Mikrotik hosting and Mikrotik5-PDO user guide

By mikrotikcloud.com
Create database

1. Create database name as mikrotik5_pdo.

2. Choose as utf8_unicode_ci

3. Click the Create button.

Import the data into the database.

1. When finished, you will get a database named mikrotik5_pdo as in

the picture above.

2. Import data by clicking the import button.

ห น ้ า 1 | 96
1. Press the button choose file

2. When the window is displayed Find the file at for-sale-2019-

mikrotik5-PDO-09-Dec-2019 / SQL file / mikrotik5_pdo.sql

3. After selecting the file, press open.

4. Click "Go" at the bottom of the import page.

ห น ้ า 2 | 96
When the import is successful, you will get the image above.

Edit the file to connect to the database.

There are 2 files that must be edited as follows:

1. for-sale-2019-mikrotik5-PDO-09-Dec-
2019/link/include/config.inc.php
2. for-sale-2019-mikrotik5-PDO-09-Dec-2019/include/
config.inc.php

ห น ้ า 3 | 96
 3. Open the file and edit the information. To be the same as in
your database

There are 2 files which must be edited. There are 4 lines as in the
picture.

Login page
Search the url in the web browser
http://localhost/for-sale-2019-mikrotik5-PDO-09-Dec-2019/admin/login.php

ห น ้ า 4 | 96
Username = admin

Password = 12345

Mikrotik router settings

Create a Group API
Create a group to connect to the API. Go to System => Users.

ห น ้ า 5 | 96
Next step, create a group as shown below.

When finished, there will be a new group according to the name that
we have set.

ห น ้ า 6 | 96
Create user API

Please create according to the steps in the image above. In the

example, create a name adminAPI.

System management capabilities of mikrotik5-PDO Will depend on

the user group

Which will be divided into 3 levels as follows

ห น ้ า 7 | 96
API port settings

Go to ip => services

ห น ้ า 8 | 96
1. Click on API

2. Set the api port (8728 is the default)

3. Set the IP of the host that can connect An example would be

27.254.87.174 Which is the IP of https://mikrotikcloud.com

*** If not set, all IP can be used ***

4. Click the Enable button.

5. Click the OK button.

ห น ้ า 9 | 96
Cloud IP usage of mikrotik routers

Go to ip=>Cloud

Check the picture above and press the Force Updete button when
the system updates.

A message will appear in the lower left corner "updated". The

mikrotik must be connected to the Public IP Address only. We can
then use the DNS Name.

ห น ้ า 10 | 96
Add a router mikrotik and management.

Go to the Router OS Config page.

1. Enter the DNS Name or Public IP Address of mikrotik.

2. Enter the Port API

ห น ้ า 11 | 96
** After entering both values, you can click the Test Connect button
to check the IP and API ports. It will show the values in the red
square.

If the resulting ping doesn't show "Success" to be modified

3. Enter the username of the user API.

4. Enter the password for the user API.

5,6 Enter pin password

The ability of the pin password is as follows.

Click the button as in the picture.

ห น ้ า 12 | 96
Pin password will be used only when opening the security site.

When all the information is filled in, click the "add" button to finish
creating the job site.

Assign a pin password to other administrators

To do this example, I have created 4 job sites and set a PIN password
to divide the administrator level into 3 levels, as shown below.

Then turn on the security site system as follows

ห น ้ า 13 | 96
Go to the security site page.

ห น ้ า 14 | 96
Set both pins to be the same and click the save button. For example,
I would set it to "abcd".

When successful, will log out to login again. Enter the information.

Username = admin

Password = abcd (will be pin High Class)

Which will be able to manage all the sites, as shown in the green
status

Next, login using the PIN Middle Class, which is

Username=admin

ห น ้ า 15 | 96
Password=1111 and 2222

Will show a yellow status

The difference is

Pin password =1111 Administer SiteA and siteB.

Pin password =2222 Administer SiteC and siteD.

Next, login using the PIN Lower Class, which is

Username=admin

Password=3333 and 4444

Will show a red status

ห น ้ า 16 | 96
The difference is Number of job sites that can be maintained And
manage that site

Therefore you can specify an administrator. Can be obtained from

setting the pin password as mentioned

Canceling security site mode

Please log out and sign in again as well.

Username=admin

Password=abcd *** Must be a High Class pin only ***

ห น ้ า 17 | 96
Go to the security site page.

1. Enter old Security PIN = abcd ***pin High Class

2. Click the Save button.

ห น ้ า 18 | 96
After the system has saved the value You will be logged out. When
you want to login, must use

Username=admin
Password=12345

system/index.php

The ability to manage the system according to the "group account"

will be displayed in various colors.

ห น ้ า 19 | 96
Profile creation in hotspot with the API

The first step is to create a profile with the API.

