If you run a cafe, shop, or any place where customers come in and need internet access, MikroTik hotspot setup is one of the most practical tools you can use. It gives you a login page, user control, time limits, and bandwidth management, all without needing extra software or a third-party service.

In this guide from PerLod Hosting, you will learn the whole process of MikroTik hotspot setup.

What Is MikroTik Hotspot?

MikroTik’s hotspot feature is a built-in tool in RouterOS that creates a captive portal, a login page that shows up when someone connects to your Wi-Fi and tries to open a website. Before they can browse, they have to enter a username and password, or in some setups, just click a button to accept terms.

It works on most MikroTik routers and access points. Once enabled, the router:

• Intercepts all HTTP/HTTPS traffic from new clients.
• Redirects them to your login page.
• Only lets them through after successful authentication.
• Tracks their session, usage, and time.

This is very different from a regular Wi-Fi password. With a simple password, once someone has it, they have full, uncontrolled access. With MikroTik hotspot setup, you decide who gets in, how long they stay, and how much bandwidth they use.

When to Use Hotspot vs. a Simple Guest Network

Not every business needs a full hotspot. Here is a simple breakdown:

Use MikroTik hotspot setup when you need:

• A login page for customers.
• Time-limited access.
• Per-user bandwidth limits.
• Voucher or ticket-based access.
• Logging of who connected and when.
• Different access tiers, free vs. paid.

Use a simple guest network when:

• You just want to isolate guests from your internal network.
• No login or control is needed, just internet access with a Wi-Fi password.
• You want the simplest possible setup with the least maintenance.
• You have a small office or home setup with trusted visitors.

A guest network only separates traffic. A hotspot adds authentication and control on top of that. For cafes and shops with many walk-in customers, the hotspot is the right choice.

What You Need for MikroTik Hotspot Setup

Before starting MikroTik hotspot setup, make sure you have:

• A MikroTik router running RouterOS. Any model with License Level 4 or above works well for the hotspot with UserManager.
• WinBox is downloaded and installed on your PC, or use the web interface.
• Internet access is already working on the router’s WAN port. You can ping 8.8.8.8 from the terminal.
• A dedicated interface or bridge for your hotspot clients. Do not put the hotspot on the same interface as your WAN.
• Basic knowledge of IP addressing.

Step 1: Set Up Your LAN Interface

Before running the hotspot wizard, you need to decide which interface your customers will connect through. For most setups, this is wlan1 (Wi-Fi) or a bridge that includes both wired and wireless ports.

First, create a bridge, which is recommended if using both wired and wireless:

/interface bridge add name=bridge-hotspot
/interface bridge port add interface=ether2 bridge=bridge-hotspot
/interface bridge port add interface=wlan1 bridge=bridge-hotspot

Assign an IP address to the bridge:

/ip address add address=192.168.10.1/24 interface=bridge-hotspot

This IP will become the gateway for all hotspot clients. Pick any private subnet. The 192.168.10.0/24 is clean and avoids conflict with the default MikroTik LAN subnet, which is 192.168.88.0/24.

You must configure your wireless interface if using WiFi. Go to Wireless → WiFi Interfaces, double-click wlan1, and set:

• Mode: ap bridge
• SSID: Your cafe or shop name, for example, CafeWiFi.
• Security profile: You can leave it open for a public hotspot; the login page handles authentication.

Step 2: Run the Hotspot Setup Wizard

This is the fastest way to get MikroTik hotspot setup running. The wizard handles most of the background configuration automatically. In WinBox:

1. Go to IP → Hotspot.
2. Click Hotspot Setup.
3. On the first screen, select your hotspot interface, for example, bridge-hotspot or wlan1.
4. Click Next.
5. Set your hotspot IP address; this should already show 192.168.10.1 if you configured it in Step 1.
6. Click Next through the DHCP setup, and the wizard creates an IP pool automatically.
7. Select No for the SMTP server unless you need it
8. Set your DNS name, something like cafe.hotspot. This is the hostname that shows in the browser.
9. Click Next to create a default admin user.
10. Click Finish.

After the wizard finishes, MikroTik automatically creates:

• An IP pool for hotspot clients.
• A DHCP server on the hotspot interface.
• Firewall NAT rules for traffic to flow.
• A default hotspot server profile.
• A hotspot folder with the default login page HTML files.

