Skip to main content
MikroTik is configured in legacy / manual mode using Winbox.
RADIUS server addresses, portal URLs, and shared secrets are region-specific. Obtain the correct values for your deployment from the Wiacom admin panel or the Wiacom team before starting.

​
Step 1 — Add the Device to Wiacom

  1. Go to Inventory → Routers → Add New Router
  2. Select MikroTik / RouterBoard from the vendor dropdown
  3. Under Network address, enter the WAN MAC address in AA:BB:CC:DD:EE:FF format
  4. Leave NASID empty
  5. Assign a location and click Save

​
Step 2 — Configure RADIUS

Open Winbox, click Radius on the left menu, then +:
FieldValue
Servicehotspot
Address<RADIUS_SERVER_IP>
Secret<RADIUS_SHARED_SECRET>
Authentication Port1812
Accounting Port1813
Click OK.

​
Step 3 — Configure the Hotspot

Go to IP → Hotspot → Hotspot Setup:
FieldValue
Hotspot InterfaceWLAN interface, bridge, or ethernet port guests connect through
Local Address of NetworkGuest subnet (e.g. 192.168.50.0/24)
Masquerade NetworkYes
Address Poole.g. 192.168.50.2–192.168.50.254
Select CertificateNone
DNS ServersYour preferred DNS servers
DNS NameLeave blank
Click OK. In the Hotspot → Server tab, double-click the new hotspot. Rename it to the WAN MAC address in XX-XX-XX-XX-XX-XX format (capitals, dashes). Find the WAN MAC at Interfaces → ether1-gateway (or your WAN interface).

​
Step 4 — Configure the Server Profile

In Server Profiles, double-click the new profile: General tab:
FieldValue
Hotspot AddressGateway IP of guest subnet (e.g. 192.168.50.1)
Login tab:
FieldValue
HTTP PAPTicked
All other methodsUnticked
RADIUS tab:
FieldValue
Use RADIUSTicked
MAC FormatXX-XX-XX-XX-XX-XX
AccountingTicked
Interim Update00:02:00
Click OK.

​
Step 5 — Configure User Profiles

In Hotspot → User Profiles, double-click the default entry:
FieldValue
Session Timeout24:00:00
Idle Timeout00:30:00
Keepalive Timeout(clear this field)

​
Step 6 — Upload Portal Files

Wiacom provides two HTML files (login.html and alogin.html) for the MikroTik hotspot:
  1. In Winbox go to Files
  2. Locate the hotspot directory (under HTML Directory in the Hotspot Server Profile)
  3. Drag and drop login.html and alogin.html into this directory
Contact the Wiacom team to receive the correct portal files for your region.

​
Step 7 — Configure the Walled Garden

Open a New Terminal in Winbox and paste: 
/ip hotspot walled-garden
add dst-host=*.wiacom.ai
add dst-host=*.facebook.com
add dst-host=*.fbcdn.net
add dst-host=connect.facebook.net
add dst-host=*.akamaihd.net
add dst-host=*.instagram.com
add dst-host=*.google.com
add dst-host=*.gstatic.com
add dst-host=*.googleapis.com
add dst-host=*.twitter.com
add dst-host=*.twimg.com
add dst-host=*.linkedin.com
add dst-host=*.licdn.net
add dst-host=fast.wistia.com
add dst-host=*.fastly.net
add dst-host=*.akamaized.net
add dst-host=*.amazonaws.com
add dst-host=*.zencdn.net
add dst-host=*.vimeocdn.com
Add any additional domains used in your portal customization.

​
Optional — Automated Walled Garden Script

To keep the walled garden updated automatically, open a New Terminal and paste: 
/system scheduler
add interval=1m name=checkSettingsCron on-event=checkSettings \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
    start-time=startup

/system script
add dont-require-permissions=no name=checkSettings owner=admin \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
    source=":local MACADDR [/interface ethernet get ether1 mac-address]\r\
    \n/tool fetch url=\"https://settings.wiacom.ai/mkt/index.php?mac=\$MACADDR\" \
    mode=https dst-path=/FreeWiFi_set.rsc\r\
    \n/import /FreeWiFi_set.rsc\r\
    \n/file remove FreeWiFi_set.rsc\r\n"

​
Troubleshooting

Confirm the hotspot server name matches the WAN MAC in XX-XX-XX-XX-XX-XX format. Confirm HTTP PAP is the only enabled login method.
Verify the RADIUS server address and shared secret match values provided by Wiacom for your region. Check UDP 1812 and 1813 are reachable.