When the settings are finished, click the Save button.

ห น ้ า 20 | 96
Take a look at the winbox. In the created profile there will be a script
at On Login. Complete the profile creation process.

Create a user on a hotspot with the API.

To create a user who wants to set the expiration date without
usermanager can be done using the API program. But with the
condition Do not set comments on the user.

ห น ้ า 21 | 96
Give an example of the Generate User.

Various settings According to the instructions and click the Save

button.

ห น ้ า 22 | 96
After successfully adding the user, go to the Hotspot Databases User
List page.

We can customize Card or Export CSV. For the first time, you may
open the website popup.

List users in winbox created with the API.

Card Printing Settings

ห น ้ า 23 | 96
ห น ้ า 24 | 96
From the QR code image. When you scan, you will get
http://172.0.0.1/login?username=test529&password=673

If different from the example Please edit it on the Hotspot Edit Card
page.

ห น ้ า 25 | 96
And allow you to go to winbox settings to enable HTTP PAP

Import/Export CSV file

Once you have created the user in the database, you can export the
user directly on the hotspot databases user list page.

If you want to import, please adjust the columns A, B and C.

ห น ้ า 26 | 96
Create a script to set the expiration date for users on
Hotspot.

Go to the Hotspot Add Script For Expire User page.

Make the correct settings. If more than 1 profile, click the button 7.

When creating scripts, you should do it only once. If wrong or want

to add a new profile The script should be deleted and created again.

Scripts in winbox

ห น ้ า 27 | 96
When the user login, there will be a comment showing the date and
time.

When expired, the script will set limit-uptime = 1s to users.

ห น ้ า 28 | 96
Create a Host to use on Hotspot.

I will explain the server creation for the client to use, such as
checking the expiration date,register, change password , Top-up days
And to bring the API file installed in it

You may use different programs to create a different server from the
example. But the connection with mikrotik is the same

For this example, I will create in Windows.

From the picture of the PC that I will make Server IP 172.0.0.89 is a

Hotspot IP.

ห น ้ า 29 | 96
ether3hotspot is in bridge1

Network is 172.0.0.0/23

Next step, make a Static ip to reserve the IP for the server.

ห น ้ า 30 | 96
Follow the steps in the pictures above 1,2 and 3.

ห น ้ า 31 | 96
2. Specify the desired IP address. If you are going to use the old IP
address, do not need to change it. Here I want

Changed to 172.0.0.5

3. Configure upload / download For the server, which will control the
speed of ip binding

4. When every step is completed, click the OK button and close this
window.

ห น ้ า 32 | 96
When finished, IP 172.0.0.89 will still be used. Please disconnect the
LAN cable connected to the server or restart the PC.

When you turn on or plug in a new LAN then get the desired IP

ห น ้ า 33 | 96
The next step is to bypass to use the internet without login.

1. Set the Address and To Address the same

2. Select Type: bypassed

3. Click the OK button.

ห น ้ า 34 | 96
Check the accuracy of the ip bindings page.

The next step is to bypass the ip of the server to enable clients in the
hotspot to access even if they are not logged in.

To redirect the top-up page, check the expiration date page ,

Registration page

ห น ้ า 35 | 96
Follow the steps in the image above and press OK to finish. Walled
Garden IP Procedure

The next step is to do a Redirect from the hotspot IP router, 172.0.0.1

port81.

Go to the IP of the host server is 172.0.0.5 port81 or you will specify

Other ports are optional

Follow steps 1-4 as shown above.

ห น ้ า 36 | 96
In step 4. Is port 80 of the router at URL 172.0.0.1:81/

5.in interface is for IP in bridge1 to be able to access

*** ether3hotspot is in bridge1. If your address is in other bridges or

other ether, then configure it correctly.

ห น ้ า 37 | 96
Next, click on the Action button.

Configure items 3 and 4 according to your IP and port values. When

finished, click the OK button.

ห น ้ า 38 | 96
Completed Redirect from 172.0.0.1:81 => 172.0.0.5:81

Customizing files in the Hotspot folder

ห น ้ า 39 | 96
That you have to fix are 3 files as in the picture above

Modify http://172.0.0.1:81 Change to your IP.

ห น ้ า 40 | 96
For registering with Thailand ID card Or e-mail.

please change the value = "******" on both lines Which will be

explained in the next article

Login with Facebook. Edit as yours.

*** The URL used must be https only.

ห น ้ า 41 | 96
When finished editing, enter winbox.

Delete the old hotspot folder.

Drag the edited hotspot folder into

ห น ้ า 42 | 96
When accessing the hotspot login page with other devices

ห น ้ า 43 | 96
Can go to change password page, sign up page ,Top-up Page, check
the expiration date page Without login

Can be managed at the API on both 2 ip

ห น ้ า 44 | 96
Create a registration system for users on Hotspot.

