ISP Radius Hotspot: gateways, portals and vouchers
Manage MikroTik gateways, profiles, portals, accounts, vouchers and sessions.
Last updated: 2026-10-02
Delete a gateway, including after failed activation
For a paired gateway, open Gestione avanzata and select Revoca collegamento. The Elimina gateway button appears at the top after revocation is requested, including when revocation is still pending. It stays hidden while the gateway is paired, even if temporarily unreachable. It is directly available when initial connection or reconnection has not been completed. Hotspot write permission is required.
Deletion confirmation invalidates the installation script and management credentials and requests remote connection deactivation. Once complete, you return to the list and the gateway page is no longer available.
If remote deactivation is not confirmed, cancel and retry or confirm a second time to delete only the gateway page. In this case the guest network may remain active: check the connection on the concentrator. Cancelling the second confirmation keeps the gateway page available with management already revoked.
Guest accounts, portals and connection history are retained. Deletion does not reset the MikroTik or close existing guest sessions.
Getting started
Open Settings → ISP Radius Hotspot → Gateway. Manage site devices, guest accounts, access profiles and vouchers. Complete the guest network configuration and try a real login before distributing credentials.
Guided gateway management is a preview available on enabled installations. It includes connection to ISP Billing, network preparation and first installation on a dedicated MikroTik. Test the service before using it at customer sites.
Permissions and manual gateways
Hotspot read permission allows viewing the list, details and guest network draft. Hotspot write permission is required to create, edit, generate an installation script, update configuration, request an interface reading, save the draft, request activation and restoration or revoke a gateway. Each ISP can access only its own gateways.
The manual management button is hidden from the Gateway list. Existing installations are retained and are not automatically imported into guided management.
In manual management, incomplete service configuration prevents saving: contact support. If «Gateway salvato» appears with an update error, the details have already been saved: do not create a second gateway and contact support before retrying. Confirmation that the service restarted does not replace a guest login test.
Gateway dashboard
In the gateway list, Collegamento shows whether the MikroTik responds and Hotspot shows confirmed configuration with its application date, changes awaiting application or the operation in progress. Incomplete activation and unconfirmed restoration are highlighted; open the gateway for details. If the device stops responding, Gateway non raggiungibile appears even when configuration had previously been confirmed.
The gateway page combines status, last contact and actions. Collegato (Connected) means the device contacted the service recently; Hotspot configurato means configuration was confirmed. Test guest login and browsing to verify service operation. The venue portal should appear: report the issue if the default MikroTik page appears instead. After correction, close the login window and reconnect to Wi-Fi.
Attività dell’apparato shows authenticated guest sessions, CPU, used memory and uptime with the reading date. A dash means unavailable; zero means no sessions were reported. Readings older than four minutes show Dati non recenti. Select Aggiorna stato to display the latest received data.
Modifica configurazione opens the active gateway settings overview. Modifica porte opens Ethernet ports; Modifica Wi-Fi opens radios, network name and security. Move freely between sections without losing entered values. Deselect the old guest port and select its replacement, then use Rivedi modifiche e salva to review, confirm any required enabling or bridge moves, save and choose Aggiorna adesso or Più tardi. Rete configurata shows the applied network separately from pending changes. Direct links open Internet, addresses, bridge/VLAN and portal settings; less frequent details are expandable.
The action panel shows what to do next or which operation is running. Ultimo aggiornamento distinguishes requested, sending started, received by the gateway and applied, with separate dates. Sending does not prove application. If changes are temporarily unavailable, reload the page to retry.
Portale ospiti shows the portal version and editing link. With Online, publishing changes makes them visible at the next access. Name/site details and advanced reconnection, replacement and revocation remain separately accessible. Read-only permission allows viewing.
Configura Hotspot: read interfaces
Open the gateway and select Configura hotspot. The steps are Device, Internet, Ports and Wi-Fi, Bridge and VLAN, Addresses, Portal and access, and Review. Use Continua and Indietro to review choices.
