Incoming RADIUS connections enable Change of Authorization (CoA), allowing Spotipo's RADIUS server to disconnect clients remotely, enforce bandwidth changes, or update session parameters without requiring guests to re-authenticate. Without this configuration, you cannot remotely manage active guest sessions or enforce real-time policy changes.
This guide shows you how to configure MikroTik to accept incoming RADIUS packets on port 3799 and create firewall rules allowing Spotipo's servers to send CoA requests.
What you'll accomplish:
Enable incoming RADIUS packets on MikroTik
Configure port 3799 for RADIUS CoA
Create firewall rules allowing Spotipo server IPs
Enable remote session management and disconnection
What you'll need:
MikroTik router with admin access via Winbox
Spotipo cloud server IP addresses
Understanding of MikroTik firewall configuration
Configure Port number and enable incoming Radius Packets
Configure the firewall to allow UDP packets on port 3799
Under IP -> Firewall, add a rule to accept INPUT packets on port 3799
Add it for all the IPs used by Spotipo cloud.
Incoming RADIUS Now Enabled
After configuring the port and firewall rules, Spotipo's RADIUS server can send CoA requests to disconnect clients or update session parameters in real-time. This enables features like remote disconnection, bandwidth throttling, and session time enforcement.
What to do next:
Test remote disconnection from Spotipo dashboard
Verify firewall accepts packets from all Spotipo server IPs
Monitor logs to confirm CoA requests are received
Spotipo server IPs to whitelist: 107.178.247.148, 35.244.104.229, 35.236.87.84, 104.155.46.61
Still having trouble enabling incoming RADIUS? Contact Spotipo support via live chat or email us at [email protected].