MikroTik RouterOS is one of the most widely used networking platforms among ISPs, WISPs, FTTH providers, and hotspot operators. Its flexibility, affordability, and powerful routing features make it an ideal choice for subscriber management networks.

However, managing subscribers directly on routers becomes difficult as networks grow. This is where integrating MikroTik RouterOS with OneRADIUS AAA Server becomes extremely valuable.

By connecting MikroTik to OneRADIUS, ISPs can centralize authentication, automate bandwidth management, monitor user sessions, and simplify subscriber operations.

What is OneRADIUS?

OneRADIUS is a centralized AAA (Authentication, Authorization, and Accounting) platform designed for ISPs, WISPs, FTTH providers, hotspot operators, and enterprise networks.

The platform helps administrators manage:

  • PPPoE subscribers
  • DHCP authentication
  • Hotspot users
  • Bandwidth policies
  • Voucher systems
  • Session accounting
  • Billing integration
  • Real-time monitoring

Why Integrate MikroTik with OneRADIUS?

Using local user management on routers may work for small deployments, but large ISP networks require centralized control.

  • Centralized subscriber management
  • Automated user authentication
  • Dynamic bandwidth assignment
  • Session monitoring and accounting
  • Multi-router management
  • Real-time user control
  • Voucher and hotspot management
  • Billing and renewal automation

Prerequisites Before Configuration

Before starting the integration process, ensure the following components are ready:

  • MikroTik RouterOS device
  • Public or reachable OneRADIUS server
  • Stable internet connectivity
  • RADIUS shared secret key
  • Subscriber plans configured in OneRADIUS

Network Architecture Overview

In a typical deployment:

  • MikroTik acts as the NAS (Network Access Server)
  • OneRADIUS acts as the AAA server
  • Subscribers connect through PPPoE, DHCP, or Hotspot login
  • MikroTik forwards authentication requests to OneRADIUS
  • OneRADIUS validates users and sends policies back to MikroTik

Step 1 — Add MikroTik NAS in OneRADIUS

The first step is registering the MikroTik router inside the OneRADIUS platform.

Required details include:

  • Router Name
  • Router IP Address
  • NAS Type (MikroTik)
  • Shared Secret
  • Branch or Location

The shared secret must match exactly on both MikroTik and OneRADIUS.

Step 2 — Configure RADIUS on MikroTik RouterOS

Now configure MikroTik to communicate with OneRADIUS.

Navigate to:

IP → RADIUS

Add the following details:

  • Service: PPP, Hotspot, DHCP
  • Address: OneRADIUS Server IP
  • Secret: Shared Secret
  • Authentication Port: 1812
  • Accounting Port: 1813

Enable accounting to allow session tracking and usage monitoring.

Step 3 — Enable AAA Authentication

Enable AAA authentication for PPPoE, Hotspot, or DHCP services.

Navigate to:

PPP → AAA

Enable:

  • Use Radius = Yes
  • Accounting = Yes
  • Interim Update = 00:05:00

Step 4 — Configure PPPoE Server

PPPoE is one of the most commonly used authentication methods for ISPs.

Navigate to:

PPP → PPPoE Server

Configure:

  • Service Name
  • Interface
  • Default Profile
  • Authentication Method

Once configured, MikroTik forwards subscriber login requests directly to OneRADIUS.

OneRADIUS can dynamically assign:

  • Bandwidth speed
  • IP pools
  • Session limits
  • Rate limits
  • Static IP addresses

Step 5 — Configure DHCP Authentication

Some ISP deployments use DHCP authentication instead of PPPoE.

In this method:

  • Users receive IP addresses automatically
  • Authentication occurs through MAC or captive portal
  • OneRADIUS controls user authorization and accounting

Benefits of DHCP authentication include:

  • Simplified customer setup
  • No PPPoE credentials required
  • Faster onboarding
  • Reduced support requests

Step 6 — Configure MikroTik Hotspot Authentication

MikroTik hotspot functionality is ideal for hotels, hospitals, cafés, airports, and public WiFi zones.

Navigate to:

IP → Hotspot

Configure:

  • Hotspot interface
  • IP pool
  • DNS settings
  • Login page

Enable RADIUS authentication under:

IP → Hotspot → Server Profiles

Enable:

  • Use Radius = Yes

MikroTik will now authenticate hotspot users through OneRADIUS.

Step 7 — Configure Bandwidth Profiles

Bandwidth management is handled centrally through OneRADIUS.

You can create plans such as:

  • 50 Mbps Home Plan
  • 100 Mbps Business Plan
  • 5 Mbps Guest WiFi
  • Unlimited Premium Package

OneRADIUS automatically pushes rate limits to MikroTik during user login.

Step 8 — Enable Accounting and Session Monitoring

Accounting is essential for tracking user sessions and internet usage.

OneRADIUS records:

  • Login time
  • Logout time
  • Session duration
  • Upload/download usage
  • Assigned IP addresses
  • NAS information

This information is useful for:

  • Billing systems
  • User analytics
  • Troubleshooting
  • Compliance requirements

Testing the Integration

After configuration, test subscriber authentication carefully.

  • User successfully authenticates
  • Bandwidth policy is applied
  • Accounting logs appear in OneRADIUS
  • Session disconnect works correctly
  • Voucher or hotspot login functions properly

Common Troubleshooting Issues

Authentication Failed

  • Check shared secret mismatch
  • Verify firewall ports 1812 and 1813
  • Confirm NAS IP configuration

User Connected but No Internet

  • Verify IP pool configuration
  • Check NAT settings
  • Confirm gateway and DNS settings

Accounting Not Updating

  • Ensure accounting is enabled
  • Enable interim updates
  • Verify RADIUS accounting port access

Advanced Features Supported by OneRADIUS

  • Voucher Management
  • Multi-Branch Management
  • OTP Authentication
  • Real-Time Monitoring
  • Subscriber Analytics
  • Centralized Bandwidth Policies

Why ISPs Prefer MikroTik + OneRADIUS

The combination of MikroTik RouterOS and OneRADIUS offers affordable ISP infrastructure with centralized AAA management and scalable subscriber control.

ISPs can automate authentication, simplify operations, improve monitoring, and deliver better customer experiences through centralized management.

Conclusion

Integrating MikroTik RouterOS with OneRADIUS creates a powerful and scalable subscriber management platform for ISPs, WISPs, FTTH providers, and hotspot operators.

Whether you are deploying PPPoE authentication, DHCP-based networks, or hotspot captive portals, OneRADIUS simplifies authentication, authorization, accounting, bandwidth management, and monitoring.

For growing ISP networks that require reliability, automation, and centralized control, MikroTik + OneRADIUS is an excellent solution.