Documentation

Profile Management

Profiles in NettPortal are MikroTik RouterOS Hotspot User Profiles that define connection settings for groups of users—session timeouts, rate limits, shared users, address lists, and more. This guide covers everything you need to know about creating, managing, and configuring profiles on your MikroTik routers. Even if you're not technical, we'll explain everything in simple terms.

🎯 What is a Profile?

A profile is a MikroTik RouterOS Hotspot User Profile that defines connection settings applied to users who are assigned that profile. Profiles store router-level configuration like rate limits for speed, session timeouts, idle timeouts, shared users for concurrent sessions, address lists for firewall rules, and other RouterOS settings. When you create a user like a customer or voucher and assign them a profile, the router applies all the profile's settings automatically. Profiles let you manage groups of users with the same settings efficiently.

Why Use Profiles?

Profiles offer several advantages for managing your MikroTik routers:

Centralized Configuration

Manage settings in one place: Instead of configuring each user individually, you define settings once in a profile and assign it to multiple users. When you need to change settings, update the profile once and all users using that profile are updated automatically.

  • Example: Create a "Premium" profile with 100 Mbps rate limit—assign it to all premium customers
  • Benefit: To change all premium customers to 150 Mbps, just update the profile once

🌐 Multi-Router Deployment

Apply to multiple routers: When creating a profile, you can select one or more routers to deploy it to. This ensures consistent configuration across all your routers. Users connecting to any router will get the same profile settings.

  • Example: Create a "Standard" profile and deploy it to Router 1, Router 2, and Router 3
  • Benefit: Standard customers get the same experience regardless of which router they connect to

👥 Group Management

Organize users by service tier: Create profiles for different service levels (Basic, Standard, Premium) and assign users accordingly. This makes it easy to manage different customer tiers and apply bulk changes.

  • Example: "Basic" profile for budget customers, "Premium" profile for high-paying customers
  • Benefit: Easy to identify which users belong to which service tier

🔄 Easy Updates

Update once, apply everywhere: When you edit a profile, you can update it on specific routers or all routers where it exists. Changes take effect immediately for all users using that profile.

  • Example: Update "Premium" profile rate limit from 100 Mbps to 150 Mbps on all routers
  • Benefit: All premium customers automatically get the new speed without individual updates

Creating a Profile

Creating a profile is straightforward. Navigate to the Profiles page and click Create Profile. Here's what you need to configure:

📝 Basic Information

  • Profile Name *: A unique name for your profile (e.g., "default", "premium", "basic"). This name will appear on your MikroTik routers and cannot be changed after creation.
  • Select Routers *: Choose one or more routers where this profile will be created. You can deploy the same profile to multiple routers for consistency.
  • Comment: Optional description explaining what this profile is for (e.g., "Premium customers with high-speed access")

💡 Tip: Use clear, descriptive names like "Premium", "Standard", "Basic" instead of generic names like "Profile 1" or "Test".

⚡ What Happens Automatically

When you create a profile, NettPortal automatically creates the Hotspot User Profile on all selected MikroTik routers with your configured settings. The profile is immediately available for assignment to customers and vouchers. You don't need to manually configure anything on the router.

Profile Settings Explained

Profiles support various MikroTik RouterOS settings. All fields are optional—you can create a basic profile with just a name, or configure advanced settings for fine-grained control:

🚀 Rate Limit

Speed limits for download and upload: Controls how fast users can download and upload data. The format uses a slash to separate download and upload speeds, like "10M/5M" which means 10 Mbps download and 5 Mbps upload.

  • Example: "100M/50M" = 100 Mbps download, 50 Mbps upload
  • Example: "5M/2M" = 5 Mbps download, 2 Mbps upload
  • Leave empty: For unlimited speed (no rate limiting)

👥 Shared Users

Number of concurrent sessions allowed: Controls how many devices can use the same user account simultaneously. Useful for families or businesses that need multiple devices connected.

  • Example: 1 = Only one device can connect at a time (single user)
  • Example: 5 = Up to 5 devices can connect simultaneously (family plan)
  • Leave empty: For unlimited concurrent sessions

⏱️ Session Timeout

Maximum session duration: How long a user can stay connected before being automatically disconnected. Format: time unit (e.g., "1h" = 1 hour, "30m" = 30 minutes, "2d" = 2 days).

