Community discussions

MikroTik App
 
arffer
just joined
Topic Author
Posts: 21
Joined: Tue Mar 29, 2005 3:14 am

Multiple WEP keys, HOWTO?

Thu Apr 24, 2008 4:01 am

Great appreciation is given in advance for all help. I've been stumped by what I thought would be simple for two days now.

RB333 RouterOS 3.7 Atheros R52H 2.4GHz B/G band 2432 (Channel 6).

My goal is to use Access Lists to authenticate my customers via MAC, and allow each customer to use their own wep key.

I have everything working fine except for the multiple wep keys.

I need some step by step assistance on how to correctly set the wireless interface, security profile, and access list rules. I have tried so many different configurations, I'm burned out.

Is it even possible to authenticate by MAC and then, using the matching access list rule assign the correct wep key? I'm assuming that is what 'private-algo' and 'private-key' are for.

I have about 65 customers, each needing their own wep key.

I tried following the example in the online docs, the one that builds Station1 and StationX security profiles, but it does not work. The only difference between the example and my test is that the example ran at 5GHz and I'm at 2.4GHz.

In that example, I don't even see where the Station1 security profile ever gets used
 
User avatar
jwcn
Forum Guru
Forum Guru
Posts: 1495
Joined: Sun Aug 27, 2006 6:49 am
Location: Maryland, USA
Contact:

Re: Multiple WEP keys, HOWTO?

Thu Apr 24, 2008 4:34 am

Try creating a virtual AP interface and assigning a different WEPKEY to each SSID...
 
arffer
just joined
Topic Author
Posts: 21
Joined: Tue Mar 29, 2005 3:14 am

Re: Multiple WEP keys, HOWTO?

Thu Apr 24, 2008 9:56 pm

Thanks, I'll give that a shot.

Out of curiosity, what are 'private-algo' and 'private-key' in the Access List rules for, if not for assigning encryption keys to individual mac addresses?

Appreciate your help!
 
cylent
Member
Member
Posts: 383
Joined: Sun May 28, 2006 10:30 am

Re: Multiple WEP keys, HOWTO?

Tue Sep 02, 2008 3:05 pm

i am trying to do this myself but i am unsuccessful.

i disabled "Default authenticate" from the interface (wlan1)

then i added a access list profile with a private key for user1.
i enabled "authenticate" in the access list for the user
even though my key is different he is still able to connect by typing in a different key.

i dont understand why this is happening. the key i set for the user is NOT the same as the one he is typing in and he should not be able to connect. why is he connecting?