Skip to main content
Version: current

AAA and User Management

This section covers RouterOS authentication, authorization, accounting, and user-management features, including local users, certificates, RADIUS, 802.1X, PPP AAA, User Manager, and HotSpot captive portal access. Use these pages to configure identity, access control, and centralized accounting services.

📄️Dot1X

Dot1X is an implementation of the IEEE 802.1X standard in RouterOS. The main purpose is to provide port-based network access control using EAP over LAN also known as EAPOL. 802.1X consists of a supplicant (client), an authenticator (server) and an authentication server (RADIUS server). Both authenticator and supplicant sides are supported in RouterOS, as well as the authentication server when User Manager package is installed. Supported EAP methods for the supplicant are EAP-TLS, EAP-TTLS, EAP-MSCHAPv2 and PEAPv0/EAP-MSCHAPv2.