1. Getting started with WinBox

Launch WinBox app. After selecting “...” button wait a while to get MAC Addresses list. Select requested address (not IP if you are in a different net). Don’t type any password.

Confirm the action by pressing Connect button.

2. Downloading the latest RouterOS

This option appears only in default configuration.

Confirm the Remove Configuration option. From the address http://www.mikrotik.com/download/ download the latest firmware:

RouterOS > mipsbe > v6.6 > Upgrade package (options may vary if you configure another Routerboard)

2.1. Upgrading your MikroTik

Upload Firmware file (.npk) to routerboard
(drag and drop it on an open area Winbox, or "copy" and then paste into the folder Files):

Restart routerboard: System > Reboot. After rebooting connect with Winbox again.

3. Cleaning up

You can skip this step.

Remove unnecessary packages - to boost your memory and performance:
System > Packages - delete packages which have a note that they are uninstalled:

Important packages that should stay:

1. advanced-tools
2. dhcp
3. hotspot
4. security
5. system
6. wireless

Other packages at your decision.
Follow simple rule: what you don’t need must go away.

4. Setting SNTP client

After the next reboot: System, Reboot configure SNTP client (time):
System > SNTP Client

Enabled: Checked
Mode: Unicast
Primary NTP Server: 0.north-america.pool.ntp.org
Secondary NTP Server: 1.north-america.pool.ntp.org

Please set servers that are as close to your location as possible. You can find NTP list here: http://www.pool.ntp.org/en/

Enable the correct time zone System > Clock > Time Zone Name:
America/Montreal (or according to your location):

The time is automatically synchronized after the correct termination of LAN configuration.

5. Setting up DHCP client

Run DHCP client on ether1 interface: IP > DHCP Client > +

New DHCP Client DHCP Client tab
Interface: ether1
OK

Result example:

6. Adding the bridge

Add the bridge to all ports except ether1 and SFP1:
Bridge > Bridge tab > +

New Interface: General tab
Name:bridge-HS
OK

7. Adding the bridge ports

Bridge > Ports tab > +

New Bridge Port: General tab
Interface: ether2 gradually to a ether10 and wlan1
all on Bridge:bridge-HS

8. Setting the WiFi part

Configurate WiFi part (Wireless) - first activate the interface:
Wireless > Interfaces tab  > select wlan1 > ✔

Configure in the Advanced Mode to see all available options (e.g. Country).
We have to set ap-bridge, eg:

Select wlan 1
Interface <wlan1>: Wireless tab
Mode: ap bridge
SSID: Name of your WiFi

Country:  Configure it according to local laws and conditions (configuring engineer must know these conditions! - in the United States use the options as shown).

Enable antennas
Interface <wlan1>: HT tab
Chains: checked all

Logging in must be turned off - make a check:
Wireless Security Profiles Tab, Select Default

Security profile <default> General tab
Name: default
Mode: none

9. Definition of the SOCIFI hotspot

Run the definition of hotspot:
IP > Hotspot > Servers Tab, Hotspot Setup

bridge-HS Instead of addresses listed in this figure, we recommend a different address, than the address of the interface (bridge-HS), eg: 192.168.88.1/24, see the notes at the end of the manual.

The number of IP addresses should submit their license (L4 = 200 addresses). See notes at the end of the manual.

Hotspot Setup:

1. HotSpot Interface: bridge-HS
2. Local Address of Network: 192.168.88.1/24
3. Address Pool of Network: 192.168.88.20 - 192.168.88.219
4. Select Certificate: none
5. IP Address of SMTP Server: 0.0.0.0
6. DNS Servers: 192.168.88.1 / 8.8.8.8 / 8.8.4.4
   First DNS server address must be the interface address!!
7. DNS Name: hotspot.socifi.com (required)
   This domain could be adjusted to fit your needs. For example hotspot.mydomain.com
8. Name of Local HotSpot User: user

10. Change Hotspot settings

Remove Shared User (default = 1):
IP > Hotspot  > User ProfilesDefault , General Tab

Shared Users: clear
OK

Addresses per MAC = 1 (default = 2 )    

IP > Hotspot > Server hotspot1

Addresses per MAC: 1

Change the Name from the default value of hotspot1 to value "MK_ <serial number of Mikrotik>", for example "MK_3F0602DFA144". Where to find the serial number is described in the section 15.

OK

Change the method of the Authentication:
IP > Hotspot > Server Profiles select hsprof1

Hotspot Server Profile <hsprof1> Login Tab
HTTP PAP: checked

Use RADIUS: Checked
Default Domain:
Location ID:
Location Name:
Mac Format: XX:XX:XX:XX:XX:XX
Accounting: Checked
Interim-Update: 00:01:00
Nas Port Type: 19 (wireless-802.11)

Now define a list of allowed servers, IP > Hotspot Walled Garden:

Create WalledGarden script: System > Scripts +
Name: WalledGarden

Copy & paste following script:  

add dst-host=*. mycustomdomain.com

/ip hotspot walled-garden
add dst-host=*.socifi.com
add dst-host=*.facebook.com
add dst-host=*.akamaihd.net
add dst-host=*.akamai.net
add dst-host=*.edgecastcdn.net
add dst-host=*.edgekey.net
add dst-host=*.akamaiedge.net
add dst-host=*.twitter.com
add dst-host=twitter.com
add dst-host=*.twimg.com
add dst-host=*.fastly.net
add dst-host=*.li-cdn.net
add dst-host=*.cloudfront.net
add dst-host=facebook.com
add dst-host=*.fbcdn.net
add dst-host=*.instagram.com
add dst-host=instagram.com
add dst-host=*.cdninstagram.com
add dst-host=*.linkedin.com
add dst-host=linkedin.com
add dst-host=*.licdn.com

*.googleapis.com
*.googleusercontent.com
*.gstatic.com
*.accounts.youtube.com
*.apis.google.com
*.accounts.google.com
*.l.google.com

googleapis.com,googleusercontent.com,gstatic.com,accounts.youtube.com,apis.google.com,accounts.google.com,l.google.com

/ip hotspot walled-garden
add dst-host=*.googleapis.com
add dst-host=*.googleusercontent.com
add dst-host=*.gstatic.com
add dst-host=*.accounts.youtube.com
add dst-host=*.apis.google.com
add dst-host=*.accounts.google.com
add dst-host=*.l.google.com
add dst-host=accounts.google.com

googleapis.com googleusercontent.com gstatic.com accounts.youtube.com apis.google.com accounts.google.com l.google.com

:local mac [system routerboard get serial-number];
:if (  [system routerboard get routerboard] = yes ) do {:set mac [system routerboard get serial-number]} else { :set mac [interface ethernet get ether1 mac-address]};

/file set "hotspot/login.html" contents="<html>
<head>
<meta http-equiv=\"refresh\" content=\"0; url=http://connect.socifi.com/?rad=yes&serial=$mac&client_mac=\$(mac)&client_ip=\$(ip)&userurl=\$(link-orig)&login_url=\$(link-login-only)\" />
<meta http-equiv=\"pragma\" content=\"no-cache\">
<meta http-equiv=\"expires\" content=\"-1\">
</head>
</html>"