BlogStep-by-Step Guide: MikroTik RADIUS Configuration
Back to blog
Tutorials

Step-by-Step Guide: MikroTik RADIUS Configuration

Alex Mercer•June 10, 2026•8 min read

RADIUS (Remote Authentication Dial-In User Service) is the industry-standard networking protocol for coordinating authentication, authorization, and accounting (AAA) logs across devices. In this guide, we will connect your local MikroTik RouterOS device to the HotspotSaaS cloud server.

Step 1: Configure RADIUS Server details

Open your MikroTik WinBox tool, click on the RADIUS menu in the sidebar, and add a new configuration server. Input the following details:

/radius add service=hotspot address=radius.hotspot.com secret="YourSharedRADIUSSecret" comment="HotspotSaaS"

Step 2: Enable RADIUS accounting inside Hotspot Profiles

Navigate to the IP > Hotspot list. Under the Server Profiles tab, open your active hotspot profile, tick the Use RADIUS checkbox, and ensure the login parameters permit PAP authentication.

/ip hotspot user profile set [ find default=yes ] idle-timeout=5m keepalive-timeout=none
/ip hotspot profile set [ find default=yes ] use-radius=yes login-by=http-pap
Tip: PAP authentication is required so the RADIUS server can verify user-submitted credentials against database bcrypt records securely.