Router setup

Before PPPoE customers can connect, the MikroTik they dial into needs a PPPoE server that checks logins with ISPMan. This page covers the router side, the PPPoE Network settings for fixed customer IPs, and the guide you can send to customers.

Enable the PPPoE server on a MikroTik

Go to Devices, open the MikroTik, and find its setup actions.
Click the PPPoE button. The Add PPPoE dialog opens: “This operation will create a PPPoE server on the selected interface.”
Enter a Server Name (for example My PPPoE Server).
Enter the network address customers’ sessions get IPs from (for example 192.168.100.0) and choose its CIDR size (16 to 30; 16 is the default).
Click Enable and wait for it to finish.

ISPMan then sets up the server on the ISPMan bridge: an address pool for that network, NAT out of your uplink, a PPPoE profile, authentication through ISPMan, and the server itself.

The network you enter here is the router’s dynamic pool, used for customers who have no fixed IP. Keep it separate from the network under Settings → PPPoE Network (below), or the router may hand out an address that a fixed-IP customer already owns.

PPPoE Network (fixed IPs for customers)

Settings → PPPoE Network (/dashboard/settings/pppoe-network) manages the addresses ISPMan hands out as static IPs to PPPoE customers, plus your public IPs. If a network is set here, new customers are given the next free IP automatically when you create them.

Card	What it does
Network CIDR + Update Network	The network fixed customer IPs come from.
Next Available IP	Where the next assignment starts. New customers receive IPs in order from this address.
Bulk IP Reassignment → Reassign All IPs	Clears every customer’s IP and reassigns them in order from the start of the network. Use it after changing the network or to close gaps.
IP Conflicts → Scan for conflicts	Finds customers whose static IP another customer is connected on right now. This usually means a static IP sits inside a router’s dynamic pool.
Public IP Pool	Add public IPs (with an optional CIDR) and assign them to customers. One public IP can be shared by several customers.

Only users with write access can change this page; others see it read-only.

You can also give IPs to everyone at once from Services → PPPoEs → Assign IPs. It assigns a static IP to every customer who doesn’t have one, in order of when they were created, and skips customers who already have one. It needs the PPPoE network to be configured first.

Authentication policies

The Settings page has a PPPoE Authentication Policies card. Only owners and admins can change it.

Setting	Effect
Enable MAC binding check (global)	Customers must connect from their bound router MAC. Turn it off to skip MAC checks for everyone.
Enforce PPPoE password	Customers must log in with a valid password.
Strict device assignment	Customers may only connect through the router device they are assigned to. When off, the assigned device follows wherever the customer connects.
Customers can change their own package	Lets customers pick and pay for their next package from the self-service page.
Upgrade early-activation window (% of current period left)	A paid upgrade starts at the next connection once no more than this share of the current period is left. 0% waits for the period to end. Downgrades always wait.

The same card links to Global speed override, which sets one speed for every PPPoE customer on a schedule and for chosen routers.

Help customers set up their router

Every PPPoE customer page has a How to Connect link that opens a printable guide with tabs for MikroTik, Tenda Router, XPON / GPON ONT and Troubleshoot. Share it with customers or installers along with their username and password (from See Credentials on the customer page).

On the customer side the essentials are always the same:

Set the WAN or internet connection type to PPPoE.
Enter the PPPoE username and password exactly as shown in ISPMan.
On MikroTik, add a PPPoE client on the WAN port with Add Default Route ticked.
On an ONT in bridge mode, configure PPPoE on the router behind it instead.