Help

Quick answers for every part of your workspace. Pick a topic, or jump to the router setup guide.

Getting started

Add a plan (price, time, speed). New plans start hidden; press Publish to put one on your login page.
Connect a MikroTik router (guide below), then open your customer login page and buy a GHS 1 test plan.
Print vouchers for cash sales from Vouchers, or let customers pay with Mobile Money on the login page.

Plans and vouchers

Publish shows a plan to customers; Hide takes it off the login page but staff can still print vouchers for it.
Archive retires a plan. Codes already sold keep working, and it is never shown to customers again.
Delete removes a plan with no vouchers or sales. A plan with history is archived instead, so your records stay.
You can make up to 100 vouchers at a time. A code’s time starts at its first login.

Online payments

Customers pay with Mobile Money through Paystack on your login page.
Connect your own Paystack account and every sale goes straight to you.
Add your Paystack keys on the Paystack page in the menu. TrotroTech takes no percentage of your sales; you pay only your seat.

Staff and Station Masters

Staff are extra logins for people who help run your workspace. Your seat sets how many you can add.
Station Masters are resellers (shops, agents) who sell your vouchers and earn a commission you set. They get their own simple login.

Seats and billing

Your seat (Mate’s Seat, Passenger Seat or Front Seat) sets how many routers, staff and vouchers you get. Each limited page says what your seat includes.
Unpaid seat bills are listed on Billing under “Seat bills waiting”, with a Pay button.
The profit estimate on Business appears after your first sale and already subtracts your seat cost.

Reports

Reports show the last 30 days by default. Pick 7 days, 90 days or 12 months if your seat keeps that much history.
Session numbers appear once a router is connected and customers log in.

Troubleshooting

A customer cannot log in: check the router shows Connected on Network centre, and that the code has not expired.
A form will not save: the red message at the top of the page and under each field says what to fix.
Still stuck? Email support@trotrotech.com.

Connect a MikroTik

You need a MikroTik router on RouterOS 7 (RouterOS 6 works too) and WinBox. It takes about 5 minutes. You never type addresses or passwords.

1. Add your router
Go to Routers, press Add router and give it a name, like “Main shop”.
2. Copy and paste the setup script
On the router page press Copy. In WinBox open New Terminal, paste and press Enter. Within about 30 seconds the page says Connected. Your customers see no change yet.
3. Turn on the hotspot
Copy the one line under “Turn on the hotspot” and paste it the same way. Customers now see your login page with your plans and Pay with MoMo. The undo line is right beside it.
If the router has no hotspot yet, the setup script prints the add command. Replace <LAN> with your hotspot LAN interface (for example bridge or ether2). Give that interface an IP address first, for example /ip address add address=10.10.1.1/24 interface=<LAN>, then paste the printed add and enable lines.

Stuck? Open Advanced below, or email support. You do not need to read it to get started.

Advanced: what the script does, ports and troubleshooting

Prerequisites

RouterOS 7. The script you copy by default is for RouterOS 7. RouterOS 6 has no WireGuard; use the RouterOS 6 script (SSTP, with L2TP commented) on the same page.
A few megabytes free on the router flash, so flash/trotro/login.html, status.html, logout.html and alogin.html can be saved.
WinBox, or any terminal that can paste into the router.
The router can reach the internet on UDP 51820 (the script tries that first). If that does not complete a handshake, it also needs UDP 443. RADIUS stays inside the tunnel.

What the script does

Cleanup. Removes earlier TrotroTech objects. Only objects with comment="trotro" are touched, plus the profile named trotro.
Tunnel. WireGuard to TrotroTech at vpn.trotrotech.com, first on UDP 51820 (the standard WireGuard port). If there is no handshake after about 24 seconds (checked every 2 seconds), the script automatically tries UDP 443. The router address is assigned from the workspace pool. The platform registers the peer.
RADIUS. One RADIUS entry for hotspot, aimed at 10.66.0.1, auth 1812, accounting 1813. Incoming CoA on 3799 so the platform can disconnect a session.
Hotspot profile. Login by HTTP, cookie, and mac-cookie, with accounting interim updates every minute. The script reuses the hotspot server it finds. It does not rename yours.
Walled garden. Your workspace host, app.trotrotech.com, and the payment hosts enabled for the workspace (Paystack, MoMo, Moolre).
Login pages. Login, status, logout and already-logged-in pages are fetched with a one-time token that expires in about 60 minutes. The script never contains your TrotroTech password.
Clock. NTP, because accounting and voucher expiry need the right time.
Check-in. The router calls the platform. The router page changes to Connected. After a successful import, a scheduler pings the platform every 2 minutes so the dashboard can stay Connected without pasting the script again.
Activation, commented. Uncomment the hotspot profile line when you want customers on TrotroTech. Until then your existing hotspot profile stays in place.

Ports

UDP 51820 — WireGuard (preferred). Fallback UDP 443.
UDP 1812 — RADIUS authentication, inside the tunnel, to 10.66.0.1.
UDP 1813 — RADIUS accounting.
UDP 3799 — CoA / disconnect, from the platform to the router.

Do not publish 1812 on the public internet. Phones never talk to RADIUS directly.

Activation and rollback

The script prints the rollback line with the profile it found. The connect page also has the full cleanup. Rollback sets the hotspot profile back, then removes comment="trotro" objects. Run activation only when a voucher login is what you want on that router.

Auto-reconnect

The hotspot profile logs in with cookie and mac-cookie, and the default user profile keeps a MAC cookie for a day. A phone that already has a valid voucher can return without typing the code again, until the cookie or the voucher ends. The data cap still counts every reconnect.

Troubleshooting

What you see	What to do
No handshake	The router has not completed WireGuard. The script tries UDP 51820 first. If there is no handshake after about 24 seconds, it automatically tries UDP 443. Confirm the router can reach the endpoint on those UDP ports. The dashboard stays Waiting until check-in.
No route	Test RADIUS says No route when this platform has no tunnel route to the router. Paste the script and wait for Connected. RADIUS at 10.66.0.1 is only reachable through the tunnel.
Timeout (tunnel down)	A route exists but FreeRADIUS did not answer. The tunnel may be up with no handshake, or FreeRADIUS is stopped. Check Last seen and ask operations to confirm the RADIUS service.
Reject (wrong secret)	The secret on the router does not match the one stored here. Rotate the secret, copy the new script, and paste it again. FreeRADIUS also needs a reload after a new router so it reads the nas table. That reload is an operations task.
Clock skew	Accounting and expiry look wrong when the router clock is off. The script enables NTP. In WinBox, check System > Clock and NTP client.
Login page does not load	The token may have expired (about 60 minutes). Refresh the script on the router page and paste again, or confirm flash/trotro/login.html (and status.html, logout.html, alogin.html) exist. The hotspot profile must use that HTML directory.
Payment page blocked	The phone cannot reach Paystack, MoMo, or Moolre. Re-run the script so the walled garden includes the hosts enabled for this workspace, then try the payment again before the voucher exists.

TrotroTech 13.9.14