Is there anyway of using a mikrotik as an authentication gateway, to authenticate users on the internet when they attempt to access servers that are behind the mikrotik on the LAN?
Hotspots functionality seems to revolve around being based on the clients mac address, which is not applicable for not directly connected networks, as in this case.
Easier if I just get them to login via a web interface, that then allows them access based on IP.
It is just a webserver sitting behind dst-nat. that I want to control access to.
I already have auth on the webserver frontend, but being windows I do not trust it not to be hacked more easily than if there was a mikrotik doing auth in the middle.