Appearance
MikroTik Integration
Connect CaptiFi to your MikroTik router or access point using the built-in Hotspot feature. This guide covers the complete setup for RouterOS 6.x and 7.x using WinBox or WebFig.
Advanced Setup
MikroTik integration requires some networking knowledge. If you're not comfortable with RouterOS, consider using a CaptiFi plug-and-play device instead.
Prerequisites
- MikroTik device running RouterOS 6.x or 7.x
- Access to WinBox or WebFig
- Admin access to the MikroTik device
- CaptiFi account at app.captifi.io
- A venue already created in your CaptiFi dashboard
Overview
The MikroTik integration involves six steps:
- Hotspot Setup — Create a hotspot on your guest WiFi interface
- Walled Garden — Allow CaptiFi domains before authentication
- RADIUS Configuration — Point your hotspot to CaptiFi's RADIUS server
- External Login Page — Redirect guests to your CaptiFi splash page
- Dashboard Link — Connect your MikroTik in the CaptiFi dashboard
- Testing — Verify everything works end-to-end
Step 1: Create a Hotspot
- Open WinBox or WebFig
- Go to IP → Hotspot
- Click Hotspot Setup wizard
- Select the interface for your guest WiFi (e.g.,
wlan1or a bridge interface) - Set the network address (e.g.,
10.5.50.1/24) - Set the address pool (e.g.,
10.5.50.2-10.5.50.254) - Choose SSL certificate: none (CaptiFi handles HTTPS)
- Set SMTP server: 0.0.0.0
- Configure DNS: use your ISP's DNS or
8.8.8.8 - Set DNS name: e.g.,
hotspot.local
TIP
If you're using a bridge interface for your guest network, make sure the WiFi interface is added to the bridge before running the hotspot wizard.
Step 2: Configure Walled Garden
Allow CaptiFi portal domains through the firewall so guests can reach the splash page before authentication.
- Go to IP → Hotspot → Walled Garden
- Add the following entries:
| Action | Dst. Host |
|---|---|
| Allow | *.captifi.io |
| Allow | app.captifi.io |
| Allow | site.app.captifi.io |
| Allow | *.stripe.com |
| Allow | fonts.googleapis.com |
| Allow | fonts.gstatic.com |
- Also add Walled Garden IP List entries:
- Go to IP → Hotspot → Walled Garden IP List
- Add the CaptiFi server IP:
157.230.53.133 - Set Action to Accept
Step 3: Configure RADIUS
You'll find your RADIUS server details in the CaptiFi dashboard under My Venues → select your venue → Integration Settings. The RADIUS IP address and shared secret are displayed on that page.
Go to RADIUS in the main menu
Click Add (+)
Configure:
- Service: hotspot
- Address: Enter the RADIUS server IP shown in your CaptiFi Integration Settings
- Secret: Enter the RADIUS shared secret shown in your CaptiFi Integration Settings
- Authentication Port:
1812 - Accounting Port:
1813
Click OK to save
Now enable RADIUS on your hotspot:
- Go to IP → Hotspot → Server Profiles
- Edit your hotspot profile (usually
default) - Go to the RADIUS tab
- Check Use RADIUS
- Set Accounting to yes
- Click OK
Important
The RADIUS secret must match exactly — it is case-sensitive. Copy and paste it directly from your CaptiFi dashboard to avoid typos.
Step 4: Set External Login Page
Your portal URL is https://app.captifi.io/portal/mikrotik/{your-site-id} — you can find your exact URL in the CaptiFi dashboard under My Venues → select your venue → Integration Settings.
- Go to IP → Hotspot → Server Profiles
- Edit your profile
- Under the Login tab:
- Set Login By: check HTTP PAP
- Set Login Page URL to your CaptiFi portal URL (copied from the dashboard)
- Click OK
Step 5: Link in CaptiFi Dashboard
- Log in to app.captifi.io
- Go to My Venues → select your venue → Integration Settings
- Select MikroTik as your integration type
- Enter your MikroTik's public IP address
- Enter the admin username and password for your MikroTik device
- Click Connect
- CaptiFi will verify the connection and confirm the link
Finding Your Public IP
Visit whatismyip.com from a device on the same network as your MikroTik to find your public IP address.
Step 6: Test
- Connect a device (phone or laptop) to the guest WiFi
- The CaptiFi splash page should appear automatically
- If on mobile, you may need to open a browser and visit any HTTP site (e.g.,
http://example.com) - Complete the login form
- Verify the guest can browse the internet after login
- Check your CaptiFi dashboard — the guest should appear in your logs
Troubleshooting
| Issue | Solution |
|---|---|
| Splash page not loading | Check that all Walled Garden entries are correct, including *.captifi.io and site.app.captifi.io. Verify the Walled Garden IP List includes 157.230.53.133. |
| "Access denied" after login | Verify the RADIUS shared secret matches exactly between your MikroTik and CaptiFi dashboard. Copy and paste to avoid typos. |
| Guests stuck on loading screen | Check DNS configuration in the hotspot. Try setting DNS to 8.8.8.8 and 8.8.4.4. Also verify your MikroTik has internet access. |
| No entries appearing in dashboard | Verify RADIUS accounting is enabled: go to IP → Hotspot → Server Profiles → RADIUS tab → ensure Accounting is set to yes. |
| Redirect loop or blank page | Ensure the Login Page URL in your Server Profile matches exactly what's shown in your CaptiFi Integration Settings. Check there are no trailing spaces or extra characters. |
| HTTPS sites not triggering portal | MikroTik cannot intercept HTTPS traffic. Guests need to visit an HTTP site first (e.g., http://example.com) or use the phone's captive portal detection (most devices do this automatically). |
| Hotspot not assigning IP addresses | Verify the DHCP pool is configured correctly and the interface is part of the hotspot. Check IP → Pool and confirm the range matches your hotspot network. |
| "RADIUS server not responding" | Check that port 1812 and 1813 (UDP) are not blocked by your firewall. Ensure the RADIUS server IP is entered correctly from your CaptiFi dashboard. |
| Guests disconnect after a timeout | Check the session timeout in your hotspot Server Profile. Go to IP → Hotspot → Server Profiles → edit profile → adjust Idle Timeout and Session Timeout as needed. |
Multiple Venues
If you have multiple MikroTik devices across locations:
- Each device connects to its own venue in the CaptiFi dashboard
- Each venue has its own RADIUS credentials and portal URL
- You can design a unique splash page per venue in Splash Pages on your CaptiFi dashboard
Need Help?
MikroTik setups can vary depending on your hardware and RouterOS version. If you're stuck:
- Email: hello@captifi.io
- Live Chat: Available on captifi.io
- Dashboard: Check your Integration Settings page for device-specific details