MikroTik

hrober

Hi guys, I'm trying to filter some external routes using out-ospf chain but it isnt working. My scenario is: [RTR_1] -----[OSPF]----[Core Router]----[OSPF]----[Border Router] RTR_1 has a OSPF session's with Core Router and this one has a session with Border Router . I would like to filter advertisme...

hrober

may you tell us more about this problem ???

After upgrade to 5.2 I´m having some issues with auto-negotiation.

*) RB4xx ether1 port flapping fixed;

hrober

I'm having some problems after the upgrade from version 4.13 (RB 433AH) to v5rc11. With v5rc11 wireless card (R52) stop working sometimes. The clients remain registered in AP, but there is no traffic on the card. To get things working again I need to disable and then enable the interface. This type ...

hrober

Maybe anothers network engineers may exchange yours experinece and help me to find a better network topology for my issue. Lets explain current scenario. We have bassically 3 networks in our enviroment. - The core network - The distribution network - The access network / last mile The question is re...

hrober

It is not supported by RouterOS on wired or wireless interfaces. Of course the router also will not interfere with traffic between a supplicant, authenticator and authentication server unless you tell it to - it just cannot be any of the three itself. So, for example, if you're looking to deploy sw...

hrober

nothig ?

hrober

planned for... ?

hrober

Really... this feature would be wonderful!

We would use RB 493 like a kind of low cost managed switch for outdoors environments (lampposts) ...

hrober

Freman,

Thanks a lot. It's really a very nice script.

hrober

there is no way to get access to source code....

but you could say us what the gui tool kit and what the programming language is used ?

hrober

Hi, I can't answer to your question, but I'm interesting why do you like to do this. I use freeradius + mt for pppoe, and if any changes (for example anybody forget to paid), I send a "kill" signal to the mt from radius server. So what is the problem with log out and re-log in? I use sess...

hrober

What's the radius type? Freeradius? If yes, freeradius don't support COA (Change of Authorization). You need COA for this function. I'm using freeradius as AAA server here. So, when I enable radius incoming on RouterOS, I can send some request to do some actions on RouterOS, right ? I can disconnec...

hrober

marceloru, In the last January I have started a migration process from almost two thousand of Wi-Fi costumers. The old Wi-Fi infrastructure were opened, no encryption must required and IP Addressing were fixed. Nowadays, we are using WPA2/AES with PSK, stored on radius server and tunneling our costu...

hrober

Hi, Using PPPoE and Radius, can I change/update a queue without disconnect the PPPoE Tunnel ? something like remove it and re-read the queue attributes, or all radius replies packets. I know that is possible to write some scripts to remove queues, but my biggest problem is: RouterOS will read radius...

hrober

Hi Guys. Let me explain the scenario: 1. We are using PPPoE with radius server (AAA) 2. We have two kind of customers (PPPoE Clients), Home and Bussines 3. I need to find a solution to send 'home' users traffic for though specifics ¹ firewall rules is there some way to create dynamic firewall rules ...

hrober

Please update your Radius dictionary with new attribute
Code: Select all
ATTRIBUTE       Mikrotik-Wireless-PSK               16       string

uldis,

Great! It works now!

I updated my Radius dictonary with this new attribute and added a new row in my radreply table.

Thanks

hrober

It is available from the beginning of version3.

I need to update my MkT Radius Dictionary to use this ? I'm trying here but radius says:

Failed to create the pair: Unknown attribute "Mikrotik-Wireless-Psk"

hrober

Use this attribute:
Mikrotik-Wireless-Psk

Will is avaiable on next release/beta version ?

hrober

Why don’t you just access the access point using PPPoE client. My PPPoE Client does not a Access Point, most times, is a Desktop with Windows® XP Why not route instead of bridge? Because there are a lot of PPPoE clients behind it I need to access the bridge, not the client, access the PPPoE Client ...

hrober

It's a good ideia, but my wireless clients (the firmware) do not support EAP method.

I ask again,

why I cant auth PSK agaist radius ? are there technical problems that make it impossible ?

hrober

Today I use 'Access List' to specify a different WPA2/PSK keys to my custumers, Its so hard. Is there way of the use radius to store the keys ?

hrober

Hi guys, Today I have a wireless network with PPPoE, It's work fine, no problems and great performance, using PPPoE + WPA2, That's okay. Let me explain my doubt, sometimes I install a unique antenna to a building, with a lot of custumers, then I active PPPoE-Relay on my bridge (wireless client) and ...

hrober

Hi guys,

I am thinking to deploy a point-multi-point with WPA2/PSK. What can you say about performance ?

Anyone can share your (yours) success cases ?

hrober

Hi guys I am trying install RouterOS 3.6 (3.4, 3.5, 3.4 too) in a motherboard VIA (A7V600/FS), but the boot process always stop after "Loading drivers" message. When I install RouterOS in another machine (same version, using same CD), and move the flash card to VIA motherboard, It works. a...

hrober

uldis,

can I use a radius server to store the keys ? instead the RouterOS AP looks to the 'Access List' It looks (request) to radius ?

