Skip to content

MikroTik Integration

Connect CaptiFi to your MikroTik router or access point using the built-in Hotspot feature. This guide covers the complete setup for RouterOS 6.x and 7.x using WinBox or WebFig.

Advanced Setup

MikroTik integration requires some networking knowledge. If you're not comfortable with RouterOS, consider using a CaptiFi plug-and-play device instead.

Prerequisites

  • MikroTik device running RouterOS 6.x or 7.x
  • Access to WinBox or WebFig
  • Admin access to the MikroTik device
  • CaptiFi account at app.captifi.io
  • A venue already created in your CaptiFi dashboard

Overview

The MikroTik integration involves six steps:

  1. Hotspot Setup — Create a hotspot on your guest WiFi interface
  2. Walled Garden — Allow CaptiFi domains before authentication
  3. RADIUS Configuration — Point your hotspot to CaptiFi's RADIUS server
  4. External Login Page — Redirect guests to your CaptiFi splash page
  5. Dashboard Link — Connect your MikroTik in the CaptiFi dashboard
  6. Testing — Verify everything works end-to-end

Step 1: Create a Hotspot

  1. Open WinBox or WebFig
  2. Go to IPHotspot
  3. Click Hotspot Setup wizard
  4. Select the interface for your guest WiFi (e.g., wlan1 or a bridge interface)
  5. Set the network address (e.g., 10.5.50.1/24)
  6. Set the address pool (e.g., 10.5.50.2-10.5.50.254)
  7. Choose SSL certificate: none (CaptiFi handles HTTPS)
  8. Set SMTP server: 0.0.0.0
  9. Configure DNS: use your ISP's DNS or 8.8.8.8
  10. Set DNS name: e.g., hotspot.local

TIP

If you're using a bridge interface for your guest network, make sure the WiFi interface is added to the bridge before running the hotspot wizard.


Step 2: Configure Walled Garden

Allow CaptiFi portal domains through the firewall so guests can reach the splash page before authentication.

  1. Go to IPHotspotWalled Garden
  2. Add the following entries:
ActionDst. Host
Allow*.captifi.io
Allowapp.captifi.io
Allowsite.app.captifi.io
Allow*.stripe.com
Allowfonts.googleapis.com
Allowfonts.gstatic.com
  1. Also add Walled Garden IP List entries:
    • Go to IPHotspotWalled Garden IP List
    • Add the CaptiFi server IP: 157.230.53.133
    • Set Action to Accept

Step 3: Configure RADIUS

You'll find your RADIUS server details in the CaptiFi dashboard under My Venues → select your venue → Integration Settings. The RADIUS IP address and shared secret are displayed on that page.

  1. Go to RADIUS in the main menu

  2. Click Add (+)

  3. Configure:

    • Service: hotspot
    • Address: Enter the RADIUS server IP shown in your CaptiFi Integration Settings
    • Secret: Enter the RADIUS shared secret shown in your CaptiFi Integration Settings
    • Authentication Port: 1812
    • Accounting Port: 1813
  4. Click OK to save

  5. Now enable RADIUS on your hotspot:

    • Go to IPHotspotServer Profiles
    • Edit your hotspot profile (usually default)
    • Go to the RADIUS tab
    • Check Use RADIUS
    • Set Accounting to yes
    • Click OK

Important

The RADIUS secret must match exactly — it is case-sensitive. Copy and paste it directly from your CaptiFi dashboard to avoid typos.


Step 4: Set External Login Page

Your portal URL is https://app.captifi.io/portal/mikrotik/{your-site-id} — you can find your exact URL in the CaptiFi dashboard under My Venues → select your venue → Integration Settings.

  1. Go to IPHotspotServer Profiles
  2. Edit your profile
  3. Under the Login tab:
    • Set Login By: check HTTP PAP
    • Set Login Page URL to your CaptiFi portal URL (copied from the dashboard)
  4. Click OK

  1. Log in to app.captifi.io
  2. Go to My Venues → select your venue → Integration Settings
  3. Select MikroTik as your integration type
  4. Enter your MikroTik's public IP address
  5. Enter the admin username and password for your MikroTik device
  6. Click Connect
  7. CaptiFi will verify the connection and confirm the link

Finding Your Public IP

Visit whatismyip.com from a device on the same network as your MikroTik to find your public IP address.


Step 6: Test

  1. Connect a device (phone or laptop) to the guest WiFi
  2. The CaptiFi splash page should appear automatically
  3. If on mobile, you may need to open a browser and visit any HTTP site (e.g., http://example.com)
  4. Complete the login form
  5. Verify the guest can browse the internet after login
  6. Check your CaptiFi dashboard — the guest should appear in your logs

Troubleshooting

IssueSolution
Splash page not loadingCheck that all Walled Garden entries are correct, including *.captifi.io and site.app.captifi.io. Verify the Walled Garden IP List includes 157.230.53.133.
"Access denied" after loginVerify the RADIUS shared secret matches exactly between your MikroTik and CaptiFi dashboard. Copy and paste to avoid typos.
Guests stuck on loading screenCheck DNS configuration in the hotspot. Try setting DNS to 8.8.8.8 and 8.8.4.4. Also verify your MikroTik has internet access.
No entries appearing in dashboardVerify RADIUS accounting is enabled: go to IPHotspotServer ProfilesRADIUS tab → ensure Accounting is set to yes.
Redirect loop or blank pageEnsure the Login Page URL in your Server Profile matches exactly what's shown in your CaptiFi Integration Settings. Check there are no trailing spaces or extra characters.
HTTPS sites not triggering portalMikroTik cannot intercept HTTPS traffic. Guests need to visit an HTTP site first (e.g., http://example.com) or use the phone's captive portal detection (most devices do this automatically).
Hotspot not assigning IP addressesVerify the DHCP pool is configured correctly and the interface is part of the hotspot. Check IPPool and confirm the range matches your hotspot network.
"RADIUS server not responding"Check that port 1812 and 1813 (UDP) are not blocked by your firewall. Ensure the RADIUS server IP is entered correctly from your CaptiFi dashboard.
Guests disconnect after a timeoutCheck the session timeout in your hotspot Server Profile. Go to IPHotspotServer Profiles → edit profile → adjust Idle Timeout and Session Timeout as needed.

Multiple Venues

If you have multiple MikroTik devices across locations:

  • Each device connects to its own venue in the CaptiFi dashboard
  • Each venue has its own RADIUS credentials and portal URL
  • You can design a unique splash page per venue in Splash Pages on your CaptiFi dashboard

Need Help?

MikroTik setups can vary depending on your hardware and RouterOS version. If you're stuck:

  • Email: hello@captifi.io
  • Live Chat: Available on captifi.io
  • Dashboard: Check your Integration Settings page for device-specific details

CaptiFi — Guest WiFi Marketing Platform