MikroTik

mstuebner

Okay,

after i tried many different configurations i have it now.

That are very good news, but is there any chance that you share your finding with the rest of the world?

mstuebner

and, does it work now? =)

Ok, my mistake. I ment that I removed it days before already, so it didn't change and the timeout is still there.

mstuebner

Could be a version of a bug fixed in 4.x that confuses the Hotspot when an address-pool is applied.

I removed the pool from hotspot, so it shows "none" already.

mstuebner

Hello, running on a v3.30 I have the "feature" that the status window that pops up after logging in loads and loads and loads and gets an timeout after a while. But when I press F5 (reload) then, it shows the correct status page. Does anyone know why this first timeout may happen, and what...

mstuebner

In every section (authorize,instantiate,accounting) daily counter is at the end? It looks like you have daily counter before chap, pap etc. modules? Did it again from scratch... In instantiate in needs to be only if is isn't loaded anywhere else, so I removed it there, in accounting it isn't accept...

mstuebner

Results: The following is in radcheck: "id","username","attribute","op","value" 3,"matthias","Cleartext-Password",":=","pwd" 7,"matthias","Max-Daily-Session",":=","3600" ...

mstuebner

You need to limit user monthly? Or you are selling internet time and user has no time limit to spend it? Maybe you don't need this, it depends on what you exactly want to accomplish... All options are possible. Of course is it more realistic to restrict the time the voucher is valid, not that it ru...

mstuebner

Huh, you got it wrong again, but at least your question was precise this time :) So you see, also a 42 year young guy can develope... Now look at the bolded text, do you see the pattern? I do. The missing part was, that the link between the result of SQL-query and the radcheck table is the check-na...

mstuebner

... but, i sure did wanted to help. What you def. did and do. Thanx. It's not important if you are using Mikrotik as you NAS or Cisco or Juniper etc. This is why i told you that you have to do it on freeradius side. Because feature is not tied to any particular NAS. Freeradius will use counter to r...

mstuebner

What are you talking about? If you've read my post carefuly you would see that i told you what exact feature to search for in radius setup. But, i guess it is lot easier to feal sorry for your self and try to gain some simpaty that way? Or do you expect me to search for it? I know the counter secti...

mstuebner

You need to do that on radius side, mikrotik has nothing to do with that. Look at freeradius documentation, search for counter module. I guess you want to point out that this isn't a freeradius forum, am I right? Of course isn't it, but I expected that many users here use freeradius too. Seems that...

mstuebner

It's mainly a FreeRadius backend talking to one or more databases. Bigger companies then write their own software to talk to the databases, integrate CRM, or do what ever they feel like. So yes, it's pretty much all custom designed stuff. There are a few commercial ones available, similar to userma...

mstuebner

Hi,

I'm not sure whether I just touched the biggest secret or my post just slipped through?

Are all of you using a shell command line to maintain your user base?

br Matthias

mstuebner

In your sql.conf (i am ssuming you are using freeradius) look for %{Realm} and replace that with %{Mikrotik-Realm}. The rest is not sent back by Mikrotik. Groupname is the name of group user belongs to (used in radgroupreply), so you can do some mysql changes in sql.conf to put that data in radacct...

mstuebner

I'm not sure I understand the question, but the list I posted is the definitive list of RADIUS attributes supported by RouterOS. Anything else sent between the RADIUS server and RouterOS will be ignored. RADIUS is used for lots of things, and not all attributes that exist in the total of dictionari...

mstuebner

Are you talking about RADIUS attributes to send back? http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php Thanx. That is a good portion of it, but in the users file I still find options that arn't in that list, i.e. "Reply-Message", "Callback-Number" and others. Where ...

mstuebner

Hi, I'm looking for a complete listing of attributes a user (i.e. in file users or DB) can have. Some, like Cleartext-Password are listed in users, but there are many more. Does anyone can point me to such a list. Even more in detail, what I'm looking for is the attribute to set the max online time ...

mstuebner

HI, working on accounting, I wonder how to configure the data stored in radattc? When I use a hotspot user with name matt@hotel_1 the debug output of radiusd -X shows "Looking up realm 'hotel_1'", but the realm field in radacct remains empty, also after logout. Which data should be shown i...

mstuebner

Hi all,

when you use the internal radius and Usermanager, you have an interface to at least create accounts.

But what are you using when you are using freeradius? Did everybody write his/her own interface, program stand-alone applications? Or how do you do?

br Matthias

mstuebner

well, you always can go to wiki.mikrotik.com and create your own page for book contents and start writing. that way materials would be accessible to everyone willing to read. If you are willing to start doing that, you can ask normis to create new section for you, so things start to happen and does...

mstuebner

That makes it clear then. Thanx.

mstuebner

I changed to an external freeradius and still had the same symptom, but after a reboot it was gone.

