/ip firewall address-list add address=$remote-address list="ppp-active" timeout=1d comment=$user
:log info "PPP DOWN: $user disconnected from $interface" You can call external systems (e.g., RADIUS, webhook, billing server) using /tool fetch . mikrotik ppp profile script
/ip firewall address-list remove [find list="ppp-active" address=$remote-address] Log user connections with timestamps. MikroTik RouterOS allows you to attach scripts to
/ip route add dst-address=192.168.100.0/24 gateway=$remote-address comment="VPN route for $user" Script Basics in PPP Profile Navigate to: PPP
Here’s a practical piece covering MikroTik PPP profile scripting, including common use cases, script examples, and explanation. MikroTik RouterOS allows you to attach scripts to PPP profiles (for PPTP, L2TP, PPPoE, SSTP, etc.). These scripts run when a PPP session starts ( on-up ) or terminates ( on-down ), enabling dynamic control over user sessions, bandwidth management, routing, and logging. 1. Script Basics in PPP Profile Navigate to: PPP → Profiles → <your profile> → Scripts
/ip route remove [find comment="VPN route for $user"] Add the remote IP to an address list for firewall rules (e.g., allow only authenticated users).