With the following steps

1. Create a profile to register.

Go to the Hotspot Add Profile page. Configure as needed. And click

the save button The sample is named

Register (can name as desired)

ห น ้ า 45 | 96
2. Create User in the profile.

Go to the Hotspot Add User page. Set the profile to "Register".

Limit-uptime. I set it to be 1h, which is to be used for 1 hour within 1

day.

**** We have to set the script on the Hotspot Add Script For Expire
User page by specifying the expiration date of the user in the profile
named Register = 1d.

When finished setting, save.

ห น ้ า 46 | 96
3. Disable user

1. Go to the Hotspot Mikrotik Users page.

2. Type a name to search

3. Click on the checkbox.

4. Click on the Disable button.

When the user has deactivated Considered complete in this step

*** Disable because of preventing this user from logging in to the

system.

ห น ้ า 47 | 96
In the hotspot folder, edit the login.html and info.html files.

In login.html, edit value = "register" and value = "12345".

ห น ้ า 48 | 96
In info.html, edit lines 94-95 and 132-133.

When finished editing Import the files into the winbox files.
Complete the configuration process.

Test, go to login page, click on register

ห น ้ า 49 | 96
Set the correct value and click OK.

When registration is completed, click the OK button.

ห น ้ า 50 | 96
Will log in automatically to page 172.0.0.1/status

If the user is not logged in, you will need to go to winbox settings to
enable HTTP PAP.

ห น ้ า 51 | 96
Set up login with Facebook.
Go to https://developers.facebook.com/apps/

ห น ้ า 52 | 96
Must be HTTPS only

ห น ้ า 53 | 96
ห น ้ า 54 | 96
Check URL

ห น ้ า 55 | 96
App ID to enter values in hotspot login and API

ห น ้ า 56 | 96
Facebook login By API

For social login that closes trial and use with api with control
bypass web
The advantage is
1.user can not use on facebook If not pressing the facebook
login button
2. Control the time to bypass facebook website.

3. Keep a list of available users.

The disadvantage is
There was a delay in connecting to facebook api It may take 5-10
seconds after the api server is bypass the web.
***But you can bypass the facebook website to fix the time delay
issue.

Enter the APP settings on the social setting page. Click the + APP
button.

ห น ้ า 57 | 96
1. App id obtained from facebook

2. Hotspot login page

3.profile for user *** You must specify a Script For Expire User.

Or create a script to reset the uptime every day by copying the script
below to the new terminal in winbox

/system scheduler

add interval=1d name=reset_social on-event=" {\r\

\n:local setprof \"social_login\";###set here\r\

\n:global prof;\r\

\n :foreach stu in [ /ip hotspot user find where

disabled=no(profile=\"\$s\

etprof\" )] do={\r\

\n:local namestart [/ip hotspot user get \$stu name];\r\

\n:set \$prof [/ip hotspot user get \$stu profile];\r\

ห น ้ า 58 | 96
\n[ /ip hotspot user reset-counters \$stu];\r\

\n:log warning \"Reset-count user \$namestart profile \$prof

Successfully\

\";\r\

\n}}" policy=\

ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \

start-date=Dec/20/2019 start-time=00:00:00

Change social_login to the profile name that the user uses.

ห น ้ า 59 | 96
4. Set the user time

5. Schedule bypass facebook to log in.

Complete for settings in the API.

For settings in winbox, I would like to give an example only for the
hotspot server profile page.

Ip/hotspot=>server Profile (Mark the picture and do not open Trial)

ห น ้ า 60 | 96
Open the login.html file in the hotspot / Facebook login By API folder
for editing.

Edit the information to be yours. Then import the file into winbox.
ห น ้ า 61 | 96
Facebook button while still not bypass web site

Click on the Facebook button.

The API will open the bypass web for login.

ห น ้ า 62 | 96
The system will create a walled garden on the mikrotik router.

And the Scheduler is created to delete scripts in the walled garden

and itself.

*** Which, if you have this Disable Script, can fix the delay
time bypass web
ห น ้ า 63 | 96
When the facebook web site is bypass, there will be a
facebook login button. Come up to login

Requests for access to data depend on the facebookc agreement

with the app you created.

ห น ้ า 64 | 96
Like function

Post Function

ห น ้ า 65 | 96
When all the steps have been completed, the system will notify You
click the OK button.

User will log in automatically.

ห น ้ า 66 | 96
The API on the social user page will display a list of users.

User created in mikrotik winbox

Facebook login By Trial Function (Don't use api)

For social login trials that don't require api

The advantage is

1. Work connected with api of facebook at any time

ห น ้ า 67 | 96
2. You don't need a server or other device other than a single
mikrotik.

The disadvantage is

1.user can use on facebook at any time as well without having to

login via Hotspot login page.

