We're currently using Hotspot with RADIUS authentication and returning a bandwidth limit via the Access-Accept reply which in turns creates a dynamic queue (per active user) set at the bandwidth specified. All good so far.

We now have a requirement were we need to dynamically modify the bandwidth for all active hotspot users at various times (depending on the available upstream connectivity).

It appears you cannot modify the bandwidth limit against an active hotspot user, or edit the dynamic queue to change the limit either, so I'm looking for another way.

We can't use RADIUS CoA because our RADIUS is hosted in the cloud, and the Mikrotik routers are all behind NAT'd 4G/5G connections with dynamic IP's with no way to port forward the CoA request from the cloud to the Mikrotik router.

Is there a way to disable the dynamic creation of queues for hotspot users and handle it ourselves, or, simulate a RADIUS CoA request directly from the Mikrotik itself?

Thanks!

Anyone have any thoughts on this? Thanks

Use a "serious" hotspot software, like coova-chilli + openwrt. Which has a CoA-similar mechanism built in, for more than 10 years already.
Its called 'acctupdate', which means, when sending accounting info from hotspot device to radius, it _might_ pass back update of session pars, i.e. session time or bandwidth limit.

Now you gave me one more good reason, why I abandoned mikrotik-software for hotspots long ago already.
Cause I can run openwrt on various MTs