MikroTik hotspot bypass by MAC address (IP binding)
Last updated: 2 October 2026
Some devices cannot type a password: printers, cameras, a smart TV, your own access points. IP binding lets them through the hotspot without a login, and can also block a device outright.
Let a device through without login
/ip hotspot ip-binding add mac-address=AA:BB:CC:DD:EE:FF type=bypassed comment="office printer"Block a device
/ip hotspot ip-binding add mac-address=AA:BB:CC:DD:EE:FF type=blocked comment="blocked"The three types
| Type | Effect |
|---|---|
bypassed | Internet without login. No hotspot user limits apply. |
blocked | No access at all, not even the login page. |
regular | Normal login, optionally with a fixed address. |
Find the MAC address
/ip hotspot host print
/ip dhcp-server lease printThings to know
- A bypassed device has no speed or data limit from the hotspot. Limit it with a queue if needed.
- Phones often use a random MAC address per network. The binding stops matching if the customer resets that setting.
- MAC addresses can be copied. Do not treat a bypass as security.
Login by MAC address instead
If you want a device to log in automatically but still have a user with limits, use MAC login: enable mac in the profile's login-by and create a user whose name is the MAC address.
/ip hotspot profile set [find] login-by=mac,http-chap,http-papWhere RadiusNest fits
In RadiusNest a user can be locked to one device's MAC address, and a MAC-login user keeps its package, data count and expiry like any other customer, which a plain bypass cannot do.
Start the free trial See pricing
Questions and answers
Does a bypassed device count towards hotspot limits?
No. It is outside the hotspot user system, so no profile, data or time limit applies.
Why did my bypass stop working after a phone update?
The phone is probably using a new random MAC address. Turn off private or random MAC for that network, or add the new address.
Can I bypass by IP address instead of MAC?
Yes, use address= instead of mac-address=. MAC is usually more stable because addresses can change.