Free MikroTik config generator
Pick what you are setting up, fill in your interface, network and limits, and copy RouterOS 7 commands that are ready to paste. Nothing you type leaves this page.
Build the commands
An access concentrator on one interface, with its pool, its profile and the RADIUS that authenticates subscribers.
# PPPoE server on ether2. RouterOS 7.
# The addresses handed to subscribers, and the gateway they route to.
/ip pool
add name=centipid-pool ranges=10.10.0.2-10.10.3.254
/ppp profile
add name=centipid-profile local-address=10.10.0.1 remote-address=centipid-pool dns-server=8.8.8.8,1.1.1.1 change-tcp-mss=yes only-one=yes
# The access concentrator itself. One session per host, so a
# subscriber cannot dial twice and pay once.
/interface pppoe-server server
add service-name=centipid interface=ether2 default-profile=centipid-profile one-session-per-host=yes disabled=no
# No RADIUS, so each subscriber is a local secret:
# /ppp secret add name=jane password=... service=pppoe profile=centipid-profile
Before you paste
Four things worth knowing about what this writes and what it does not.
It runs in your browser
The commands are built where you type them. No secret, address or interface name is sent anywhere, stored, or logged — close the tab and it is gone.
Read it before you paste it
These are RouterOS 7 commands for a router you are configuring, not repairing. Paste them into a terminal you can still reach if the session drops, and keep a Safe Mode session or a recent backup while you do.
It adds, it rarely replaces
Almost every command is an add, so the pool, profile or firewall rule lands beside what is already there. The one exception is the hotspot per-client rate limit, which edits the default user profile so that it actually applies. Run the matching print first if the router has been configured before.
The names are yours to change
Pool, profile and server names come from what you type, so a second PPPoE service or hotspot on the same router does not collide with the first.
About the generator
RouterOS 7. Every property name is taken from MikroTik's own RouterOS 7 documentation. Most of these commands are unchanged from RouterOS 6, but fast-track and some firewall defaults are not, so check the release notes before pasting them onto a version 6 router.
No. The generator is JavaScript running in your browser; there is no form submission, no request and no database behind it. Your RADIUS secret never leaves your machine.
Only with care. Every command adds a new pool, profile, server or rule rather than editing one, so a live router ends up with both. Run the matching print command first, and work inside Safe Mode so a mistake rolls back instead of locking you out.
Because that is the order RouterOS reads a rate in, seen from the target: the first figure limits what leaves the target and the second limits what reaches it. Reversing the pair caps the wrong direction, which is the single most common simple-queue mistake.
The hosts a client has to reach before it can log in — your payment gateway above all, because a visitor cannot buy the voucher the portal is asking them for if the portal blocks the checkout. Each host is written exactly as you type it, so a bare example.com matches that host alone; put a *. in front of it to cover the subdomains too.
RouterOS gates a MAC cookie in two places: the hotspot server profile has to name mac-cookie among its login methods, and the user profile has to hand one out. Either on its own remembers nobody, which is why so many hotspots that look configured for it still show the login page every time. Fill in one field here and the generator writes both.
No. Leave both RADIUS fields empty and the generator writes a local setup, where each subscriber is a PPP secret or a hotspot user on the router itself. Fill them in when a billing system authenticates your subscribers instead, which is how Centipid runs PPPoE and hotspot across a fleet.
No, and it does not try to. Each scenario covers one thing done correctly — the PPPoE server, the hotspot, one queue, the recommended firewall. Routing, VLANs, bridging and your WAN stay yours.
Let the billing run the router
Centipid provisions PPPoE and hotspot across a MikroTik fleet from one place, and disconnects or restores a subscriber the moment their payment lands.