Providing commercial internet access is a proven business model that remains relevant even in the era of unlimited mobile data plans. Owners of hotels, hostels, cafes, campsites, and transportation companies often seek ways to monetize their existing communications channel, turning it into a source of passive income. Paid hotspot (Hotspot) allows you to not only cover your provider's costs, but also earn money on additional services.
From a technical standpoint, creating such a network requires a more in-depth approach than simply installing a router in an apartment. It's necessary to implement a user authorization system that will verify payment or the presence of a voucher before granting access to the global network. In this article, we'll cover all the steps: from choosing gland before setting up complex billing.
The main advantage of this system is the flexibility of traffic management. You can limit the speed for free users, redirect them to advertising pages, or sell time and data packages. A key element of any commercial network is the authorization gateway (Captive Portal), which intercepts user requests before payment. Without this component, it is impossible to convert regular Wi-Fi into a paid one.
Choosing equipment for a commercial hotspot
The foundation of your future network is the hardware. Regular consumer routers sold in electronics stores rarely have built-in features for creating paid access points. You'll need a professional solution that supports Radius protocols or has a built-in mechanism. HotspotThe most popular and affordable solution on the market is the company's equipment MikroTik.
An alternative could be specialized cloud platforms such as Ubiquiti UniFi with a controller or a solution based on OpenWrt, however, they often require more complex setup or service subscriptions. Routers of the series are ideal for starting a business. MikroTik hAP or RB with the RouterOS operating system installed. They support up to 512 active users on a single device (depending on the license).
When choosing a model, pay attention to the processor's throughput. If you plan to provide access to dozens of users simultaneously, a weak processor will become a bottleneck, and internet speed will drop even with a good connection from your provider. The presence of Gigabit Ethernet ports for connecting a dedicated line is also important.
- 📡 MikroTik RB750Gr3 (hEX) — an ideal router for the network core, with high performance for traffic processing.
- 📡 MikroTik cAP ac — indoor access points supporting dual-band Wi-Fi.
- 📡 Ubiquiti UniFi AP - an alternative solution that requires a separate controller to manage users.
⚠️ Attention: Don't try to use cheap Chinese repeaters with the "Portal" feature. They often lack a real billing mechanism and can be easily bypassed by users who know the MAC addresses of authorized devices.
In addition to the router itself, you'll need high-quality antennas or access points to cover the service area. If the area is large (such as a park or beach), all-weather access points with high gain will be needed. For indoor settings (cafes, hotel lobbies), ceiling-mounted access points are suitable, as they are less visible to guests.
How the authorization and billing system works
To understand how to make a hotspot paid, you need to understand the network's logic. When a client connects to Wi-Fi, their device receives an IP address, but all HTTP/HTTPS traffic is redirected to a dedicated internal server— Captive PortalUntil the user is authorized, they will not be able to access any website on the Internet.
There are several authorization methods. The simplest is a voucher system. The administrator generates codes (login and password) with a certain time or traffic limit. The user enters them on the portal page and gains access. The second method is integration with payment systems, where the user pays for access with a card directly on the authorization page. The third method is RADIUS- authorization often used in large networks.
In the case of MikroTikAll this logic is built into the operating system. The router itself acts as the hotspot server, storing the user database, speed limit profiles, and connection logs. For more complex scenarios, such as connecting multiple hotspots in different buildings, an external RADIUS server is used to centrally manage access.
How does traffic interception work?
When a device attempts to access a website, the router sees the request and, if the user is not authorized, substitutes the server's response. Instead of the requested page, the user sees the HTML code of the authorization page stored in the router's memory. This occurs at the DNS and HTTP protocol levels.
It's important to note that modern browsers and operating systems (especially iOS and Android) have built-in Captive Portal detection mechanisms. These periodically send requests to special servers (e.g., captive.apple.com or connectivitycheck.gstatic.com). If a redirect is received, the system automatically opens an authorization window. Your task is to configure the router so that it correctly processes these requests.
Basic Hotspot Setup on MikroTik RouterOS
Let's look at the setup process using RouterOS as an example, as it's the most flexible tool for this task. First, you need to prepare the network. You must have a configured WAN port for internet access and a LAN port (or wireless network) through which clients will connect. A separate address pool is usually created for the hotspot.
The first step is to create an IP pool for clients. This is a range of addresses that the router will assign to connected devices. For example, if your local network 192.168.88.0/24, then you can allocate a subnet for guests 10.5.50.2-10.5.50.254This isolates guests from your internal network, which is critical for security.
Next, the Hotspot setup wizard will launch. In the terminal or via the WinBox graphical interface, go to the menu IP → HotspotClick the "Hotspot Setup" button. The wizard will guide you through the main steps: selecting an interface, configuring gateway addresses, an address pool, and an SMTP server (for the forgotten password feature, if needed).
☑️ Hotspot setup checklist
After completing the wizard, you'll have a basic access point. However, it's not yet a paid service and has no restrictions. All users can connect freely. To turn it into a commercial project, you'll need to configure user profiles and restrictions. In the menu IP → Hotspot → User Profiles Create a new profile, for example, "1_hour_100Mb". In the Rate Limit fields, specify the maximum speed, for example, 2M/5M (2 megabits for download, 5 for upload), and in the Total Limit field, specify the traffic volume in bytes or the duration.
