Setting up a paid internet access point isn't just a technical task like configuring a router; it's a full-fledged business project that requires careful infrastructure planning. Owners of cafes, hotels, hostels, and shopping centers often face the need to monetize traffic or at least offset the costs of the connection. Guest access Network access is becoming a service standard, but its organization requires a professional approach to equipment and software.
Before purchasing expensive equipment, you need to clearly define your business model: will you sell access codes for a limited time, limit the speed for free users, or implement advertising upon authorization? Modern HotspotWhile these systems allow for flexible tariff settings, the project's success depends on the quality of signal coverage and ease of payment for the end user. In this article, we'll cover all the steps involved in creating an autonomous network with payment capabilities.
It's important to understand that simply distributing Wi-Fi through a home router with passwords isn't suitable for commercial purposes. You'll need an authorization system that redirects the user to a login pageβthe so-called Captive PortalIt is this software interface that receives card, SMS, or voucher data and commands network equipment to open access to the global network.
β οΈ Please note: Telecommunications and data storage legislation (e.g., the Yarovaya Law in Russia) is constantly changing. Before launching a project, be sure to consult with a lawyer regarding the requirements for installing SORM equipment and registering with the registry of information dissemination organizers.
Selecting a business model and target audience
The first step is determining who you'll sell access to and how. There are several main traffic monetization models, each with its own advantages and technical requirements. Choosing the right strategy directly impacts your choice of hardware and software. billing.
The most common model is selling temporary access (time-based). The client pays a fixed fee for 1 hour, 24 hours, or a week. This is ideal for hotels, hostels, and coworking spaces, where the user has a limited time. The second popular model is speed limiting for free users with the option to purchase a full bandwidth. This is often used in cafes, where basic access is free, but streaming or downloading requires a fee.
The third model is advertising. Users receive free access after viewing an ad or entering data on social media. Here, you earn money not from the client, but from advertisers or by building a contact database (Big Data). The collection of users' MAC addresses and phone numbers requires strict compliance with personal data laws.
- π Time-based: Selling codes for 1 hour, 24 hours, or a week. Ideal for hotels.
- π Traffic-based: Limited traffic with the option to purchase additional gigabytes. Suitable for remote locations.
- π’ Advertising: Free access in exchange for viewing a banner. Requires high traffic.
Equipment required to set up a hotspot
To create a stable network, a regular home router is not enough. You will need professional equipment capable of handling thousands of simultaneous connections and working with third-party authentication systems. controller or a gateway that will manage data flows.
The most popular solution in the small and medium business segment is the company's equipment MikroTik. Routers of the series hAP, RB or CCR have a built-in function Hotspot, which allows you to customize login pages and pricing without purchasing additional software. For larger spaces, such as shopping malls or stadiums, enterprise-class access points are used, such as Ubiquiti UniFi or TP-Link Omada, which are managed centrally.
You'll also need a billing server if the router's functionality isn't sufficient. This could be a dedicated computer, a virtual private server (VPS), or a cloud solution. The server will store the user database, process payments, and send commands to the router. The communication channel should be dedicated and stable, preferably with redundancy, so that if the primary channel fails, your business won't be disrupted.
- π‘ Access points: Provide Wi-Fi signal coverage (e.g. Ubiquiti, MikroTik, Aruba).
- π Switches: PoE switches for powering access points and transmitting data over a single cable.
- π» Gateway/Router: A device that passes traffic and interacts with the authorization portal.
Setting up MikroTik hardware for a hotspot
Let's look at the setup process using equipment as an example MikroTik, as it is the de facto standard for new Wi-Fi providers. Basic setup is done through a utility WinBoxThe first step is to create a pool of IP addresses for clients that will connect to the network.
/ip pool add name=hotspot-pool ranges=10.5.50.2-10.5.50.254Next, a Hotspot server profile is created, where DNS addresses, gateway, and interface parameters are specified. It is important to configure it correctly. DNS, so that unauthorized users' requests are redirected to the login page. In the menu IP -> Hotspot -> Server Profiles a new profile is created with a name, for example, profile1.
What is a Walled Garden?
A Walled Garden is a list of websites or IP addresses accessible to a user WITHOUT authorization. Typically, it includes the operator's website, payment gateways, and messaging apps so that the user can pay for access even without an active session.
After setting up the server, you need to create users or tariff profiles. MikroTik This is done through the menu IP -> Hotspot -> User ProfilesHere you set limits: upload/download speed, session time, and traffic volume. For example, the "1_hour" profile could have a time limit of 1:00:00 AM.
