MikroTik User Manager for Hotspot in Kenya

MikroTik User Manager for Hotspot in Kenya

A successful hotspot business needs more than a fast internet connection. Once customers begin paying for WiFi access, the network operator needs a reliable way to create users, control packages, monitor sessions, enforce limits, and manage authentication.

One option available to MikroTik users is MikroTik User Manager for Hotspot.

User Manager is MikroTik’s own RADIUS server implementation for RouterOS. It allows a network administrator to centralize authentication and authorization rather than managing every hotspot user manually inside the router. MikroTik documentation confirms that User Manager can work with RouterOS services including HotSpot, PPP, DHCP, Dot1X, IPsec, and wireless authentication.

For a small ISP, apartment network, hostel, café, or commercial WiFi operator in Kenya, User Manager can provide a useful starting point for centralized customer management.

If you are still deciding which router to deploy, first read our guide to the Best MikroTik Router for Hotspot Business.

What Is MikroTik User Manager?

MikroTik User Manager is a RADIUS server implementation that runs with RouterOS.

RADIUS stands for Remote Authentication Dial-In User Service.

In simple terms, it allows the router to ask a centralized system:

• Is this user allowed to connect?

• Which package does the user have?

• How long may the user stay online?

• Should the session be disconnected?

• Which network policy should apply?

Instead of storing all customer information independently on multiple routers, User Manager provides a central authentication database.

This becomes useful when a hotspot starts growing.

How MikroTik User Manager Works

A simple hotspot setup might look like this:

Customer Device

↓

WiFi Access Point

↓

MikroTik Hotspot Router

↓

MikroTik User Manager

↓

Internet

When a customer connects, the MikroTik HotSpot service receives the login request.

The router then sends an authentication request to User Manager through RADIUS.

User Manager checks the customer account and returns an authorization response.

If the user is allowed access, the hotspot session continues.

The system can also collect accounting information when properly configured.

MikroTik states that User Manager operates according to RADIUS standards and can centrally manage users and profiles.

Why Use MikroTik User Manager for Hotspot?

One of the biggest advantages is centralized user management.

Imagine operating a hotspot with:

• 10 customers

• 50 customers

• 100 customers

• 300 customers

Managing 10 users manually is relatively easy.

Managing hundreds of accounts directly from the HotSpot user menu becomes much more difficult.

User Manager can help organize:

• Users

• Profiles

• Session information

• Time limits

• Data limits

• Authentication

• RADIUS attributes

This gives the operator more structured control over hotspot customers.

MikroTik User Manager vs Local Hotspot Users

RouterOS already allows you to create HotSpot users locally.

So why would you use User Manager?

The difference is mainly centralization and scalability.

Local Hotspot Users

Users are created directly on the router.

This can be suitable for:

• Very small hotspot

• Temporary WiFi

• Testing

• Home lab

• Small café

User Manager

Authentication is centralized through RADIUS.

This can be useful for:

• Larger hotspot networks

• Multiple routers

• Apartment internet

• Student hostels

• Managed WiFi

• ISP environments

A growing commercial network will normally benefit from separating customer management from the basic hotspot configuration.

MikroTik User Manager and RADIUS

User Manager communicates with MikroTik routers using RADIUS.

RouterOS includes a RADIUS client that supports multiple services, including HotSpot and PPP.

A simplified configuration therefore looks like:

MikroTik HotSpot

↓

RADIUS Request

↓

User Manager

↓

Access Accept / Reject

↓

Customer Session

The same concept can also be used with external RADIUS platforms.

This is important because it means you are not permanently limited to MikroTik User Manager.

As your hotspot business grows, you may later move to a more advanced billing platform if required.

What Can MikroTik User Manager Control?

User Manager can work with profiles, limitations, sessions, users, routers, and RADIUS attributes.

