The getting started guide
Your first subscriber.
One clear step at a time.
Connect your MikroTik, prepare the service, and get one customer online. Follow along in SkyBase and Winbox, then check the connection together.
You’re following the Hotspot path. Switch at any time. Already finished a step? Jump ahead below.
Let’s get started ↓A little preparation
Before you start
Have your SkyBase account open and a MikroTik router you can manage in Winbox. The router needs a working internet uplink and a separate customer-facing interface or bridge.
- Your connection details: the router address SkyBase can reach, its API account, and SSH access if your setup uses it.
- Your RADIUS details: ask your SkyBase administrator for the server address, shared secret, and the source/NAS address registered for your router. A website address is not necessarily your RADIUS server.
- Your customer network: an unused subnet, a gateway, and working DNS. We use 10.20.0.0/24 and gateway 10.20.0.1 as examples. Replace them if they overlap your network.
- A test device: a phone or laptop that can join the customer Wi-Fi.
Step 01 · SkyBase + Winbox
Connect your router
SkyBase needs a way to talk to your router. Subscriber login uses RADIUS; router monitoring uses the RouterOS API. Both connections need to work.
- In Winbox, open IP → Services. Check the API service and port agreed for your installation. Use API-SSL when your SkyBase installation requires TLS. Allow access from the SkyBase server or management VPN.
- Open System → Users and prepare a dedicated management account with the permissions your installation needs. Keep its username and password ready.
- In SkyBase, open Routers → Add New Router. Enter Router Name, select Mikrotik, and enter the reachable IP Address, API Port, API Username, and API Password. Match the SSH Port if SSH is used.
- Leave Enable Monitoring and Enable Provisioning enabled for this setup, then choose Save Router. NetFlow can wait until after the first subscriber works.
Ready to move on: the router is saved and SkyBase can reach it. If it stays Offline, check the management address, service port, account permissions, and firewall before continuing.
Next: Add a customerStep 02 · SkyBase
Add the person using the service
The customer record holds their contact and billing details. Their subscription will hold the internet service and login.
- Open Customers → New Customer. Choose Individual or Business and fill in the fields marked with an asterisk (*).
- Enter their email, mobile number, and service address. Set the correct country and choose Prepaid or Postpaid to match your billing arrangement.
- Portal Password is optional. It is for the customer portal and is separate from the internet login you will create later.
- Organizations are optional for a simple first setup. If you use organization billing, the primary organization can supply the plan and billing defaults.
- Choose Create Customer & Add Subscription. If the subscription form opens, come back here to prepare the plan and addresses before completing it.
Ready to move on: The customer is saved and available in the subscription’s Customer list. Their status must be Active for RADIUS authentication.
Next: Create a planStep 03 · SkyBase
Decide what internet service you sell
A plan defines the speed, data allowance, and price. You can reuse the same plan for more customers.
- Open Plans → Create Plan. Give it a clear Plan Name, such as Home 20 Mbps, and a unique Internal Name, such as home_20.
- Set Service Type to Hotspot and keep Status set to Active.
- For a simple setup, use Basic rate limit. Enter Download Speed and Upload Speed, checking the selected speed unit.
- Choose Unlimited Data or enter a Data Limit. Review Data Cap Action so you know what happens when the allowance runs out.
- Set the price, currency, Billing Cycle, and Grace Period. Review any Setup Fee, then choose Save Plan.
Ready to move on: Your active plan appears in the Service Plan list. The subscription inherits its billing cycle.
Next: Choose IP addressingStep 04 · SkyBase
Choose who assigns the IP address
Every connected device needs an IP address. Pick one way to manage it and carry that choice into the subscription.
To create a SkyBase IPAM pool
- Open IP Address Management → Manage Pools → Create Pool. Enter a Pool Name and choose Dynamic (DHCP/PPPoE) or Mixed (Both).
- Under Device Assignment, select your router. Use All current and future devices only if the same pool should be available to all your routers.
- Enter the Network Address, CIDR Prefix, Gateway IP, and DNS. Example: 10.20.0.0, /24, and 10.20.0.1.
- Reserve any addresses already used by infrastructure. Review the pool preview and assignment settings, then choose Create Pool.
Ready to move on: for System Managed, the active pool has available addresses and is assigned to your router. Creating an IPAM pool does not configure interfaces, routing, or DHCP on the MikroTik.
Next: Set up HotspotStep 05 · Winbox / RouterOS
Prepare Hotspot on the MikroTik
Use the Winbox steps below. The terminal examples are an alternative for people comfortable with RouterOS. Replace every value in CAPITALS with the details for your installation before running a command.
First, point the router to RADIUS
In Winbox, open RADIUS → +. Select hotspot, enter your RADIUS server Address and Secret, and use the registered Src. Address if your installation requires it. Standard UDP ports are 1812 for authentication and 1813 for accounting; use your administrator’s values if different.
/radius add service=hotspot address=RADIUS_SERVER_IP \
secret="YOUR_RADIUS_SECRET" src-address=REGISTERED_ROUTER_IP
If a matching RADIUS entry already exists, edit it instead of adding another one. The server must recognize this router as a client of your SkyBase workspace. Saving the router in SkyBase alone does not confirm that registration.
