The getting started guide

Your first subscriber.
One clear step at a time.

Connect your MikroTik, prepare the service, and get one customer online. Follow along in SkyBase and Winbox, then check the connection together.

You’re following the Hotspot path. Switch at any time. Already finished a step? Jump ahead below.

Let’s get started ↓

A little preparation

Before you start

Have your SkyBase account open and a MikroTik router you can manage in Winbox. The router needs a working internet uplink and a separate customer-facing interface or bridge.

  • Your connection details: the router address SkyBase can reach, its API account, and SSH access if your setup uses it.
  • Your RADIUS details: ask your SkyBase administrator for the server address, shared secret, and the source/NAS address registered for your router. A website address is not necessarily your RADIUS server.
  • Your customer network: an unused subnet, a gateway, and working DNS. We use 10.20.0.0/24 and gateway 10.20.0.1 as examples. Replace them if they overlap your network.
  • A test device: a phone or laptop that can join the customer Wi-Fi.
You only need to set up the router, plan, and address pool once. For your next subscriber, you can reuse them and start with the customer.
Next: Connect your router

Step 01 · SkyBase + Winbox

Connect your router

SkyBase needs a way to talk to your router. Subscriber login uses RADIUS; router monitoring uses the RouterOS API. Both connections need to work.

  1. In Winbox, open IP → Services. Check the API service and port agreed for your installation. Use API-SSL when your SkyBase installation requires TLS. Allow access from the SkyBase server or management VPN.
  2. Open System → Users and prepare a dedicated management account with the permissions your installation needs. Keep its username and password ready.
  3. In SkyBase, open Routers → Add New Router. Enter Router Name, select Mikrotik, and enter the reachable IP Address, API Port, API Username, and API Password. Match the SSH Port if SSH is used.
  4. Leave Enable Monitoring and Enable Provisioning enabled for this setup, then choose Save Router. NetFlow can wait until after the first subscriber works.
Open Add New Router ↗ (new tab)
SkyBase Add New Router form showing connection settings
Match the connection settings to your router. No real credentials are shown.
Show the full screenshot SkyBase Add New Router form showing connection settings

Ready to move on: the router is saved and SkyBase can reach it. If it stays Offline, check the management address, service port, account permissions, and firewall before continuing.

Next: Add a customer

Step 02 · SkyBase

Add the person using the service

The customer record holds their contact and billing details. Their subscription will hold the internet service and login.

  1. Open Customers → New Customer. Choose Individual or Business and fill in the fields marked with an asterisk (*).
  2. Enter their email, mobile number, and service address. Set the correct country and choose Prepaid or Postpaid to match your billing arrangement.
  3. Portal Password is optional. It is for the customer portal and is separate from the internet login you will create later.
  4. Organizations are optional for a simple first setup. If you use organization billing, the primary organization can supply the plan and billing defaults.
  5. Choose Create Customer & Add Subscription. If the subscription form opens, come back here to prepare the plan and addresses before completing it.
Open New Customer ↗ (new tab)
Add the person using the service — SkyBase form
Customer form: start with the required contact and address fields.
Show the full screenshot Add the person using the service — SkyBase form

Ready to move on: The customer is saved and available in the subscription’s Customer list. Their status must be Active for RADIUS authentication.

Next: Create a plan

Step 03 · SkyBase

Decide what internet service you sell

A plan defines the speed, data allowance, and price. You can reuse the same plan for more customers.

  1. Open Plans → Create Plan. Give it a clear Plan Name, such as Home 20 Mbps, and a unique Internal Name, such as home_20.
  2. Set Service Type to Hotspot and keep Status set to Active.
  3. For a simple setup, use Basic rate limit. Enter Download Speed and Upload Speed, checking the selected speed unit.
  4. Choose Unlimited Data or enter a Data Limit. Review Data Cap Action so you know what happens when the allowance runs out.
  5. Set the price, currency, Billing Cycle, and Grace Period. Review any Setup Fee, then choose Save Plan.
Open Create Plan ↗ (new tab)
Decide what internet service you sell — SkyBase form
Plan form: name and service type first, then speed and billing.
Show the full screenshot Decide what internet service you sell — SkyBase form

Ready to move on: Your active plan appears in the Service Plan list. The subscription inherits its billing cycle.