  • Example: "1h" = Session expires after 1 hour
  • Example: "24h" = Session expires after 24 hours
  • Leave empty: For unlimited session duration

😴 Idle Timeout

Auto-disconnect when idle: Automatically disconnects users if they're not using the internet for a specified duration. Format: time unit (e.g., "5m" = 5 minutes, "30s" = 30 seconds).

  • Example: "5m" = Disconnect if idle for 5 minutes
  • Example: "10m" = Disconnect if idle for 10 minutes
  • Leave empty: To disable idle timeout (connection stays active even when idle)

💓 Keepalive Timeout

Keep connection alive duration: Keeps the connection alive even when idle for a specified duration. Format: time unit (e.g., "2d" = 2 days, "1h" = 1 hour).

  • Example: "2d" = Connection stays alive for 2 days even when idle
  • Leave empty: To disable keepalive timeout

🔄 Status Auto-refresh

Status page refresh interval: How often the Hotspot status page automatically refreshes. Format: time unit (e.g., "1m" = every minute, "30s" = every 30 seconds).

  • Example: "1m" = Status page refreshes every minute
  • Leave empty: To disable auto-refresh

🛡️ Address List

Firewall address list name: Users with this profile are automatically added to the specified firewall address list. This allows you to apply firewall rules to groups of users.

  • Example: "allowed-users" = Users added to "allowed-users" address list
  • Usage: Create firewall rules that apply to all users in this address list
  • Leave empty: If you don't need address list grouping

🍪 MAC Cookie Timeout

MAC cookie timeout duration: How long MAC cookies are valid for device recognition. Format: time unit (e.g., "2d" = 2 days, "1h" = 1 hour).

  • Example: "2d" = MAC cookies valid for 2 days
  • Leave empty: To use router default

🌐 Open Status Page

Status page type: Which Hotspot status page to show users. Common values include "http-login" (login page), "http-charge" (charging page).

  • Example: "http-login" = Show login page
  • Example: "http-charge" = Show charging page
  • Leave empty: To use router default

🔍 Transparent Proxy

Enable transparent proxy: When enabled, users are automatically redirected to the Hotspot login page even if they try to access blocked content. Useful for enforcing login before internet access.

  • Enabled: Users redirected to login page automatically
  • Disabled: Users must manually access login page

💡 When to Use Advanced Settings

Most users can create profiles with just a name and rate limit—that's sufficient for most use cases. Advanced settings like timeouts, address lists, and transparent proxy are useful if you need fine-grained control over user connections, security, or network management. If you're not sure, start with basic settings (name and rate limit) and add advanced settings later if needed.

Managing Profiles

Once you've created profiles, you can view, edit, and manage them from the Profiles page:

🔍 Viewing Profiles

The Profiles page shows all profiles across all your routers:

  • Profile Name: The name of the profile
  • Routers: Which routers have this profile (shown as badges)
  • Settings: Summary of profile settings (rate limit, shared users, timeouts)
  • Status: Whether the profile is active on the router
  • Search: Search profiles by name or router name

💡 Profiles are grouped by name, so if the same profile exists on multiple routers, it appears once in the list with all routers listed.

✏️ Editing Profiles

Click the Edit button on any profile to modify its settings. When editing:

  • Profile Name: Cannot be changed (read-only)—this is the identifier on the router
  • Select Routers: Choose which routers to update—you can update the profile on specific routers or all routers where it exists
  • Settings: Update any profile settings (rate limit, timeouts, shared users, etc.)
  • Results: After saving, you'll see success/failure results for each router

⚠️ Note: Changes to profiles take effect immediately for all users using that profile. Users may need to reconnect for some settings to apply.

🗑️ Deleting Profiles

Click the Delete button on any profile to remove it from routers. When deleting:

  • Select Routers: Choose which routers to delete the profile from—you can delete from specific routers or all routers where it exists
  • Warning: All users using this profile may lose connectivity
  • Results: After deletion, you'll see success/failure results for each router

⚠️ Warning: Deleting a profile removes it from the router permanently. Users currently using this profile will need to be assigned a different profile before they can connect again. Consider editing the profile instead of deleting if users are still using it.

Using Profiles with Customers and Vouchers

Profiles are assigned to customers and vouchers when you create them. The profile's settings are automatically applied to the user on the router:

👤 Assigning Profiles to Customers

When creating or editing a customer, you can select a Hotspot Profile from the dropdown. The dropdown shows all profiles available on the customer's assigned router.

