/m PHPNuxBill Installation & Configuration Guide Prepare Server Install MySQL, PHP and Apache2 sudo apt update && sudo apt upgrade -y sudo apt install -y apache2 sudo apt install -y mariadb-server mariadb-client sudo apt install -y php php-mysqli php-pdo php-gd php-curl php-mysql Download latest from, unzip and transfer to server: https://github.com/hotspotbilling/phpnuxbill/archive/refs/heads/master.zip Or directly on server: […]
MikroTik Hotspot with RADIUS and Custom Portal
📌 Objective Create a wireless hotspot network where users can sign up or log in via a custom splash page hosted on an external Linux web server, which integrates with a FreeRADIUS server for authentication. 🔧 1. Infrastructure Overview Devices and Services: Component Role IP Address MikroTik Router Hotspot gateway and CAPsMAN controller WAN 10.2.0.6
MikroTik Hotspot with RADIUS and Custom Portal Read More »
MikroTik 802.1x EAP Wi-Fi Authentication using freeRADIUS
This guide walks you through creating certificates on a MikroTik router, configuring FreeRADIUS with a valid SAN, and preparing Android clients for EAP-TLS authentication using radius.mikrotikmasters.com as the domain. ✅ Step 1: Generate Certificates on MikroTik 1. Create a Certificate Authority (CA) /certificateadd name=cert-ca common-name=MyRootCA key-usage=key-cert-sign,crl-sign/certificate sign cert-ca ca-crl-host=10.200.21.33 2. Create Server Certificate with SAN
MikroTik 802.1x EAP Wi-Fi Authentication using freeRADIUS Read More »
PCC load-balanced setup with Netwatch monitoring
Part 1: Netwatch Monitoring 🔧 Objective To monitor the health of 3 WAN interfaces (ISP1, ISP2, ISP3) using Netwatch, dynamically managing routing rules and default routes based on link status. This ensures that the PCC load balancing setup only uses active upstreams. 🧱 Step 1: Rename Interfaces 🌐 Step 2: Configure PPPoE on ISP3 🧭
PCC load-balanced setup with Netwatch monitoring Read More »
MikroTik OpenVPN (OVPN) Server and Windows client
Create a dedicated VPN Bridge Assign an IP and VPN Pool IP > Address IP > Pool Generate Certificates CA Cert Server Certificate Sign the Certificate Sign the CA first Sign the Client using the CA Sign the Server using the CA Set the Server Certificate to Trusted Eport the Certificates Export The CA Export
MikroTik OpenVPN (OVPN) Server and Windows client Read More »
MikroTik CAPsMAN with VLANs: Full Setup Guide (hEX + 2x cAP ax)
This step-by-step guide walks you through configuring a MikroTik hEX router as a CAPsMAN controller, using two cAP ax access points connected through a VLAN-capable switch. Ideal for scalable, segmented Wi-Fi deployments. ✨ Network Topology Overview VLAN Plan: This segmentation helps improve security and organize traffic for different device types or user groups. ⚒️ Step
MikroTik CAPsMAN with VLANs: Full Setup Guide (hEX + 2x cAP ax) Read More »
Introduction to IPv6 on MikroTik
What is IPv6? IPv6 (Internet Protocol version 6) is the most recent version of the Internet Protocol (IP). It was developed to replace IPv4, which has been around since the early days of the internet. 🌍 Why do we need IPv6? IPv4 uses 32-bit addresses, which gives about 4.3 billion unique IP addresses. That seemed
Introduction to IPv6 on MikroTik Read More »
SSTP VPN Server on a MikroTik Router using Let’s Encrpyt SSL Cert
Setting Up an SSTP VPN Server on a MikroTik Router and Configuring Windows Clients This tutorial covers step-by-step instructions to set up an SSTP (Secure Socket Tunneling Protocol) VPN server on a MikroTik router, including generating the Let’s Encrypt SSL certificates, and configuring a Windows client. Step 1: Generate SSL Certificates Open a Terminal and
SSTP VPN Server on a MikroTik Router using Let’s Encrpyt SSL Cert Read More »
MikroTik to MikroTik WireGuard Tunnel
WireGuard Interface On both sides (in our case CHR-AU & CHR-UK) we create a Wireguard interface CHR-AU & CHR-UK Make a copy of the Public of each end (not the Private Key – this is only for the device itself and does not need to be shared). NB: Keys should not be publicly shared or
MikroTik to MikroTik WireGuard Tunnel Read More »