Hi Everyone, I need someone to point me in the right direction: I want to authenticate hotspot users on RADIUS server using freeradius. However, the radius server is on (remote) public network while hotspot users are on private local network. What must I do to get the authentication parameters (username & password) securely check up on the remote radius server?

Try tunneling the traffic to Radius Server over a L2TP + IPSec.

Hi Pietroscherer,
The wiki Mikrotik documentation on L2TP + IPSec (https://wiki.mikrotik.com/wiki/L2TP_%2B ... erver_side) suggests that there is a Mikrotik router before the externally public situated RADIUS server; however, this specific situation; the type of router before the RADIUS server is not known and its' administration is not within my accessibility. The RADIUS server is configured on a virtualized server with its' own public IP address. Any additional idea on way forward, please?

Nö Tunnel needed:

/ip hotspot profile
use-radius=yes


/radius add
service=hotspot address=192.168.1.1 secret=123456

This configuration will apply to all the Hotspot router.
Change Secret and Ip Address to your Radius