Skip to content

Check the connection method and validation evidence for every available WiFi integration path. Open the compatibility centre

Product
All features How it works Guest WiFi portal Campaigns & automations Reviews Analytics All integrations
Solutions
Restaurants Cafés Hotels Bars & pubs Retail Gyms Salons
Hardware Pricing
Resources
Resources Guides Launch checklist Glossary Help centre
Log in Start free

Step-by-step guide

MikroTik RouterOS hotspot setup

Enable the RouterOS 7 REST API over HTTPS, create a dedicated API user, then choose the hotspot server and user profile that new guests should be authorised under.

Guide 3 of 8 5-10 minute read Operator checklist

Before you change anything

  • Confirm the correct venue
  • Keep current settings handy
  • Test with one device first

Connect MikroTik RouterOS to WeefyBox

  1. Update the router to a supported RouterOS 7 release and take a backup.
  2. Create or identify a guest bridge/VLAN and DHCP pool.
  3. Run RouterOS IP > Hotspot > Hotspot Setup for that interface.
  4. In WeefyBox Setup, choose MikroTik RouterOS.
  5. Generate the venue script with php artisan hotspot:mikrotik-script.
  6. Review the .rsc script, then paste it into Winbox New Terminal.
  7. Confirm the WeefyBox host appears under IP > Hotspot > Walled Garden.
  8. Enable www-ssl or API-SSL under IP > Services and restrict its source address.
  9. Create a dedicated RouterOS user with hotspot/API permissions only.
  10. Enter the router URL, user, password, server, and profile in WeefyBox.
  11. Use HTTPS PAP where possible. If using CHAP, retain the standard md5.js login helper.
  12. Enable mac-cookie only for the return period you intend.
  13. Save credentials and run the connection test.
  14. Rejoin the guest SSID and complete the portal.
  15. Confirm the active client under IP > Hotspot > Active.

| Symptom | Check | |---|---| | Splash never appears | Hotspot is bound to guest interface; DNS and walled garden work | | Splash works but no internet | API service, restricted API user, server/profile names, router clock | | iPhone works but Android fails | Add Android connectivity-check hosts | | Returning guests sign up again | MAC-cookie timeout and private MAC mode | | Router unreachable | Public/VPN route to API-SSL and firewall source allow-list |