In the first step, select Rileva / aggiorna apparato, keep the MikroTik powered on and connected, wait about a minute and select Aggiorna stato. Reinstalling the script is unnecessary. Saving uses the latest complete reading, with no time limit for completing your choices. The reading is refreshed automatically before application. A procedure update may require a new reading.
If the reading fails or expires, check connectivity and retry. Choices are saved as a draft; application is requested separately from the gateway page.
Guest ports and management access
Disabled, disconnected local radios can be selected for guests even when configured as stations: they will be configured as access points and enabled when the settings are applied. Radios used for Internet access, managed by CAPsMAN or virtual remain excluded; the table explains why.
In Internet, review the detected port, IP address, Internet gateway and address assignment, then select Continua. No WAN selection, confirmation or dedicated management port is required. The existing connection is retained and the Internet port is excluded from guest choices. Management ports reserved by older configurations are retained. If the connection cannot be identified reliably, return to Apparato and refresh the reading. The current procedure requires an existing Ethernet DHCP WAN; it does not convert other connection types.
The table shows Ethernet and Wi-Fi, bridge, enabled/disabled state, connectivity and usage. A disconnected port may still have a configuration. WAN, management and incompatible interfaces cannot be used for guests.
For each selected Wi-Fi interface enter SSID, country and open access or WPA2 password protection. The Wi-Fi password is separate from portal credentials and vouchers. Leave a saved password blank to retain it; it is never displayed again. Confirm interfaces to enable and moves from existing bridges. CAPsMAN-managed, virtual or client-mode radios require technical review.
Network, portal and draft review
The guest bridge is prepared in the choices. If a VLAN is needed, enter an ID from 2 to 4094 and the Ethernet ports towards switches or access points configured for that VLAN; other guest interfaces are planned as untagged.
Enter a private IPv4 network from /16 to /28, gateway, DHCP range and one or two IPv4 DNS servers. Recognized overlaps, addresses outside the network and ranges containing the gateway are rejected. When moving ports from a bridge with an IP address, leave at least one enabled Ethernet port in that bridge, excluded from the guest network; if no compatible port remains, revise the guest port selection.
In Portale e accesso, choose a published portal and a Hotspot profile belonging to your ISP. Each profile appears once, even when it contains multiple attributes. The portal is associated immediately without losing entered fields; the profile is retained with the final save. Access mode follows the published portal.
The selected Wi-Fi country is adapted to the format required by the radio. After a compatibility correction, retry the saved configuration without entering the SSID and country again.
The planned certificate uses a MikroTik name and requires RouterOS 7.22 or later within series 7, stable or long-term. Confirm the choice, review the Riepilogo and select Salva e registra gateway. Choices are saved and the gateway is registered for authentication. Initial registration updates the Hotspot service and may briefly interrupt new logins. From the gateway page, review the summary and select Applica configurazione salvata to apply the network, portal and certificate. No interface is enabled while moving through the steps.
Create and associate a gateway
Select Aggiungi gateway and read the requirements shown above the form: a dedicated MikroTik already connected to the Internet, with working name resolution and correct date and time; a stable RouterOS 7 release, version 7.16 or later; and WinBox access with configuration permissions. Check the installed version under System → Resources → Version and complete any updates and restarts before running the script.
Enter a name and site, add optional notes and select Crea gateway e continua. For example: site “Central Cafe”, gateway “Main entrance”. Creating the gateway opens its details, where you can prepare the script.
When first opening Configura hotspot, Recupero dei dati dalla MikroTik appears with an animated loading indicator: please allow a few minutes. The message distinguishes waiting for data from receiving it. Keep the MikroTik powered on and connected to the Internet: configuration opens automatically once ports, Wi-Fi and network settings are available. If loading fails, select Riprova verifica.
