Use NetOps with confidence.

Open the security setup when NetOps prompts you after creating your first site.

Scan the QR code with Google Authenticator, Microsoft Authenticator, 1Password or another time-based authenticator.

If you cannot scan it, copy the manual key into the authenticator app.

Enter the fresh six-digit code to finish. From then on, NetOps opens a small verification window only when an important action needs approval.

The trial lets you build and test one site, one router and five customer records without a card.

Open Balance & access or use Top up to add prepaid balance through an available platform payment method.

Your rolling 30-day funding history sets the number of sites, routers, web addresses and team seats available to the account.

Existing records are not deleted when access reduces. NetOps warns you before controls pause, then restores them after the account meets the current minimum again.

Platform services, including VPN passes, are paid from prepaid balance and appear in account activity.

Open Sites and choose Add site.

Give the site a clear name, such as Central Office or Riverside Estate.

Choose the country, enter the street address, city and postcode, then choose the site type.

The country sets a sensible timezone automatically. Change the timezone only when the location needs a different one.

Save the site. NetOps opens the workspace and guides you to router connection and publishing.

Open a site from Sites. The site name, status and main actions remain at the top while you work.

Use Overview for health and setup progress; Routers for equipment; Customers for subscribers; Transactions and Vouchers for sales and access.

Use IP pools for address ranges, Gateways for customer payments, Branding and Domains for the public website, Tickets and Live chat for support, VPN for exit routing, and Plans for what customers can buy.

The quick actions on Overview take you straight to the next unfinished setup task.

Open the site, choose Routers, then Add router.

For MikroTik RouterOS 7+, enter only a friendly name. NetOps fills the MAC address, model, version and interfaces after enrolment.

For another PPPoE or RADIUS-capable device, choose the standards-based option and enter its NAS identifier and shared secret.

Save. MikroTik users receive a short-lived enrolment command; other devices receive the RADIUS details needed for their own configuration.

On the enrolment page, choose Copy command. A confirmation appears when the command is on your clipboard.

Open a RouterOS terminal as an administrator, paste the complete command once and press Enter.

Keep the NetOps page open if convenient. It checks automatically and moves on as soon as the router reports in.

If the token expires before you run it, create a fresh enrolment command. Never reuse an old token on another router.

Open Routers and choose the router name.

The status pulse shows whether recent telemetry is arriving. Public IP, CPU, memory, uptime and current send and receive rates refresh automatically.

Expand an interface group to see Ethernet, bridges, Wi-Fi, LTE, WireGuard and other detected types. Expand one interface for totals and available controls.

Connected PPPoE, Hotspot and Wi-Fi clients show their reported IP address where RouterOS provides it.

IP pools discovered on the router are added to the site with their interface, assigned, in-use and free counts.

Open an eligible interface to enable or disable it. NetOps asks for a fresh authenticator code before queuing the action.

Use Restart for a controlled RouterOS reboot. The router may appear offline briefly while it starts again.

Use Parent controls to pause client internet, set recurring quiet hours and block or allow website domains.

Use Advanced tools for live checks such as reachability, route tracing, DNS, router health, sessions, interfaces, LTE and recent warnings.

Watch the action result. Applied means RouterOS confirmed it; Failed includes the message returned by the router.

Open the router and choose Parent controls.

Use Block internet for an immediate pause. The router and its NetOps control connection remain available so you can reverse the change remotely.

Expand Weekly quiet hours, choose the days, enter the block and restore times, then save. The schedule uses the site timezone and stays on the router when the browser closes.

Expand Website restrictions and enter only a domain such as youtube.com. Remove a domain with Allow again.

Check Recent router confirmations. A change is complete only after RouterOS reports Applied.

Open the router and choose Advanced tools.

Choose a tool across the top, such as internet quality, route trace, DNS, interface status, DHCP leases, Hotspot sessions, PPPoE sessions, LTE or recent warnings.

Enter a destination only when the selected check needs one, then choose Run check.

Keep the page open while NetOps waits for RouterOS. The result card changes from queued to Applied or Failed and shows the returned detail.

Use Restart router only when a reboot is necessary. The verification window opens before the command is sent.

Open the router and choose Captive portal.

Use an existing Hotspot network when RouterOS already has the interface and pool you want. NetOps keeps that exact interface and pool together.

Choose an isolated guest network when you want NetOps to create a separate bridge and guest range. Select only ports or Wi-Fi interfaces intended for guests.

Review the detected pool, assigned addresses and availability, enter your authenticator code, then enable.

NetOps waits for RouterOS confirmation. New guests are redirected to the site’s custom domain when it is healthy, otherwise to the free NetOps subdomain.

