How to Set Up a PPPoE Hotspot Network Using MikroTik RouterOS in Uganda

How to Set Up a PPPoE Hotspot Network Using MikroTik RouterOS in Uganda

MikroTik RouterOS is the backbone of thousands of ISP networks across Uganda and East Africa. Its built-in PPPoE server and hotspot gateway make it possible to run a fully-featured subscriber network — complete with per-user bandwidth control, authentication, and automated billing — on affordable hardware that costs a fraction of enterprise alternatives.

In this guide, we walk through exactly how to set up a PPPoE hotspot network using MikroTik RouterOS in Uganda: from choosing the right hardware at NetEdge Supplies, to configuring your PPPoE server, subscriber profiles, and integrating with our ISP Billing & Subscriber Management Platform for automated invoicing and real-time subscriber control.

What You Need Before You Start

Hardware Requirements

You'll need a MikroTik router capable of running RouterOS with sufficient CPU and RAM to handle your subscriber load. For small-to-medium ISPs in Uganda, we recommend:

• MikroTik hEX RB750Gr3 — ideal for small ISPs up to ~200 PPPoE subscribers. 5 Gigabit ports, 880MHz CPU, 256MB RAM, full RouterOS.
• MikroTik hEX S RB760iGS — adds SFP fibre port and PoE output for connecting outdoor CPEs directly. Best for ISPs with fibre uplinks.
• MikroTik hAP RouterBOARD — adds dual-band Wi-Fi, perfect for small hotspot deployments where the router also serves as the access point.

For your switching layer — connecting your MikroTik PPPoE server to subscriber CPEs — pair it with the TP-Link TL-SG1024D 24-Port Gigabit Switch for a cost-effective, non-blocking access layer.

Software Requirements

• MikroTik Winbox (free download from mikrotik.com) or web browser access to WebFig
• RouterOS v6.49+ or v7.x (pre-installed on all MikroTik hardware from NetEdge Supplies)
• Our ISP Billing System for automated subscriber management (optional but strongly recommended)

Step 1: Initial MikroTik Router Setup

Connect your PC to the MikroTik router via ethernet cable (any LAN port). Open Winbox, scan for the router MAC address, and connect with default credentials: username admin, no password.

1. Go to System > Identity and give your router a name (e.g. NetEdge-PPPoE-Core)
2. Go to System > Password and set a strong admin password immediately
3. Go to IP > Addresses and assign your WAN IP address to ether1 (your uplink port)
4. Go to IP > Routes and add a default route pointing to your ISP gateway
5. Go to IP > DNS and set DNS servers (e.g. 8.8.8.8 and 1.1.1.1)

Test internet connectivity by opening a terminal (New Terminal in Winbox) and running: ping 8.8.8.8

Step 2: Configure the PPPoE Server

The PPPoE server is what authenticates subscribers when they connect. Each subscriber gets a unique username and password, and RouterOS enforces their speed plan automatically.

1. Go to PPP > PPPoE Servers and click + to add a new server
2. Set Interface to the port your subscribers connect through (e.g. ether2 or a bridge of multiple LAN ports)
3. Set Service Name (e.g. NetEdge-PPPoE)
4. Enable One Session Per Host to prevent credential sharing
5. Set Default Profile to your base profile (we'll create profiles in Step 3)
6. Click OK to activate the PPPoE server

Your MikroTik is now listening for PPPoE connections on that interface. Subscriber CPEs (e.g. TP-Link routers configured in PPPoE WAN mode) will connect and authenticate against this server.

Step 3: Create Subscriber Speed Profiles

Profiles define the speed limits for each subscription package. Create one profile per package you offer (e.g. 5Mbps, 10Mbps, 20Mbps).

1. Go to PPP > Profiles and click +
2. Name the profile (e.g. 10Mbps-Package)
3. Set Rate Limit in the format: 10M/10M (upload/download). For asymmetric: 5M/10M
4. Set Local Address (the IP your router uses as gateway for this subscriber session)
5. Set Remote Address to your subscriber IP pool (created under IP > Pool)
6. Click OK and repeat for each package tier

This is where integration with our ISP Billing System becomes powerful — the billing platform automatically assigns the correct speed profile to each subscriber when they pay, and downgrades or disconnects them when their subscription expires.