Open its details, select Genera script di attivazione and Copia script. Run the script in the WinBox Terminal within 15 minutes. The script contains a private credential: never publish it or share it with guests, including in exports or logs that contain its source. If the connection fails, send support only the Terminal line beginning with “ISP Billing: collegamento non completato”. If the Terminal reports an incompatible RouterOS version, update to stable RouterOS 7.16 or later within the 7 series and repeat installation. RouterOS 6 is not supported. The installation completion message does not yet confirm connectivity: wait for Collegato in ISP Billing. Before the first association, generating another script invalidates the previous one. After running it, select Aggiorna stato.
Reuse a MikroTik after a failed connection
If the initial connection failed and you want to use a new gateway page for the same MikroTik, revoke or delete the old gateway first. From the new gateway, select Genera script di attivazione and run the script within 15 minutes: it replaces the recognized previous ISP Billing connection while retaining Internet access. Wait for Collegato, then complete the Hotspot configuration from the new gateway.
If the MikroTik already has a Hotspot or a previous guest configuration, replacement stops with a message: use recovery from the old gateway page or share the message with support. Shared, customized or unrecognized connections require support. This feature does not transfer the guest network to the new gateway.
After an ISP Billing update, generate a new script from the gateway page: a previously copied script retains its earlier behavior.
HTTPS certificate and retries
The certificate obtained for the gateway is retained even after restoring the network. Later attempts reuse it if it belongs to the gateway, matches the portal name and is usable. Renewal remains automatic on the MikroTik, which must stay connected to the Internet. A certificate belonging to another configuration or with mismatched details requires support.
Messages distinguish an incomplete request, failed issuance, an expired waiting period and an unusable certificate. If its status cannot be read, share the message with support: this error may occur even when the certificate has already been issued. After the correction, select Applica configurazione salvata to check the retained certificate again. If only the waiting period expires, wait a few minutes and retry: the existing certificate request is checked again. If issuance fails or a request limit is reported, contact support before retrying activation. The certificate is retained for diagnosis. Do not delete it manually or reinstall the connection to address this error.
Configuration preparation or transfer incomplete
If a configuration limit message appears, share it with support before changing the selected ports. Your saved choices remain available.
If the transfer does not finish, check that the gateway is connected and refresh its status. When Applica configurazione salvata is available, retry from the gateway page. If restoration needs verification, wait for a technician before continuing. You do not need to create another gateway.
Network configuration incomplete
If activation stops while configuring the network, the message identifies the step that could not be completed, such as creating the Hotspot service, ordering protection rules, bridge, DHCP, Wi-Fi or enabling ports. For the Hotspot profile, the message also distinguishes the portal directory, certificate, login method and RADIUS settings. Share the message with support before retrying. Configurazione precedente ripristinata confirms restoration of the previous settings; Ripristino da verificare requires a technician.
If an earlier attempt shows only a generic network error and restoration is confirmed, retry Applica configurazione salvata to obtain the detail. You do not need to reinstall the connection script or create another gateway.
If an error is reported while setting HTTPS redirection in the profile, wait for the correction provided by support. Once restoration is confirmed, retry Applica configurazione salvata; the retained certificate is checked again and login continues to use HTTPS.
Update RouterOS from the gateway
Gateway cards present status and actions in compact blocks. Aggiornamento RouterOS shows the installed version and compatibility. Select Verifica aggiornamenti and wait for the MikroTik response. The check looks for a newer compatible release on the stable channel and installs nothing.
When a version is offered, keep a backup and select Aggiorna RouterOS. Confirmation shows the installed and proposed versions and warns about the restart: connections will be temporarily interrupted. Keep the gateway powered on. Completion appears only after the MikroTik reports the new version. You can then apply the saved Hotspot configuration.
