1. Connecting the device to the Internet
The router with factory settings should be connected to the Internet on first ethernet port (PoE in). The precedure of restoring factory settings can be found here.
The router needs to be connected to Internet source and, depending on the model, turned on with a proper switch.
2. Accessing the device’s administration panel
The PC should be connected to the second ethernet port of the configured device. It should be receiving from it an IP address from the 192.168.88.2-192.168.88.254 pool.
The router should be accessed by using WinBox software (downloadable at the manufacturer’s website).
After launching the program you will need to find the router on the list and log in using the login
admin and leaving the password field empty.
If after logging in a window containing default configuration appears, close it by clicking OK.
3. Device configuration
3.1 Configuring network settings
Interfaces → + → Bridge
IP → Addresses → +
IP → Pool → +
IP → DHCP Server → +
IP → DHCP Server → Networks → +
Bridge → Ports
Bridge → Ports → +
3.2 Configuring RADIUS
Click Quick Set and copy the value of “MAC Address” from the “Internet” field.
Go to our file download page, paste the copied Mac Address and download the attachments.
Unpack mikrotik-html.zip file on your computer.
Go back to WinBox, Files → Upload.
Browse to the location where you unpacked mikrotik-html.zip and upload all files inside (login.html, alogin.html, rlogin.html, md5.js, flogin.html) to the router.
IMPORTANT: If your Files section contains a “flash” folder, please place all files inside that folder. Otherwise, the files will be removed on router restart.
Log in to your account in the Panel.
In the “Access Points” tab, press “Add” (upper right corner), paste the MAC address you copied into the form (adding a name is optional) and click “Create”.
In Radius Secret field, click SHOW and copy the content.
Open WinBox again, Radius → +.
Secret: paste the content copied from Radius Secret in Venue details as described in the previous step
3.3 Configuring Walled Garden DNS
New Terminal → paste the below commands into the terminal (all four commands can be copied and pasted at once)
/ip hotspot walled-garden
add action=allow dst-host=sw-login.com
add action=allow dst-host=login.socialwifi.com
add action=allow dst-host=*.socialwifi.com
Pasting will not work with CTRL+V; right click and select Paste instead.
Now you can copy and paste the following commands, depending on which social media options you would like to use. Each section corresponds to a login method. Every entry in a section must be added in order for it to function properly. You can copy entire sections at once, but make sure that each of them starts with
/ip hotspot walled-garden.
add action=allow dst-host=facebook.com
add action=allow dst-host=*.facebook.com
add action=allow dst-host=*.fbcdn.net
add action=allow dst-host=static.xx.fbcdn.net
add action=allow dst-host=accounts.google.com
add action=allow dst-host=ssl.gstatic.com
add action=allow dst-host=fonts.google.com
add action=allow dst-host=linkedin.com
add action=allow dst-host=*.linkedin.com
add action=allow dst-host=platform.linkedin.com
add action=allow dst-host=static.licdn.com
add action=allow dst-host=media.licdn.com
add action=allow dst-host=api.twitter.com
add action=allow dst-host=twitter.com
add action=allow dst-host=abs-0.twimg.com
add action=allow dst-host=abs.twimg.com
add action=allow dst-host=pbs.twimg.com
(optional) YouTube widget
How to configure devices to make YouTube widget work?
3.4 Configuring Captive Portal / Hotspot
IP → Hotspot → Server Profiles → default (click twice to access settings)
(in General tab) DNS Name:
(in General tab) HTML Directory: change name to
. (period) (IMPORTANT: If your Files section contains a “flash” folder, make sure this field says “flash/.” without question marks)
(in Login tab) Login By: HTTP PAP (uncheck the rest)
(in RADIUS tab) Use RADIUS: yes
IP → Hotspot → Servers – +
IP → Hotspot → User Profile – Default
4. Configuring WiFi networks
Interfaces → Wlan1 → Wireless (click twice to access settings) → change SSID to
Guest Network or whatever works for you and your customers.
After fulfilling all of the above steps, you will need to restart the device.
System → Reboot
After restarting the device, the visible WLAN network will use Social WiFi to log in users.