MikroTik Setup

Connect your MikroTik router to LALABill with the one-click WireGuard onboarding script.

Overview

LALABill connects to MikroTik routers via a secure WireGuard VPN tunnel. The onboarding process generates a RouterOS script that configures everything automatically when pasted into the MikroTik terminal.

What problem does it solve?

Setting up secure remote management for MikroTik routers traditionally requires complex VPN configurations, public IPs, and firewall rules. This is error-prone and time-consuming.

How it works

LALABill generates a unique RouterOS script for each device. When pasted into the MikroTik terminal, it creates a WireGuard interface, configures the peer with LALABill's server public key, and establishes the tunnel. The router then appears as Online in LALABill.

Requirements

MikroTik router running RouterOS 7.x or later
Terminal access (Winbox, SSH, or web terminal)
Internet connectivity on the router

Step-by-step setup

Go to NAS Devices
Click Add Device in your LALABill dashboard.
Enter device details
Provide a name, model (optional), and API credentials for the router.
Copy the onboarding script
LALABill generates a unique RouterOS script. Click Copy to clipboard.
Paste in MikroTik terminal
Open a terminal session on your MikroTik (Winbox Terminal or SSH) and paste the script.
Wait for connection
The script runs in seconds. Your device will appear as Online in LALABill within 30 seconds.

Configuration guide

API credentials

LALABill needs API access to manage hotspot users, monitor health, and collect usage data. Provide the admin username and password (or create a dedicated API user on the MikroTik).

WireGuard interface

The onboarding script creates a WireGuard interface named lalabill-wg with a unique private key. It adds LALABill as a peer and creates the necessary routes and firewall rules.

Troubleshooting

Device stays offline after running the script

Check that the MikroTik has internet connectivity. Verify that UDP port 51820 is not blocked by upstream firewalls. Try running /interface/wireguard/print to confirm the interface was created.

Script errors when pasting

Ensure you are pasting the complete script. Copy it again from LALABill. Make sure you are in Terminal mode in Winbox, not the console.

Frequently asked questions

Any MikroTik running RouterOS 7.x or later with WireGuard support. This includes most modern MikroTik hardware: hAP, RB, CCR, CRS, and RBM series.

No. The MikroTik connects outbound to LALABill. It works behind any NAT.

Yes. Each router gets its own unique onboarding script and WireGuard tunnel.

Related features

Start your LALABill journey today

Set up your internet business with LALABill. 14-day free trial.