{"id":23291,"date":"2021-11-27T09:12:53","date_gmt":"2021-11-27T09:12:53","guid":{"rendered":"https:\/\/ded9.com\/?p=23291"},"modified":"2025-11-05T09:11:40","modified_gmt":"2025-11-05T09:11:40","slug":"how-to-configure-a-mikrotik-router-for-hotspot-gateway-operation","status":"publish","type":"post","link":"https:\/\/ded9.com\/de\/how-to-configure-a-mikrotik-router-for-hotspot-gateway-operation\/","title":{"rendered":"Configuring a MikroTik Router for HotSpot Gateway Operation"},"content":{"rendered":"<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">In this article, we field questions from customers on configuring their MikroTik routers for various functions. We&#8217;ll be covering how to set up MikroTik routers for HotSpot Gateway functionality.<\/span><\/p>\n<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">Additionally, HotSpots are ideal for small businesses that want to offer <a href=\"https:\/\/ded9.com\/how-to-change-the-wifi-channel-of-your-router\/\">WiFi<\/a> to their customers without worrying about their network becoming compromised.<\/span><\/p>\n<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\"> It can also be a valuable tool for companies with remote work-from-home (WFH) employees. Whatever the reason is that you&#8217;re looking to set up your MikroTik with the HotSpot gateway functionality activated, we&#8217;ll provide the steps necessary for you to do so. Our guide below draws from Mudasir Mirza&#8217;s <em>MikroTik HotSpot server setup<\/em>, which we also recommend reading\u2014we&#8217;ve added some helpful details as well.<\/span><\/p>\n<p>A hotspot is a method for authorizing users to access specific network resources, but it does not provide traffic encryption. To log in, users can use almost any web browser (either HTTP or HTTPS protocol), eliminating the need to install an additional gateway. The Gateway accounts for the uptime and amount of traffic each client has used, and can also send this information to a RADIUS server. The HotSpot system may limit each user&#8217;s bitrate, total traffic, uptime, and other parameters mentioned further in this document.<\/p>\n<p>The HotSpot system is designed to provide authentication within a <a href=\"https:\/\/ded9.com\/some-important-ways-to-secure-a-computer-network\/\">local network<\/a>, allowing local network users to access the Internet. However, it may also be used to authorize access from external networks to local resources (such as an authentication gateway for the outside world to access your network). It is possible to allow users to access some web pages without authentication using the Walled Garden feature.<\/p>\n<h2>HotSpot Aim and features<\/h2>\n<p>The MikroTik HotSpot Gateway provides authentication for clients before access to public networks. A HotSpot only works reliably when the IPv4 protocol is used; the HotSpot relies on Firewall NAT rules, which aren&#8217;t supported with IPv6.<\/p>\n<p>The HotSpot gateway features:<\/p>\n<ul style=\"list-style-type: circle;\">\n<li>Various authentication methods of clients using a local client database on the router or a remote RADIUS server<\/li>\n<li>Users&#8217; accounting in the local database on the router or the remote RADIUS server<\/li>\n<li>Walled-garden system, access to some web pages without authorization<\/li>\n<li>Login page modifications for companies<\/li>\n<li>Automatically and transparently change any IP address of a client to a valid address<\/li>\n<\/ul>\n<h4>MikroTik Hotspot Setup<\/h4>\n<p>The simplest way to set up a HotSpot server on the MikroTik router is through the WebFig portal. To log in to your router, paste its IP address into the search bar and enter your admin credentials.<\/p>\n<p>You should arrive at the home screen. Located the buttons at the top right, labeled &#8220;<strong>Quick Set&#8221;<\/strong>, &#8220;<strong>WebFig&#8221;<\/strong>, and&#8221;<strong>Teandal&#8221;<\/strong>. Click on the <strong>Terminal<\/strong> button.<\/p>\n<p>First, we need to configure the interface connected to the Wide Area Network (WAN). Type the following into the terminal and press Enter:<\/p>\n<div class=\"wp-block-codemirror-blocks code-block \">\n<pre class=\"CodeMirror\" data-setting=\"{&quot;mode&quot;:&quot;shell&quot;,&quot;mime&quot;:&quot;text\/x-sh&quot;,&quot;theme&quot;:&quot;material&quot;,&quot;lineNumbers&quot;:false,&quot;lineWrapping&quot;:false,&quot;styleActiveLine&quot;:false,&quot;readOnly&quot;:true,&quot;align&quot;:&quot;&quot;}\">ip address add address=192.168.1.5\/24 network=192.168.1.0 broadcast=192.168.1.255 interface=ether1<\/pre>\n<\/div>\n<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">Now we need to configure the second interface for our Local Network. Type the following into the terminal and press Enter:<\/span><\/p>\n<div class=\"wp-block-codemirror-blocks code-block \">\n<pre class=\"CodeMirror\" data-setting=\"{&quot;mode&quot;:&quot;shell&quot;,&quot;mime&quot;:&quot;text\/x-sh&quot;,&quot;theme&quot;:&quot;material&quot;,&quot;lineNumbers&quot;:false,&quot;lineWrapping&quot;:false,&quot;styleActiveLine&quot;:false,&quot;readOnly&quot;:true,&quot;align&quot;:&quot;&quot;}\">ip address add address=10.10.0.1\/24 network=10.10.0.0 broadcast=10.10.0.255 interface=ether2<\/pre>\n<\/div>\n<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">Both interfaces are now configured.