A branded WiFi login page with PIN, QR voucher, SMS OTP or PMS login, per-guest limits and a record of every session - running on MikroTik, TP-Link Omada or Ubiquiti UniFi and managed from the iberry cloud, in India and abroad.
When a guest joins an open WiFi network, the router holds back their traffic and sends the device to a login page instead - the captive portal. Once the guest proves they are entitled to be online, the router lets that one device through, with the speed, data and time limits that belong to its login, and the session is written down. Everything about public WiFi that a property cares about - who can use it, how much, and who was on it last Tuesday at 9pm - is decided at that page.
That is why the portal is not a cosmetic choice. A shared password at reception gives you no limits and no records. A portal that only half the phones can open gives you a queue at the front desk. iberry builds the portal, the cloud AAA authentication behind it and the router configuration together, so the three do not fall out of step.
The same portal for a 20-room guest house and a 200-room hotel.
Property name, logo, colours and your own terms of use. The page is light enough to load on a weak signal at the far end of a corridor.
PIN codes, printed QR vouchers, SMS one-time passwords to the guest's mobile, and room number plus surname checked against your PMS. Use one, or offer several side by side.
Download and upload speed, data volume, session time and the number of devices per room or per voucher - so one heavy user cannot take the whole connection.
The login sheet opens by itself on iPhone, Android, Windows and Mac. No app, no download. We test the iPhone captive-portal check on every site, because it is the one most often broken.
Who logged in, with which mobile number, room or voucher, from which device, when, and how much they used - kept available to the property for the period its rules require.
The portal and authentication run in the iberry cloud and reach your MikroTik router over an encrypted WireGuard tunnel. There is no server in your back office to patch or keep online.
They are different purchases, not cheaper and dearer versions of one thing. Decide which kind you want before comparing prices.
| Kind | What it is | Where it fits |
|---|---|---|
| Router's built-in portal | The default login page in MikroTik, UniFi or Omada, with users kept on the router. | One small site with a shared code. No central records, and each router is managed on its own. |
| Self-hosted portal + RADIUS | Open-source or licensed software you install on your own server. | Teams with a network engineer who will keep the server patched, backed up and online. |
| Marketing WiFi platforms | International cloud portals built around data capture and guest marketing. | Retail and venue chains whose main goal is collecting contact data for campaigns. |
| iberry managed portal | Branded portal, cloud AAA, limits and records, configured and run for you. | Hotels, hostels, campuses and venues that want control and records without running a server. |
Whichever kind you pick, check four things before you sign: that the login sheet opens by itself on an iPhone, that each login carries its own speed and data limit, that you can produce a session record for a given time when asked, and what happens - and who fixes it - when the portal stops loading on a Saturday night. For a hotel, also check whether it can log guests in against your PMS; see PMS-integrated WiFi. For the plans, vouchers and billing side, see hotspot billing software.
Out of the box, a MikroTik hotspot keeps its login page and its users on the router, usually in User Manager. That is fine for one small site and awkward for anything more: each router has its own users, its own template and its own records. iberry runs the portal and the RADIUS server externally, in the cloud. The router’s hotspot sends each login to iberry over RADIUS, receives back the speed, data and session limits for that user, and reports usage while they are online. The router keeps a lightweight fallback login page of its own, so guests still see a page when the internet line is down. Already running User Manager or local hotspot users? We import them rather than making everyone start again - see MikroTik services.
In India, a property offering public WiFi is expected to know who used it: the DoT direction on Wi-Fi hotspots asks for users to be identified, typically by a one-time password to their mobile number, and the CERT-In Directions of 2022 ask for ICT logs to be kept for 180 days within India. iberry's portal records the verified mobile number, room or voucher, device MAC and IP address, login and logout times and data used, and sends them over an encrypted tunnel to storage in India. The detail is on WiFi log retention and compliance. Outside India, tell us what your regulator expects and the records are set up to match.
The captive portal is the login page the guest sees. The RADIUS server is the system behind it that the router asks whether a login is valid, what limits to apply, and where to record the session. A portal without RADIUS keeps users on each router separately; with iberry both run together in the cloud.
It is the system behind the page a phone or laptop is sent to when it joins a public WiFi network and has not logged in yet. The software shows that page, checks the login - a PIN, a voucher, a one-time password or a hotel room and surname - tells the router to let that device online with the limits attached to it, and records the session.
Yes. On MikroTik RouterOS it uses the router's hotspot feature, and on TP-Link Omada and Ubiquiti UniFi controllers it plugs in as the external portal - in every case with authentication handled by the iberry cloud over RADIUS. You can use equipment you already own or equipment we supply; there is no proprietary gateway box.
Yes. The portal shows your property's name, logo and colours, your own terms of use and the login methods you choose. Guests see your brand, not ours.
On iberry: PIN codes, printed QR vouchers, SMS one-time passwords to the guest's mobile number, and room number plus surname checked against the hotel PMS. A property can switch on one method or several, and give each its own speed, data and time limits.
Usually because the phone's own captive-portal check has been blocked or answered by mistake - a DNS entry for captive.apple.com, a walled-garden rule that is too wide, Private DNS on Android, or a VPN app on the device. Our guide to the login page not opening goes through each cause and the fix.
The portal is delivered as a managed service rather than a licence you install, and it is run remotely, so it works for properties outside India as well. Published plans are in Indian rupees from ₹30,000 one-time with ₹15,000 yearly maintenance; properties abroad are quoted per project.
Login page not opening on a guest's phone? See why the WiFi login page does not open, and how to fix it. MikroTik, UniFi and Omada are trademarks of their owners; iberry is independent and not affiliated with them.
Tell us the property, the number of rooms and how you want guests to log in, and we will recommend the login methods and limits that fit. Also see MikroTik services and the hotel WiFi buyer’s guide.
Talk to Us