How to Set Up a MikroTik Hotspot with Subscriber Billing in Uganda

How to set up a MikroTik RouterOS hotspot with subscriber billing in Uganda — captive portal login on mobile, voucher codes, bandwidth plans, and automated billing dashboard for ISP and WiFi hotspot operators

Running a WiFi hotspot or internet service business in Uganda without proper subscriber billing is one of the fastest ways to lose revenue. Manual voucher selling, untracked usage, and unpaid subscribers are common pain points for ISPs and hotspot operators across Kampala, Entebbe, Jinja, and upcountry. In this guide, we walk through the complete setup of a MikroTik RouterOS hotspot — from basic captive portal configuration to subscriber billing automation — using genuine MikroTik hardware available at NetEdge Supplies Uganda.

Whether you're deploying at a hotel, campus, apartment block, or running a full ISP operation, this guide covers everything you need to get your MikroTik hotspot generating reliable, trackable revenue. And once your hotspot is live, connect it to Xenfi ISP Billing to automate invoicing, manage subscribers, and control bandwidth — all from one platform.

What Hardware Do You Need?

Before configuring RouterOS, you need the right MikroTik hardware. Here are the recommended options available at NetEdge Supplies Uganda, depending on your deployment scale:

All of the above run RouterOS Level 4 which includes the full Hotspot server. For PoE-powered remote deployments, pair with the MikroTik RBGPOE Gigabit PoE Injector to power the router over Cat6 cable from your distribution point. For the PPPoE configuration that complements hotspot billing, see: How to Set Up PPPoE Subscriber Management on MikroTik with Xenfi Billing in East Africa.

Step 1 — Initial Router Access

Connect your PC to one of the LAN ports of the MikroTik router using a Cat6 Ethernet patch cable. Open Winbox (download free from mikrotik.com) and connect using the router's MAC address — no IP address needed for a fresh device. Default login: username admin, no password. Click OK to log in.

Once inside Winbox, immediately set a strong password via System > Password before proceeding.

Step 2 — Configure the WAN Interface

  1. Go to IP > DHCP Client → click Add (+)
  2. Set Interface: ether1 → click OK
  3. If your ISP provides a static IP, go to IP > Addresses instead and enter your WAN IP, subnet mask, and gateway manually
  4. For 4G failover via USB modem (on hAP lite or RB951Ui-2HnD), go to Interfaces > LTE and configure the APN for your Ugandan operator (MTN, Airtel, Lyca)

Step 3 — Create a Local LAN Bridge

  1. Go to Bridge > Bridge → click Add (+) → name it bridge-local → click OK
  2. Go to Bridge > Ports → add ether2, ether3, ether4 (and ether5 if applicable) and wlan1 to bridge-local
  3. Go to IP > Addresses → assign 192.168.88.1/24 to bridge-local

Step 4 — Set Up the WiFi Access Point

  1. Go to Wireless > Interfaces → double-click wlan1
  2. Set Mode: ap bridge
  3. Set Band: 2GHz-b/g/n
  4. Set SSID: your hotspot name (e.g., "NetEdge WiFi")
  5. Under the Security tab — for a public hotspot, leave security as none
  6. Click Enable → OK

Step 5 — Configure IP Pool and DHCP Server

  1. Go to IP > Pool → click Add (+) → name: hotspot-pool → Addresses: 192.168.88.10-192.168.88.254 → click OK
  2. Go to IP > DHCP Server → click Add (+) → Interface: bridge-local → Address Pool: hotspot-pool → click OK
  3. Go to IP > DNS → set Servers: 8.8.8.8 and 8.8.4.4 → tick Allow Remote Requests → click OK

Step 6 — Set Up NAT (Internet Sharing)

  1. Go to IP > Firewall > NAT → click Add (+)
  2. Chain: srcnat → Out Interface: ether1
  3. Action tab → Action: masquerade → click OK

Step 7 — Enable the RouterOS Hotspot Server

  1. Go to IP > Hotspot → click Hotspot Setup
  2. Hotspot Interface: bridge-local → Next
  3. Local address: 192.168.88.1/24 → Next
  4. Address Pool: hotspot-pool → Next
  5. SSL Certificate: none → Next
  6. SMTP Server: leave blank → Next
  7. DNS Name: hotspot.local → Next
  8. Create a default admin user when prompted → Finish

Step 8 — Create Subscriber Profiles (Bandwidth Plans)

  1. Go to IP > Hotspot > User Profiles → click Add (+)
  2. Name: e.g., 1Mbps-Daily
  3. Rate Limit: 1M/1M
  4. Session Timeout: 1d
  5. Shared Users: 1
  6. Click OK → repeat for other plans (e.g., 2Mbps-Weekly, 5Mbps-Monthly)

Step 9 — Create Hotspot Users (Vouchers)

  1. Go to IP > Hotspot > Users → click Add (+)
  2. Name: the username (e.g., WIFI2024A)
  3. Password: the voucher password
  4. Profile: select the bandwidth plan
  5. Click OK

Step 10 — Automate Billing with Xenfi ISP Billing

Manual voucher management works for small hotspots but breaks down fast as your subscriber base grows. Xenfi ISP Billing integrates directly with your MikroTik RouterOS installation to:

  • Automatically generate and deliver subscriber credentials
  • Process monthly and daily billing renewals without manual intervention
  • Monitor live bandwidth usage per subscriber
  • Suspend and reactivate subscribers automatically on payment status
  • Generate invoices and payment records for your business
  • Manage multiple MikroTik routers across multiple hotspot sites from one dashboard

Visit Xenfi ISP Billing to transform your hotspot from a manual operation into a scalable, automated internet business.

Recommended Cabling for Your Hotspot Installation

Frequently Asked Questions (FAQ)

Which MikroTik router is best for a hotspot business in Uganda?

The best MikroTik router depends on your scale. For small cafés and guesthouses, the hAP lite RB941-2nD is the most affordable option. For medium deployments with PoE requirements, the hAP with PoE is ideal. For ISP CPE with USB modem failover, the RB951Ui-2HnD is the most widely deployed router among Ugandan ISPs. All available at NetEdge Supplies with delivery across Uganda.

Can I limit bandwidth per user on a MikroTik hotspot?

Yes. RouterOS Hotspot User Profiles let you set per-user speed limits (e.g., 2M/2M). Create multiple profiles for different tiers. RouterOS enforces the limit automatically. For automated plan management, integrate with Xenfi ISP Billing.

How do I prevent users from sharing their hotspot login credentials?

Set Shared Users to 1 in the Hotspot User Profile. This limits each credential to one simultaneous session — essential for revenue protection on pay-per-device hotspots.

What is the difference between RouterOS Hotspot and a simple WiFi password?

A simple WiFi password gives all devices full access with no individual control. RouterOS Hotspot uses a captive portal — every device is redirected to a login page first. This enables per-user bandwidth limits, session quotas, voucher access, usage tracking, and billing integration. The professional standard for any commercial WiFi operation in Uganda.

Can the MikroTik hotspot work with a 4G LTE backup connection in Uganda?

Yes. The hAP lite RB941-2nD and RB951Ui-2HnD have USB ports supporting 3G/4G modems from MTN, Airtel, and other Ugandan operators. RouterOS can auto-failover to 4G when the primary link drops and fail back when it recovers — keeping subscribers online during outages.

How do I scale my MikroTik hotspot to multiple locations in Uganda?

Use RADIUS authentication to centralise subscriber management across multiple MikroTik routers at different sites. Xenfi ISP Billing provides the centralised subscriber management, billing, and RADIUS integration needed to scale from one site to dozens across Uganda.