Next: Choose IP addressing

Step 04 · SkyBase

Choose who assigns the IP address

Every connected device needs an IP address. Pick one way to manage it and carry that choice into the subscription.

For your first Hotspot user, use Router Managed. The Hotspot’s DHCP pool gives the device an address before the user logs in. You can review IPAM here, but you do not need a SkyBase pool for this path.

To create a SkyBase IPAM pool

  1. Open IP Address Management → Manage Pools → Create Pool. Enter a Pool Name and choose Dynamic (DHCP/PPPoE) or Mixed (Both).
  2. Under Device Assignment, select your router. Use All current and future devices only if the same pool should be available to all your routers.
  3. Enter the Network Address, CIDR Prefix, Gateway IP, and DNS. Example: 10.20.0.0, /24, and 10.20.0.1.
  4. Reserve any addresses already used by infrastructure. Review the pool preview and assignment settings, then choose Create Pool.
Open Create Pool ↗ (new tab)
SkyBase IPAM network configuration showing subnet, gateway, DNS, and reserved addresses
Use a subnet that belongs to your customer network. The addresses shown are examples.
Show the full screenshot SkyBase IPAM network configuration showing subnet, gateway, DNS, and reserved addresses

Ready to move on: for System Managed, the active pool has available addresses and is assigned to your router. Creating an IPAM pool does not configure interfaces, routing, or DHCP on the MikroTik.

Next: Set up Hotspot

Step 05 · Winbox / RouterOS

Prepare Hotspot on the MikroTik

Use the Winbox steps below. The terminal examples are an alternative for people comfortable with RouterOS. Replace every value in CAPITALS with the details for your installation before running a command.

First, point the router to RADIUS

In Winbox, open RADIUS → +. Select hotspot, enter your RADIUS server Address and Secret, and use the registered Src. Address if your installation requires it. Standard UDP ports are 1812 for authentication and 1813 for accounting; use your administrator’s values if different.

/radius add service=hotspot address=RADIUS_SERVER_IP \
    secret="YOUR_RADIUS_SECRET" src-address=REGISTERED_ROUTER_IP

If a matching RADIUS entry already exists, edit it instead of adding another one. The server must recognize this router as a client of your SkyBase workspace. Saving the router in SkyBase alone does not confirm that registration.

Create the Wi-Fi login service

  1. In IP → Hotspot → Hotspot Setup, choose the customer-facing interface or bridge. Keep your internet uplink outside that customer bridge.
  2. Follow the wizard with your customer subnet, gateway, DHCP address range, DNS, and login hostname. Use an appropriate certificate for HTTPS login. Match these settings to your network.
  3. Open IP → Hotspot → Server Profiles, edit the profile used by your Hotspot, then open its RADIUS tab. Enable Use RADIUS, accounting, and interim updates for usage reporting.
  4. For a first login test, use a new username that does not already exist under IP → Hotspot → Users. A local user can take precedence over RADIUS.
RouterOS terminal alternative

Run the setup wizard only if the service is not configured yet. Replace YOUR_HOTSPOT_PROFILE with the profile created or selected in the wizard.

/ip hotspot setup
/ip hotspot profile set [find name="YOUR_HOTSPOT_PROFILE"] \
    use-radius=yes radius-accounting=yes radius-interim-update=5m

Ready to move on: a phone joining the customer network receives an address and can reach the Hotspot login page. The SkyBase internet login is created in the next step.

Allow SkyBase to disconnect a session

For remote session termination, open Winbox RADIUS → Incoming and enable Accept on the agreed port (the default is 1700). Match that port and the RADIUS shared secret in SkyBase’s CoA Port and CoA Secret fields. Permit incoming disconnect traffic only from your RADIUS server. API Password, subscriber password, and RADIUS shared secret serve different purposes.

