Integrate Wibizpro with Your Network

1. Create a site in your Wibizpro dashboard.
2. Open the site page — the two values you need are shown there:

• Portal URL : https://wibizpro.online/portal/?token=dt_your-site-token
  That is a placeholder — the URL is not real until you have created a site. Yours will carry its own token.
  See what the portal looks like →
• RADIUS secret : your site's rad_xxx

In RouterOS, open New Terminal. Do the blocks below in order — each one depends on the previous.

2.1 — Unlock device-mode (physical, once per router)

Recent MikroTik routers ship with the hotspot disabled at a level below user permissions. No password and no API can unlock it.

Then, within 5 minutes: unplug the power, wait 30 seconds, plug it back in.

Verify:

2.2 — Separate the interfaces (hotspot on ethernet only)

The hotspot applies to the interface you give it. On a factory router, the bridge also carries the built-in WiFi — so the hotspot would cover it too. Move the Ethernet ports to their own bridge:

2.3 — RADIUS

Replace rad_xxx with your site's secret. The hotspot lives on the router — never on the access points.

2.4 — Hotspot profile and hotspot

2.5 — The captive login pages

Run these after the hotspot exists — it is what creates the files. Both are required: login.html is the page the client opens, redirect.html is the one the operating system shows automatically when it detects a captive portal.

If the command refuses to run — some firmware versions object to the nested quotes — edit both files by hand: Winbox → Files → hotspot folder → open the file → replace its whole contents.

2.6 — Verify

The expected log line for a client without a pass is: login failed: No active pass — buy one at wibizpro.online. If you see RADIUS server is not responding instead, the server is not returning the Message-Authenticator — contact us rather than changing any router setting.

The WireGuard tunnel and the CoA operations are covered in the full runbook: docs/mikrotik-site-setup.md

Unpaid clients are blocked until they authenticate — including the Wibizpro page itself. Allow it in the walled garden:

Do not allow *captive.apple.com or 17.0.0.0/8: macOS and iOS then believe the network already has Internet and never open the captive assistant. The portal and server rules above are enough. Add only your payment providers' domains if needed.

Any brand works — the access points are transparent bridges. On each one:

1. Set it to Access Point / bridge mode, and turn OFF its DHCP, its NAT and its own captive portal.
2. Give it a static management IP in the router's LAN.
3. Set the access point's own DNS to the MikroTik's LAN IP — not a public resolver.
4. Use the same SSID and the same security type on every access point.

Once configured, here is what your customers experience:

1. User connects to your guest SSID.
2. Browser automatically opens to the Wibizpro plan-selection page with your pricing.
3. They pick a plan and tap Pay & Connect.
4. They pay in cash or with MonCash/NatCash — you approve each payment from your dashboard.
5. Wibizpro grants access through RADIUS for the purchased duration.
6. They see a confirmation page and can browse the internet.

Expired clients are automatically disconnected at the exact end of their pass.

You can monetize several networks differently — all from a single Wibizpro dashboard:

1. In Wibizpro, create a site for each SSID you want to charge for. Each gets its own token, secret and pricing.
2. In RouterOS, create a hotspot and a RADIUS entry for each — each with its site's secret.
3. On your access points, broadcast the SSIDs you need.

Example:

The SSIDs can share the same hardware — no extra equipment needed. Revenue from each is tracked separately in your Wibizpro dashboard.

Standalone TP-Link Omada access points are still supported. If you already have one running, this is its configuration — it does not change.

A. Open the Portal Tab

1. Log into your EAP's web page (or your Omada Controller).
2. Go to the Wireless section.
3. Select the Portal tab.

B. Fill In the Wibizpro Parameters

On the Wireless → Portal tab of your EAP (e.g. EAP110), fill in exactly these values:

• SSID : your guest SSID (e.g. Wibizpro)
• Authentication Type : External RADIUS Server
• RADIUS Server IP : 144.202.47.181
• RADIUS Port : 1812
• RADIUS Password : your site's rad_xxx secret (Wibizpro dashboard → site page)
• NAS ID : (empty)
• RADIUS Accounting : Enable ✓
• Accounting Server IP : 144.202.47.181
• Accounting Server Port : 1813
• Accounting Server Password : same as RADIUS Password
• Interim Update : Enable ✓ — Interim Interval : 60 s (live usage stats in your Wibizpro dashboard)
• Authentication Timeout : Custom → 0 D / 0 H / 5 M (the EAP re-checks every client every 5 minutes — expired passes are cut quickly)
• Redirect : Enable ✓
• Redirect URL : https://wibizpro.online/success/ (the page shown after successful authentication)
• Portal Customization : External Web Portal
• External Web Portal URL : https://wibizpro.online/portal/?token=dt_your-site-token (the plan picker shown before payment)

C. Allow Wibizpro in the Free Authentication Policy

In the Wireless → Portal tab, open the Free Authentication Policy and add:

• 144.202.47.181 (port 80) — required
• 144.202.47.181 (port 443) — required
• 8.8.8.8 (DNS, port 53) — required

Each entry needs a name — e.g. Wibizpro-80, Wibizpro-443, DNS.

Enter each address in the Destination field, and its port in Destination Port — never in Source. The policy is a list of places clients are ALLOWED to reach before paying, so the address belongs on the destination side.

Better still: keep the access point and put a MikroTik router in front of it as the gateway. Your EAP110 keeps working — set it to bridge mode, turn off its captive portal and its RADIUS, and follow the five steps above instead.

Wibizpro hosts the captive portal for you. We handle:

• The plan-selection page with your pricing and durations
• Payment approval — cash, MonCash and NatCash with transaction ID
• Client authorization — once payment clears, we grant internet access through RADIUS
• Session expiry — expired clients are automatically disconnected

• A MikroTik router running RouterOS 7 — it becomes the gateway
• One or more WiFi access points, any brand, in bridge mode
• A guest SSID you want to monetize
• Your router must reach Wibizpro over HTTPS (port 443 outbound) and RADIUS (UDP 1812/1813)
• A Wibizpro account — sign up here

1. Create an account and log into your dashboard.
2. Go to Sites → + New Site and give it a name.
3. Copy the portal URL and the RADIUS secret shown on the site page.
4. Use both in your router's configuration (steps 1 and 2 above).
5. Set your plans and pricing from the dashboard — pick durations, prices, and currency.

Your Wibizpro dashboard gives you full visibility:

• Active sessions — see who's online right now
• Revenue tracking — daily, weekly, monthly breakdowns per site
• Block/unblock devices — manually kick off problematic clients
• Plan management — change pricing or add/remove durations anytime
• Session history — every connection, payment, and block event is logged