Depending on the configuration, administrators can control factors such as:

• Session duration

• Upload limits

• Download limits

• Uptime limits

• Simultaneous sessions

• Authentication methods

• User groups

• Profiles

MikroTik documentation notes that User Manager limitations can be tied to profiles, while accounting updates help enforce usage or uptime limits.

This makes User Manager useful for selling internet access based on either time or usage.

Example Hotspot Packages

Suppose you operate WiFi in a hostel.

You could create packages such as:

PackageSpeedValidityDaily Basic2 Mbps24 HoursDaily Plus5 Mbps24 HoursWeekly5 Mbps7 DaysMonthly10 Mbps30 Days

The exact way these policies are implemented depends on the RouterOS and RADIUS configuration.

Your packages should also reflect the capacity of your upstream internet connection.

Is MikroTik User Manager a Billing System?

User Manager provides important subscriber-management and RADIUS functions, but it should not automatically be treated as a complete commercial billing platform for every business.

There is a difference between:

Authentication management

and

full billing automation.

A complete commercial hotspot billing platform may additionally manage:

• Customer invoices

• Mobile payments

• Payment reconciliation

• Automated renewals

• Customer notifications

• Financial reports

• M-Pesa integration

• Sales dashboards

If your business requires this level of automation, a dedicated platform such as Tajira may be more suitable.

For more information, read our guide to the MikroTik Hotspot Billing System in Kenya.

MikroTik User Manager for 100 Hotspot Users

User Manager can be useful when the hotspot grows beyond a handful of manually managed accounts.

For a network targeting around 100 users, consider the entire architecture.

You may have:

Internet

↓

MikroTik RB5009

↓

Managed PoE Switch

↓

Multiple Access Points

↓

100 Customers

and:

RB5009 ↔ User Manager / RADIUS

The router handles traffic, while the User Manager handles centralized authentication.

If you are building around this customer size, see our guide to the MikroTik Router for 100 Hotspot Users.

Which MikroTik Router Is Best for User Manager?

The router you need depends on the workload.

Possible models include:

Network TypeRouter to ConsiderSmall hotspothEX / hEX SGrowing hotspotL009Medium networkRB4011Growing commercial hotspotRB5009Large ISPCCR

Do not choose based only on total accounts.

You should consider:

• Concurrent sessions

• Internet speed

• Queues

• Firewall complexity

• VLANs

• RADIUS

• VPNs

• Routing

• Number of sites

MikroTik RB5009 and User Manager

The RB5009 is particularly attractive for growing commercial networks.

It provides:

• Quad-core ARM64 CPU

• 1 GB RAM

• Gigabit Ethernet

• 2.5 Gigabit Ethernet

• 10G SFP+

This gives a network operator room to build a more structured architecture using:

• Managed switches

• Multiple access points

• VLANs

• RADIUS

• High-speed uplinks

• Fibre backbone

You can compare it with another popular model in our MikroTik RB4011 vs RB5009 guide.

Can User Manager Run on the Same MikroTik Router?

Depending on the RouterOS architecture and package availability, User Manager can run within RouterOS.

MikroTik documents User Manager as a separate RouterOS package and notes that it is available on supported architectures, with limitations depending on device resources and RouterOS licensing.

Running User Manager locally can simplify a small installation.

For larger networks, however, administrators should think carefully about:

• Router storage

• Router CPU

• Database size

• Backups

• Number of sessions

• Reliability

A separate authentication platform may become preferable as the network becomes more important.

MikroTik User Manager Profiles

Profiles help organize customer services.

For example, you could create:

Profile 1

Daily WiFi

Profile 2

Weekly WiFi

Profile 3

Monthly WiFi

Profile 4

Premium Monthly

Different limitations can then be associated with these profiles.

This makes customer administration easier than manually configuring every user from scratch.

Time Limits in User Manager

One common hotspot business model is selling access for a limited period.

Examples include:

• 1 hour

• 3 hours

• 12 hours

• 24 hours

• 7 days

• 30 days

User Manager supports limitations that can be used with profiles.

