Differences

This shows you the differences between two versions of the page.

--- technical:mikrotik-hotspot-advanced [2025/05/14 07:35] – system
+++ technical:mikrotik-hotspot-advanced [2025/05/14 08:09] (current) – system
@@ Line 20: / Line 20: @@
    * This allows you to
      * Group Mikrotik devices together and serve one common login page to them all.
-     * Include company info and slideshows with the login page which are determined by the device from which a user connects.
+     * Serve a modern login page (Bootstrap based) that makes use of AJAX techniques to connect and display session details.
-     * Have a modern login page that makes use of AJAX techniques to connect and display session details.
    * To enjoy this enhancement you will need to:
      * Ensure the Hotspot configuration on the Mikrotik includes PAP support.
      * **Replace some static hotspot login pages located and served from the Mikrotik router.**
+     * Enable HTTPS (Certificates required) on the Hotspot.
 === Include PAP support on Hotspot ===
@@ Line 122: / Line 122: @@
 === Enable HTTPs support on Mikrotik ===
   * To Enable HTTPS support on the Mikrotik you need to configure the following:
-    * Install a valid SSL certificate onto the Mikrotik.
+    * We first upload the cert and key files.
-    * Specify a DNS name in the Hotspot setup that matches the certificate
+<panel type="primary">
-    * Enable Login By option HTTPS.
+{{:technical:mikrotik:upload_cert_and_key.png?nolink|}}
+</panel>
+    * Then we can import the SSL certificate onto the Mikrotik. (We select the uploaded cert and key files we copied over)
+<panel type="primary">
+{{:technical:mikrotik:cert_and_key.png?nolink|}}
+</panel>
+    * Specify a DNS name in the Hotspot setup that matches the certificate. Here we used uam.mesh-manager.com
+<panel type="primary">
+{{:technical:mikrotik:dns_name.png?nolink|}}
+</panel>
+    * Enable Login By option HTTPS (Deselect HTTP PAP) and also select the SSL Certificate you imported along with HTTPS Redirect.
+<panel type="primary">
+{{:technical:mikrotik:ssl_cert.png?nolink|}}
+</panel>
 -----
@@ Line 131: / Line 144: @@
   * You need to open the Mikrotik to serve the central login page from a server that is usually outside your network.
   * Connect to the web interface of the Mikrotik router.
-  * Select IP → Hotspot
+  * Select **IP → Hotspot**
-  * Select the Walled garden IP List sub-tab to add an entry.
+  * Select the **Walled garden IP List** sub-tab to add an entry.
   * The destination IP Address will be the IP Address of the RADIUSdesk server.
   * The screenshot below assume the RADIUSdesk server has an IP Address of 178.32.59.137
+<panel type="primary">
+{{:technical:mikrotik:mikrotik_walled_garden_ip_list.png?nolink|}}
+</panel>
 -----
@@ Line 143: / Line 160: @@
   * Try to connect to the Mikrotik hotspot.
   * You should be redirected to the server serving the Central login pages.
-<panel type="primary">
-{{:technical:mikrotik:mt_hs_identity.png?nolink|}}
-</panel>