Open the site and choose IP pools.

Each discovered pool shows its complete RouterOS range, router, assigned interface and purpose.

Read Assigned for the usable addresses in the range, In use for addresses currently observed across leases and active clients, and Free for what remains.

Use the router link when an automatically discovered range needs to be changed at its source.

When enabling Hotspot on an existing network, choose the Hotspot server whose interface and pool match this page.

Open Customers and choose Add customer. Enter the customer’s name, email, searchable country, phone number and address.

Choose a PPPoE plan when the service is ready to be assigned. NetOps creates a short RADIUS identity and a separate network password.

Send the invitation. The customer uses the email link to create their website-account password; their RADIUS password remains separate.

Use Resend invitation when the first link expires. Use Reset account password for website access or Reset RADIUS password to rotate network credentials.

Use the filters to find online, offline, invited or disabled customers. Open Emails on a customer record to see notices already sent.

Open Customers and use the status filters for online, offline, invitation pending or disabled records.

Open a customer to review the assigned plan, current connection, RADIUS identity, service dates, contact details and sent emails.

Use Message for a direct notice, Resend invitation when the website-account invitation has not been accepted, or Reset account password when access must be recovered.

Use Reset RADIUS password to rotate only the customer’s network credential. It does not change their website-account password.

Disable a customer when service should stop without deleting billing and activity history.

Open Plans and choose Add service plan.

Choose PPPoE subscription or Hotspot voucher. Enter a clear name, description, speed, duration, price and site currency.

PPPoE plans may have a one-time setup fee; zero is allowed. Hotspot plans do not use a setup fee and always allow one simultaneous device per voucher.

Choose unlimited data or enter a plain allowance such as 50 GB. NetOps displays whole values instead of scientific notation.

Publish the plan for new orders, keep it operator-only, or Hide it to preserve existing assignments while removing it from new selections.

Open Vouchers and choose Generate voucher.

Select a Hotspot plan. The speed, duration, allowance and price summary updates immediately.

Choose Display, Print or Send. Send asks for the recipient’s email; the other choices open the same clean voucher receipt.

Copy the code before leaving a display-only result. Emailed vouchers can be resent while they are still valid.

The dashboard separates unused, in-use, used, expired and revoked vouchers. Live sessions show the device, IP address, time online, traffic and allowance left.

Open Vouchers and read the four overview counters for total issued, used, in use and unused.

Expand Vouchers in use now to see each active device, IP address, router, time online and live traffic.

Compare Allowance left and Time left with the selected plan. These values refresh automatically while RouterOS reports the session.

Expand Voucher history for issue time, first use, issuer, delivery method, expiry and current status.

Revoke access if a code is exposed or being used by the wrong device.

Open Transactions and filter by today, this week, this month, successful, pending or failed.

Open a payment to see its gateway reference, item, customer, amount, currency and status.

For bank transfer, confirm the transfer only after it reaches the operator’s bank account.

Customers can open their account on the operator website to view and print receipts carrying the operator logo, customer details and purchased item.

Use Export CSV when you need the selected records in a spreadsheet.

Open Gateways. Search by gateway or payment method, or use the country recommendation filter.

Choose Configure on a gateway and enter every required live credential. The fields change to match that provider.

Save, then enable the gateway. Only enabled gateways appear on the site’s checkout and in the website footer.

For Bank transfer, enter the bank name, account name, account number and any payment instructions customers need.

If a needed gateway is missing, choose Recommend a gateway, submit its name, website, country and reason, then follow the request tracker.

Open Branding. Add the business name, contact details, logo, favicon and preferred colours.

Edit the three homepage slides with short headlines and supporting text, or let NetOps create a starting design from the site name and chosen colours.

Preview changes on desktop and mobile, then save and publish.

The public website shows PPPoE and Hotspot plans separately, hides Create account for signed-in customers, and shows only enabled payment methods.

The captive portal uses the same brand but remains a focused voucher sign-in page rather than the full public website.

Open Domains and search for a memorable name under netops.trejj.net.

Availability updates while you type. Claim the name when the page shows that it is free.

NetOps prepares routing and HTTPS in the background. You can leave the page; the job continues and the status refreshes automatically.

When it is ready, use Edit website or Publish website. The operator receives a confirmation email.

Open Domains and choose Add custom domain.

Enter only the hostname, for example portal.yourbusiness.com. Do not include https://, a path, port or wildcard.

At the domain’s DNS provider, create an A record. Use the exact host shown by NetOps and point it to 51.79.124.115.

Return to the domain page. NetOps checks automatically until the record is visible, then links the domain, obtains HTTPS and publishes it.