  • Profiles are loaded from the router when you select a router for the customer
  • If a profile doesn't exist yet, you can create it using the "Create Profile" button
  • The profile settings are applied immediately when the customer connects

🎫 Assigning Profiles to Vouchers

When generating vouchers, you select a Hotspot Profile for all vouchers in that batch. All vouchers in the batch will use the same profile settings.

  • Profiles are loaded from the selected router when generating vouchers
  • You can create a new profile directly from the voucher generation page if needed
  • When a voucher is redeemed, the user gets the profile's settings automatically

⚡ What Happens Automatically

When you assign a profile to a customer or voucher, NettPortal automatically applies all the profile's settings to that user on the router—rate limits, timeouts, shared users, address lists, and all other profile settings. The user inherits all settings from the profile, and you can also set individual time and data limits per user if needed.

Best Practices

💡 Naming Conventions

Use clear, descriptive names that indicate the service tier or purpose:

  • ✅ Good: "premium", "standard", "basic", "guest", "voucher-temp"
  • ❌ Bad: "Profile 1", "Test", "New Profile", "Profile-A"

🌐 Multi-Router Deployment

For consistency across your network:

  • Create the same profiles on all routers that serve the same customer base
  • Use consistent profile names across routers (e.g., "premium" on Router 1, Router 2, and Router 3)
  • When updating profiles, update them on all relevant routers at once

📊 Profile Organization

Organize profiles by service tier or use case:

  • Service Tiers: "premium", "standard", "basic" for different customer tiers
  • Use Cases: "guest", "temporary", "voucher-only" for specific scenarios
  • Time-based: "daily", "weekly", "monthly" for different validity periods

Rate Limit Settings

Set realistic bandwidth limits based on your network capacity:

  • Use upload speeds that are typically 10-50% of download speeds
  • For unlimited speed profiles, leave rate limit empty
  • Test profile settings before deploying to production users
  • Monitor network usage and adjust limits as needed

🔄 Updating Profiles

When updating profiles:

  • Test changes on a single router first before updating all routers
  • Update during low-usage periods to minimize disruption
  • Notify users of significant changes (e.g., speed upgrades/downgrades)
  • Monitor user connections after updates to ensure no issues

🔒 Advanced Settings

Use advanced settings only when needed:

  • Most users only need profile name and rate limit—that's sufficient for most use cases
  • Use timeouts (session, idle) for temporary access or guest networks
  • Use address lists for applying firewall rules to groups of users
  • Use shared users for family/business plans that need multiple devices
  • Document your advanced settings for future reference

Common Use Cases

Example 1: Premium Customer Profile

  • Profile Name: "premium"
  • Rate Limit: "100M/50M" (100 Mbps download, 50 Mbps upload)
  • Shared Users: 3 (up to 3 devices can connect simultaneously)
  • Session Timeout: Empty (unlimited session duration)
  • Idle Timeout: Empty (no auto-disconnect when idle)
  • Address List: "premium-customers" (for firewall rules)
  • Deploy to: Router 1, Router 2, Router 3

Result: Premium customers get 100 Mbps download, 50 Mbps upload, can use up to 3 devices, unlimited session duration, and are added to the "premium-customers" address list for firewall rules.

Example 2: Guest/Temporary Profile

  • Profile Name: "guest"
  • Rate Limit: "10M/5M" (10 Mbps download, 5 Mbps upload)
  • Shared Users: 1 (single device only)
  • Session Timeout: "2h" (session expires after 2 hours)
  • Idle Timeout: "10m" (disconnect if idle for 10 minutes)
  • Transparent Proxy: Enabled (auto-redirect to login)
  • Deploy to: Router 1

Result: Guest users get limited speed (10 Mbps), single device only, sessions expire after 2 hours, auto-disconnect when idle for 10 minutes, and are automatically redirected to login page.

Example 3: Basic Unlimited Profile

  • Profile Name: "basic"
  • Rate Limit: "50M/25M" (50 Mbps download, 25 Mbps upload)
  • Shared Users: Empty (unlimited concurrent sessions)
  • Session Timeout: Empty (unlimited session duration)
  • All other settings: Empty (use router defaults)
  • Deploy to: All routers

Result: Basic customers get 50 Mbps download, 25 Mbps upload, unlimited devices, unlimited session duration, and all other router default settings.

Next Steps

Now that you understand profile management:

  • Create your first profile using the Create Profile button on the Profiles page
  • Learn about Customer Management to assign profiles to customers
  • Learn about Voucher Management to assign profiles to vouchers
Profiles - Documentation - NettPortal