This guide shows how to configure a Mikrotik router in order to make its Hotspot service to use Amplespot as external login (splash page) provider.

Please note:

  • This guide assumes that you have experience working with Mikrotik and does not replace the original Mikrotik documentation.
  • Your controller must be running the latest stable release of RouterOS (6.41 at the time of writing of this article)


This article applies to all Mikrotik routers. The configuration procedure has been performed and tested on a number of RB boards, including:

  • RB941 series
  • RB750 series
  • RB2011iL-IN
  • RB2011iL series
  • RB2011UiAS series
  • RB1100AH series
  • CCR1016 series
  • CCR1036 series
  • RB1000 series
  • RB1100 series
  • RB951
  • RBcAPL
  • RB962UiGS

To integrate a Mikrotik router with the Amplespot, it is necessary that the router is able to:

  • reach the internet via the ports: TCP/80, TCP/443, UDP/1812, UDP/1813
  • be configured to correctly assign IP addresses to the clients

If you would like to use the secure version of Amplespot Captive Portal (over https) - make sure you have a correct SSL certificate installed on your router.

It is also necessary to get the Winbox client (it is recommended to get the last version of the tool at http://www.mikrotik.com/download).

Important note:

For all RADIUS and Captive Portal, configuration settings visit R RADIUS SETTINGS CONFIGURATION PAGE

1. Login to your router

The access to the device is performed by using WinBox.

Launch the WinBox app. Wait a while to get MAC Addresses list. Make note of that MAC address, we will need it for the Hotspot setup in Section 3.

Select requested address (not IP if you are in a different network).

2. Configure RADIUS server

Add primary radius server. Go to& Radius in the left-hand menu and create a new RADIUS server and open the General tab:

	Service: hotspot
	Caller ID: -leave blank-
	Secret: -see doc-
	Authentication Port: 1812
	Accounting Port: Enabled
	Timeout: 2000 ms

Repeat this step to create a secondary RADIUS server.

3. Create Hotspot profile

Go to IP in the left-hand menu and then open Hotspot.

Click Hotspot Setup button to create new hotspot server.

Select the Interface where you want the hotspot to run. This can be a wireless, bridge or ethernet interface depending on your network architecture.

Complete rest of the steps to create the hotspot server. The settings will depend on your network architecture. Refer to Mikrotik hotspot documentation for additional info.

Default/Recommended settings:

HotSpot Interface: wlan1
Local Address of Network: -leave defaults-
Address Pool of Network: -leave defaults-
Hotspot Certificate: none
IP address of SMTP server:
DNS servers: and (or any other DNS of your choice)
DNS name: amplespot.local

Double-click on the name of hotspot service you just created and change following settings:

Change this to the dash-delimited MAC address of the Ethernet interface your router (as noted in section 1), followed by a semicolon, followed by the name of the guest SSID that you will use with this hotspot service.

For example for mac address 64:D2:54:52:12:AD and SSID name Guest-WiFi change name of the hotspot server to:


Set addresses per MAC:
Make sure you change this to 1

Click OK to save changes

Click on Server Profiles tab, open the Profile you are using in your hotspot server configuration (previous step) and select the Login tab. Make following changes:

Login by: 


MAC Auth. Mode: MAC as username and password

Select the RADIUS tab and make the following changes:

Use RADIUS: -ticked-
Accounting: ticked
Interim Update: 00:05:00
NAS Port Type: 19 (wireless-802.11)

Open the General tab and take note of the HTML Directory location

Click OK to save changes

Select the Users tab and create a new user

Server: all (or name of the server you created in previous steps)
Name: User
Password: -leave blank-
Profile: default (or choose specific profile)

Click OK to save changes

Select the User Profiles tab and edit the default user profile.

(You can also create a new profile and link it to the hotspot Server that you created earlier.)

Address Pool: -the address pool name in hotspot server config-
Shared Users: -leave blank-
Add MAC Cookie: unticked
Open Status Page: HTTP login
Transparent Proxy: unticked

Click OK to save changes

4. Configure Walled Garden

The Walled Garden needs to be created in order that the wifi users can access online resources required in order to load Splash Pages hosted by Amplespot as well as other external resources required for social media network authentication. Review this Mikrotik documentation article for more information.

We will configure Walled Garden via the script.

Go to the system in the left-hand menu and select Scripts. Create new script and give it a name WalledGarden. Paste following code into the Source window:

/ip hotspot walled-garden
add dst-host=cp.amplespot.com
add dst-host=wifi.amplespot.com
add dst-host=static.amplespot.com
add dst-host=www.google-analytics.com
add dst-host=www.googletagmanager.com
add dst-host=api.mailgun.net
add dst-host=ipinfo.io

/ip hotspot walled-garden ip
add dst-host=cp.amplespot.com
add dst-host=wifi.amplespot.com
add dst-host=static.amplespot.com
add dst-host=www.google-analytics.com
add dst-host=www.googletagmanager.com
add dst-host=api.mailgun.net
add dst-host=ipinfo.io

You may need to add more domains depending on sign-up options you would like to use in Amplespot Captive Portal - find up to date list of Walled Gardens here.

Click Apply and Run the script.

You can now find Walled Garden created in Hotspot settings. Walled Garden entries can also be added manually via Hotspot menu.

5. Edit hotspot login page

We will now edit the hotspot login page so it will forward end-users to Amplespot service (splash pages).

Go to System in the left-hand menu and select Scripts. Create a new script and give it a name ReplaceLogin. Paste following code into the Source window:

local mac [system routerboard get serial-number];
:if (  [system routerboard get routerboard] = yes ) do { :set mac [interface ethernet get ether1 mac-address]};
/file set "flash/hotspot/login.html" contents="<html>
<meta http-equiv=\"refresh\" content=\"0; url=http://cp.amplespot.com/mktk/?rad=yes&apmac=$mac&ssid=\$(server-name)&client_mac=\$(mac)&client_ip=\$(ip)&userurl=\$(link-orig)&login_url=\$(link-login-only)\" />
<meta http-equiv=\"pragma\" content=\"no-cache\">
<meta http-equiv=\"expires\" content=\"-1\">

Take note of the following (highlighted with the yellow mark on the picture below:

this shall match to HTML Directory specified in Hotspot Server Profile

you can use https instead of http if you have a valid certificate in your hotspot.

Click Apply and Run the script.

6. Add your router to Amplespot Admin Dashboard

Now head to Amplespot Admin Dashboard, click on Access Points in the left-hand menu and then on Add new Unmanaged Access Point

Select the Access Point's make and model, type in MAC Address (from step 3 of this manual) and Name, Select the Country and the Captive Portal Zone where you would like to add this Access Point. You will be able to move your access point to other Zones later.

Make sure that the name of the SSID used by the Captive Portal Zone you are selecting exactly corresponds to the name of the SSID on the Mikrotik router.

Click Add Access Point. You are done!