Is it possible ?

hrober

uldis, Thanks for reply.

is there a way of the use "dynamic" PSK in acess-list ? because I dont want stay adding manual keys or other way using radius with PSK ? What do you suggest ?

hrober

Hi guys, I would like to use a WPA/WPA2 with PSK or EAP authentication type, but at work we make excessive use from a kind of router that not suport the EAP with WPA, just suport (WPA/WPA2 with PSK), so, I need know if has a way to use one more PSK in the same profile, because I would not like the s...

hrober

Hi all,
I can report the same problem using intel based arch. In this tower, I'm using MkT 3.1 with 3 cards Atheros AR5213.

In 3.2 changelog, there is a fixed bug: "fixed wireless transmit lockup detection". What does it means ? are the same problem ?

regards

hrober

hey guys thanks for replies. I solved this problem fallowing this steps: I edited sql.conf. uncommented this line: simul_count_query = "SELECT COUNT(*) FROM ${acct_table1} WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" After, in radcheck: UserName attribute op value foo@foo.com.br...

hrober

Hi guys,

I'd like know how make to allow only login simulaneous with freeradius and pppoe. I found Simultaneous-Use attribute, but I not found it in freeradius documentation and I not see it in freeradius dictionaries.

thank you.

hrober

I have to suspect that if they can't login to your network, they'll call and you can tell them the reason they're blocked that way. :) If you let them on your network, I'd recommend that you at least assign them an IP that you don't route to the Internet. Then route all traffic from that IP network...

hrober

If they're authenticating to your network via PPPoE, why don't you simply change their password to block them?

Because I need redirect all http traffic to my http-server warning the customers about the reason of block.

thank you

hrober

With PPPoE you can still give your users static ip. t3rm thx for reply, I know this feature, but in this way, I'll must create static firewall rules. I'd like to create rules dynamically. Something like it: "change radius attribute and user traffic go to block chain on the firewall" I fou...

hrober

Hi guys. I'm thinking to migrate my network to PPPoE, delivering ip automaticaly (pool of ips, not fixed). Today I block a customer with some firewall rules on the gateway (ip addressing is fixed today), redirecting all http request to page warning about the reason of block. With PPPoE, using randon...

hrober

My English is so bad ??? @_@

I'm speaking about Mac Address (Media Access Control) and not of MacOs (Operation system developed by Apple)

hrober

Hi guys,

I have a doubt about winbox mac based connection works.

What's the process that winbox perform to establish a "TCP/MAC" connection with device ?

Anyone can give more details about it ?

hrober

Hi guys,

I'm more one doubt about mac authentication with radius.

Today, I using MT 2.9 with mac auth via freeradius, I would like know if possible delivery an ip address through radius after the customer be authenticated, It's possible ?

hrober

Yes, you can do that... FreeRadius example: 00:00:00:00:00:00 Auth-Type := Accept, User-Password == "", NAS-Port-Id == "CARD NAME" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP, Ascend-Data-Rate = 256, (if want spe...

hrober

Hi guys. I'm using MT with three atheros card in ap-bridge mode, this cards sharing the same SSID and have distinct channel numbers. With access-list option, I can allow that one mac-address connect in a specify card only. My ask In Mac authentication, via Radius server, is possible specify the card...

hrober

Hi guys,

I'm with a doubt about area property work.

Mikrotik docs says that AP compare area-prefix sent for client to make decision wheter allow or not allow the client connect.

This feature just work when the client is one Mk station or simple PCIs cards work too ?

hrober

How get value of the name[=value] into script ?

IE.

{
/ip address add address=$ipaddress interface=ether1
}

The line command:

myscript ip=192.168.0.2

(sorry for bad english)

Search found 41 matches

OSPF filter

Re: RouterOS v5.4 released

Re: v5rc11 is out!

Network topology

Re: 802.1x on wired

Re: 802.1x on wired

Re: Feature Request: IEEE802.1X for Ethernet ports

Re: Feature Request: IEEE802.1X for Ethernet ports

Re: graphs using pppoe server

Re: Winbox Source Code

Re: Radius PPPoE - Change queues dynamically

Re: Radius PPPoE - Change queues dynamically

Re: Cpu Usage Vs encryption

Radius PPPoE - Change queues dynamically

PPPoE and Traffic Shaping

Re: Auth WPA2/PSK agaist radius server

Re: Auth WPA2/PSK agaist radius server

Re: Auth WPA2/PSK agaist radius server

Re: Deployment network issue

Re: Auth WPA2/PSK agaist radius server

Auth WPA2/PSK agaist radius server

Deployment network issue

WPA2/PSK performance

3.6 problem with install

Re: Two or more PSK per profile

Re: Two or more PSK per profile

Two or more PSK per profile

Re: RouterOS V3.1 stops forwarding traffic on 2.4GHz interface

Re: freeradius and simultaneous logins

freeradius and simultaneous logins

Re: PPPoE and blocking customer

Re: PPPoE and blocking customer

Re: PPPoE and blocking customer

PPPoE and blocking customer

Winbox - How Mac based connection works ?

Mac Auth - more one

Mac Auth

area property doubt

name[=value] - get value