- π Creating a pool: Allocating a range of addresses to clients.
- βοΈ Server setup: Specifying the interface and DNS servers.
- π³ Tariff profiles: Setting speed and time limits.
Integration with payment systems and billing
The most challenging part of the project is getting the network to accept money. Standard router functionality is usually limited to simple vouchers. To automate the sale of codes via online payments (cards, Apple Pay, cryptocurrency), an external platform is required. billing serverPopular solutions: WiBillboard, SmartHotspot, Wizart or self-written PHP/Python scripts.
The operating principle is as follows: the user connects to Wi-Fi, is directed to the authorization page, selects a plan, and pays for it. The payment gateway confirms the transaction and API Sends a command to the router to create a session for the given MAC address or login. The router, in turn, opens internet access.
| Parameter | Local billing (MikroTik) | Cloud service (SaaS) | Self-written solution |
|---|---|---|---|
| Cost of implementation | Low (included in the router) | Monthly subscription | High (development) |
| Accepting cards online | No (codes only) | Yes, automatically | Yes, with integration |
| Difficulty of setup | Average | Low | Very high |
| Flexible tariffs | Limited | High | Limitless |
To accept payments, you must enter into an agreement with a payment aggregator (acquiring). Popular options in the CIS: UKassa, Robokassa, CloudPaymentsThey provide an API that integrates with your billing system. Without an agreement with the aggregator, you won't be able to legally accept card payments on the authorization page.
βοΈ Payment connection checklist
Legal aspects and network security
Offering paid internet access places the network owner in the role of a telecom operator or provider, which entails a number of legal obligations. First and foremost, this concerns user identification. According to the laws of many countries, you are required to know who exactly is using your connection.
To comply with the requirements of the law, authorization by phone number (SMS) or through government service systems (for example, Public Services Wi-Fi (in the Russian Federation). This allows for automatic user identification. Storing logins, passwords, and browsing history (metadata) is also mandatory.
β οΈ Warning: Using open proxies or VPNs within your network to bypass blocking may result in serious fines. Set up traffic filtering and blocking of prohibited resources at the gateway level.
Cybersecurity issues are also critical. Your network should be isolated from the business's internal network (cash registers, surveillance cameras, accounting). Use technology VLAN (Virtual LAN) for traffic separation. The guest network should not have access to the enterprise's local network resources.
- π‘οΈ Insulation: Separation of guest and work traffic via VLAN.
- π License Agreement: On the login page, the user must accept the Acceptable Use Policy.
- π Encryption: Using WPA2/WPA3 protocol to protect the data transmission channel.
Marketing, promotion and ROI calculation
After the technical implementation, you need to attract customers. In the case of paid Wi-Fi, your "store" is the physical location where the router is located. However, if you plan to create networks in parks or on beaches, active advertising will be required. Bright signs with QR codes leading to the payment page significantly increase conversion.
The ROI calculation depends on the site's traffic and average order value. Let's assume the equipment cost $500, and the monthly bandwidth and server costs are $50. With an hourly access rate and 10 daily visitors, revenue would be $300 per month. The breakeven point is reached in 2-3 months.
Don't forget about analytics. Modern systems allow you to track peak load times, popular plans, and returning users. This data will help optimize your pricing and marketing efforts. For example, introduce a "Happy Hour" with a 50% discount in the morning.
Do I need to register as an individual entrepreneur to sell Wi-Fi?
In most cases, legally selling internet access requires registering as a legal entity or individual entrepreneur, as it is classified as a telecommunications service. Operating illegally can result in large fines and equipment confiscation. However, if you're simply covering expenses at a cafe and aren't directly profiting from each megabyte (but rather increasing the average bar bill), the requirements may be more lenient. Always consult local laws.
Is it possible to use one router for multiple points?
Yes, this is possible using tunneling technology (for example, CAPsMAN for MikroTik or the UniFi controller). In this case, "dumb" access points are scattered throughout the facility, and management and authorization occur on a central server or cloud controller. This allows the network to scale across entire neighborhoods or campuses.
What should I do if the user has paid, but the internet still isn't available?
It's necessary to set up an automatic notification and support system. Ideally, the billing page should have a "Technical Support" button that links to the administrator's messenger. A common cause is a DNS cache or an expired session on the client's device. Reconnection instructions should always be readily available.