Using MikroTik User Manager for Hotspot Authentication and Voucher Systems Print

Hello there, and welcome back! I’m Corels from Emmanuel Corels Creatives, and today we’re exploring a feature that makes managing user access on your network both efficient and professional: MikroTik User Manager. In this guide, we’ll dive into setting up User Manager for Hotspot authentication and voucher-based access. I’ll explain every step, what each parameter means, and how this system can benefit your network—whether you’re running a café, a hotel, or a small business network.

What Is MikroTik User Manager?

MikroTik User Manager is a built-in RADIUS server solution designed to centralize user authentication, authorization, and accounting. It’s especially popular in Hotspot environments where you need to control access for many users, issue vouchers, and track usage. With User Manager, you can:

• Create user accounts and vouchers with specific time or data limits.
• Manage multiple Hotspot devices from a single central interface.
• Monitor user activity and bandwidth consumption for billing or troubleshooting purposes.

In short, it provides a robust yet user-friendly way to handle network access for a diverse group of users.

Step 1: Installing and Accessing User Manager

Installation

User Manager is available as an additional package for MikroTik devices. In RouterOS v6, you’ll often need to download and install it manually, while in RouterOS v7, some versions come with it pre-installed. Check under System → Packages to see if “user-manager” is present. If not, download it from the MikroTik website and install it following the provided instructions, then reboot your router.

Accessing the Interface

Once installed:

1. Open your web browser.
2. Enter the IP address of your MikroTik router followed by /userman (e.g., http://192.168.88.1/userman).
3. Log in using your router’s administrative credentials.

This will bring up the MikroTik User Manager interface, where you can begin configuring user profiles, vouchers, and other settings.

Step 2: Configuring the User Manager

2.1 Set Up the Router as a RADIUS Client

User Manager needs to know which routers it will manage:

1. In User Manager, navigate to the Routers section.
2. Click “Add New”.
3. Enter a Name for your router (e.g., “MainHotspot”).
4. IP Address: Enter your router’s LAN IP (e.g., 192.168.88.1).
5. Shared Secret: Create a strong secret (e.g., UMSecret2025!). This secret must be used later on your router’s Hotspot settings.
6. Save your changes.

Real-World Note:
This configuration tells User Manager which device will authenticate users, ensuring that all login requests and accounting data are correctly logged and managed.

2.2 Configure User Profiles

User Profiles define parameters for different groups of users—such as time limits, bandwidth restrictions, and pricing for vouchers.

1. In the User Manager interface, go to Profiles.
2. Click “Add” to create a new profile.
3. Name: Give it a descriptive name like “GuestProfile” or “PremiumProfile.”
4. Session Time: Set limits for how long a user can stay connected (e.g., 1 hour for guests, 24 hours for premium users).
5. Data Transfer Limit: Optionally, set data caps if desired.
6. Rate Limits: Define bandwidth limits if needed.
7. Save the profile.

Explanation:
Different profiles allow you to offer various service tiers. For instance, you might want a free guest profile with limited session time and bandwidth, and a paid profile with extended access.

2.3 Creating Vouchers and User Accounts

Now that you have a router and profiles configured, it’s time to add users or generate vouchers.

1. In User Manager, navigate to Users.
2. Click “Add” to create a new user.
3. Username/Password: Enter credentials for the user (for voucher systems, these can be auto-generated codes).
4. Profile: Select the appropriate profile (e.g., “GuestProfile”).
5. Expiration: Set an expiry date or time limit if applicable.
6. Save the new user.

For generating vouchers:

1. Go to Voucher in User Manager.
2. Click “Generate”.
3. Set the number of vouchers, their validity period, and which profile they should use.
4. Generate the vouchers and print or distribute them to your users.

Real-World Scenario:
Imagine you’re running a café and want to offer 1-hour Wi-Fi vouchers. With User Manager, you can generate a batch of vouchers, each with a unique code, that expire after one hour. Customers simply enter the voucher code to gain internet access.

Step 3: Configuring Your MikroTik Router to Use User Manager

After setting up User Manager, you need to integrate it with your Hotspot or PPP service on your MikroTik router.

1. Access WinBox and navigate to IP → Hotspot → User Profiles.
2. Edit the relevant Hotspot profile and check the box for “RADIUS”.
3. Enter the RADIUS Server IP (your router’s IP, e.g., 192.168.88.1) and the Shared Secret you set in User Manager.
4. Save your changes.

CLI Example:

/ip hotspot profile set hsprof1 radius-accounting=yes radius-interim-update=30s radius-mac-cookie=yes radius-secret=UMSecret2025!

Explanation:
This configuration ensures that all authentication requests from your Hotspot are sent to User Manager for processing, and that accounting data is logged accordingly.

Step 4: Testing Your Setup

Now, test your configuration by connecting a device to your Hotspot:

1. On your client device, open a web browser.
2. You should be redirected to the Hotspot login page.
3. Enter a user’s credentials or voucher code that you created in User Manager.
4. Once logged in, verify that the session appears in User Manager’s Active Users section.
5. Check that usage data (time and bandwidth) is being recorded.

Final Thoughts

MikroTik User Manager transforms the way you manage network access—making it easy to authenticate users, generate vouchers, and monitor usage. Whether you’re running a public Hotspot, a small office network, or any environment where controlling access is vital, User Manager provides a robust and scalable solution.

By following this detailed guide, you’re well on your way to creating a secure, manageable, and user-friendly network. Experiment with different profiles and voucher settings to suit your needs, and don’t hesitate to reach out if you have any questions. Happy managing, and here’s to a more controlled network environment!

Explained with practical context by
Corels – Admin, Emmanuel Corels Creatives