General Information

13. Add hotspot chain:
/ip firewall add name=hotspot comment="account authorized hotspot clients"
14. Pass all through-going traffic to the hotspot chain:
/ip firewall rule forward add action=jump jump-target=hotspot \
comment="account traffic for authorized hotspot clients"
Note that in order to use SSL authentication, you should install an SSL certificate. This topic is not
covered by this manual section. Please see the respective manual section on how to install
certificates in MikroTik RouterOS
HotSpot Step-by-Step User Guide for enabled-address Method
Description
Let us consider following example HotSpot setup:
There are clients at prism1 interface, which are able to use Internet already. You want all these
clients to authenticate before they are able to use Internet.
For hotspot client accounting, hotspot will add dynamic firewall rules in firewall hotspot chain.
This chain has to be created manually. And all network packets (to/from hotspot clients) have to
pass this chain.
Example
1. Setup hotspot service to run on port 80 (www service has to be assigned another port, e.g.,
8081):
/ip service set www port=8081
/ip service set hotspot port=80
Page 332 of 568
Copyright 1999-2005, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.