Hotspot write permission and a connected RouterOS 7 gateway are required. If device permissions are missing, open Abilita il riavvio da ISP Billing and follow the WinBox instructions using an administrator account. Do not start other network changes during an update. If the result cannot be confirmed, inspect the device before checking again; installation is never repeated automatically. Upgrade RouterOS 6 through WinBox before connecting it. A compatible long-term release already allows Hotspot activation.
Activate and restore Hotspot
After saving and registration, open the gateway page, review the summary and select Applica configurazione salvata. Read the confirmation: selected ports become guest ports and affected connections may be interrupted. Keep management access to the MikroTik. Hotspot write permission, a connected device and RouterOS 7.22 or later in series 7, stable or long-term, are required. First installation requires a dedicated device without an existing Hotspot.
Verifica apparato in corso means the system reads the MikroTik and checks that saved ports, network, Wi-Fi, profile and portal are usable. Compatible settings are applied automatically, including after a reset or with an older reading. You may leave the page during the operation. Elapsed time alone does not require recreating the configuration. If Scelte da rivedere appears, read the reason, open Modifica configurazione, correct the choices and save. Unavailable saved interfaces remain visible until you remove them from the selection. Retry with Applica configurazione salvata (Apply saved configuration). If verification does not complete within ten minutes, check connectivity and retry.
Credentials, voucher and passwordless portals are supported. For passwordless access, guests enter their name, email and mobile number, accept the terms and select Accedi. No SMS, password entry or code is required. Contact details are collected without verification. The profile selected on the gateway provides the access limits. The automatic certificate uses a MikroTik name and requires Internet connectivity and a correct clock. Devices receive the gateway as DNS; selected DNS servers are used for Internet. Credentials and vouchers use the limits of their assigned account profile; selecting a wizard profile does not modify existing accounts.
Keep the gateway powered on and select Aggiorna stato after a few minutes. Configurazione applicata confirms the device network, portal and certificate; still test portal opening, login and browsing from a guest device. If preparation stops, the message identifies the requirement to correct, such as RouterOS version, Hotspot capability, guest network, profile or portal. Follow the suggested action and retry Applica configurazione salvata. Unexpected problems identify the phase: if repeated, share the message with support. Initial MikroTik checks also distinguish a condition preventing activation from a check the device cannot complete. If a check cannot be completed, share the message with support before retrying. Earlier attempts without details require a new attempt to obtain the reason. An uncertain result requires restoring connectivity and reading the status again, without creating another gateway.
When available during first installation, Richiedi ripristino removes this activation and restores the settings it changed, interrupting guest access. Wait for confirmation before reviewing and saving the wizard again. Avoid manual device changes between activation and restoration. Contact a technician when restoration requires verification. Failed activation attempts trigger restoration; its result still needs confirmation.
Gateway registration and errors
The Registrazione del gateway panel shows the result and latest confirmation time. Registrazione confermata means the gateway was registered for authentication and the service acknowledged its update; guest networking must still be activated and a real login tested.
If registration does not finish, the saved draft remains available. Use Riprova registrazione to resume from that draft; do not create another gateway. Save any new changes first. An address already used with different details requires support. Saving an unchanged, confirmed registration again does not restart the service; retrying an uncertain result may repeat the update.
If Registrazione non disponibile appears, contact support. Hotspot write permission is required; read permission allows viewing the result. Manage guided gateways from their own page rather than the legacy manual screens.
Edit an active Hotspot network
Open the gateway and select Modifica configurazione. From the overview, open Internet, Ethernet ports, Wi-Fi, addresses, bridge/VLAN or portal/access. Active gateways use freely accessible sections; the seven-step flow remains for initial setup. Rivedi modifiche e salva stays available at the bottom of the screen, validates all fields and opens the review. Then press Salva modifiche. Restoring the first installation is not required. Choose Aggiorna adesso (Update now) to apply your choices or Più tardi (Later) to retain them. The applied version remains in use until the update.
ISP Billing checks the device again before applying changes. An offline gateway retains the request until it reconnects. Affected connections may be interrupted during application: keep management access available. Ports removed from the guest network are disabled, except a port selected as the new Internet port.
