-
-
stutteringp0et
just joined
- Posts: 2
- Joined:
Radius MAC authentication problem
is it possible to send the mac address in lower case instead of upper case. Authenticating against Cisco ACS with a mixture of Cisco AP 1200 and mikrotik access points. Cisco sends password in lower case, need mikrotik to match
Re: Radius MAC authentication problem
I know that this is an old POST, but a customer of mine have exactly this problem. Anyone have a solution?
Please reply,
Best Regards,
RG.
Please reply,
Best Regards,
RG.
Re: Radius MAC authentication problem
No reply mk team?
Re: Radius MAC authentication problem
a few hours is not enough for answer =) also, you'd better write to support at mikrotik dot com
Re: Radius MAC authentication problem
@Chupaka: i agree with you about that is better to send email to support at mikrotik dot com. But i also thing that using forum is better for community help.
So now i'll send email to please answer at this post
So now i'll send email to please answer at this post
Re: Radius MAC authentication problem
unfortunately, community still cannot modify ROS directly =)
-
-
jirristols
newbie
- Posts: 33
- Joined:
- Location: Pretoria, South Africa
- Contact:
Re: Radius MAC authentication problem
Thanks for the link to the original forum(*thread), so I am basically stuck until ROS can be modified by the community?Hi,
I am using hotspot on MikroTik V3.30 and my external radius server (Emerald Management suite V.5 with RadiusNT) cannot create a username with ":" as a character.
I am trying to do MAC Authentication on a private office network where bandwidth needs to be measured websites blocked and authentication has to be transparent.
I have set up the MAC Authentication on Usermanager a lot with no problems but the problem is the format that mikrotik uses for MAC addresses XX:XX:XX:XX:XX:XX. Even if I set the => Hotspot > Server Profile > Hsprof1 > Radius > MAC Format to XX-XX-XX-XX-XX-XX this only shows up as the caller ID in my Radius online list but it doesn't look like that in the HotSpot hosts list. I believe this MAC Format feature is only for accounting not for Authentication. Is there a way that the MAC format used for Authentication in can be changed to "-" or "_" instead of ":"
In userman the MAC User must be set to xx:xx:... to be able to Auth all other formats are ignored as MAC's and thought of as strings for usernames. Even if I can use XXXXXXXXXXXX as MAC this would help.
Please Help!
Because this is a ROS issue completely i think this should be a feature request.
We should be able to define the format of MAC's as there is no standard accross platforms.
Someone from the Mikrotik Team Please answer
Re: Radius MAC authentication problem
I think there is already a standard mac address format: XX:XX:XX:XX:XX:XX
I think there is also a format for ip addresses: xxx.xxx.xxx.xxx
Maybe you should contact the software company and inform them the software does not conform to recommended internet standards. That would be a good way for you to help with the standardization!
ADD: After a quick check of the RFCs, the XX-XX-XX-XX-XX-XX mac format should also be recognized. That would be a MikroTik concern if it does not use the hyphens (-) in the user name.
I think there is also a format for ip addresses: xxx.xxx.xxx.xxx
Maybe you should contact the software company and inform them the software does not conform to recommended internet standards. That would be a good way for you to help with the standardization!
ADD: After a quick check of the RFCs, the XX-XX-XX-XX-XX-XX mac format should also be recognized. That would be a MikroTik concern if it does not use the hyphens (-) in the user name.
-
-
jirristols
newbie
- Posts: 33
- Joined:
- Location: Pretoria, South Africa
- Contact:
Re: Radius MAC authentication problem
Exaclty what I was thinking, hyphens would solve my problems.
If only MikroTik would conform but when this would happen is another thing altogether.
I don't know if this is dumb but would it be possible to use some type of script for this?
Or have userman be a server to the hostpot but also a client to another radius?
If only MikroTik would conform
but when this would happen is another thing altogether.I don't know if this is dumb but would it be possible to use some type of script for this?
Or have userman be a server to the hostpot but also a client to another radius?
Re: Radius MAC authentication problem
Maybe you should email support (at) mikrotik.com with your problem. Maybe they don't know it does that.Exaclty what I was thinking, hyphens would solve my problems.
If only MikroTik would conform
-
-
jirristols
newbie
- Posts: 33
- Joined:
- Location: Pretoria, South Africa
- Contact:
Re: Radius MAC authentication problem
I will give that a try, thanks