Step 3: Create User Profiles

User profiles let you define different access rules for different types of users. This is where MikroTik hotspot setup gets really useful for businesses.

Go to IP → Hotspot → User Profiles, click + to add a new profile.

For example, a free guest profile with 1 hour, 2 Mbps down, and 1 Mbps up:

/ip hotspot user profile add name=guest \
  rate-limit=2M/1M \
  session-timeout=1h \
  idle-timeout=10m \
  shared-users=1

Key settings:

Setting	What It Does
rate-limit=2M/1M	Limits each user to 2 Mbps download and 1 Mbps upload.
session-timeout=1h	Forces logout after 1 hour; the user must log in again.
idle-timeout=10m	Disconnects the user after 10 minutes of no traffic.
shared-users=1	One username can only be active on one device at a time.

For example, for a premium profile with no time limit and 10Mbps, you can use:

/ip hotspot user profile add name=premium \
  rate-limit=10M/5M \
  shared-users=3

You can create as many profiles as you need, such as free, paid, staff, VIP, etc.

Step 4: Add Users

Now add the actual users who will log in. For small shops, you can create a single shared username per day or generate voucher-style accounts. To do this, go to IP → Hotspot → Users, and click +:

/ip hotspot user add name=guest1 password=welcome profile=guest
/ip hotspot user add name=staff password=staffpass profile=premium

For a daily rotating password setup, just change the password on the guest1 account each morning. Post it on a board or receipt; this is the simplest way to manage access in a cafe without extra tools.

Step 5: Configure Time Limits and Data Limits

In addition to the session timeout, which is in the profile, you can set per-user limits directly on the user account.

First, set a data quota for a user:

/ip hotspot user set [find name=guest1] limit-bytes-total=1073741824

That is 1 GB in bytes. Once the user hits that limit, they are automatically disconnected.

Then, set an uptime limit, which is different from session timeout:

/ip hotspot user set [find name=guest1] limit-uptime=2h

This sets a total usage time across multiple logins. Even if the user logs in and out, the counter keeps running until it hits 2 hours.

Step 6: Set Up the Login Page (Captive Portal)

When a customer connects and opens a browser, MikroTik hotspot setup automatically redirects them to the login page. The default page works fine, but most businesses want it branded.

How to customize the login page:

The hotspot HTML files are stored in the hotspot folder on the router. Access them via FTP:

1. Open your FTP client or Windows Explorer and go to ftp://192.168.10.1.
2. Log in with your router admin credentials.
3. Open the hotspot folder.
4. Download login.html and make a backup first.
5. Edit the file with a plain text editor like Notepad++ or VS Code.
6. Change colors, logo, and text as needed.
7. Upload the modified file back.

Important: Do not use WYSIWYG editors like Dreamweaver. They often strip MikroTik’s special variables like $(username) and $(password), which are required for the login form to work.

Also, you can set a redirect URL so that after login, users are sent to your website or a welcome page:

In WinBox, go to IP → Hotspot → Server Profiles, double-click your profile, set Login page and Status page URLs.

If you want to allow users to visit a specific website without logging in, for example, your shop’s menu or Facebook page, you can use the Walled Garden:

/ip hotspot walled-garden add dst-host=*.yourdomain.com action=allow

This whitelists those URLs so unauthenticated users can reach them.

Step 7: Bypass Login for Staff Devices

Your staff devices should not have to log in every time. You can use IP Bindings to bypass the hotspot for specific MAC addresses.

First, find the device’s MAC address by checking IP → DHCP Server → Leases. Then add a bypass rule:

/ip hotspot ip-binding add mac-address=AA:BB:CC:DD:EE:FF type=bypassed comment="Staff Laptop"

Also, you should set a static DHCP lease for that device so its IP does not change:

/ip dhcp-server lease add mac-address=AA:BB:CC:DD:EE:FF address=192.168.10.5 comment="Staff Laptop"

Step 8: Set Up Logging for Troubleshooting

Good logging is what saves you time when things break. The MikroTik hotspot setup includes built-in logging, which you should enable from the start.