Aggiornamento configurazione distinguishes the saved and requested versions, delivery started, receipt and applied version, with their dates. Configurazione applicata appears after gateway confirmation. Select Aggiorna stato to read the result and test login and browsing. A failed update attempts to recover the previous configuration; Ripristino da verificare requires support before further changes. The message identifies the unsuccessful step when available. With confirmed restoration and a generic network update error, select Riprova aggiornamento to obtain the detail.
With Portale online, publishing text, images and settings from the library makes them available at the next page opening or reload. No gateway update is needed for each publication. Selecting a different portal for the site requires saving and Aggiorna adesso. Local portals transition automatically when the online service is available; check site status under Portali. Port and Wi-Fi changes can retain the working local portal while this transition is pending.
Update gateway configuration
For an associated gateway that has not been revoked, open its details, expand Gestione avanzata and select Aggiorna collegamento. Hotspot write permission is required. Read and confirm the request: the connection may briefly be interrupted. Leave the MikroTik powered on and connected to the Internet; it will receive the available settings at its next contact, without reinstalling the script.
Select Aggiorna stato and wait for Collegamento configurato. If the gateway is offline, the request remains pending. A message distinguishes an already confirmed configuration from one awaiting confirmation. If the new settings require support, contact support before proceeding. This action updates the connection. Use Applica configurazione salvata to apply the first guest network configuration.
Understand the status
Da attivare: saved, awaiting setup. In attesa di attivazione: script generated. Attivazione scaduta: generate a new script. Collegamento in preparazione: leave the device powered on and wait. Collegato: recent contact with ISP Billing. Non raggiungibile: check power and Internet access.
Details show the model, RouterOS version, last contact and connection configuration confirmation. “Collegato” does not certify guest Internet access: verify it separately. Follow any error message or contact support. If the page has expired, reload it before repeating an action.
Retry automatic activation
To retry an incomplete activation, select Applica configurazione salvata. The device reading is refreshed automatically; you do not need to request a manual reading first. If the same comparison error returns without changes to the device, share the message with support. When Scelte da rivedere is shown, review and save the indicated settings before retrying.
Revoke or replace a device
Under Gestione avanzata, Revoca collegamento stops remote gateway management. Read the confirmation before proceeding. If Revoca da completare appears, repeat the action when the service is available; the operation is complete only when Revocato is displayed.
For a reset or replacement MikroTik, use Ricollega o sostituisci MikroTik on the same gateway page, including after revocation. Hotspot write permission is required. Disconnect the previous device from the site network when replacing it, then read and confirm the consequences: its connection is disabled and pending operations are cancelled. The name, site, portal and saved configuration are retained. The gateway name is also assigned to the MikroTik; after saving a new name, the device receives it on its next connection.
Once the new script is ready, paste it into the WinBox Terminal of the dedicated MikroTik, already connected to the Internet, within 15 minutes. Select Aggiorna stato; after reconnection, choose Applica configurazione salvata (Apply saved configuration) or Modifica configurazione (Edit configuration). Applying checks compatibility with the MikroTik automatically and proceeds when valid; missing ports or incompatible networks are reported for correction. Editing opens the retained settings with freely accessible Internet, port and Wi-Fi sections. If device information is missing, the reading starts automatically and the settings open when ready. If the device does not respond, use Riprova verifica (Retry check). Reconnecting alone does not activate guest access. If Ricollegamento da completare appears, use Riprova ricollegamento: the script becomes available only after removal of the old connection is confirmed. If the script is lost or expires before pairing, reload the page and generate a new one. Revoking the connection does not close existing guest sessions or terminate a commercial service.
Profiles and portals
If the phone does not open the portal automatically, reconnect to the guest network and open the gateway’s HTTP address shown on the site page. If the portal appears, test login and Internet access; otherwise check the gateway connection and configuration.
