> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wiacom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding

> Configure MikroTik RouterBoard for Wiacom Portal — legacy mode

MikroTik is configured in legacy / manual mode using Winbox.

<Warning>
  RADIUS server addresses, portal URLs, and shared secrets are region-specific. Obtain the correct values for your deployment from the Wiacom admin panel or the Wiacom team before starting.
</Warning>

## Step 1 — Add the Device to Wiacom

1. Go to **Inventory → Routers → Add New Router**
2. Select **MikroTik / RouterBoard** from the vendor dropdown
3. Under **Network address**, enter the WAN MAC address in `AA:BB:CC:DD:EE:FF` format
4. Leave NASID empty
5. Assign a location and click **Save**

## Step 2 — Configure RADIUS

Open Winbox, click **Radius** on the left menu, then **+**:

| Field               | Value                    |
| ------------------- | ------------------------ |
| Service             | `hotspot`                |
| Address             | `<RADIUS_SERVER_IP>`     |
| Secret              | `<RADIUS_SHARED_SECRET>` |
| Authentication Port | `1812`                   |
| Accounting Port     | `1813`                   |

Click **OK**.

## Step 3 — Configure the Hotspot

Go to **IP → Hotspot → Hotspot Setup**:

| Field                    | Value                                                           |
| ------------------------ | --------------------------------------------------------------- |
| Hotspot Interface        | WLAN interface, bridge, or ethernet port guests connect through |
| Local Address of Network | Guest subnet (e.g. `192.168.50.0/24`)                           |
| Masquerade Network       | Yes                                                             |
| Address Pool             | e.g. `192.168.50.2–192.168.50.254`                              |
| Select Certificate       | None                                                            |
| DNS Servers              | Your preferred DNS servers                                      |
| DNS Name                 | Leave blank                                                     |

Click **OK**.

In the **Hotspot → Server** tab, double-click the new hotspot. **Rename it to the WAN MAC address** in `XX-XX-XX-XX-XX-XX` format (capitals, dashes). Find the WAN MAC at **Interfaces → ether1-gateway** (or your WAN interface).

## Step 4 — Configure the Server Profile

In **Server Profiles**, double-click the new profile:

**General tab:**

| Field           | Value                                            |
| --------------- | ------------------------------------------------ |
| Hotspot Address | Gateway IP of guest subnet (e.g. `192.168.50.1`) |

**Login tab:**

| Field             | Value    |
| ----------------- | -------- |
| HTTP PAP          | Ticked   |
| All other methods | Unticked |

**RADIUS tab:**

| Field          | Value               |
| -------------- | ------------------- |
| Use RADIUS     | Ticked              |
| MAC Format     | `XX-XX-XX-XX-XX-XX` |
| Accounting     | Ticked              |
| Interim Update | `00:02:00`          |

Click **OK**.

## Step 5 — Configure User Profiles

In **Hotspot → User Profiles**, double-click the **default** entry:

| Field             | Value                |
| ----------------- | -------------------- |
| Session Timeout   | `24:00:00`           |
| Idle Timeout      | `00:30:00`           |
| Keepalive Timeout | *(clear this field)* |

## Step 6 — Upload Portal Files

Wiacom provides two HTML files (`login.html` and `alogin.html`) for the MikroTik hotspot:

1. In Winbox go to **Files**
2. Locate the `hotspot` directory (under **HTML Directory** in the Hotspot Server Profile)
3. Drag and drop `login.html` and `alogin.html` into this directory

Contact the Wiacom team to receive the correct portal files for your region.

## Step 7 — Configure the Walled Garden

Open a **New Terminal** in Winbox and paste:

```
/ip hotspot walled-garden
add dst-host=*.wiacom.ai
add dst-host=*.facebook.com
add dst-host=*.fbcdn.net
add dst-host=connect.facebook.net
add dst-host=*.akamaihd.net
add dst-host=*.instagram.com
add dst-host=*.google.com
add dst-host=*.gstatic.com
add dst-host=*.googleapis.com
add dst-host=*.twitter.com
add dst-host=*.twimg.com
add dst-host=*.linkedin.com
add dst-host=*.licdn.net
add dst-host=fast.wistia.com
add dst-host=*.fastly.net
add dst-host=*.akamaized.net
add dst-host=*.amazonaws.com
add dst-host=*.zencdn.net
add dst-host=*.vimeocdn.com
```

Add any additional domains used in your portal customization.

## Optional — Automated Walled Garden Script

To keep the walled garden updated automatically, open a **New Terminal** and paste:

```
/system scheduler
add interval=1m name=checkSettingsCron on-event=checkSettings \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
    start-time=startup

/system script
Ask Wiacom of partner for content
```

## Troubleshooting

<AccordionGroup>
  <Accordion title="Guests not redirected to portal">
    Confirm the hotspot server name matches the WAN MAC in `XX-XX-XX-XX-XX-XX` format. Confirm HTTP PAP is the only enabled login method.
  </Accordion>

  <Accordion title="RADIUS authentication fails">
    Verify the RADIUS server address and shared secret match values provided by Wiacom for your region. Check UDP 1812 and 1813 are reachable.
  </Accordion>
</AccordionGroup>