Hi,
There is a bug (I think it is a bug) on RouterOS 5RC10 in PPP default profiles and rate limit option.

I enabled PPTP, L2TP and SSTP servers on my Mik and I chose Default profile as X and used RADIUS for authentication. Also some manual secrets added for special purposes. Profile X has rate limit of 128k/64k.
I added some secrets and chose service as any because that's what I needed. I also added a special profile named Y with some customized setting including IP addresses but no rate limit and applied the profile to those secretes.
When users with manual secret connect; they authenticate with no problem and IP addresses assign to them correctly but they also get rate limit and I can view the rate limit assigned to them dynamically in queue window.

I did not try to add a server connection for those secrets and It is not efficient for me to do that too because there are too many of them. It seems reasonable that when a secret has a profile other than the default, the connection obey it.

Any update here? MikroTik Support?!?!?!

Any update here? MikroTik Support?!?!?!

http://forum.mikrotik.com/index.php

Notice: For support from Mikrotik staff, write to support@mikrotik.com - Mikrotik does not generally offer support on the forum, this is a user forum

Do you have the right attributes defined? Have you tried running the RADIUS server in debug mode to see that its actually sending the rate-limit attribute to the NAS?

Can you post your relevant configs, relevant output of radius server in debug while authenticating the PPPoE client (radiusd -X)... Actual data that will help to point to the possible problem or "bug".

Problem solved.

Copy & Paste from MK support final reply.

Hello,


The order of profiles,
1) ppp secret profile;
2) ppp server profile;

rate-limit is assgined, because /ppp secret is empty and ppp server profile is taken.

To fix you problem,
set for /ppp secret profile

rate-limit=""

Then ppp server profile will not be used.

Regards,
Sergejs

You must set rate limit for those profiles which you do not want dynamic queue, too. But remember to just leave it blank (rate-limit="").