Profiles define speed, duration, simultaneous access and other conditions supported by the network. A change may affect every associated account. Separate portal settings exist for credentials, password-free access and vouchers, including colours, logo, background and content. In the Portal library, the profile is selected only at the gateway and applies to new registrations after configuration is applied; existing accounts keep their profile.
Settings in the three Captive Portal sections remain available for existing installations and belong to the ISP. The new Portali section lets you prepare independent designs for different sites. The portal is installed when the gateway configuration is activated.
The portal chooser also shows the actual access mode: the portal name does not determine its mode. Rimuovi scelta immediately opens the list to choose again. To change the mode of a portal in use, duplicate it, select the mode on the copy, publish it and assign it to the gateway. Review and save changes, then apply the saved configuration.
Portal library: create and edit
Open Settings → ISP Radius Hotspot → Portali and choose Crea portale or open an existing portal. Read permission allows viewing and previews; write permission allows saving and publishing.
The editor has five tabs: Accesso e registrazione (access and registration), Grafica e immagini (design and images), Testi e struttura (text and venue), Consensi e rubrica (consent and contacts), and Pubblicazione e gateway (publication and gateways). The first four show the preview alongside settings; the fifth brings versions and associated sites together. Save actions and draft status are in the bottom bar.
The portal defines access mode, text and design. Select the profile only in gateway configuration: sites can share one portal with different speeds and limits. New registrations use the profile applied at the site; existing accounts retain their assigned profile.
Preview, publish and restore
The preview follows your edits. Choose Telefono (phone) or Computer: the whole screen is shown at scale, with its dimensions and percentage. Scroll inside it when content exceeds the screen. Choose Accesso (login) or Registrazione (registration) when available, and compare draft, published and previous versions. Fields and buttons are demonstrations.
Salva solo bozza keeps work without showing it to guests. Salva e pubblica updates all associated sites; review the confirmation and affected sites. Under Pubblicazione e gateway, publish a draft, duplicate a portal or restore its previous version. To change a single site, duplicate the portal and assign the copy to that gateway.
Guest pages use compact logos and images. The portal image field displays one photo; the background stays separate and no image selectors are shown. Service operator information appears in the footer outside the card.
Opening the Wi-Fi login page
Join the guest network and wait for the login page. Automatic opening also depends on the phone: if the page does not appear, open the Wi-Fi network details and select its login option when available. If the delay recurs, report the phone model and gateway.
To update the login pages of an already configured gateway, open Modifica configurazione, review your choices, save again and select Aggiorna adesso. Wait for Configurazione applicata, then test with a device that has not yet authenticated. Connections may be interrupted during the update. Publishing text and images updates the online portal content; updating the gateway login pages requires this one-time step.
Portal link
Copy the Link del portale from the portal page. The address contains a long random code and remains stable when saving or publishing content; a duplicate gets a different address. Always use the displayed link instead of constructing it from portal numbers.
For credentials portals, opening it outside Wi-Fi shows the personal area protected by mobile number or username and password. Opening the link alone does not grant Internet access. When replacing an older numeric address, update shared links and QR codes: the old address may no longer be available.
Choose a portal for a site
Open the gateway → Configura hotspot → Scegli portale or Cambia portale. Search the published portals and select Scegli: the name and version update on the same page and the choice is saved immediately. Rimuovi scelta requires confirmation. Hotspot write permission is required; each gateway has one choice, while a portal can serve several gateways.
The Portali library is for creating, editing and publishing designs. Choose the portal for a site in Hotspot configuration. Changing the portal retains the entered network fields; if a saved draft exists, review and save it to update it. The choice prepares activation or updating from the gateway page. Online portals follow the current publication without further gateway operations. To change access mode at an active site, duplicate the portal and review the configuration. Older local portals transition automatically when the service is available. A revoked gateway retains a summary of its previous choice.
