The box works with any access point that can put the guest SSID on its side. Per brand: the one setting, the steps and the traps.
Brands it works alongside
24 firewall, router and AP brands
Logos are registered trademarks of their owners. Compatibility is at bridge and VLAN level; it does not imply a partnership or certification.
Direct: only the SSID/VLAN setting. Extra setup: AP mode or additional configuration needed. Not recommended: bypasses the box, no records.
| Brand | Product family | Type | Compatibility | Note |
|---|---|---|---|---|
| Ubiquiti UniFi | U6 / U7 access points | AP | Direct | Guest SSID on the box's VLAN; UniFi portal off, isolation on |
| Ubiquiti UniFi | Dream Machine / Cloud Gateway | Router | Extra setup | Box sits behind the gateway; guest VLAN exits via the box, not the gateway |
| TP-Link Omada | EAP access points | AP | Direct | Tag the VLAN in the Omada controller; Omada portal off |
| TP-Link Omada | ER routers | Router | Extra setup | Guest VLAN is not NATed by the router; it goes to the box |
| MikroTik | cAP / wAP (RouterOS, CAPsMAN) | AP | Direct | Via bridge VLAN filtering; RouterOS hotspot off. Technical setup |
| MikroTik | hAP (RouterOS) | Router | Direct | Guest VLAN to the box outside NAT; no DNS redirection |
| Zyxel | NWA / WAX (Nebula or local) | AP | Direct | Add the box's MAC to the layer-2 isolation allow list |
| Ruijie Reyee | RAP access points | AP | Direct | Reyee cloud authentication off; VLAN to the box |
| Grandstream GWN | GWN76xx access points | AP | Direct | GWN captive portal off; box's gateway MAC in isolation |
| HPE Aruba Instant On | AP11 / AP22 / AP25 | AP | Direct | Use the bridged network type; Instant On 'guest' type does NAT |
| Keenetic | Home/office routers (AP mode) | Router | Extra setup | In AP mode on the box's LAN; guest network feature not used |
| Cudy | Routers and APs (AP mode) | Router | Extra setup | In AP mode on the box's LAN; guest network feature not used |
| TP-Link | Archer routers (AP mode) | Router | Extra setup | In access point mode on the box's LAN; guest network feature off |
| TP-Link | Deco mesh (AP mode) | Mesh | Extra setup | Main unit in AP mode; the whole mesh stays behind the box |
| Generic | Mesh systems (in AP mode) | Mesh | Extra setup | The whole mesh must be in AP/bridge mode on the box's LAN |
| Generic | RADIUS-capable AP | AP | Direct | NAS integration possible in addition to bridge mode |
| Generic | Managed switch (802.1Q VLAN) | Switch | Direct | Carries the guest VLAN tagged from the APs to the box |
| Generic | Unmanaged switch | Switch | Extra setup | No VLANs; only for a single flat guest network on the box's LAN |
| Generic | The ISP modem's own Wi-Fi | Router | Not recommended | Bypasses the box; broadcast the guest SSID on the box's LAN instead |
| Generic | SOHO router 'guest network' feature | Router | Not recommended | Isolates but keeps no records and tags no VLAN; never reaches the box |
| Generic | AP's or router's own captive portal | AP | Not recommended | Clashes with the box's screen; must be off on the guest SSID |
U6, U7, UniFi Network · Managed AP
UniFi U6 and U7 access points work with Hotspot-Box out of the box. In the UniFi Network controller you point the guest SSID at the box's LAN side (directly or as the guest VLAN); the login screen, SMS verification and Law 5651 records all stay on the box. Menu names vary between controller versions, so this page describes each setting by what it does.
Setup notesEAP series, Omada controller · Managed AP
The TP-Link Omada EAP series works with Hotspot-Box out of the box. In the Omada controller (software, hardware or cloud) you attach the guest SSID to the box's LAN side or to the guest VLAN; the login screen, SMS verification and Law 5651 records stay on the box. Menu names vary with controller and EAP firmware versions, so we describe each setting by its function.
Setup notescAP, hAP, wAP (RouterOS, CAPsMAN) · Router/AP
MikroTik cAP, hAP and wAP devices on RouterOS connect to Hotspot-Box directly. The setup is more technical than with other brands: you carry the guest SSID to the box's LAN side with bridge VLAN filtering or CAPsMAN. In return the flexibility is high. Do not use RouterOS's own hotspot service; the login screen and Law 5651 records stay on the box. Menu and command names change between RouterOS versions, so we describe each setting by its function.
Setup notesNWA, WAX, Nebula · Managed AP
Zyxel NWA and WAX series access points work with Hotspot-Box directly. Through Nebula cloud management or the device's local interface you attach the guest SSID to the box's LAN side (or to the guest VLAN); the login screen, SMS verification and Law 5651 records stay on the box. Nebula and the local interface use different menu names, and they change with firmware, so we describe each setting by its function.
Setup notesRAP series, Ruijie Cloud · Managed AP
Ruijie Reyee RAP series access points work with Hotspot-Box directly. Through Ruijie Cloud or the device's local interface you attach the guest SSID to the box's LAN side or to the guest VLAN; the login screen, SMS verification and Law 5651 records stay on the box. Do not use Reyee's own guest authentication features. Cloud and local interface menu names differ and change with firmware, so we describe each setting by its function.
Setup notesGWN76xx, GWN Manager, GWN.Cloud · Managed AP
Grandstream GWN76xx access points work with Hotspot-Box directly. Through GWN Manager, GWN.Cloud or the AP's built-in manager (master AP) you attach the guest SSID to the box's LAN side or to the guest VLAN; the login screen, SMS verification and Law 5651 records stay on the box. Menu names vary with the management surface and firmware version, so we describe each setting by its function.
Setup notesAP11, AP22, AP25, Instant On cloud · Managed AP
HPE Aruba Instant On AP11, AP22 and AP25 access points work with Hotspot-Box directly. In the Instant On cloud app you attach the guest SSID as a bridged network to the box's LAN side or to the guest VLAN; the login screen, SMS verification and Law 5651 records stay on the box. Do not use Instant On's own guest portal. Menu names change with app versions, so we describe each setting by its function.
Setup notesHome/office routers (access point mode) · SOHO router
Keenetic home and small office routers work with Hotspot-Box in access point (AP) mode. The device is switched to AP mode, connected by a LAN port to the box's LAN side, and its Wi-Fi is bridged onto the box's guest network; the login screen, SMS verification and Law 5651 records stay on the box. Keenetic's own 'guest network' feature is not used. Menu names change between KeeneticOS versions, so we describe each setting by its function.
Setup notesHome routers and APs (AP mode) · SOHO router
Cudy routers and access points work with Hotspot-Box in AP (bridge) mode. The device connects to the box's LAN side and its Wi-Fi is bridged onto the box's guest network; the login screen, SMS verification and Law 5651 records stay on the box. Cudy's own 'guest network' feature is not used. Menu names change between firmware versions, so we describe each setting by its function.
Setup notesArcher routers, Deco mesh (AP mode) · SOHO router
TP-Link Archer routers and Deco mesh systems work with Hotspot-Box in access point (AP) mode. An Archer connects to the box's LAN side and bridges its Wi-Fi; with Deco the main unit is switched to AP mode and the whole mesh sits behind the box. The login screen, SMS verification and Law 5651 records stay on the box; the built-in 'guest network' feature of Archer and Deco is not used. Menu names vary with model and firmware, so we describe each setting by its function.
Setup notesBrand and product names are trademarks of their owners; this page is not a vendor endorsement, compatibility follows from how the box works.