<\/span><\/p>\n<h4>How to Set Up the DNS<\/h4>\n<p>Next, we will set up the DNS server.<\/p>\n<ol>\n<li>Click the button at the top labeled &#8220;<strong>WebFig&#8221;<\/strong>. You should arrive at a screen with several buttons on the left side.<\/li>\n<li>Select the <strong>IP<\/strong> drop-down arrow, then click <strong>DNS<\/strong>. Fill in the information provided by your<a href=\"https:\/\/en.wikipedia.org\/wiki\/Internet_service_provider\" target=\"_blank\" rel=\"noopener\"> ISP<\/a>, and ensure that the <strong>Allow Remote Requests<\/strong> option is checked.<\/li>\n<li><strong>Apply<\/strong> your settings, then navigate to the <strong>Routes<\/strong> button on the left side of the screen.<\/li>\n<\/ol>\n<h4>How to Set Up the Routes<\/h4>\n<ol>\n<li>Click the &#8220;<strong>Add New&#8221;<\/strong> button at the top of the Gateway.<\/li>\n<li>Under <strong>Gatew<\/strong><strong>enter<\/strong>type, the address of the gate for your WAN interface. Apply your settings, then navigate to the <strong>HotSpot<\/strong> button on the left side of the screen.<\/li>\n<\/ol>\n<h4>How to Set Up the Hotspot<\/h4>\n<ul style=\"list-style-type: circle;\">\n<li>Click the &#8220;<strong>HotSpot setup&#8221; button<\/strong> at the top of the screen. Select <em>ether2<\/em>, as this is the interface connected to the local network.<\/li>\n<li>The next screen will ask for the local address of the network. You won&#8217;t need to make any changes here, so click <strong>Next<\/strong>.<\/li>\n<li>The next page will request the IP range to be used by the DHCP server for assigning IP addresses to clients. Ensure the IP range is suitable for the server. When you&#8217;re finished, click <strong>Next<\/strong>.<\/li>\n<li>Select&#8221;no&#8221; for the certificate. Click <strong>Next<\/strong>.<\/li>\n<li>Click <strong>Next<\/strong>.<\/li>\n<li>We don&#8217;t need to make any changes to this screen because we have already configured it in an earlier step. Click <strong>Next<\/strong>.<\/li>\n<li>Now you&#8217;ll need to define your server&#8217;s name, by which clients can access the HotSpot&#8217;s login page through a web browser. Type the name you&#8217;d like and click <strong>Next<\/strong>.<\/li>\n<li>The last step is to create a user. By default, it makes a user with admin privileges and no password. Here, you can set the password and username for the default user. Change the values if you&#8217;d like, then click <strong>Next<\/strong>.<\/li>\n<\/ul>\n<h2><strong>Conclusion<\/strong><\/h2>\n<p><span id=\"hs_cos_wrapper_post_body\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">So, your HotSpot server is now configured. Try logging in to make sure it works properly. And we hope you enjoy reading it.<\/span><\/p>\n<h2>FAQ<\/h2>\n<div id=\"rank-math-rich-snippet-wrapper\"><div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">What is a HotSpot Gateway on a MikroTik router?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>A HotSpot Gateway allows users to authenticate before accessing the internet, providing secure and controlled access.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Do I need a RADIUS server for authentication?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>While optional, a RADIUS server can enhance authentication and accounting capabilities for users.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Can I customize the login page?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Yes, MikroTik allows customization of the login page to match your branding and provide necessary information to users.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>In this article, we field questions from customers on configuring their MikroTik routers for various functions. We&#8217;ll be covering how to set up MikroTik routers for HotSpot Gateway functionality. Additionally, HotSpots are ideal for small businesses that want to offer WiFi to their customers without worrying about their network becoming compromised. It can also be [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":23292,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[782],"tags":[315],"class_list":["post-23291","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-operating-system","tag-mikrotik"],"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/posts\/23291","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/comments?post=23291"}],"version-history":[{"count":4,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/posts\/23291\/revisions"}],"predecessor-version":[{"id":263305,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/posts\/23291\/revisions\/263305"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/media\/23292"}],"wp:attachment":[{"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/media?parent=23291"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/categories?post=23291"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ded9.com\/de\/wp-json\/wp\/v2\/tags?post=23291"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}