Setup guides
Bring your own hardware. Keep your network.
CGN WiFi is vendor-agnostic: the router only has to speak RADIUS. MikroTik gets one-paste onboarding over WireGuard; every other RADIUS-capable router connects with the credentials on its router record.
Step 01
Add the router
Create a router record and generate its setup script.
Step 02
Apply the script
Paste it into RouterOS. WireGuard and RADIUS configure themselves.
Step 03
Start authenticating
Subscribers hit RADIUS and sessions appear in your dashboard.
Choose your setup path
The full interactive walkthrough — including copy-paste scripts and troubleshooting — lives inside your dashboard under Setup Guides.
MikroTik hotspot
Route captive portal traffic to CGN WiFi, set the NAS identifier, and let RADIUS enforce prepaid session time.
What you need
- RouterOS v7 with WireGuard
- WinBox or browser access
- Owner or admin dashboard access
MikroTik PPPoE
Terminate PPPoE sessions and apply the rate limit from each plan. Monthly subscribers are governed by billing status, not prepaid seconds.
What you need
- A PPPoE server on RouterOS
- Your subscriber plan speeds defined
- WireGuard tunnel to CGN WiFi
RADIUS-only routers
Any router that speaks RADIUS works for authentication — Ubiquiti, Omada, OpenWRT, and others. Point it at the CGN WiFi RADIUS endpoint.
What you need
- RADIUS client support on the router
- Your tenant RADIUS shared secret
- NAS identifier matching your router record
WireGuard tunnel
The encrypted link between your router and CGN WiFi. One tunnel per router, configured automatically by the generated setup script.
What you need
- Outbound UDP access to the CGN WiFi endpoint
- A router record created in the dashboard
- The generated tunnel configuration
No router yet, or not sure which path applies?
Read the getting-started guide first. It covers account setup, M-Pesa verification, and your first router end to end.
Get started
One script. One router. You are online.
Start the free trial, create a router record, and paste the generated script into RouterOS.