Community discussions

MikroTik App
 
savage
Forum Guru
Forum Guru
Topic Author
Posts: 1282
Joined: Mon Oct 18, 2004 12:07 am
Location: Cape Town, South Africa
Contact:

Radius & Scripts

Tue Jan 31, 2006 6:54 am

Just something in general that I'm pondering about....

About this whole Radius Disconnect topic that's floating arround here.. Is it possible, or can support perhaps be added, to execute events (more than likely via scripts), based on radius requests received?

Say, a user connects via radius to MT1. I can then "theoretically", send a Radius Accounting Start to MT2. Ideally, I want MT2 then, to do something with the data received in the Accounting packet... For example, setup a firewall rule, or a route, etc etc etc.

Doubt it's supported now, would be nice if it can perhaps be added to the todo list for the distant future...

--
Chris
 
ofasa
Member Candidate
Member Candidate
Posts: 102
Joined: Tue Jul 20, 2004 11:42 pm

Tue Jan 31, 2006 9:52 pm

There are logon / logoff scripts available with the HotSpot (I wish they were available with PPPoE too!)

What you are describing should be done by the radius server.

Radius server recieves an access request, OKs it, runs a script on the NAS (Mikrotik in this case) to do whatever you want. When the user logs off the same thing can be done too.

Regards
 
savage
Forum Guru
Forum Guru
Topic Author
Posts: 1282
Joined: Mon Oct 18, 2004 12:07 am
Location: Cape Town, South Africa
Contact:

Wed Feb 01, 2006 3:08 am

Yeah. It becomes especially difficult, if you want to authenticate on one nas, but dynamically configure a router further up the chain

At the moment I use a bunch of scripts that execute on the background in Radius during the authentication phase, but it's not really very efficient. Would LOVE for something like this to be added.

--
C
 
korosh
just joined
Posts: 1
Joined: Wed Feb 01, 2006 6:54 pm

Wed Feb 01, 2006 6:59 pm

There are logon / logoff scripts available with the HotSpot (I wish they were available with PPPoE too!)

What you are describing should be done by the radius server.

Radius server recieves an access request, OKs it, runs a script on the NAS (Mikrotik in this case) to do whatever you want. When the user logs off the same thing can be done too.

Regards
 
User avatar
BrianHiggins
Forum Veteran
Forum Veteran
Posts: 720
Joined: Mon Jan 16, 2006 6:07 am
Location: Norwalk, CT
Contact:

Wed Feb 08, 2006 5:42 pm

I agree, I just posted a question about creating a dynamic queue graph rule that could easily be done if we had logon-log-off scripts like the hotspot, or possibly even better, radius side scripts (less places to manage)