The custom domain and free NetOps subdomain open the same website. The captive portal prefers the healthy custom domain and falls back to the free address when needed.

Open Live chat from the site header. Online visitors appear separately from earlier conversations, with country, device and current page where available.

Pick a conversation, type a reply and press Enter to send. Use Shift+Enter for a new line.

Allow browser alerts and sound if the team wants prompts for new requests and messages while another tab is active.

When the desk is offline, the website widget collects the visitor’s name, email and message, creates a ticket and tells the visitor that the team will reply shortly.

Open Support tickets from the account menu to contact TREJJ NetOps, or Tickets inside a site to manage that site’s customer requests.

Choose a category, write a useful subject and explain what happened, what you expected and which site or router is affected.

Open a ticket to add replies and follow status changes.

Offline chat messages can create tickets automatically so the team can continue the conversation later.

Open Team and choose Invite member. Enter the person’s name, email and phone number.

Choose All permissions or select individual abilities such as sites, routers, customers, plans, vouchers, payments, websites, support, billing or team management.

Send the invitation. The member stays Pending until they use the email link, create a password and set up two-step verification.

Resend or cancel a pending invitation. Edit an active member’s permissions or remove access when their role changes.

Important activity records the person who created, edited, deleted, issued, paid or controlled an item.

Open the site’s VPN tab. VPN plan status shows whether each router has Data centre or Residential access and the exact expiry time.

Compare the Data centre and Residential rates shown once above the location list.

Search by country or location, or filter the list by type. Choose the router and select Connect on the location you want.

If no plan is active, NetOps opens a clear confirmation showing location, router, pass length and charge before using prepaid balance.

A valid pass lets the router roam between online locations of the same type. Disconnect the current exit before moving to another type or location.

After confirming Connect, stay on the VPN tab. The router session changes to Connecting while NetOps and RouterOS prepare the private route.

Active appears only after the router reports a recent secure handshake and completes the reachability check.

The live card shows the selected location, access type, exact time remaining, connection duration, downloaded data, uploaded data and total data.

Hotspot sign-in, DNS and the NetOps management path remain outside the client catch-all route so new guests can still authenticate.

Choose Disconnect to restore the router’s normal internet path. If connection fails, the same card shows the RouterOS or exit-node message instead of hiding it.

Open Partners and create a partner profile with your name, business name, country, phone number, work description and estimated monthly introductions.

Share the partner ID. A new operator searches and selects it during registration.

When that operator reaches $10 in qualifying platform spend, the partner earns $5, then 10% of later qualifying spend for 12 months.

The partner dashboard shows referred operators, qualifying spend, maturity countdown, projected earnings, USD balance and a local-currency estimate.

Request payout through USDT on TRON, PayPal, bank transfer or platform credit. Admin approval and payment updates appear in the tracker and by email.

Confirm the router itself has internet and can resolve netops.trejj.net.

Open the router and use Update live agent when the installed command is older than the current version.

Check RouterOS clock and timezone. A badly wrong clock can break HTTPS certificate checks and schedules.

Confirm outbound HTTPS is allowed and the NetOps scripts and schedulers are enabled.

When two uplinks are present, keep a stable default route and working DNS. Avoid policy rules that send the NetOps management destination into a client-only VPN route.

Try http://neverssl.com from a new guest device. HTTPS-only pages may not trigger the operating system’s sign-in prompt by themselves.

Confirm the device received an address from the pool tied to the selected Hotspot interface.

Check that the Hotspot server is enabled and only one server owns that interface.

Confirm the site domain shows HTTPS ready and the router can reach the /connect/ sign-in address.

If VPN is active, confirm Hotspot, DNS and NetOps management exceptions appear before the VPN catch-all route.

Read the message on the sign-in page. It distinguishes invalid, expired, revoked, already-used and temporarily unavailable vouchers.

Confirm the voucher belongs to a published Hotspot plan and still has time and data remaining.

Open Vouchers and expand In use now. Check that the device MAC and IP match the guest attempting access.

If the voucher appears in use but traffic stays at zero, check the Hotspot session, firewall order, DNS and active VPN exceptions on the router.

Revoke a compromised voucher and issue a new one. Do not increase its use count to work around an unrelated router fault.

Open Support tickets and choose the category that best matches the problem.

Name the site and router, state when the problem started and describe the last action that worked.

Include the exact on-screen message and a screenshot with customer details hidden.

For router problems, include RouterOS version, connection type and whether ordinary client traffic still works.

Never send passwords, authenticator codes, payment keys, private keys or complete enrolment commands.