Create the Wi-Fi login service
- In IP → Hotspot → Hotspot Setup, choose the customer-facing interface or bridge. Keep your internet uplink outside that customer bridge.
- Follow the wizard with your customer subnet, gateway, DHCP address range, DNS, and login hostname. Use an appropriate certificate for HTTPS login. Match these settings to your network.
- Open IP → Hotspot → Server Profiles, edit the profile used by your Hotspot, then open its RADIUS tab. Enable Use RADIUS, accounting, and interim updates for usage reporting.
- For a first login test, use a new username that does not already exist under IP → Hotspot → Users. A local user can take precedence over RADIUS.
RouterOS terminal alternative
Run the setup wizard only if the service is not configured yet. Replace YOUR_HOTSPOT_PROFILE with the profile created or selected in the wizard.
/ip hotspot setup
/ip hotspot profile set [find name="YOUR_HOTSPOT_PROFILE"] \
use-radius=yes radius-accounting=yes radius-interim-update=5m
Ready to move on: a phone joining the customer network receives an address and can reach the Hotspot login page. The SkyBase internet login is created in the next step.
Allow SkyBase to disconnect a session
For remote session termination, open Winbox RADIUS → Incoming and enable Accept on the agreed port (the default is 1700). Match that port and the RADIUS shared secret in SkyBase’s CoA Port and CoA Secret fields. Permit incoming disconnect traffic only from your RADIUS server. API Password, subscriber password, and RADIUS shared secret serve different purposes.
Keep your working internet route, DNS, and required NAT/firewall rules in place. This guide configures subscriber access; it does not replace your router’s uplink setup.
RouterOS reference: RADIUS, PPP AAA, PPPoE, and Hotspot. Menu wording can vary with your Winbox version.
Next: Create the subscriptionStep 06 · SkyBase
Bring it together in a subscription
You now have a customer, a plan, and a router. A subscription joins them and creates the customer’s internet login.
- Open Subscriptions → Create Subscription. Select your Customer and enter a Name you will recognize.
- Set Subscription Type to Hotspot, select your Service Plan, and choose the Router / NAS you just prepared.
- Under Connection Type, choose PPP for this username/password RADIUS walkthrough. Enter a unique PPP Username and a strong PPP Password.
- Choose Router Managed under IP Management. Your Hotspot DHCP pool assigns the device address.
- Review Line Items and the total. The Billing Cycle comes from the plan. Check Billing Enabled and Auto Suspension Enabled so they match the service you intend to provide.
- Keep Initial Status set to Active if you want to connect now. Check the dates and choose Create Subscription. Pending Activation is for services you will activate later.
Ready to move on: the saved subscription shows the correct customer, plan, router, and Active status. Provisioning may finish in the background; Active alone does not prove the customer is online.
Next: Connect and checkStep 07 · One real connection
Connect and check it works
- Join the customer Wi-Fi from a test phone or laptop. Open the captive portal and enter the subscription’s PPP Username and PPP Password.
- In Winbox, open IP → Hotspot → Active. Your username should appear with a client address.
- Open a website from the test device and run a speed test. Compare the result with the plan, allowing for Wi-Fi quality and available uplink capacity.
- Return to the subscription in SkyBase. Check its connection status and session/authentication information. With accounting and interim updates enabled, usage should start appearing after traffic and an update interval.
Your first subscriber is ready.
The login works, the customer can reach the internet, and you can see the session. For the next customer, reuse your router and plan, then create their own subscription and credentials.
Stuck? Start with what you see.
The router stays Offline
Check the IP SkyBase can reach, management VPN or route, API service and port, TLS requirements, firewall, and management account permissions. Router API connectivity and subscriber RADIUS connectivity are separate checks.
The login is rejected
Check the username/password, Active customer and plan, and Active subscription. Confirm the router is registered with your RADIUS administrator. In this walkthrough, Connection Type must be PPP, even for Hotspot. Check for a local user with the same name that could override RADIUS.
RADIUS requests time out or show bad replies
In Winbox, open the RADIUS entry and its status counters. Timeouts suggest reachability, firewall, or server/client registration issues; bad replies can indicate a shared-secret mismatch. Check the configured source address with your administrator.
My IP pool is missing or has no free addresses
Check that the pool is Active, assigned to the selected router, and has available addresses. Reserved or already assigned addresses cannot be selected. For the Hotspot Router Managed path, use the MikroTik DHCP pool instead.
The customer logs in but has no internet
Check the customer gateway, DNS, uplink route, and NAT/firewall rules. A successful login confirms authentication; the router still needs to route the customer traffic.
The customer is online but SkyBase shows no usage
Check RADIUS accounting, the accounting port, and interim updates on the correct PPP or Hotspot profile. Generate traffic and allow an update interval. If activation is still processing, ask your administrator to check background jobs.
Still need help? Contact the SkyBase team with the step you reached and the error message.
Back to the start ↑