MikroTik

Hello everyone.

I have a bunch of questions and I'm quite new to all this so please forgive me.

I'm planning on switching to a gigabit AT&T Fiber connection in the near future. Unfortunately they force customers to use AT&T modems/routers which are quite horrible, the reason being that the modem is required to authenticate using 802.1x before the connection is usable. Some have figured out that the certificates can be extracted from the modems and can be installed on their routers to completely bypass the need for using the AT&T supplied modem. Every guide I've seen for this has been for Ubiquiti routers using wpa_supplicant.

Here is a link to one of the guides: https://www.devicelocksmith.com/

I'm still in my research stages and I haven't purchased a router yet. From what I've read the RB4011 is a better router than the ER-12. What I want to know is if the RB4011 will allow me to do this. Will it let me use wpa_supplicant (or something like it) to authenticate my router against AT&T.

Thanks in Advance

I use the RB4011 and am also looking forward to something like wpa_supplicant working. You can see my current work around at the moment here. Only recently has MikroTik announced support for something that might allow us to host our own certificates. It is not ready for use yet.

They are working on 802.1x right now. According to this post:

Client side support will be available in the next testing release.

I don't trust MikroTik about any feature before I have it working reliably on my own router, but chances seem to be very good.

Is that the dot1x they just added? That seemed to me to be a 802.1x server not a client. Although as I said, I have little knowledge about networking and even less so about mikrotik. Is there any hope of it being supported any time soon? Basically should I get the rb4011 or just go for the inferior ubiquiti.

The quote talks about client side support coming next, so that should be what you need. If you're not in a big hurry, give it few days and you'll see.

The quote talks about client side support coming next, so that should be what you need. If you're not in a big hurry, give it few days and you'll see.

Thanks Sob, I saw your post after I wrote mine.

Thankfully I'm at least a month away from actually needing it since they haven't actually rolled out fiber just yet, so I can wait. Hopefully by then pcunite or someone else can give it a shot and make sure it works.

This thread might be dead - who knows. Just read through it - so is someone here (@pcunite) working on this still?

since RouterOS 6.45.1 there is a new feature

dot1x - added support for IEEE 802.1X Port-Based Network Access Control;

check if solves what you need

https://wiki.mikrotik.com/wiki/Manual:Interface/Dot1x