To help a technician, already skilled in the use of the a Mikrotik device, to configure this product as a HotSpot. This document applies to a Mikrotik device that is already configured to work as router.
Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the article "Parameters for the Solution" at the bottom of the page, as they are certainly up to date.
This article applies to the following models:
- RB750 series
- RB2011iL series
- RB2011UiAS series
- RB1100AH series
- CCR1016 series
- CCR1036 series
- RB1000 series
- RB1100 series
To use a Mikrotik device as a HotSpot, it is necessary for the router:
- to be connected to the Internet
- to be reachable in the network
- to be configured to correctly assign IP addresses to clients
It is also necessary to get the Winbox client (it is recommended to get the last version of the tool at http://www.mikrotik.com/download).
Accessing the device
The access to the device is performed by using WinBox.
Configuring the RADIUS serverThe Radius menu contains all data necessary to reach an external RADIUS server. Please set Timeout to 2000 ms.
With our solution, it is also possible to configure a secondary RADIUS server: just add a new RADIUS server.
Setting up the hotspot profile
In the IP > Hotspot menu, by clicking the Hotspot Setup button, you can set all details for your Hotspot. The configuration is made through a wizard which guides you in all steps in order to get a complete configuration. In the first step you must set the interface where you intend to run the Hotspot.
In the second and third steps you must choose the interval of IP addresses that will be assigned to clients connecting to the HotSpot.
In the fourth step it is possible to upload a SSL certificate, if necessary.
In the fifth step you may choose the IP address of SMTP server. Please leave the default value, since we will not use any SMTP server.
In the sixth step you must choose DNS Servers used by the Hotspot. The recommended values are 188.8.131.52 and 184.108.40.206.
In the seventh step you must enter a DNS name. This parameter is not significant, but it's important that the entered value is not the name of a pingable host (for example "johndoe.sys").
In the eighth and last step please leave blank these settings, since they are not necessary for the proper functioning of the Hotspot.
As you can see, the hotspot has now been created.
After that you can change it, for example entering a new name (in this case "Mk_C4w"). This name must be unique between all the devices within the network.
The same name must be set as Identity in the System > Identity menu. This name is the Identifier required in the Control Panel, and as we said before, it must be unique in your network. Otherwise the RADIUS requests coming from device will be not correctly processed.
Then a Hotspot server profile is automatically created. In General settings we must configure the following:
- Name: the name of the Service Profile
- Hotspot Address: the address previously configured during the wizard
- DNS Name: the name specified previously during the creation of the Service Profile
- HTML Directory: see next paragraph
In the Login tab we must configure HTTP CHAP and HTTP PAP as authentication encryption.
Then we must open the Walled Garden tab and specify the sites that end-users are be able to visit without any need to perform an authentication.
It is mandatory to add the following entry into this list, necessary to redirect end-users to the Splash Portal.
In order to configure the Walled Garden for other purposes, please check the following articles:
- Walled Garden for the Social Login (web sites/domains to open)
- Walled Garden for PayPal feature (web sites/domains to open)
Uploading the file to redirect end-users towards the Splash Portal
As last step of the configuration it is necessary to upload files on the device in order to correctly redirect end-users towards the Splash Portal.
We have to distinguish between two cases:
- Case #1 : Your device has not the "flash" folder pre-installed
- Case #2 : Your device has the "flash" folder pre-installed (it happens for some newer devices)
In order to understand what is your case, please access to the Files menu on the left sidebar and then check if you have the "flash" folder.
Case #1 : Your device has not the "flash" folder pre-installed
If this is the case, please upload the file that is attached to this page, to the "hotspot" folder that we specified before as HTML Directory, during the configuration of the Server Profile.
In the Files menu on the left sidebar, you can see the files currently stored into the device.
Case #2 : Your device has the "flash" folder pre-installed
For some Mikrotik devices, you can find a pre-installed folder called "flash" in the Files section. If this is your case, please follow the additional procedure (valid for v6.32.3)
- Get a FTP client and use it to get access to your Mikrotik (port 21). We got the pictures from FileZilla.
- Create a folder called "hotspot" under the "/flash" path
- Upload the "hotspot" folder attached to this page, to the /flash/hotspot folder just created.
- Go back to the Hotspot Server Profile previously defined, in the General section, and change HTML directory field to "flash/hotspot".
Allowing free access to the CDN
Explained in the article Improving the performance of Control Panel and Splash Portal by enabling the CDN, you must add some IP addresses to the Walled Garden in order to support the access to the CDN.
The domains to add for this purpose are:
Retrieving the identifier for the Control Panel
To integrate the Access Point with the Solution, you must enter its details into the Control Panel.
For further information on how to do that, please see How to add a Hotspot. Secondly, in the Control Panel, a field called Identifier will be required by the web interface. For Mikrotik products, as said before, corresponds to the Identity value that has been set into the the System > Identity menu.
Please note that this value must be unique for all the devices entered in the Control Panel. Otherwise the HotSpot will not be correctly integrated with the Solution.
The parameters indicated above for the Mode Settings section are mandatory for the proper functioning. The necessary parameters to integrate the device with the Solution are the following:
Radius Server: 220.127.116.11 (or 18.104.22.168, as secondary RADIUS server)
Secret: (it will be communicated by Cloud4Wi)
Authentication Port: 1812
Accounting Port: 1813
Please remember that it is mandatory to set the Splash Portal URL (splashportal.cloud4wi.com) in the Walled Garden, as explained in the previous paragraph Setting up the hotspot profile.
If these parameters change in the future, we will promptly inform you about new values.