Library states and errors
Bozza: never published. Pubblicato: the draft matches the published version. Modifiche in bozza: a published version exists and the draft contains unpublished changes. Use name and state filters and the last modified date to find a portal.
If the portal or its associations changed in another page, the operation stops: reload and review before confirming. Reload an expired page. For rejected images, check format, dimensions and file integrity. Contact support if the library is unavailable. Before publishing, check both preview sizes, associated sites and the version to use.
Registration and password recovery
Under Generali → Messaggi agli ospiti, configure the sending service. In Portali → Accesso e registrazione, enable account creation and choose whether to verify the mobile number with a code. Select the new guest profile in gateway configuration; changes take effect after application and do not reassign existing accounts.
Existing guests enter mobile number or username and password. Choose the dial code from the list with flags. Errors appear centrally with actions to retry, recover the password or create an account.
Crea account asks for name, mobile number and a password chosen by the guest. Email and city may remain blank. Verify a code when configured; credentials and Collegati appear after creation. An existing number does not create a second account. Recupera password sends the existing account password to its mobile number.
A valid personal session can show Bentornato for faster reconnection. A device address alone never displays personal details or passwords. The form discourages automatic password saving, but the browser also controls it.
Service conditions and offers
Under Consensi e rubrica, configure Link condizioni del servizio or fallback text. Guests see Accetto le condizioni del servizio — leggi during registration; later login does not repeat the checkbox.
To collect newsletter subscriptions, enable collection and specify the controller and sender, HTTPS privacy notice and channels. A separate unchecked Acconsento a ricevere novità e offerte — leggi checkbox appears. Consent remains voluntary and does not block Wi-Fi. Its dialog explains the controller, channels, privacy notice and unsubscribe option.
In passwordless mode, new guests enter name and mobile number; email and city may remain blank. They accept the conditions and may opt into communications. Returning from the same device shows Accedi without repeating details or consent.
Venue and welcome email
Under Testi e struttura, enter the venue name and contacts. Blank fields are hidden. The website is used by Naviga after login; it opens in a new tab when supported by the browser. ISP information appears outside the card.
In General settings choose the guest email sender. New registration sends a welcome email with credentials and a personal link only when the guest entered an email address. It is separate from newsletter enrollment and needs no confirmation. If delivery fails, the account remains valid: keep the credentials displayed on screen.
Guest personal area
Guests can open the portal link outside Wi-Fi and sign in with mobile number or username and password to view and edit name, email and city. The mobile number remains the login identity. They can change password by entering the current one, view observed sessions and request disconnection. Deletion requires password and explicit confirmation.
Signing out of the personal area does not stop Wi-Fi browsing. Connection status may be unavailable; a reachable site must confirm disconnection requests.
Recognized devices
When device recognition is available, on mobile number and password portals each account can associate up to two devices for 24 hours after their first login. Reconnection within this period can be automatic; credentials are required again after expiry. Any shorter profile limits still apply.
For a third device, choose replacement, verify the mobile number by SMS and select the device to remove. Wait for confirmation before continuing. A device that changes its private address may be recognized as new. Voluntary logout may require entering the password again.
Walled Garden: websites before login
Open Hotspot settings → Walled Garden and enter one domain per line, up to 50, such as www.example.org. Add required subdomains separately. HTTP and HTTPS websites are supported; do not enter paths, IP addresses or wildcards.
Select Salva e aggiorna gateway. The list applies to all your active Hotspot gateways; offline gateways receive it when they reconnect. New gateways also receive the list on activation. Pending network changes remain separate.
Check the result on the gateway page under Ultimo aggiornamento Walled Garden. If an update fails, check connectivity and save the list again to retry. To remove a website, delete its line and save. Hotspot write permission is required; read-only operators can view the websites.
Test the websites on a device without an active login. If a page loads incompletely, add the domains needed by its content. Websites sharing an Internet address may become reachable together.