Thanx for any hint in this thread.
Matthias

mstuebner

That simply means that you don't have a parent called "mikrotik", so you can't create a child object for it. So maybe my understanding is the following 1. Subscriber (God father) 1.1. Customer (master of everthing below him) 1.1.1. User (may pay the bill) As I read the doc, the specificat...

mstuebner

/ip hotspot profile print /radius print /tool user-manager customer /tool user-manager router print Edit sensitive entries. Thanx for your help. Situation changed a bit, as having the radius on the RB433 was not the final configuration anyway. So I did setup a freeRadius on a server configured it a...

mstuebner

If you have created a user in usermanager alone and radius server is not reachable, it is likely you haven't configured usermanager properly. You can post your config for us. After re-doing it once more I can see users generated in UM under /tools user-manager user print. The problem that the login...

mstuebner

Hi, I found and tried the description http://wiki.mikrotik.com/wiki/Centralized_Authentication_for_Hotspot_user today, but when I try the Masterconfiguration, especially: /tool user-manager customer add subscriber="mikrotik" login="mikrotik" password="ashish" time-zone=...

mstuebner

No. They are users in the User Manager database only. User Manager cannot be administrated via Winbox (except for through the built in Terminal under "/tool user-manager") But even accounts created using "/tools user-manager" as described in http://wiki.mikrotik.com/wiki/User_Ma...

mstuebner

Hi gents,

after struggeling since 2 weeks I want to ask the question whether accounts/users
created should show up in winbox under IP HOTSPOT USERS?

mstuebner

Hi fewi, The most likely reason you're seeing the status window showing .99 and the client itself reporting .100 is the universal NAT feature of the Hotspot. To turn it off, remove the address-pool configured on the Hotspot (set it to 'none'). This also fixes a known bug with redirects after login n...

mstuebner

Thank you very much for your detailed explanation. That is what I meant, and what is called Zero-configuration (not zeroconf) at Zyxel G.4100. So even that it cuts the capacity of the IP-pool to the half, as long as the feature is working, it may help to redurce trouble. I will try it with using two...

mstuebner

The most likely reason you're seeing the status window showing .99 and the client itself reporting .100 is the universal NAT feature of the Hotspot. To turn it off, remove the address-pool configured on the Hotspot (set it to 'none'). This also fixes a known bug with redirects after login not worki...

mstuebner

thats why i say with your post of ip firewall nat print there is no masquerade rule in there start again uninstall hotspot reboot reinstall reboot and recreate hotspot or upgrade to 3.30 or post everything asked for so we can see whats not there Sorry in case that my last post was so unclear, but i...

mstuebner

dont you need a masquerade rule in there? I tried this documentation: http://www.mikrotik.com/testdocs/ros/2.9/ip/hotspot.php?notfound=6& but reading it again with your question I found that masquerading is set during /ip hotspot setup, but as I used winBox I tried to find that in these dialogs...

mstuebner

can you post your route from the hotspot ap? Note: [*]192.168.178.0/24 is the public side, [*]192.168.100.0/24 is the hotspot side [*]192.168.178.1 is the DSL router and by that gate to internet [*]192.168.178.222 is the public side of the mikrotik [*]192.168.100.1 is the hotspot side of the mikrot...

mstuebner

no problems we all glad to help! Hi all, I would like to take that thread over, as I have a similar problem, but don't see any solution. Hotspot is working so that users do get the login page and can login, then they get the status page and are redirected to the web address they asked for. But the ...

Search found 35 matches

Re: Usermanager Rate limits

Re: Timeout loading status page

Re: Timeout loading status page

Timeout loading status page

Re: List of attributes for USER

Re: List of attributes for USER

Re: List of attributes for USER

Re: List of attributes for USER

Re: List of attributes for USER

Re: List of attributes for USER

Re: List of attributes for USER

Re: How do you manage accounts when you use freeRadius

Re: How do you manage accounts when you use freeRadius

Re: Which realm should appear in radacct?

Re: List of attributes for USER

Re: List of attributes for SUER

List of attributes for USER

Which realm should appear in radacct?

How do you manage accounts when you use freeRadius

Re: First "ROUTEROS" Book Published

Re: Why cant I create a subscriber?

Re: Accounts created with Usermanager not visible in winbox?

Re: Why cant I create a subscriber?

Re: Accounts created with Usermanager not visible in winbox?

Re: Accounts created with Usermanager not visible in winbox?

Why cant I create a subscriber?

Re: Accounts created with Usermanager not visible in winbox?

Accounts created with Usermanager not visible in winbox?

Re: Cannot set default internet route

Re: Cannot set default internet route

Re: Cannot set default internet route

Re: Cannot set default internet route

Re: Cannot set default internet route

Re: Cannot set default internet route

Re: Cannot set default internet route