Device Management and MAC Bindings

Learn how Nukta handles automatic MAC authentication, concurrent device limits, seamless Wi-Fi roaming, and browserless Smart TV bindings.

Intelligent device management

In modern ISP environments, managing the physical devices that connect to your network is essential for both user convenience and revenue protection. Customers expect seamless Wi-Fi roaming where their phone connects automatically without repetitive login screens. Simultaneously, operators must enforce package limits to prevent a single low-cost subscription from being shared across multiple unauthorized devices.

Nukta solves this balance through automated hardware MAC binding, dynamic device limits, and dedicated pairing flows for browserless Smart TVs and gaming consoles.

How automatic MAC binding works

When a walk-in customer connects to your Wi-Fi hotspot and activates a package:

1. Hardware Detection: Nukta detects the device's unique media access control (MAC) address (e.g., 1A:2B:3C:4D:5E:6F) as part of the initial captive portal handshake.
2. Account Linking: The MAC address is securely linked to the customer's account in their profile's Devices tab.
3. Seamless Auto-Login: For the full duration of their active plan:
   • The customer can toggle Wi-Fi off and on.
   • They can roam freely between different access points and outdoor antennas across your network.
   • They will never be interrupted by the captive portal login prompt as long as their subscription remains valid.

Enforcing concurrent device limits

To ensure fair bandwidth distribution and prevent subscription sharing, Nukta allows you to set strict Device Limits on each package in Finance → Packages:

Device Allowance	Recommended Use Case	Customer Experience
1 Device	Standard walk-in hotspot plans (e.g., 3-Hour or 24-Hour vouchers).	Only the specific smartphone or laptop used to purchase the package is granted internet access.
2 to 4 Devices	Family, student hostel, or multi-device plans.	The customer can link their primary phone, a laptop, and a tablet under a single shared plan.
Unlimited	Fixed residential fiber and commercial CPE routers.	The customer's home router handles local Wi-Fi distribution to all household devices without restriction.

What happens when the device limit is reached?

If a customer with a 1-device package attempts to log into their account from a second smartphone:

1. The captive portal intercepts the second device.
2. The screen displays a clear notification:

   "You have reached the maximum number of devices allowed for your plan. Please disconnect an existing device or upgrade your package."

3. The customer can open their self-service portal to remove an inactive device, or contact your support team to unlink old hardware.

Browserless device pairing (Smart TVs & consoles)

Many connected devices—such as Smart TVs, streaming media boxes, and gaming consoles—do not have a standard web browser to complete a traditional captive portal sign-in.

Nukta provides an automated self-service pairing screen for these devices:

1. When a Smart TV or console connects to your Wi-Fi, it displays a pairing interface with a large 4-digit pairing code and a QR code.
2. The customer scans the QR code or enters the code on their smartphone.
3. The smartphone loads the package purchase screen with the TV's pairing code automatically pre-filled.
4. Once the customer completes the payment, Nukta authorizes the device's MAC address instantly.
5. The TV or console connects to the internet immediately without manual configuration or password entry.

(Learn more in our Smart TV Portal Guide).

Unlinking devices and managing hardware

Over time, customers upgrade phones or replace faulty laptops. Managing their linked devices is simple:

1. Open the customer's profile in Users → Customers → View Customer and navigate to the Devices tab.
2. Review the list of authorized hardware, including device MAC addresses and the date each device was first linked.
3. To remove a device, click the Unlink button next to its MAC address.
4. The device slot is freed immediately, allowing the customer to register their new hardware upon their next connection.

Troubleshooting MAC address randomization

Modern operating systems (such as iOS 14+, Android 10+, and Windows 11) feature Private Wi-Fi Addresses (MAC address randomization) enabled by default for public Wi-Fi networks:

• The Problem: When MAC randomization is active, the device may generate a new, pseudo-random MAC address periodically. If this happens, Nukta sees the device as an unknown new hardware unit and displays the captive portal login prompt again.
• The Solution for Customers: If a customer reports seeing the captive portal repeatedly despite having an active plan:
  1. Open Wi-Fi Settings on their smartphone or laptop.
  2. Tap the info (ℹ️) or gear icon next to your network name.
  3. Change Private Wi-Fi Address or MAC Address Type from Randomized to Device MAC / Phone MAC.
  4. Reconnect to the network. Their hardware MAC will remain stable, and auto-login will function uninterrupted.