hello

I want to make mikrotik proxy to ask for username and password before someone can access the internet. But after I learned proxy Mikrotik didn't support for authentication with user in Windows Active Directory.

So does anyone know if there another way so I can make all user in windows active directory to authenticate first before access the internet?

I've try using hotspot feature in Mikrotik and IAS (RADIUS) for access to user in active directory, but my workstation network and IAS server are on the same network. This mean if I activate the hotspot feature, the mikrotik will block all computer including the IAS. So Mikrotik cannot communicate with IAS and if someone enter the username and password, the result is RADIUS IS NOT RESPONDING. If I miss something in my configuration?

Thx.

IAS server could be added to 'ip hotspot ip-binding' list with type=bypassed, then HotSpot authentication is not required from this host.

IAS server could be added to 'ip hotspot ip-binding' list with type=bypassed, then HotSpot authentication is not required from this host.

So..where can i add that rule??? I'm still no idea.
Or can you give me some step-by-step example?
Because i'm still a newbie in mikrotik

You can mail me at tobi.cjr@gmail.com

Thx.

1) 'ip hotspot ip-binding add address=IAS_server_address type=bypassed'.
IAS_server_address does not need HotSpot authentication after this.