Mikrotik Setup

Configure RADIUS Server for WiZone Authentication

This section explains how to configure the RADIUS server, enable incoming CoA requests, and set the necessary firewall rules for WiZone integration.

Step 10 – Configure RADIUS Server for WiZone Authentication

This step connects your Mikrotik router to the WiZone RADIUS Server, allowing centralized authentication, accounting, and real-time control (CoA – Change of Authorization).
Once configured, WiZone will manage user sessions and data accounting directly through RADIUS communication.


10.1 Add RADIUS Server

  1. Go to RADIUS → Add (+)
  2. Configure the following settings:
FieldValue
Servicehotspot (select additional services as needed)
Address10.1.10.7
Protocoludp
SecretnAnAH3RZMw53
Authentication Port1812
Accounting Port1813
Timeout300 ms
Require Message Authno

✅ Make sure the hotspot option is checked to allow WiZone to authenticate users via the captive portal.


10.2 Enable RADIUS Incoming (CoA Support)

WiZone uses Change of Authorization (CoA) requests to manage active user sessions — for example, disconnecting, updating quota, or reauthenticating users.

  1. Go to RADIUS → Incoming
  2. Check Accept
  3. Set Port to 3799 (default CoA port)
  4. Click Apply → OK


10.3 Configure Firewall Rule for CoA Port

To allow RADIUS CoA packets to reach the router, add a firewall rule to accept UDP traffic on port 3799.

  1. Navigate to IP → Firewall → Filter Rules → Add (+)
  2. Set the following parameters:
FieldValue
Chaininput
Protocoludp
Dst. Port3799
Actionaccept
  1. Click Apply → OK
  2. Move the rule to the top of the list to ensure priority handling.