User Manager/RouterOS user Example

Introduction

User Manager server might be used as remote storage of RouterOS login and password information. MikroTik router will consult User Manager for login and password, when you are accessing RouterOS via Winbox or console session. Let's consider configuration steps.

RouterOS configuration

• Set RouterOS to use User Manager server for checking login and password information,

 / user aaa set use-radius=yes

• '/user aaa' has 'default-group' option, that define type of the default group. Default is read permissions, if you need to allow full permissions for users stored in User Manager database

 / user aaa set default-group=full

• Add radius client to consult User Manager for login service.

/ radius add service=login address=y.y.y.y secret=123456

'secret' is equal to User Manager router secret. 'y.y.y.y' is the User Manager router address.

• Note, first local router database is consulted, then User Manager database.