Step 4: Add Subscriber Accounts

Each subscriber needs a PPP secret (username and password) linked to their speed profile.

1. Go to PPP > Secrets and click +
2. Enter the subscriber's Name (username) and Password
3. Set Service to pppoe
4. Set Profile to the appropriate speed package (e.g. 10Mbps-Package)
5. Click OK

With our ISP Billing & Subscriber Management Platform, subscriber accounts are created, modified, and deleted automatically via the MikroTik API — eliminating manual Winbox entry entirely as your subscriber base grows.

Step 5: Configure NAT for Internet Access

1. Go to IP > Firewall > NAT and click +
2. Set Chain to srcnat
3. Set Out. Interface to ether1 (your WAN port)
4. Go to the Action tab, set Action to masquerade
5. Click OK

Step 6: Set Up Queue Tree for Bandwidth Management

1. Go to Queues > Simple Queues for basic per-subscriber limiting (already handled by PPP profiles)
2. For advanced traffic shaping, go to Queues > Queue Tree and create a parent queue on ether1 limited to your total uplink bandwidth
3. Add child queues per package tier with appropriate priorities

Step 7: Integrate with ISP Billing System

Our ISP Billing & Subscriber Management Platform connects directly to your MikroTik router via the MikroTik API and handles:

• Automated subscriber provisioning — new subscribers are added to RouterOS PPP Secrets automatically
• Invoicing & payment tracking — integrates with MTN and Airtel mobile money for Uganda payments
• Automatic speed plan changes — upgrades or downgrades subscriber profiles instantly
• Automatic disconnection — suspends PPPoE access when subscription lapses, reconnects on payment
• Real-time dashboard — monitor all active sessions, data usage, and revenue
• Subscriber self-service portal — subscribers can check usage, pay bills, and manage accounts online

Step 8: Connect Subscriber CPEs

• TP-Link TL-WR840N — budget 300Mbps CPE for basic residential subscribers
• TP-Link TL-WR845N — 3-antenna 300Mbps CPE for improved indoor coverage
• TP-Link Archer C9 AC1900 — dual-band CPE for business subscribers
• MikroTik hAP lite — for technically-sophisticated subscribers or ISPs wanting full RouterOS at the CPE

Troubleshooting Common PPPoE Issues in Uganda

• Subscribers can't connect — check PPPoE server is active on the correct interface, and subscriber IP pool is not exhausted
• Authentication failures — verify username/password in PPP Secrets matches CPE configuration exactly (case-sensitive)
• Slow speeds despite correct profile — check WAN uplink isn't congested; review Queue Tree for bottlenecks
• Sessions dropping — check for power fluctuations (use a UPS); verify keepalive settings in PPP profile
• Billing not syncing — confirm MikroTik API is enabled under IP > Services and firewall is not blocking port 8728

Frequently Asked Questions

Which MikroTik router is best for PPPoE in Uganda?

The MikroTik hEX RB750Gr3 for most ISPs; the hEX S RB760iGS for fibre uplinks. Both at NetEdge Supplies.

How many PPPoE subscribers can a MikroTik hEX handle?

Comfortably 100–200 simultaneous sessions. Scale up to the MikroTik CCR series for 500+ subscribers.

Can I automate PPPoE subscriber management?

Yes — our ISP Billing System integrates via MikroTik API for fully automated provisioning, billing, and disconnection.

What CPE routers work with MikroTik PPPoE?

Any PPPoE WAN-capable router. Popular choices: TP-Link TL-WR840N, TL-WR845N, and Archer C9.

How do I enable the MikroTik API for billing integration?

Go to IP > Services in Winbox, enable API on port 8728, allow firewall access, then enter credentials into our ISP Billing Platform.

Where can I buy MikroTik routers for PPPoE in Uganda?

At NetEdge Supplies — delivery nationwide across Uganda including Kampala, Entebbe, Jinja, Mbarara, and Gulu.