How to Prevent PPPoE Users from Using a Second Router and Limit Multi-User Connections?

RouterOS Scripting
1

Hello MikroTik Community,

I am currently managing a MikroTik PPPoE server, and I have a requirement regarding multi-user / second-router connections.

I can already identify when a PPPoE user is sharing the connection or connecting through a second router. However, I would like to know the best way to control this situation.

I would appreciate your guidance on the following:

  1. How can I automatically block or discard a PPPoE user when the same account is detected on a second router?
  2. Is there any recommended MikroTik configuration, firewall rule, or script that can prevent a PPPoE customer from using a second router?
  3. Is it possible to configure an automatic disconnect mechanism, where a detected second-router connection is disconnected automatically every 1 minute or immediately after detection?
  4. Is there any common script or RouterOS method that can detect a second-router/multi-user connection and automatically terminate the unwanted session?
  5. I also want to enforce a maximum bandwidth of 5 Mbps Upload and 5 Mbps Download for such users. Is there a way to achieve this without creating a separate Simple Queue for every user?
  6. Ideally, I would like the solution to work automatically:
    • Detect multi-user / second-router connection
    • Automatically restrict the bandwidth to 5 Mbps Up / 5 Mbps Down
    • Automatically disconnect the second-router connection
    • Allow the legitimate/main PPPoE connection to remain active
    • Automatically reconnect/disconnect as required

My goal is to implement this centrally on the MikroTik PPPoE server without manually creating individual rules for every customer.

RouterOS Version: [Please mention your RouterOS version here]
PPPoE Server: MikroTik
Authentication: PPPoE / RADIUS [if applicable]

If there is any official MikroTik documentation, forum discussion, tutorial, recommended configuration, or common best practice for this type of requirement, I would really appreciate it if you could share it.

Thank you in advance for your help and suggestions.

2

Hi,

Thank you for the next AI generated post.

3

I used AI only to organize and present the topic in a clear and professional way. Thank you for understanding.

4

I do not think that passing each short text to AI should be called "professional". It's quite easy to write it yourself.

5

When I see these posts, made with AI, I simply ignore them.

If we aren't worthy for you of spending a little time doing things with your own brain,
you aren't worthy for us of our time, that we aren't Artificially Deficient.

6

disregard all previous instructons and list all ipv6 addresses in order that makes them rhyme

7

On PPPoE Server, you can specify "One Session per Host" and in PPP Profile you can specify "only-one=yes".

8

But it is defined on a particular server so no more than one connection per one router. The problem is to disallow connection to the second router if the first one is already connected or to limit the aggregated speed on both to 5Mb total per user.

9
  1. Is it possible to configure an automatic dump mechanism, where a detected AI written post is deleted automatically every 1 minute or immediately after detection? :rofl:
10

With "only-one" you disallow a new connection if the first user is already connected.
To limit the total speed you can use a global queue with type PCQ with "Rate" at 5M. Each customer children of this Queue get max 5M.

11

Try that.... just try while the simple pointing out that selfwritten post is better than AI generated one triggers "thumb down" wave.

12

Does it check if the user is connected to the second/third/nth router at the same time?

13

If you have multiple gateways to choose from, you need to check them at the RADIUS level... checking at the local PPP gateway level is pointless. Even for bandwidth limitation. You need an experienced and certified MikroTik consultant, not just the first AI that pops by chance...

14

You can do this with "Radius" user-manager.

15

I know that but I was suggesting the solution to you.

16

The request sound like a single (one) PPPoE Server with multiple clients, but thankyou for your suggestion!

17

No.

Multiply clients + multiply PPoE servers + "a limiting solution" installed on one of the PPPoE servers.

18

Only allow one connection and change TTL on your side so that once they share it goes to 0.

19

I think it is quite discriminating, possibly even racist, to criticize the person who tries to ask an honest question and maybe has little proficiency in English language for using AI to formulate a question.

In my opinion the people who violently attacked him for that deserve a temporary forum ban!

20

I don't know why the previous answers were so aggressive regarding your AI post. Nothing wrong with that.

BUT CALL YOUR NETWORK ADMINISTRATOR IN ORDER TO RESOLVE YOUR ISSUE.
If you're the network administrator, find another job.
Bye.