The MikroTik + RADIUS Stack
If you run an ISP with MikroTik routers, you already know the power of RouterOS. But managing subscriber authentication, bandwidth allocation, and usage tracking manually doesn't scale beyond a few hundred users.
That's where RADIUS (Remote Authentication Dial-In User Service) comes in — and when paired with the right billing platform, it becomes a fully automated subscriber management system.
How It Works
Customer Device → MikroTik (PPPoE) → RADIUS Server → Billing System
↑ |
└──── Bandwidth Profile / Queue ←──────┘
- Customer connects via PPPoE
- MikroTik sends auth request to RADIUS
- RADIUS checks billing system — is the account active? What plan?
- Returns bandwidth profile — MikroTik applies the queue automatically
- Usage is tracked for accounting and fair usage policies
Key Benefits
Automatic Provisioning
When a customer subscribes or upgrades, the billing system pushes the new profile to RADIUS. Next time they connect, they get the new speed. No manual router changes.
Auto-Suspend/Reconnect
Overdue account? The system sends a CoA (Change of Authorization) to MikroTik, redirecting the customer to a payment page. Once they pay, reconnection is instant.
Bandwidth Management at Scale
Dynamic queue management through RADIUS attributes means you can handle 10,000+ subscribers on a single MikroTik CCR without manually creating queues.
Usage Accounting
RADIUS interim-updates give you real-time bandwidth consumption per subscriber — essential for FUP (Fair Usage Policy) enforcement.
Setting Up the Stack
For this to work seamlessly, you need:
- MikroTik router with PPPoE server configured
- FreeRADIUS (or similar) connected to your billing database
- ISP billing software that manages the subscriber lifecycle
ISPbills integrates natively with FreeRADIUS and MikroTik. It handles subscriber provisioning, bandwidth profiles, auto-suspend/reconnect, and real-time monitoring — all from a single dashboard.
👉 See the integration details: https://ispbills.com/integrations
Common Pitfalls
- Don't use static queues for large subscriber bases — use RADIUS-driven dynamic queues
- Enable interim accounting (every 5-10 min) for accurate usage data
- Set up CoA (Change of Authorization) for real-time plan changes without disconnection
- Monitor your RADIUS server — if it goes down, new connections fail
Conclusion
The MikroTik + RADIUS + Billing trifecta is the standard architecture for modern ISPs. If you're still managing subscribers manually through Winbox, you're creating unnecessary work and risking errors at scale.
What's your MikroTik subscriber management setup? Share your experience below.
