Device passthrough hotspot without authenticating

Setup a hotspot with manually input usernames and passwords. Would like some devices to simply bypass the HS login requirements.
Is that best done with a firewall filter or in the HS IP Bindings tab?

I would use “/ip hotspot ip-binding” to bypass the hotspot. If the device is a dhcp client, use the mac address to bypass.

/ip hotspot ip-binding
add mac-address=xx:xx:xx:xx:xx:xx type=bypassed

You can use the ip to bypass the hotspot, but that is not reliable if the ip is issued by a dhcp server. The ip could change, the mac address will not.

I see that, when using winbox, you cannot setup the passthrough without an IP address. When I used CLI, it automatically entered 0.0.0.0 as an IP.
Still need to check with user to verify if it worked but will the device now receive an IP of 0.0.0.0 or does this tell the router something specific?

Imagine the IP binding entries as filters. Only devices that match all the parameters have that binding action applied. If you fill out the MAC and IP only devices with both that MAC and IP match. If you don’t fill out the IP (default stays 0.0.0.0 as per the manual) then all IPs match and just the MAC address has to be the specific string you entered.

Believe I got it. Thanks Fewi
0.0.0.0 is a sort of white washing value attributed to all hosts whereas 0.0.0.0/0 is applicable to all routes when used in that context.
What part of the manual would cover this particular subject? There are probably other nuggets I should make myself aware of.

http://wiki.mikrotik.com/wiki/Manual:IP/Hotspot#IP_Bindings
That actually states that the default is “”, which appears to be true on 4.16. I could have sworn I’ve seen 0.0.0.0 used as a default before. But just tested at home and 0.0.0.0/0 will also work in 4.16.

There are some idiosyncrasies between winbox and the CLI.