This makes it possible to build time-based hotspot services.

Data Limits in User Manager

Some operators sell internet packages based on data usage.

For example:

• 1 GB

• 5 GB

• 10 GB

• 20 GB

User Manager limitations can include upload and download usage controls when configured appropriately.

This can be useful for locations where internet bandwidth is expensive.

Simultaneous User Sessions

One issue in hotspot businesses is account sharing.

Suppose a customer buys one username and then shares the credentials with several people.

The hotspot operator may want to limit the number of active sessions.

User Manager supports controls related to simultaneous user sessions.

This can help prevent uncontrolled sharing of one customer account.

User Manager Accounting

Authentication tells the network whether a customer can connect.

Accounting tracks session activity.

RouterOS can send RADIUS accounting information to the server.

This is useful for monitoring:

• Session start

• Session stop

• Session duration

• Usage

For accurate quota enforcement, accounting needs to be configured correctly.

What Is Interim Accounting?

Interim updates allow the router to send usage information while the customer session is still active.

This becomes important for usage-based packages.

Without timely updates, the authentication server may not have an accurate picture of an active session.

MikroTik specifically notes the importance of RADIUS accounting and interim updates when enforcing User Manager limitations.

MikroTik User Manager Vouchers

User Manager includes voucher-generation functionality.

This can be useful for businesses that sell prepaid hotspot access.

Examples include:

• Hotel reception

• Café counter

• Cyber café

• Events

• Public WiFi

• Guest internet

A voucher could represent:

1 Hour Internet

or

24 Hour WiFi

The customer receives credentials and logs in through the captive portal.

Custom MikroTik Hotspot Login Page

The MikroTik HotSpot portal can be customized.

RouterOS provides HTML files used for the login, status, logout, and other hotspot pages.

A business can customize the portal with:

• Logo

• Brand colours

• Package instructions

• Customer support contact

• Payment instructions

• Terms of service

This makes the hotspot appear more professional.

Example MikroTik Hotspot Architecture

A properly designed hotspot network might look like:

Fibre Internet

↓

MikroTik RB5009

↓

Managed PoE Switch

↓

Access Point 1

Access Point 2

Access Point 3

Access Point 4

↓

Hotspot Customers

and:

MikroTik Router ↔ RADIUS/User Manager

This is preferable to trying to use a single wireless router for every function.

User Manager for Apartment Internet

Apartment networks are an excellent use case for centralized authentication.

Imagine a building with 50 apartments.

Each tenant can have:

• Username

• Password

• Package

• Speed

• Expiry period

The MikroTik gateway controls network access.

User Manager handles centralized account authentication.

This can reduce manual administration.

User Manager for Student Hostels

Hostels often have many users and devices.

One student may connect:

• Phone

• Laptop

• Tablet

• Smart TV

A hotspot system therefore needs clear policies for simultaneous logins.

You also need sufficient wireless capacity.

User Manager cannot solve poor WiFi coverage.

Good access-point placement remains essential.

User Manager for Hotels

Hotels can use User Manager to create temporary accounts.

For example:

Room 101

24-hour WiFi

Room 102

3-day WiFi

Conference Guest

8-hour WiFi

This can be useful when internet access is tied to the guest's stay.

User Manager for Schools

Schools may use centralized RADIUS authentication for:

• Students

• Teachers

• Staff

• Guests

Separate profiles can be created for different groups.

Schools may also use VLANs to separate different types of traffic.

User Manager and VLANs

A commercial hotspot should avoid placing every device on one flat network.

For example:

VLANPurposeVLAN 10Hotspot usersVLAN 20ManagementVLAN 30OfficeVLAN 40CCTVVLAN 50Servers

This improves network organization and security.

User Manager Security

RADIUS configuration should be treated as sensitive.

Protect:

• Shared secrets

• Router management credentials

• User Manager access

• WinBox

• SSH

• API

• RADIUS ports

Do not expose management services unnecessarily.

