hotspot in this example) and press on the Apply Configuration button.

Other settings on the Quick Set page should be set as default.
Default settings:
Mode: HomeAP
Address Aquisition: Automatic
DHCP and NAT should be enabled.

Go to IP – Services, enable www-ssl.

Go to IP – Hotspot and from Walled Garden add following as DST Host (add domains one by one):


and if you use social networks or payment gateway like Stripe add:


Download login.html file (which is doing the redirection to the splash page) and unzip it. Open the Files section in your Winbox and look for the same filename, it’s usually located in the hotspot folder. Replace this file (drag & drop over the existing one).

In some mobile devices like iPhone, CNA displays a blank page after a successful connection with a word success barely visible.
If you want to display a large message on the screen that the customer successfully connected, download alogin.html, and replace the same way as the previous one.

If you want to keep portal URL redirect functionality, that redirects user device after login, do NOT install alogin.html file!

Click Radius and create new profiles:

Service: Hotspot
Secret: (contact our office)
Authentication Port: 1812
Accounting Port: 1813
Timeout: 3000ms

Add new Radius profile:

Service: Hotspot
Secret: (contact our office)
Authentication Port: 1812
Accounting Port: 1813
Timeout: 3000ms

Go to IP-Hotspot- Servers – Hotspot Setup.

Hotspot Interface: Select bridge-local interface that guests will connect through
Local Address of Network :
Masquerade Network : Yes
Address Pool of Network :
Select Certificate: none
IP Address of SMTP Server: leave default
DNS Servers: and
DNS Name: leave blank
Session Timeout 24:00:00
Idle Timeout 00:30:00
Keepalive Timeout blank
Name of Local HotSpot User and Password: configure user and pass

Login again using Winbox and go to IP – Hotspot – Servers tab.

Double click on the created hotspot. Change the hotspot server Name to the MAC address of your Mikrotik WAN interface and press OK.

IMPORTANT: Usually there is written hotspot1, change it to WAN MAC in
formatĀ 00-00-00-00-00-00

Go to Server Profiles and click on it.
Under the Login tab select to use only HTTP PAP.

Under RADIUS tab select option Use RADIUS, change MAC format to
XX-XX-XX-XX-XX-XX and pressĀ  OK.

Note: add your computer IP into the Walled Garden to prevent disconnecting during Hotspot configuration.

If you get disconnected and get login screen in your browser, create a user in the Hotspot platform and login with this user. This should reenable access to the router.


If your Mikrotik is not redirecting user to the welcome page defined in the cloud portal (you need to have a dedicated welcome splash page configured in the WiFi location that contains Welcome widget) please do this:

Login as the end user on your computer to open access for Winbox.
Copy file login.html to the Winbox files section.


If *t-msedge.net is added and logo and background images are not displayed please add standard.t-0001.t-msedge.net in the Walled garden.

In case that you have this domain in the Walled garden but images aren’t still displayed, open command prompt and ping cdn.wifihotspot.io to discover the correct domain. Add this domain in the Walled garden.


In case that Mikrotik requires the password to connect a user to SSID, please disable security like WPA, etc. It is a common practice to allow users to connect without a password as the portal controls Internet access.


Make sure that you connected Internet cable into WAN port and reboot Mikrotik.


Make sure that Internet connection ( Address Aquisition) is set to Automatic.


Make sure that Hotspot Server Name is changed to the MAC address of your Mikrotik WAN interface in format 00-00-00-00-00-00

Updated on February 8, 2021

Was this article helpful?