Fill in your router's interfaces and RADIUS details on the left. A ready-to-import RouterOS script builds itself on the right as you type — copy it or download it as a .rsc file.
Five RouterOS building blocks, generated together so they actually reference each other correctly — the part that's easy to get wrong when copying commands from five different forum threads.
A single masquerade rule on the WAN interface so every PPPoE client can reach the internet through one public IP.
Registers your RADIUS server for PPP and turns on accounting with a 5-minute interim update — what billing platforms like SAS4 expect for live session data.
A default PPP profile carrying your DNS servers and a rate-limit built from the upload/download fields — RouterOS reads this as rx-rate/tx-rate.
Binds the service to your subscriber-facing interface, one session per host, MTU/MRU tuned for PPPoE overhead.
Baseline input/forward rules: drop invalid connections, and optionally close Winbox and Telnet to anyone sitting on the WAN side.
Download the .rsc file, copy it to the router with Winbox's file manager, then run /import pppoe-config.rsc.
Want the reasoning behind each line, not just the script? Read the full PPPoE + RADIUS setup guide — covers why WISPs use PPPoE over static IPs, how RADIUS accounting actually works, and the MTU/CGNAT issues that trip people up.