Enable hotspot logging to memory:

/system logging add topics=hotspot action=memory

View hotspot logs in real time:

/log print where topics~"hotspot"

This shows login attempts, disconnections, authentication failures, and IP assignments, everything you need to troubleshoot a user who says the Wi-Fi isn’t working.

Common things to look for in logs:

Log Message	What It Means
logged in	User authenticated successfully.
logged out	Session ended, timeout or disconnect.
rejected	Wrong password or blocked user.
no login page	DNS issue, client not getting the hotspot DNS.

Send logs to a remote syslog server: For a cafe chain or multi-location shop, centralized logging is very useful. You can send all MikroTik logs to a remote syslog server, like rsyslog on a Linux VPS:

You can check out the MikroTik Remote Syslog Monitoring tutorial for a full step-by-step setup guide.

/system logging action set 3 remote=YOUR_SERVER_IP bsd-syslog=yes
/system logging add topics=hotspot action=remote
/system logging add topics=error action=remote

Replace YOUR_SERVER_IP with the IP address of your syslog server. Make sure UDP port 514 is open on the server. For a hosted solution, you can run the syslog service on a MikroTik VPS and forward logs from all your locations to one place.

Step 9: Limit Total Bandwidth for All Hotspot Users

If you have a limited internet connection and want to cap the total bandwidth used by all hotspot clients, not just per user, use a Simple Queue:

/queue simple add name=hotspot-total target=192.168.10.0/24 max-limit=20M/10M

This limits all guest traffic combined to 20 Mbps down and 10 Mbps up, protecting your main business operations from being slowed down.

Step 10: Test Everything

Before opening to customers, test the full MikroTik hotspot setup:

1. Connect a phone or laptop to your hotspot WiFi.
2. Open a browser and try to visit any website.
3. You should be redirected to your login page.
4. Log in with the guest credentials you created.
5. Verify you can browse the internet.
6. Check IP → Hotspot → Active in WinBox, your device should appear there with traffic stats.
7. Wait for the session timeout to verify that the user gets disconnected automatically.
8. Check IP → Hotspot → Users to see if uptime/bytes counters are updating correctly.

Common Problems and Fixes

Most hotspot issues depend on a few common causes, including DNS misconfiguration, browser behavior with HTTPS, or a profile setting that was missed. Here are the most common problems people run into with MikroTik hotspot setup and how to fix them quickly:

1. Users don’t see the login page:

Most of the time, this is a DNS issue. The client’s device must use the router’s IP as its DNS server. Check your DHCP server settings and make sure dns-server=192.168.10.1 is set.

2. Login page shows SSL certificate warning:

This happens when HTTPS sites trigger the redirect. You can import a real SSL certificate into the router under System → Certificates, or tell users to try http:// to get the login page to appear first.

3. Rate limit is not being applied:

Make sure the user is assigned to the correct profile. You can verify under IP → Hotspot → Active and check the Profile column. Also, confirm the rate-limit field in the profile is set in the correct format, for example, 2M/1M.

4. User stays connected after session timeout:

Check that the session-timeout is set in the user profile, not just at the server level. Also, confirm NTP is configured so the router has the correct time; session timers depend on the system clock.

Centralized Management with a MikroTik VPS

If you manage more than one location or you want to keep logs, user accounts, and hotspot configs in one place, running a central management node on a cloud VPS is the cleanest solution.

You can host:

• A remote syslog server to collect logs from all routers.
• A RADIUS server using FreeRADIUS or MikroTik’s UserManager to manage all user accounts centrally.
• Winbox or SSH access to manage routers remotely.

A reliable MikroTik VPS gives you a ready-to-run RouterOS cloud instance where you can set up UserManager, centralized logging, and remote monitoring without maintaining physical hardware.

Conclusion

MikroTik hotspot setup is one of the best ways to give customers internet access while keeping control in your hands. Once it is running, you get a login page, per-user speed limits, session timeouts, and logs, all built into the router with no extra cost.

Start with the wizard to get the basics working, then layer in user profiles, IP bindings for staff, and walled garden rules as needed. If you have multiple locations or want everything in one place, pair it with a remote syslog server and a central RADIUS setup on a cloud VPS.

We hope you enjoy this guide. Subscribe to our X and Facebook channels to get the latest updates and articles.

FAQs