1. Connecting the device to the Internet

The router with factory settings should be connected to the Internet on first ethernet port (PoE in). The precedure of restoring factory settings can be found here.

The router needs to be connected to Internet source and, depending on the model, turned on with a proper switch.

2. Accessing the device’s administration panel

The PC should be connected to the second ethernet port of the configured device. It should be receiving from it an IP address from the pool.

The router should be accessed by using WinBox software (downloadable at the manufacturer’s website).

After launching the program you will need to find the router on the list and log in using the login admin and leaving the password field empty.

If after logging in a window containing default configuration appears, close it by clicking OK.

3. Device configuration

3.1 Configuring network settings

Interfaces → + → Bridge

name: sw

IP → Addresses → +

Enabled: yes
Interface: sw

IP → Pool → +

Name: dhcp_pool_sw

IP → DHCP Server → +

Name: dhcp_sw
Interface: sw
Lease Time: 3d 00:00:00
Address Pool: dhcp_pool_sw

IP → DHCP Server → Networks → +

DNS Servers:

Bridge → Ports

Remove Interface: wlan1

Bridge → Ports → +

Interface: wlan1
Bridge: sw

3.2 Configuring RADIUS

Click Quick Set and copy the value of “MAC Address” from the “Internet” field.
Go to our file download page, paste the copied Mac Address and download the attachments.
Unpack mikrotik-html.zip file on your computer.
Go back to WinBox, Files → Upload.
Browse to the location where you unpacked mikrotik-html.zip and upload all files inside (login.html, alogin.html, rlogin.html, md5.js, flogin.html) to the router.
IMPORTANT: If your Files section contains a “flash” folder, please place all files inside that folder. Otherwise, the files will be removed on router restart.

Log in to your account in the Panel.
In the “Access Points” tab, press “Add” (upper right corner), paste the MAC address you copied into the form (adding a name is optional) and click “Create”.
In Radius Secret field, click SHOW and copy the content.
Open WinBox again, Radius → +.

Enabled: yes
Service: hotspot
Secret: paste the content copied from Radius Secret in Venue details as described in the previous step
Authentication Port: 31812
Accounting Port: 31813
Timeout: 1000

3.3 Configuring Walled Garden DNS

New Terminal → paste the below commands into the terminal (all four commands can be copied and pasted at once)

/ip hotspot walled-garden
add action=allow dst-host=sw-login.com
add action=allow dst-host=login.socialwifi.com
add action=allow dst-host=*.socialwifi.com

Pasting will not work with CTRL+V; right click and select Paste instead.

Now you can copy and paste the following commands, depending on which social media options you would like to use. Each section corresponds to a login method. Every entry in a section must be added in order for it to function properly. You can copy entire sections at once, but make sure that each of them starts with /ip hotspot walled-garden.

add action=allow dst-host=facebook.com
add action=allow dst-host=*.facebook.com
add action=allow dst-host=*.fbcdn.net
add action=allow dst-host=static.xx.fbcdn.net

add action=allow dst-host=accounts.google.com
add action=allow dst-host=ssl.gstatic.com
add action=allow dst-host=fonts.google.com

add action=allow dst-host=linkedin.com
add action=allow dst-host=*.linkedin.com
add action=allow dst-host=platform.linkedin.com
add action=allow dst-host=static.licdn.com
add action=allow dst-host=media.licdn.com

add action=allow dst-host=api.twitter.com
add action=allow dst-host=twitter.com
add action=allow dst-host=abs-0.twimg.com
add action=allow dst-host=abs.twimg.com
add action=allow dst-host=pbs.twimg.com

(optional) YouTube widget
How to configure devices to make YouTube widget work?

3.4 Configuring Captive Portal / Hotspot

IP → Hotspot → Server Profiles → default (click twice to access settings)

(in General tab) DNS Name: logging.sw.com
(in General tab) HTML Directory: change name to . (period) (IMPORTANT: If your Files section contains a “flash” folder, make sure this field says “flash/.” without question marks)

(in Login tab) Login By: HTTP PAP (uncheck the rest)

(in RADIUS tab) Use RADIUS: yes


IP → Hotspot → Servers – +

Name: socialwifi
Interface: sw

IP → Hotspot → User Profile – Default

Keepalive Timeout: 03:00:00


4. Configuring WiFi networks

Interfaces → Wlan1 → Wireless (click twice to access settings) → change SSID to Social WiFiGuest Network or whatever works for you and your customers.

5. Reboot

After fulfilling all of the above steps, you will need to restart the device.

System → Reboot
After restarting the device, the visible WLAN network will use Social WiFi to log in users.


Comments are closed