Best Practices
Before Provisioning
-
Backup your current config — Always backup before running the provisioning script
-
Reset if needed — For a clean setup, use
/system reset-configuration -
Update RouterOS — Use the latest stable version
After Provisioning
-
Verify RADIUS — Check that RADIUS clients are configured:
/radius print /radius incoming print -
Check WireGuard — Verify the tunnel is up:
/interface wireguard peers print -
Test authentication — Try connecting a test user
Common MikroTik Commands
# Check active PPPoE sessions
/interface pppoe-server print
# Check active hotspot users
/ip hotspot active print
# View RADIUS statistics
/radius print stats
# Check system resources
/system resource print
# View logs in real-time
/log print follow
# Test RADIUS authentication
/tool radius authenticate <username> <password> <service>
Performance Optimization
Queue Management
-
Use PCQ for fair bandwidth distribution
-
Set appropriate queue sizes
-
Monitor queue usage regularly
Firewall Rules
-
Keep rules minimal for better performance
-
Use connection tracking wisely
-
Place frequently matched rules first
Logging
-
Limit log topics to avoid disk wear
-
Set log rotation
-
Monitor log size regularly