Engineering Blueprint · RouterOS Integration

MikroTik RouterOS & FreeRADIUS Billing Integration Guide

A step-by-step configuration manual for ISP engineers on connecting MikroTik CCR routers to central FreeRADIUS AAA, setting up incoming CoA ports, and automating subscriber plan enforcement.

1. RouterOS RADIUS Client Configuration

To enable RADIUS authentication for PPPoE server interfaces, execute the following CLI commands inside RouterOS Terminal:

/radius add service=ppp,dhcp address=10.100.0.5 secret="KashtrixRADIUSSecret2026" timeout=3000ms
/radius incoming set accept=yes port=3799
/ppp aaa set use-radius=yes accounting=yes interim-update=5m
K

Kashtrix Telecom Architecture Team

Verified Author

Senior MikroTik & BNG Integration Architect

Verify Profile

Specializes in MikroTik RouterOS v7 performance tuning, PPPoE server scaling, and automated billing synchronization.

Verified Technical Certifications & Standards
CCIE Service ProviderHuawei HCIE-CarrierMikroTik MTCINEKashtrix Certified Architect
Verified Deployment Architecture

[Verified Operator Case Study - Name Confidential]

50,000+ Active FTTH Subscribers
Operational Challenge

Legacy billing software caused high dunning churn, database deadlocks during bill run peak hours, and lacked automated CGNAT subpoena log retrieval.

Kashtrix Solution

Deployed Kashtrix Unified OSS/BSS with integrated FreeRADIUS AAA clusters, automated WhatsApp invoice dunning, and 100k EPS Syslog CGNAT collector.

Measured Technical Outcomes

✓ Zero billing run database lockups across 50,000 accounts
✓ 42% reduction in subscriber payment delinquency via automated dunning
✓ Subsecond CGNAT subpoena IP-port lookup speed for legal compliance

2. Frequently Asked Questions

What ports must be opened on MikroTik for RADIUS CoA disconnections?

MikroTik RouterOS listens on UDP port 3799 for incoming RADIUS CoA and Disconnect messages (`/radius incoming set accept=yes port=3799`).

How does Kashtrix automatically apply bandwidth rate limits on MikroTik PPPoE active sessions?

Upon subscriber login or plan upgrade, Kashtrix transmits the `Mikrotik-Rate-Limit` RADIUS attribute (e.g., `100M/100M 0/0 0/0 0/0 8 10M/10M`), creating dynamic simple queues inside RouterOS.

Does Kashtrix support MikroTik RouterOS v6 and v7?

Yes. Kashtrix supports both RouterOS v6 and v7 REST APIs, SSH CLI, and RADIUS AAA attributes.

← Back to Technical BlueprintsExplore MikroTik Solution