Community discussions

MikroTik App
 
hrober
newbie
Topic Author
Posts: 41
Joined: Fri Jun 02, 2006 3:32 pm
Location: Brazil

Mac Auth

Fri Apr 06, 2007 4:29 pm

Hi guys.

I'm using MT with three atheros card in ap-bridge mode, this cards sharing the same SSID and have distinct channel numbers.

With access-list option, I can allow that one mac-address connect in a specify card only.

My ask
In Mac authentication, via Radius server, is possible specify the card name that custumer connect and allow the connection only in this card ?

[*] Sorry my bad English and I hope that anyone can help me[/i]
 
cmacneill
Member Candidate
Member Candidate
Posts: 293
Joined: Sun Apr 01, 2007 10:51 pm
Location: Christchurch, New Zealand

Fri Apr 06, 2007 6:47 pm

Try searching old posts, I believe I saw one where the answer was to set the username in RADIUS to the MAC address.
 
barrozo
just joined
Posts: 7
Joined: Mon Apr 09, 2007 2:59 pm
Location: São Fidélis / Brazil

Mon Apr 09, 2007 3:06 pm

Yes, you can do that...

FreeRadius example:

00:00:00:00:00:00 Auth-Type := Accept, User-Password == "", NAS-Port-Id == "CARD NAME"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-MTU = 1500,
Framed-Compression = Van-Jacobsen-TCP-IP,
Ascend-Data-Rate = 256, (if want specify down rate)
Ascend-XMit-Rate = 128 (if want specify up rate)
 
hrober
newbie
Topic Author
Posts: 41
Joined: Fri Jun 02, 2006 3:32 pm
Location: Brazil

Wed Apr 11, 2007 4:03 pm

Yes, you can do that...

FreeRadius example:

00:00:00:00:00:00 Auth-Type := Accept, User-Password == "", NAS-Port-Id == "CARD NAME"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-MTU = 1500,
Framed-Compression = Van-Jacobsen-TCP-IP,
Ascend-Data-Rate = 256, (if want specify down rate)
Ascend-XMit-Rate = 128 (if want specify up rate)

Hi barrozo,

In your example, using freeradius server, I do should insert values in radcheck table ?

radcheck
UserName Attribute op Value
00:00:00:00:00:00:00 Password == empty
00:00:00:00:00:00:00 Nas-Port-Id == MyCard

It's right ?
 
barrozo
just joined
Posts: 7
Joined: Mon Apr 09, 2007 2:59 pm
Location: São Fidélis / Brazil

Sat Apr 14, 2007 5:28 pm

Yes,

00:00:00:00:00:00:00 -> Mac Address of the client