Keep your working internet route, DNS, and required NAT/firewall rules in place. This guide configures subscriber access; it does not replace your router’s uplink setup.

RouterOS reference: RADIUS, PPP AAA, PPPoE, and Hotspot. Menu wording can vary with your Winbox version.

Next: Create the subscription

Step 06 · SkyBase

Bring it together in a subscription

You now have a customer, a plan, and a router. A subscription joins them and creates the customer’s internet login.

  1. Open Subscriptions → Create Subscription. Select your Customer and enter a Name you will recognize.
  2. Set Subscription Type to Hotspot, select your Service Plan, and choose the Router / NAS you just prepared.
  3. Under Connection Type, choose PPP for this username/password RADIUS walkthrough. Enter a unique PPP Username and a strong PPP Password.
  4. Choose Router Managed under IP Management. Your Hotspot DHCP pool assigns the device address.
  5. Review Line Items and the total. The Billing Cycle comes from the plan. Check Billing Enabled and Auto Suspension Enabled so they match the service you intend to provide.
  6. Keep Initial Status set to Active if you want to connect now. Check the dates and choose Create Subscription. Pending Activation is for services you will activate later.
Why does a Hotspot user have “PPP” fields? In the current SkyBase form, this connection option stores the username and password used by RADIUS. Keep Subscription Type as Hotspot. The customer will use these credentials on the Wi-Fi login page; they do not need to dial a PPPoE connection.
Open Create Subscription ↗ (new tab)
Create Subscription form with Hotspot selected and PPP credentials
Select the service type, then add credentials, addressing, and billing. Expand to see the whole form.
Show the full screenshot Create Subscription form with Hotspot selected and PPP credentials

Ready to move on: the saved subscription shows the correct customer, plan, router, and Active status. Provisioning may finish in the background; Active alone does not prove the customer is online.

Next: Connect and check

Step 07 · One real connection

Connect and check it works

  1. Join the customer Wi-Fi from a test phone or laptop. Open the captive portal and enter the subscription’s PPP Username and PPP Password.
  2. In Winbox, open IP → Hotspot → Active. Your username should appear with a client address.
  3. Open a website from the test device and run a speed test. Compare the result with the plan, allowing for Wi-Fi quality and available uplink capacity.
  4. Return to the subscription in SkyBase. Check its connection status and session/authentication information. With accounting and interim updates enabled, usage should start appearing after traffic and an update interval.

Your first subscriber is ready.

The login works, the customer can reach the internet, and you can see the session. For the next customer, reuse your router and plan, then create their own subscription and credentials.

Stuck? Start with what you see.

The router stays Offline

Check the IP SkyBase can reach, management VPN or route, API service and port, TLS requirements, firewall, and management account permissions. Router API connectivity and subscriber RADIUS connectivity are separate checks.

The login is rejected

Check the username/password, Active customer and plan, and Active subscription. Confirm the router is registered with your RADIUS administrator. In this walkthrough, Connection Type must be PPP, even for Hotspot. Check for a local user with the same name that could override RADIUS.

RADIUS requests time out or show bad replies

In Winbox, open the RADIUS entry and its status counters. Timeouts suggest reachability, firewall, or server/client registration issues; bad replies can indicate a shared-secret mismatch. Check the configured source address with your administrator.

My IP pool is missing or has no free addresses

Check that the pool is Active, assigned to the selected router, and has available addresses. Reserved or already assigned addresses cannot be selected. For the Hotspot Router Managed path, use the MikroTik DHCP pool instead.

The customer logs in but has no internet

Check the customer gateway, DNS, uplink route, and NAT/firewall rules. A successful login confirms authentication; the router still needs to route the customer traffic.

The customer is online but SkyBase shows no usage

Check RADIUS accounting, the accounting port, and interim updates on the correct PPP or Hotspot profile. Generate traffic and allow an update interval. If activation is still processing, ask your administrator to check background jobs.

Still need help? Contact the SkyBase team with the step you reached and the error message.

Back to the start ↑