Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

1. Getting started with WinBox

Launch WinBox app. After selecting “...” button wait a while to get MAC Addresses list. Select requested address (not IP if you are in a different net). Don’t type any password.

Image Modified

Confirm the action by pressing Connect button.

2. Setting SNTP client

After the next reboot: System, Reboot configure SNTP client (time):
System > SNTP Client


Enabled: Checked
Mode: Unicast
Primary NTP Server: 0.north-america.pool.ntp.org
Secondary NTP Server: 1.north-america.pool.ntp.org


Info
Please set servers that are as close to your location as possible. You can find NTP list here: http://www.pool.ntp.org/en/


Image Modified

Image Modified

Enable the correct time zone System > Clock > Time Zone Name:
America/Montreal (or according to your location):

Image Modified

The time is automatically synchronized after the correct termination of LAN configuration.

3. Setting up DHCP client

Run DHCP client on ether1 interface: IP > DHCP Client > +

New DHCP Client DHCP Client tab
Interface: ether1
OK

Image Modified

Result example:

Image Modified

4. Adding the bridge

Add the bridge to all ports except ether1 and SFP1:
Bridge > Bridge tab > +

New Interface: General tab
Name:bridge-HS
OK

Image Modified

5. Adding the bridge ports

Bridge > Ports tab > +

New Bridge Port: General tab
Interface: ether2 gradually to a ether10 and wlan1
all on Bridge:bridge-HS

Image Modified

6. Definition of the SOCIFI hotspot

Run the definition of hotspot:
IP > Hotspot > Servers TabHotspot Setup

bridge-HS Instead of addresses listed in this figure, we recommend a different address, than the address of the interface (bridge-HS), eg: 192.168.88.1/24, see the notes at the end of the manual.

The number of IP addresses should submit their license (L4 = 200 addresses). See notes at the end of the manual.

Hotspot Setup:

  1. HotSpot Interface: bridge-HS
  2. Local Address of Network: 192.168.88.1/24
  3. Address Pool of Network: 192.168.88.20 - 192.168.88.219
  4. Select Certificate: none
  5. IP Address of SMTP Server: 0.0.0.0
  6. DNS Servers: 192.168.88.1 / 8.8.48.48 / 4 8.48.4.4
    First DNS server address must be the interface address!!
  7. DNS Name: hotspot.socifi.com (required)
  8. Name of Local HotSpot User: user

Image Modified

7. Removing shared user

Remove Shared User (default = 1):
IP > Hotspot
 User ProfilesDefault , General Tab

Shared Users: clear
OK

Image Modified

Addresses per MAC = 1 (default = 2 )     Note: it's a bit tricky, the field shows normally just grey color, no values
IP > Hotspot > Server hotspot1

Addresses per MAC: 1
OK

Image Modified


Change the method of authentication:
IP HotSpot Server Profiles select hsprof1

Hotspot Server Profile <hsprof1> Login Tab
HTTP PAP: checked

Image Modified

Use RADIUS: Checked
Default Domain:
Location ID:
Location Name:
Mac Format: XX:XX:XX:XX:XX:XX
Accounting: Checked
Interim Update:
Nas Port Type: 19 (wireless-802.11)

Image Modified

Now define a list of allowed servers, IP > Hotspot Walled Garden:

Create a script WalledGarden script: System > Scripts +
Name: WalledGarden

Image Modified

Copy & paste following script: 

Include Page
Mikrotik
Mikrotik


The result is a list of servers:

Image Modified

Info

The list of Walled Garden servers is changed from time to time, you may be asked to change its contents. The current list is always in this documentation. Before you run the script again (even if with new content), first you must delete old Walled Garden server list (otherwise the list would be permanently duplicated).

8. Creating a definition for hotspot login

Script definition for content of hotspot / login.html

We generate a hotspot / login.html file the same way: System > Scripts > +
Name: ReplaceLogin

Image Modified

Click Apply and than run script: Run Script (change takes the effect by changing the date and time of file: File hotspot/login.html). Copy & paste following script:

Code Block
:local mac [system routerboard get serial-number];
:if (  [system routerboard get routerboard] = yes ) do {:set mac [system routerboard get serial-number]} else { :set mac [interface ethernet get ether1 mac-address]};

/file set "hotspot/login.html" contents="<html>
<head>
<meta http-equiv=\"refresh\" content=\"0; url=http://connect.socifi.com/?rad=yes&serial=$mac&client_mac=\$(mac)&client_ip=\$(ip)&userurl=\$(link-orig)&login_url=\$(link-login-only)\" />
<meta http-equiv=\"pragma\" content=\"no-cache\">
<meta http-equiv=\"expires\" content=\"-1\">
</head>
</html>"

 9. Changing the default password

Change the default password (defaultly blank) on hard and complex one:
System > Password
(at least 8 characters, uppercase and lowercase letters and digits)

Image Modified

 10. Configuring the RADIUS server

Add primary radius server (RADIUS Server 1):
Radius + General tab

Servis
hotspot: checked
Called ID :
Domain:
Address: rad-1-euw-1.socifi.com (for example)

Include Page
RADIUS / AAA Settings
RADIUS / AAA Settings


Secret: 
socifi
Authentication port: 1812
Accounting port: 1813
Timeout: 300 ms
Acccountig Backup: unchecked
Src. Address:

Image Modified

Image Modified

Add secondary radius server (RADIUS Server 2):
Radius + General tab

Servis
hotspot: checked
Called ID :
Domain:
Address: rad-2-euw-1.socifi.com (for example)

Include Page
RADIUS / AAA Settings
RADIUS / AAA Settings

Secret: socifi
Authentication port: 1812
Accounting port: 1813
Timeout: 300 ms
Acccountig Backup: unchecked
Src. Address:

Image Modified

11. Safety in the end, but not the last

In conclusion, we recommend modifying the firewall so no one (except you :) could get into management of MikroTik: IP > Firewall > +

New Firewall Rule> General tab
chain: input
In. Interface: unselect bridge-HS

Image Modified

New Firewall Rule> Action tab
Action: drop

Image Modified

New rule must be at the last line:

Image Modified

 12. Connecting your MikroTik to SOCIFI Dashboard

Include Page
How to add your hotspot
How to add your hotspot

 

Iframe
srchttps://socifi.s3.amazonaws.com/public/iframe-support-setup-guides.html
width1
frameborderhide
alignleft
height1

...