For voucher and card-based access — captive portal login instead of PPPoE dial-in. Fill in your network and RADIUS details on the left, get a ready-to-import script on the right.
Hotspot login is a different access model from PPPoE — clients get a DHCP lease first, then get redirected to a login page before they're allowed out. Six pieces, wired together correctly.
A DHCP server on the hotspot interface — clients need an IP before they can even see the login page.
The address range handed out to connecting devices, shared between DHCP and the hotspot server.
Registered with service=hotspot (not ppp) — authentication and accounting for voucher logins.
Carries the login page hostname and turns on RADIUS with a 5-minute interim update for live usage data.
Optional — lets a specific domain (like a payment page) load before the subscriber logs in.
Same WAN-side Winbox/Telnet hardening as the PPPoE generator.