Running a WiFi hotspot or internet service business in Uganda without proper subscriber billing is one of the fastest ways to lose revenue. Manual voucher selling, untracked usage, and unpaid subscribers are common pain points for ISPs and hotspot operators across Kampala, Entebbe, Jinja, and upcountry. In this guide, we walk through the complete setup of a MikroTik RouterOS hotspot — from basic captive portal configuration to subscriber billing automation — using genuine MikroTik hardware available at NetEdge Supplies Uganda.
Whether you're deploying at a hotel, campus, apartment block, or running a full ISP operation, this guide covers everything you need to get your MikroTik hotspot generating reliable, trackable revenue. And once your hotspot is live, connect it to Xenfi ISP Billing to automate invoicing, manage subscribers, and control bandwidth — all from one platform.
What Hardware Do You Need?
Before configuring RouterOS, you need the right MikroTik hardware. Here are the recommended options available at NetEdge Supplies Uganda, depending on your deployment scale:
- Small hotspot (café, shop, guesthouse — up to 20 users): MikroTik hAP lite RB941-2nD — affordable RouterOS L4 router with 4 ports and USB modem failover
- Medium hotspot or ISP CPE (20–50 users): MikroTik hAP RouterBOARD with PoE — 5-port 10/100 with PoE in/out, ideal for premises where you also power an outdoor AP
- ISP distribution point (50–200 subscribers): MikroTik RB951Ui-2HnD RouterBOARD — 128MB RAM, USB modem failover, PoE out — the most popular ISP CPE in Uganda
- Core/edge router for multi-CPE ISP networks: MikroTik hEX RB750Gr3 5-Port Gigabit Router — wired-only Gigabit edge router for upstream routing and PPPoE termination
All of the above run RouterOS Level 4 which includes the full Hotspot server. For PoE-powered remote deployments, pair with the MikroTik RBGPOE Gigabit PoE Injector to power the router over Cat6 cable from your distribution point. For the PPPoE configuration that complements hotspot billing, see: How to Set Up PPPoE Subscriber Management on MikroTik with Xenfi Billing in East Africa.
Step 1 — Initial Router Access
Connect your PC to one of the LAN ports of the MikroTik router using a Cat6 Ethernet patch cable. Open Winbox (download free from mikrotik.com) and connect using the router's MAC address — no IP address needed for a fresh device. Default login: username admin, no password. Click OK to log in.
Once inside Winbox, immediately set a strong password via System > Password before proceeding.
Step 2 — Configure the WAN Interface
- Go to IP > DHCP Client → click Add (+)
- Set Interface: ether1 → click OK
- If your ISP provides a static IP, go to IP > Addresses instead and enter your WAN IP, subnet mask, and gateway manually
- For 4G failover via USB modem (on hAP lite or RB951Ui-2HnD), go to Interfaces > LTE and configure the APN for your Ugandan operator (MTN, Airtel, Lyca)
Step 3 — Create a Local LAN Bridge
- Go to Bridge > Bridge → click Add (+) → name it
bridge-local→ click OK - Go to Bridge > Ports → add ether2, ether3, ether4 (and ether5 if applicable) and wlan1 to
bridge-local - Go to IP > Addresses → assign
192.168.88.1/24tobridge-local
Step 4 — Set Up the WiFi Access Point
- Go to Wireless > Interfaces → double-click wlan1
- Set Mode: ap bridge
- Set Band: 2GHz-b/g/n
- Set SSID: your hotspot name (e.g., "NetEdge WiFi")
- Under the Security tab — for a public hotspot, leave security as none
- Click Enable → OK
Step 5 — Configure IP Pool and DHCP Server
- Go to IP > Pool → click Add (+) → name:
hotspot-pool→ Addresses:192.168.88.10-192.168.88.254→ click OK - Go to IP > DHCP Server → click Add (+) → Interface:
bridge-local→ Address Pool:hotspot-pool→ click OK - Go to IP > DNS → set Servers:
8.8.8.8and8.8.4.4→ tick Allow Remote Requests → click OK
Step 6 — Set Up NAT (Internet Sharing)
- Go to IP > Firewall > NAT → click Add (+)
- Chain: srcnat → Out Interface: ether1
- Action tab → Action: masquerade → click OK
Step 7 — Enable the RouterOS Hotspot Server
