My company(ISP) offers Wireless internet service via Mac authentication browsing for each of the CPEs but the database is growing seriously recently. We need to implement client authentication with the help of the Radius server in order to have less human intervention on how a client connects and how long. Our base station connects directly to the Mikrotik(ether4) we then wish to forward all our customers traffic through radius server for authentication and billing before any of them goes to internet. Presently only ether1(86.62.x.x) and ether4(172.30.x.x) are being used in the mikrotik. All the CPEs are within 172.30.x.x network the same as the ether4. The Radius server has only two NICs. ThanksWhat kind of service do you want to forward to Aradial RADIUS?
Thanks so much for the support. We use Wavion AP(WBS 2400).We just want to route the traffic from the AP through the Aradial radius server for authentication. How do we direct the traffic? This is it;I see two options for your setup,
- set wireless RADIUS authentication;
- set wireless HotSpot RADIUS authentication.
RouterOS RADIUS client configuration for HotSpot and Wireless is here,
http://wiki.mikrotik.com/wiki/User_Manager#Quick_start
Thanks. Can you put me through on how to route properly using the IP description i gave earlter earlier. I am so sorry if seem so novice about this.How is this question related to MikroTik?
Basic configuration with IP addressing and IP routing are the things necessary to achieve your configuration (from MikroTik RouterOS point of view).
All configuration for RADIUS should be done on AP and RADIUS should accept and manage requests from it
Thanks. I appreciate your support so far. more grace. The Radius Server is not connected directly to the Mikrotik. it is on a Public IP. How can i route effectively to it so as communicate with the Mikrotik? I mean how to direct the traffic from the AP. The ether1 on the Mikrotik is on Public IP;86.62.x.x. The interface,ether2, connecting the Mikrotik and the AP is on 172.30.79.x/25.IP address on the interface, where AP is connected (IP address should be from the same subnet on MikroTik and AP).
If RADIUS server is connected directly to MikroTik, the same applies for the network between MikroTik and RADIUS, there should be IP addresses from the same network, additionally default gateway is necessary on MikroTik router.
If RADIUS server is not connected directly, public IP address should be configured on the public interface together with default gateway.