A login was refused
Every refused login has a reason. The reasons and what to do about them:
| Reason | What to do |
|---|---|
| unknown user | No subscriber with that username in this workspace. Check the spelling, and that the router is a NAS in the right workspace. |
| wrong password | The password does not match. Set a new one on the subscriber. |
| suspended | The subscriber is suspended. Activate them. |
| expired | Their expiry date has passed. Renew them. |
| limit reached | Data or time limit used up. Reset their usage or renew them. |
| max sessions reached | Already logged in on as many devices as the plan allows. Disconnect the old session, or raise the limit. |
| service type not allowed | A PPPoE login for a hotspot-only subscriber, or the other way round. Change their Service Type. |
| mac not allowed | The device is not one this subscriber may log in from. |
| balance exhausted | Your credit balance cannot pay for a new access window. Top up. |
| spend cap reached | The workspace hit its spend cap. Raise it or reset the count. |
| nas unpaid | This extra NAS’s 30-day fee could not be charged. Top up; it is retried automatically. |
| workspace suspended | The whole workspace is suspended. Contact support. |
The NAS stays offline
- Check that the router has internet access.
- If the install command never ran successfully, or the router was reset, create a new install command and run it again. Old commands expire after 24 hours.
- On WireGuard, make sure the router is on RouterOS 7. For RouterOS 6, add a new NAS with L2TP or SSTP instead.
- On L2TP, if the NAS keeps dropping offline or never connects, the router's network (often CGNAT or a mobile link) is likely blocking or breaking L2TP. Use the SSTP button in the NAS's row to switch it to SSTP and run the new install command. It keeps its tunnel IP, login and fee.
- Do not edit the tunnel interface or RADIUS entry the script created; run the command again to repair them.
The speed is wrong
- Check the plan the subscriber is on, and that the plan's speeds are what you expect.
- A queue or PPP profile rate-limit on the router can override the speed Mikrodius sends. Remove local limits for RADIUS users.
- Speeds are set when the session starts or when a plan changes; disconnect the session to apply them fresh.