This page provides comprehensive guidance on configuring authentication, authorization, and accounting (AAA) in MikroTik RouterOS. It covers local users, certificates, RADIUS, 802.1X, PPP AAA, User Manager, and HotSpot captive portal access.
This page documents CAPsMAN (Centralized Access Point Management) in RouterOS, covering configuration of wireless controller settings including AAA authentication, RADIUS server integration, access lists for client management, and security profiles. It provides detailed parameters like MAC address formatting, caching intervals, and RADIUS accounting updates, along with example configurations for radius authentication across multiple SSIDs.
This page introduces the container feature in MikroTik RouterOS for running servers like RADIUS within the router, detailing setup steps including container mode activation, networking configuration, and image pulling for FreeRADIUS server deployment.
This page documents MikroTik RouterOS's Dot1X implementation, covering client and server configurations for IEEE 802.1X port-based network access control using EAP methods like TLS, TTLS, and PEAP.
Customize HotSpot authentication pages by overriding default HTML files stored on the router's FTP server, specifying custom directories via 'html-override-directory' in HotSpot profiles. Choose from predefined pages like login.html, status.html, and logout.html, or create custom ones with variables like $(username) and $(password).
This page lists MikroTik RouterOS menus where sensitive parameters such as passwords, keys, and secrets are configured, with links to detailed documentation for each.
MikroTik RouterOS PPP AAA functionality provides authentication, authorization, and accounting with local and RADIUS support. PPP profiles define default settings for user access records, including bridge configurations, rate limiting, and security options like encryption and compression.
RADIUS enables centralized authentication and accounting for PPP, HotSpot, and other services in MikroTik RouterOS by connecting to a RADIUS server via UDP or RadSec protocol, with configurable ports, shared secrets, and service-specific settings.
MikroTik RouterOS User management page details user authentication via local or RADIUS servers, password complexity settings, user group policies defining access rights, and router user database properties including login addresses, inactivity actions, and password management.
User Manager in RouterOS provides centralized RADIUS authentication and authorization for services like DHCP, Hotspot, and PPP with support for multiple authentication methods. It includes customizable RADIUS attributes for tunnel configurations and session management, with licensing affecting active sessions.