Step-by-Step MikroTik Hotspot Configuration Guide (Kenya Setup)

This guide uses:

• MikroTik Router (RouterOS)
• Winbox software (recommended for beginners)

1. What You Need Before You Start

Hardware:

• MikroTik Router (e.g. hAP lite / hEX)
• Internet connection (ISP fibre)
• Laptop
• Access Points (for WiFi coverage)

Software:

• Winbox (download from MikroTik website)

2. Physical Connections (VERY IMPORTANT)

• Plug ISP cable → ether1 (WAN)
• Plug laptop → ether2 (LAN)
• Access Points → ether3/4/5 (or via switch)

3. Access MikroTik Router

1. Open Winbox
2. Click Neighbors
3. Select your MikroTik
4. Login:
   • Username: admin
   • Password: (leave blank first time)

👉 Click Connect

4. Reset Configuration (Clean Start)

Inside Winbox:

• Go to System → Reset Configuration
• Tick:
  • ✔ No Default Configuration
• Click Reset

Router will reboot.

5. Set Up Internet (WAN)

After reconnecting:

Go to:

IP → DHCP Client

• Click +
• Interface: ether1
• Click OK

👉 This allows MikroTik to receive internet from ISP

6. Create Local Network (LAN)

Go to:

IP → Addresses

• Click +
• Address: 192.168.10.1/24
• Interface: bridge (or ether2 if no bridge)

Create Bridge (if not existing)

Go to:

Bridge → Add New

• Name: bridge1

Then:

• Add ports (ether2, ether3, etc.) to bridge

7. Enable DHCP Server (Auto IP for Users)

Go to:

IP → DHCP Server → DHCP Setup

• Interface: bridge1
• Follow prompts:
  • IP range: 192.168.10.10–192.168.10.254
  • DNS: 8.8.8.8

👉 Now users get IP automatically

8. Enable NAT (Internet Sharing)

Go to:

IP → Firewall → NAT

• Click +
• Chain: srcnat
• Out Interface: ether1
• Action: masquerade

👉 This allows users to access the internet

9. Create Hotspot (The Core Feature)

_{Go to:}

IP → Hotspot → Hotspot SetupFollow wizard:

• Interface: bridge1
• Local IP: 192.168.10.1
• Address pool: auto
• SSL: none
• SMTP: leave blank
• DNS: 8.8.8.8
• DNS name: wifi.local
• Create admin user:
  • Username: admin
  • Password: your choice

👉 Done! Hotspot is now active

10. Test the Hotspot

• Connect phone/laptop to WiFi
• Open browser
• You should see login page

11. Create Packages (User Profiles)

Go to:

IP → Hotspot → User Profiles

Example Setup:

Package 1 (2 Hours)

• Name: 2hrs
• Session Timeout: 2h

Package 2 (12 Hours)

• Name: 12hrs
• Session Timeout: 12h

Package 3 (24 Hours)

• Name: 24hrs
• Session Timeout: 1d

Optional (Speed Limit)

In each profile:

• Rate Limit:
  • Example: 2M/2M

👉 Prevents one user from slowing network

12. Create Users (Vouchers)

Go to:

IP → Hotspot → Users

• Click +
• Username: e.g. user1
• Password: 1234
• Profile: select package

👉 Sell this login to customer

13. Make It Professional (Voucher System)

Instead of manual users:

• Use:
  • User Manager (built-in)
  • Or external billing software

These allow:

• Bulk voucher generation
• Printable codes
• Automation

14. Customize Login Page

• Go to:
  Files → hotspot folder

You can edit:

• Logo
• Prices
• Instructions

👉 Add:

“Pay via M-Pesa to 07XXXXXXXX”

15. Add WiFi Access Points

• Connect AP to MikroTik
• Set:
  • SSID: e.g. “Apartment WiFi”
  • Password: optional (or open network)

16. Daily Operation Routine

• Generate users (vouchers)
• Sell to tenants
• Monitor:
  • Active users
  • Bandwidth usage

17. Troubleshooting Tips

No Internet:

• Check DHCP client (WAN)
• Check NAT rule

Login Page Not Showing:

• Try opening 192.168.10.1
• Disable HTTPS temporarily

Slow Internet:

• Add speed limits
• Reduce users per AP

18. Upgrade Path (Important)

After mastering basics:

• Add:
  • M-Pesa integration
  • RADIUS billing system
  • More APs

Final Insight

Once this setup is done:👉 You now own a mini ISP inside a building

The real power is:

• Controlling access
• Selling time-based internet
• Scaling to multiple buildings