⚠️ Attention: Settings interfaces and menu item names may differ between different versions of RouterOS (v6 and v7). Always consult the manufacturer's official documentation before updating firmware on a live network.
Monetization: vouchers, cards and online payment
Once the technical part is ready, the question arises: how to collect money? The simplest and most reliable method for small businesses is a voucher system. You create a set of codes (login and password) in the router database or through a generator. These codes are printed on receipts or cards and sold to customers. For generating large numbers of users, it's convenient to use third-party scripts or utilities, as manually creating thousands of accounts is time-consuming.
A more advanced option is integration with payment gateways (acquiring). In this case, the user enters a phone number or email address on the authorization page, and the system redirects them to the bank's or payment aggregator's page (for example, UKassa, Robokassa (Or specialized Wi-Fi services). After successful payment, the service sends a command via API to the router to create a temporary user and add them to the authorized database.
There are also hybrid models. For example, "social Wi-Fi," where access is free after viewing an ad or logging in through social networks, but there's an option to purchase "VIP speed" without the hassle. This allows you to monetize from advertisers or increase customer loyalty in a cafe.
| Tariff type | Description | Difficulty of implementation | Target audience |
|---|---|---|---|
| Voucher | Selling codes with time/traffic limits | Low | Tourists, one-time visitors |
| Subscription | Monthly payment for unlimited | Average | Residents of residential complexes and coworking spaces |
| Payment gateway | Payment by card on the portal | High | Shopping malls, airports |
| Advertising | Access for viewing ads | High | Cafes, shopping centers, events |
When choosing a monetization method, it's important to consider user psychology. No one wants to spend ages entering card details just to spend 15 minutes online. Therefore, vouchers or QR code payment (where the user scans the code and immediately proceeds to payment or data entry) work best. QR code can be placed directly on a table in a cafe or at a hotel reception.
Legal aspects and network security
Providing paid internet access places significant responsibility on the network owner. According to the laws of many countries (including the Russian Federation's "On Communications" and the "Yarovoy Package"), communications service providers are obligated to ensure traffic storage and user identification. If you sell access, you legally become a provider, even if your business is small.
Identification is critical. Anonymous access on public networks is often prohibited or requires logs. You need to keep a log of which IP address, at what time, and from which MAC address (or login) accessed the network. MikroTik can keep such logs, but they need to be stored somewhere, as the volume of data can be enormous. A remote syslog server is often configured for this purpose.
It's also important to isolate the guest network from your internal infrastructure. Use VLANs (virtual local area networks) and a firewall. Firewall rules should prohibit all connections from the guest network to your administrative network, leaving only port 443 for HTTPS and DNS ports open. This will protect your personal data, security cameras, and accounting department from hackers connected to your Wi-Fi.
⚠️ Attention: Selling internet access without a proper license or registration as a telecom operator can result in significant fines. Be sure to consult with a lawyer regarding local regulations before launching a commercial Wi-Fi business.
Network optimization and scaling
Once your access point starts generating revenue and the number of users grows, scalability may become an issue. A single router may not be able to handle the load or cover a large area. In this case, an architecture with multiple access points managed by a single controller or master router is used.
To optimize traffic, use the function Queue Tree or Simple Queues Prioritize. This will ensure that critical services (such as the online ticket office or booking system) remain operational even if 50 tourists simultaneously start downloading 4K videos. It's also helpful to set up update caching (if your hardware supports it) or limit torrent traffic, which quickly clogs your bandwidth.
Regularly analyze statistics. How many users connect during peak hours? What's the average bill? How much traffic is consumed? This data will help you adjust your plans and technical configuration. For example, if users consistently complain about slow speeds in the evening, it might be worth upgrading to a higher-speed plan from your provider or installing a second access point on a different channel.
In conclusion, creating a paid hotspot is a complex task requiring knowledge of network administration, marketing, and legal matters. Starting with a simple voucher system using readily available equipment, you can gradually grow into a full-fledged hotspot network generating a stable income.
Frequently Asked Questions (FAQ)
Is it possible to set up paid Wi-Fi on a regular home router?
Theoretically, it's possible if you flash your router to an alternative firmware (OpenWrt, DD-WRT, MikroTik) that supports Hotspot. However, the default firmware of most home routers (TP-Link, ASUS, D-Link) doesn't have the functionality to create user login and billing pages.
Do you need a license to sell Wi-Fi in a cafe?
Legislation varies by country. In Russia, providing communication services in public spaces requires compliance with user identification laws (passport information or phone number) and traffic storage. Full-fledged operation as a telecom operator requires a license, but many circumvent this by arranging access as an additional service or using aggregators.
How to limit speed for each user?
In the User Profile settings, in the Rate Limit section, you can specify the maximum speed. The format is usually Upload/Download. For example, 1024k/2048k will limit the speed to 1 Mbps for reception and 2 Mbps for upload.
What should I do if the user has paid, but the internet still isn't available?
Check your router logs (Log). Possible causes: the IP address in the pool has run out, the concurrent connection limit has been reached, or there's an error on the RADIUS server or payment gateway. Also, make sure the client's device isn't running a VPN, which could block redirection to the portal.
Is it possible to accept payments in cryptocurrency?
Yes, if you use third-party gateways or custom authorization pages that integrate with crypto payment systems. However, this requires more complex programmable configuration than standard solutions.