Use firewall rules to restrict access.

Back Up User Manager

A hotspot business should not rely on a single unprotected configuration.

Create regular backups of:

• Router configuration

• User Manager database

• Customer records

• Hotspot portal files

A hardware failure should not result in losing every customer account.

User Manager vs External RADIUS Server

MikroTik User Manager is one option.

Other platforms can also provide RADIUS authentication.

An external RADIUS system may be preferable when you need:

• Multi-site management

• Advanced billing

• Mobile payment automation

• Detailed reporting

• Customer portals

• CRM integration

• Larger subscriber databases

For a startup hotspot, User Manager can be a useful entry point.

For a growing ISP, a dedicated billing platform may become more practical.

User Manager vs Tajira

These two options serve overlapping but different needs.

MikroTik User Manager

Focused on RADIUS-based authentication and user management within the MikroTik ecosystem.

Useful for:

• Learning

• Small hotspots

• Basic centralized authentication

• Voucher environments

Tajira

A dedicated platform may be more appropriate when the business requires broader subscriber and billing automation.

Visit Tajira to review the features currently offered.

Do You Need User Manager If You Already Have a Billing Platform?

Not necessarily.

If your billing system already provides RADIUS authentication, you may configure the MikroTik router to authenticate directly against that server.

RouterOS can communicate with external RADIUS servers for HotSpot authentication.

In that case, adding User Manager may simply create unnecessary complexity.

Where to Buy MikroTik Equipment in Kenya

Your hotspot infrastructure may require:

• MikroTik router

• Managed switch

• PoE switch

• Access points

• SFP modules

• Ethernet cable

• Fibre cable

• Network cabinet

• UPS

You can browse equipment through MikroTik Kenya or view our MikroTik products in Kenya.

You can also compare additional MikroTik equipment through Tawa's MikroTik range.

For another perspective on business router selection, see Orbitlink Solutions' guide to the best MikroTik router for small business in Kenya.

Frequently Asked Questions

What is MikroTik User Manager?

MikroTik User Manager is a RADIUS server implementation for RouterOS. It allows centralized user authentication, authorization, profiles, sessions, and related account management.

Can MikroTik User Manager work with HotSpot?

Yes. MikroTik documents HotSpot as one of the RouterOS services that can use User Manager and RADIUS authentication.

Is MikroTik User Manager free?

User Manager is provided as part of the MikroTik RouterOS ecosystem, but availability and active-session limits depend on device architecture, installed packages, and RouterOS licensing. Always check the current requirements for your router before deployment.

Can I create hotspot vouchers with User Manager?

Yes. MikroTik's User Manager documentation includes voucher-generation functionality.

Can User Manager replace a billing system?

It can handle important RADIUS and subscriber-management functions, but businesses that require automated payments, invoicing, advanced financial reporting, or broader ISP management may prefer a dedicated billing platform.

Which MikroTik router should I use for a commercial hotspot?

The right model depends on concurrent users, internet bandwidth, queues, firewall rules, and future growth. Consider models such as L009, RB4011, RB5009, or CCR depending on the scale of the network.

Final Thoughts

MikroTik User Manager for Hotspot provides a useful way to centralize authentication and user management in a RouterOS network.

Instead of creating and managing every customer independently on the hotspot router, User Manager can operate as the RADIUS server that decides whether a user is authorized and which profile applies.

For smaller hotspot businesses, this can provide an effective introduction to centralized subscriber management.

For larger commercial networks, especially those requiring automated payments and more extensive business management, integrating MikroTik with a dedicated billing platform may be more practical.

The most important point is to design the entire network as one system.

Your MikroTik router, User Manager or RADIUS server, access points, switches, internet connection, billing platform, and security policies all need to work together.

For further reading, see our guides to the Best MikroTik Router for Hotspot Business, MikroTik Router for 100 Hotspot Users, and MikroTik Hotspot Billing System in Kenya.