# Configure RouterOS Hotspot Portals

RouterOS hotspot setup has hidden rules around firewall chains, CAPPORT, RADIUS, and template variables. This skill guides Claude, Codex, and Claude Code through accurate captive portal configuration.

## Install

```bash
npx skillstore add tikoci/routeros-hotspot
```

## Metadata

- Status: approved
- Slug: tikoci-routeros-hotspot
- Skillstore revision: r1
- Version status: missing
- Tree hash: 8569a98822b0f2fe3754434b2e3448e89217cb64bd9bcba065ee10ab9cd82c06
- Author: tikoci
- GitHub username: tikoci
- License: MIT
- Repository: https://github.com/tikoci/routeros-skills/tree/main/routeros-hotspot
- Ref: 36e07d5e13068e5be64447e8f20b427cf2cbd21a
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, external\_commands, scripts
- Quality score: 74
- Public page: https://skillstore.pages.dev/skills/tikoci-routeros-hotspot
- Manifest: https://skillstore.pages.dev/api/skills/tikoci-routeros-hotspot/manifest

## Capabilities

- Creates RouterOS hotspot profile and instance guidance for MikroTik deployments.
- Explains hotspot chain behavior before standard firewall processing.
- Configures DHCP option 114 guidance for CAPPORT client discovery.
- Guides walled garden rules for external captive portal hosts.
- Documents RouterOS HTML template variables and escaped variants.
- Describes RADIUS client redundancy and secret placeholder patterns.

## Use Cases

- Deploy guest captive access: Plan a wired or wireless guest hotspot with profile settings, login behavior, and client redirect handling.
- Standardize MSP templates: Create repeatable hotspot guidance with CAPPORT settings, RADIUS placeholders, and consistent walled garden rules.
- Review generated RouterOS advice: Check hotspot recommendations for common mistakes before applying them to customer routers.

## Prompt Templates

### Basic hotspot profile

```
Create RouterOS hotspot guidance for a guest bridge using HTTPS login, a named address pool, and safe timeout defaults.
```

### Add CAPPORT discovery

```
Explain how to add DHCP option 114 for a RouterOS hotspot and list the quoting requirements I must preserve.
```

### Integrate RADIUS authentication

```
Design a RouterOS hotspot RADIUS plan with two servers, shared secret placeholders, and a staged enable process.
```

### Design external captive portal flow

```
Map an external captive portal flow for RouterOS, including template variables, escaped values, and walled garden host requirements.
```

## Limitations

- Does not connect to routers or verify live RouterOS state by itself.
- Uses placeholder domains, addresses, certificates, and secrets that users must replace.
- Focuses on IPv4 hotspot behavior because RouterOS hotspot does not support IPv6 clients.
- Does not issue certificates or manage private key storage.

## Best Practices

- Replace every placeholder address, domain, certificate name, and secret before deployment.
- Use HTTPS login and protect certificate private keys outside generated examples.
- Use escaped RouterOS template variables when placing values inside URLs or query strings.

## Anti Patterns

- Do not block portal HTTPS traffic with standard firewall rules that run after hotspot processing.
- Do not use invalid keepalive values when disabling hotspot keepalive behavior.
- Do not place raw RouterOS template variables into URLs or scripts without proper escaping.

## Security Audit

- Audited at: 2026-07-07T07:15:24.856\+00:00
- Summary: Review found documentation-only RouterOS examples, not executable marketplace payloads. Static command, network, and sensitive-file matches are false positives caused by Markdown, RouterOS template syntax, placeholder addresses, placeholder URLs, and certificate filenames. No prompt injection, data exfiltration intent, or hidden execution behavior was found.

## Stats

- Views: 28
- Downloads: 10
- Favorites: 0
- Popularity score: 0