Hello,

is it possible - and how - to perform a WPA2 WLAN Authentication which asks for username and password instead of a PSK?

Thanks for your reply in advance.

tomtom

Yes, it is possible with EAP. EAP-TTLS/PEAP/LEAP provide password and few additional options for authorization.
MikroTik AP can forward any EAP (TTLS/PEAP/LEAP), RADIUS server should be additionally configured, which is going to be responsible for authorization.
Wireless client should support used EAP authorization, MikroTik mode=station support only EAP-TLS (certificate authorization).

Can you provide us a simple example setup?
Thanks for your help in advance.

On AP you have to configure security-profile as,
/interface wireless security-profiles add mode=dynamic-keys authentication-types=wpa[2]-eap-methods=passthrough
other options accordingly to configuration, additionally you need to configure /radius client and use wireless service.
I'm not able to help with RADIUS configuration for EAP.

Hi,
Can someone help me for the radius configuration of this?

regards
Stefano