- Go to IP > Hotspot → click Hotspot Setup
- Hotspot Interface: bridge-local → Next
- Local address:
192.168.88.1/24→ Next - Address Pool:
hotspot-pool→ Next - SSL Certificate: none → Next
- SMTP Server: leave blank → Next
- DNS Name:
hotspot.local→ Next - Create a default admin user when prompted → Finish
Step 8 — Create Subscriber Profiles (Bandwidth Plans)
- Go to IP > Hotspot > User Profiles → click Add (+)
- Name: e.g.,
1Mbps-Daily - Rate Limit:
1M/1M - Session Timeout:
1d - Shared Users:
1 - Click OK → repeat for other plans (e.g.,
2Mbps-Weekly,5Mbps-Monthly)
Step 9 — Create Hotspot Users (Vouchers)
- Go to IP > Hotspot > Users → click Add (+)
- Name: the username (e.g.,
WIFI2024A) - Password: the voucher password
- Profile: select the bandwidth plan
- Click OK
Step 10 — Automate Billing with Xenfi ISP Billing
Manual voucher management works for small hotspots but breaks down fast as your subscriber base grows. Xenfi ISP Billing integrates directly with your MikroTik RouterOS installation to:
- Automatically generate and deliver subscriber credentials
- Process monthly and daily billing renewals without manual intervention
- Monitor live bandwidth usage per subscriber
- Suspend and reactivate subscribers automatically on payment status
- Generate invoices and payment records for your business
- Manage multiple MikroTik routers across multiple hotspot sites from one dashboard
Visit Xenfi ISP Billing to transform your hotspot from a manual operation into a scalable, automated internet business.
Recommended Cabling for Your Hotspot Installation
- Vention Cat6 Multi-Colour Patch Cables — colour-code your patch panel connections for clean, organised hotspot rack management
- Cat6 Flat Ethernet Cable (White) — route LAN drops discreetly along walls and under carpets in hotel rooms and offices
- Dutevolns Cat6 Indoor/Outdoor UTP 24AWG — for outdoor-to-indoor ISP drop cables at subscriber premises
Frequently Asked Questions (FAQ)
Which MikroTik router is best for a hotspot business in Uganda?
The best MikroTik router depends on your scale. For small cafés and guesthouses, the hAP lite RB941-2nD is the most affordable option. For medium deployments with PoE requirements, the hAP with PoE is ideal. For ISP CPE with USB modem failover, the RB951Ui-2HnD is the most widely deployed router among Ugandan ISPs. All available at NetEdge Supplies with delivery across Uganda.
Can I limit bandwidth per user on a MikroTik hotspot?
Yes. RouterOS Hotspot User Profiles let you set per-user speed limits (e.g., 2M/2M). Create multiple profiles for different tiers. RouterOS enforces the limit automatically. For automated plan management, integrate with Xenfi ISP Billing.
How do I prevent users from sharing their hotspot login credentials?
Set Shared Users to 1 in the Hotspot User Profile. This limits each credential to one simultaneous session — essential for revenue protection on pay-per-device hotspots.
What is the difference between RouterOS Hotspot and a simple WiFi password?
A simple WiFi password gives all devices full access with no individual control. RouterOS Hotspot uses a captive portal — every device is redirected to a login page first. This enables per-user bandwidth limits, session quotas, voucher access, usage tracking, and billing integration. The professional standard for any commercial WiFi operation in Uganda.
Can the MikroTik hotspot work with a 4G LTE backup connection in Uganda?
Yes. The hAP lite RB941-2nD and RB951Ui-2HnD have USB ports supporting 3G/4G modems from MTN, Airtel, and other Ugandan operators. RouterOS can auto-failover to 4G when the primary link drops and fail back when it recovers — keeping subscribers online during outages.
How do I scale my MikroTik hotspot to multiple locations in Uganda?
Use RADIUS authentication to centralise subscriber management across multiple MikroTik routers at different sites. Xenfi ISP Billing provides the centralised subscriber management, billing, and RADIUS integration needed to scale from one site to dozens across Uganda.