2. Cannot collect usage data of users.

The configuration steps for use are as follows:

Copy the file name login.html to override the old login.html and
open the file.

ห น ้ า 68 | 96
Edit all 3 lines and import into files in winbox

Enter winbox to enable Trial and set the 3 boxes below according to
usage.

ห น ้ า 69 | 96
Then copy the script below to put in the New Terminal

/ip hotspot walled-garden

add dst-host=*facebook.com

add dst-host=*fbcdn.net

ห น ้ า 70 | 96
Finished

Test in the hotspot login page.

The login button will come, no need to wait. The behavior is the
same as login by API.
ห น ้ า 71 | 96
User created

Notify when unable to use internet

This will be a javascript function to ping whether the mikrotik router

is connected to the internet or not, by inserting the script below into
the New Terminal.

Which will display the message on the login.html and status.html

pages

/ip hotspot walled-garden ip

add action=accept disabled=no dst-host=www.mikrotikcloud.com

ห น ้ า 72 | 96
ห น ้ า 73 | 96
PPPoE server with user notifications

In Mikrotik5-PDO and Mikrotikcloud-hosting There are 2 types of

expired user management systems.

1. When expiring, will disable and remove the specified date and
time.

2. When expired Will change the profile for the user automatically so
that the system redirects to the page to notify the customer
expiration date

When the specified time has elapsed Will change the profile back to
its original value and then disable and remove respectively.

Will explain the implementation of the system in the form 2

Example to create Bridge1

ห น ้ า 74 | 96
Add ether6 and ether7 to bridge1.

ห น ้ า 75 | 96
Create new Address 172.0.0.1/24 interface bridge1

Create an IP Pool for Local, named pppoe-local-pool.

ห น ้ า 76 | 96
Create an IP Pool for Remote. Give the client connected by
PPPoE Client. Length 172.16.0.1 – 172.16.0.254 named pppoe-
remote-pool.

Create IP Pool for Client that is Expired. Length 172.16.1.1 - 172.16.1.254

ห น ้ า 77 | 96
Create a Hotspot Server for Bridge1 (172.0.0.0) that must be created
because Mikrotik's Web Server will work.
If redirecting at other servers is not necessary to create a
Hotspot server

Create PPPoE Service

ห น ้ า 78 | 96
Create a NAT for the Network 172.16.0.0/24 (pppoe-remote-
pool) can access the internet

ห น ้ า 79 | 96
Enable Web Proxy

ห น ้ า 80 | 96
Create web proxy access for expired and redirect to the web
server (Mikrotik IP 172.0.0.1) in front of the desired page
(block.html, rename if necessary).

Create NAT Rule redirect from Port 80=>8080 Proxy) for pppoe-
expired-pool

ห น ้ า 81 | 96
Specify Filter Rule to Reject Expired IP (pppoe-expired-pool)

ห น ้ า 82 | 96
Create an folder named error and a file named block.html and drag
the folder to Path Hotspot.

ห น ้ า 83 | 96
Download file=https://drive.google.com/file/d/1y1uXwptp_-
TjWBDnchwLP2HWjAbJvVCP/view?usp=sharing

Go to create a profile in the API. Go to the page PPPoE

=>Profile=>Add Profile

In normal use profiles, set the local address to pppoe-local-pool.

And remote address is pppoe-remote-pool

Create a profile for 1 expired user.

Set the local address to pppoe-local-pool.

And remote address is pppoe-expired-pool

Example, create 4 profiles

ห น ้ า 84 | 96
Go to edit the "pppoe expired" profile on the PPP profiles page in
winbox. At the DNS Server

ห น ้ า 85 | 96
สร้ าง user pppoe ตามต้ องการที่หน้ า pppoe add user

Tested into the pppoe client system for the first time.

ห น ้ า 86 | 96
ห น ้ า 87 | 96
ห น ้ า 88 | 96
The IP received is in the pppoe-remote-pool.(172.16.0.1-
172.16.0.254)

ห น ้ า 89 | 96
Get the specified internet speed

The first login will have a comment showing the date and time that
the user

ห น ้ า 90 | 96
After normal use To build Scripts to manage expiration dates And
alert when the end of use day

When completed, there will be 3 scripts created.

ห น ้ า 91 | 96
When expired, the system will change the profile and comment and
will log out (disconnect) until reconnecting.

ห น ้ า 92 | 96
When reconnecting, you will see a new IP set up as an IP band.
pppoe-expired-pool (172.16.1.1-172.16.1.254)

ห น ้ า 93 | 96
Will redirect the page to expire when accessing the web site.

Test date and time acceleration

ห น ้ า 94 | 96
When the second script is due, work will change the profile and
comment back to the original.

ห น ้ า 95 | 96
When the script deletes the user

ห น ้ า 96 | 96