Accounts and provider identifier
Under Generali, the provider identifier is read-only. You do not need to enter it. Hotspot write permission is required to save other settings.
The same mobile number can be registered with different ISPs, using separate accounts and passwords. Guests select the international calling code and enter their mobile number and password; they can also enter the full number starting with +. Voucher users enter the code they received. No additional identifier is required.
The dashboard shows numbers, codes and profile names without the provider suffix. Accounts registered through previous portals retain their credentials. If a historical account is not recognized, contact support before changing it.
The new portal installed on the MikroTik provides login with existing accounts and vouchers. For mobile number and password portals, password recovery is available even when registration is disabled, after SMS service setup. Save and publish changes to update online portals. Online portals show the current publication. Older local portals must first be connected to the online service.
Accounts and vouchers
Under Account list → New Hotspot access, choose Username and password or Named voucher. Enter the account holder and profile; email, mobile number and city complete the record. A voucher generates a code in the va-12345678 format when saved and displays it in the account page. For credentials, enter a password or generate a six-digit password.
No expiry sets no end date; Duration in days accepts 1 to 3650 days. New manually created accesses start their duration when saved. Editing keeps the displayed start date; unused batch vouchers keep their first-use start. Profile limits still apply. Leave the new password empty to keep the current password.
An existing account retains its access type. You can change its holder, contacts, profile, validity, status and notes. Groups still generate voucher batches and PDF printouts. Verify login and expiry with a test account before distributing access. Creation and editing require Hotspot write permission.
RADIUS disconnect requests
Hotspot configuration enables incoming RADIUS disconnect requests from the designated service server. Existing gateways receive this setting with a new full configuration update from ISP Billing. Updating only portal pages or the Walled Garden does not apply it.
Wait for confirmation that configuration has been applied. Incoming disconnect requests and session counts are separate checks: this setting does not automatically close old session records on the server.
Hotspot dashboard: network and guests
Open DashBoard Radius from the Radius HotSpot menu. The page shows managed gateways, connected gateways, observed guest connections and gateways needing attention. The chart separates connected, unreachable, pending and revoked gateways; bars show up to five sites with recent readings, ranked by connection count, including sites with zero guests. Sessioni RADIUS opens records without a closing confirmation, whose count may differ from guests observed on gateways. The list shows the last update and marks records Da verificare after 15 minutes without recent data; it does not automatically close sessions.
Each gateway shows site, model, last contact, guest count and Hotspot status. Collegato means recent communication; Hotspot configurato means confirmed configuration, which alone does not verify guest Internet access. Search and filter sites or issues, then choose Apri to take action.
Data refreshes every minute while the page is visible, or with Aggiorna. Readings are considered recent for four minutes. A dash means no reliable count is available, rather than zero guests. The total states how many gateways have recent readings and counts connections, not unique people. Revoked gateways do not contribute to online guests. If refresh fails, a warning retains the previous data and its timestamp.
Viewing requires module access and read permission. The overview covers up to 1,000 gateways; a notice links to the complete list when the limit is reached.
Daily use and customer services
Dashboards summarize access. Consult Utenti Online, authentication requests and session history to investigate errors, times and usage. Check the date and time of the information before drawing conclusions.
Hotspot accounts can be linked to customer services. The Customer Area and service details show permitted information; unbilled services remain in their dedicated checks. The new gateway record does not automatically change billing or account status.
Operating practices
Use dedicated devices and recognizable site names. Limit operator access, protect installation scripts and keep a private copy of device configuration. Try changes on a lab gateway before using them at customer sites. Do not deliver a hotspot based solely on its connected status.
Checklist
- Check service availability and permissions
- Create a gateway with a name and site
- Prepare MikroTik Internet access and clock
- Run the script before it expires
- Check last contact and configuration confirmation
- Have the technician complete guest networking, authentication and portal setup
- Test login, browsing, limits and logout
- Distribute only verified credentials and vouchers
- Confirm any revocation is complete