Connect MikroTik RouterOS to Powerlynx via RADIUS over WireGuard VPN

How it works

MikroTik RouterOS acts as the local hotspot controller. Powerlynx communicates with it via RADIUS over an encrypted WireGuard VPN tunnel, using the WireGuard endpoint vpn.powerlynx.app on port 443. The WireGuard tunnel means no public IP is required on the router.

Powerlynx offers two setup types. Simple setup generates a complete RouterOS terminal script — copy it, open a New Terminal on the router, paste and run. The script configures the WireGuard interface, RADIUS server, hotspot server, Walled Garden, and hotspot HTML files in one step. Advanced setup guides you through each component manually for operators who prefer full control.

The hotspot server name set in RouterOS must be added to both the location SSIDs field and the splash page SSIDs field in Powerlynx — this links the router to the correct location and splash page.

What this integration provides

• RADIUS authentication and per-user session control.
• WireGuard VPN tunnel to Powerlynx — WireGuard endpoint vpn.powerlynx.app, port 443.
• Captive portal via MikroTik’s built-in hotspot server — login.html served by Powerlynx.
• Simple setup: auto-generated terminal script for fast deployment.
• Advanced setup: manual configuration for operators who need full control.
• Walled Garden per payment gateway — included in the auto-generated script.
• Works with any downstream access point connected to the MikroTik router.

Who uses this

The most widely deployed hardware integration on Powerlynx. Used by ISPs, community networks, and venue operators who need low-cost hardware with fast scripted deployment. Works behind NAT — no public IP required on the router.

Requirements

• MikroTik device running RouterOS with hotspot package enabled.

• WireGuard support in RouterOS.

• No public IP required on the router.

• For Simple setup: a clean router with no prior configuration is required before running the script.

How to configure a MikroTik hotspot and connect it to Powerlynx via WireGuard VPN — step-by-step guide.