Connect your equipment: your own router or a Hotspot Server

Your own router

Open the location’s Equipment tab and choose A router or controller you have. It works with MikroTik, UniFi, Omada, Meraki, Cisco and any other whose sign-in page can check with RADIUS.

1. Copy the connection details: server, ports, NAS-Identifier and RADIUS secret.
2. On a MikroTik already running Hotspot (RouterOS 7), paste the script shown into the router’s terminal. On other brands, enter the same details in the controller’s RADIUS settings. Set the sign-in page to PAP, and the equipment must send Message-Authenticator with its requests (most firmware since mid-2024 does), or they go unanswered.
3. Guests type their Wi-Fi code as the username on the router’s sign-in page.

More than one router running its own hotspot at the same place? Pick each router’s number on the Equipment tab (up to 16 per location) and set each one up with what is shown. Access points hanging off a router need nothing.

Hotspot Server

Choose Hotspot Server when you’d rather not set up a router. It gives guests their addresses, shows the sign-in page, and logs every connection, even while the Internet line is down.

1. Get a Linux machine (Debian 12 or Ubuntu 24.04, amd64 or arm64) with two wired ports: one to the Internet line, one to the access points or their switch.
2. Click Make a pairing code and run the command shown on that machine. It installs, pairs and starts by itself.
3. Guests open the sign-in page over HTTPS at name.wifi.thailandhosting.com, so browsers don’t warn that it’s insecure. See or change the name under Sign-in page address on the Sign-in page tab.

Two ways to place a Hotspot Server: Gateway and Transparent

• Gateway (the default): one port to the Internet line, the other to the access points. The machine hands out addresses, answers DNS, shows the sign-in page and takes guests out to the Internet. Split guests into several networks with VLANs, and use up to 8 Internet lines (shared out, or standing in when one drops). The log records the guest’s address and the port it went out from.
• Transparent (Enterprise Wi-Fi): in the line between your router or switch and the access points, with no change to your address ranges or DHCP. Guests who haven’t signed in reach only the sign-in page. The machine needs an address of its own on every network it watches (from your router or set by hand), and reservations stay on your router. The log records the guest’s address and destination; the port after NAT is on your router.
• Change the mode, VLANs and Internet lines under Equipment › the machine › Network settings. If the machine can’t reach us within 2 minutes of a change, it goes back to what it had.
• To install a new machine as Transparent, add --transparent to the install command so it never hands out addresses over your router. It needs Debian 12 or Ubuntu 24.04 with the distribution’s own kernel.