MikroTik WiFi Channel Config
2.4GHz & 5GHz AX 2.4GHz & 5GHz AC and Earlier
MikroTik WiFi Channel Config Read More »
WiFi Authentication Methods
PSK using WPA2 PSK using WPA3 PSK using WPA2 & WPA3 PPSK (personal PSK) with VLANs OWE (Opportunistic Wireless Encryption) Enterprise EAP (with RADIUS) Hotspot (with RADIUS) More related content
WiFi Authentication Methods Read More »
PHPNuxBill Installation & Configuration Guide
Prepare Server Install MySQL, PHP and Apache2 Download latest from, unzip and transfer to server: https://github.com/hotspotbilling/phpnuxbill/archive/refs/heads/master.zip Or directly on server: Unzip and move contents to default Apache2 directory (and remove default index file): PHPMyAdmin and Database Installation Add a global (root) MySQL User: User: master Password: f!rstShip68 Install PHPMyAdmin for ease of Database configuration NB
PHPNuxBill Installation & Configuration Guide Read More »
MikroTik Hotspot with RADIUS and Custom Portal
📌 Objective Create a wireless hotspot network where users can sign up or log in via a custom splash page hosted on an external Linux web server, which integrates with a FreeRADIUS server for authentication. 🔧 1. Infrastructure Overview Devices and Services: Component Role IP Address MikroTik Router Hotspot gateway and CAPsMAN controller WAN 10.2.0.6
MikroTik Hotspot with RADIUS and Custom Portal Read More »
MikroTik 802.1x EAP Wi-Fi Authentication using freeRADIUS
This guide walks you through creating certificates on a MikroTik router, configuring FreeRADIUS with a valid SAN, and preparing Android clients for EAP-TLS authentication using radius.mikrotikmasters.com as the domain. ✅ Step 1: Generate Certificates on MikroTik 1. Create a Certificate Authority (CA) /certificateadd name=cert-ca common-name=MyRootCA key-usage=key-cert-sign,crl-sign/certificate sign cert-ca ca-crl-host=10.200.21.33 2. Create Server Certificate with SAN
MikroTik 802.1x EAP Wi-Fi Authentication using freeRADIUS Read More »
PCC load-balanced setup with Netwatch monitoring
Part 1: Netwatch Monitoring 🔧 Objective To monitor the health of 3 WAN interfaces (ISP1, ISP2, ISP3) using Netwatch, dynamically managing routing rules and default routes based on link status. This ensures that the PCC load balancing setup only uses active upstreams. 🧱 Step 1: Rename Interfaces 🌐 Step 2: Configure PPPoE on ISP3 🧭
PCC load-balanced setup with Netwatch monitoring Read More »
MikroTik OpenVPN (OVPN) Server and Windows client
Create a dedicated VPN Bridge Assign an IP and VPN Pool IP > Address IP > Pool Generate Certificates CA Cert Server Certificate Sign the Certificate Sign the CA first Sign the Client using the CA Sign the Server using the CA Set the Server Certificate to Trusted Eport the Certificates Export The CA Export
MikroTik OpenVPN (OVPN) Server and Windows client Read More »
MikroTik CAPsMAN with VLANs: Full Setup Guide (hEX + 2x cAP ax)
This step-by-step guide walks you through configuring a MikroTik hEX router as a CAPsMAN controller, using two cAP ax access points connected through a VLAN-capable switch. Ideal for scalable, segmented Wi-Fi deployments. ✨ Network Topology Overview VLAN Plan: This segmentation helps improve security and organize traffic for different device types or user groups. ⚒️ Step
MikroTik CAPsMAN with VLANs: Full Setup Guide (hEX + 2x cAP ax) Read More »
Introduction to IPv6 on MikroTik
What is IPv6? IPv6 (Internet Protocol version 6) is the most recent version of the Internet Protocol (IP). It was developed to replace IPv4, which has been around since the early days of the internet. 🌍 Why do we need IPv6? IPv4 uses 32-bit addresses, which gives about 4.3 billion unique IP addresses. That seemed
Introduction to IPv6 on MikroTik Read More »