Hello everyone, I'm new to the world of MikroTik. I'd like to set up a centralized authentication server for hotspots using User Manager directly instead of a RADIUS server like FreeRADIUS, etc. I plan to deploy a CHR (Cloud Hosted Router) on AWS with User Manager installed on it. The client MikroTik routers will use it as a RADIUS server for authenticating hotspot users. I'd like to know if this is a good plan and how to determine how many client MikroTik routers it can handle without issues, and if I can also use it as a RADIUS server for access points other than MikroTik. Your advice and suggestions are welcome, thank you in advance.
Your idea is fine. However, about this point:
Yes, you can use it as RADIUS server for other manufacturers' access points, but it might be possible that not all features will be supported.
From my experience using User Manager with UniFi access points for example, one important thing that doesn't work is CoA (Change of Authorization), because User Manager doesn't include a couple of dynamic attributes required by UniFi APs in the CoA messages :(. Which means the limitations don't work. Things that work with UniFi APs are normal authentication with EAP-PEAP-MSCHAPv2, EAP-TLS, as well as per user VLAN assignment.
Hello, thank you very much for your Hello, thank you so much for your help... I will do further research on the valid attributes on different APs from different brands
You can run CHR locally first, and test it with your APs before deploying it to AWS. AWS is fine, but often tricky (unless familiar) to get routing/firewall setup within AWS - so be good to separate the problems.