Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

Hotspot + EAP AD together?

Post Reply
 
User avatar
AlexPebody
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Fri Nov 12, 2021 3:50 pm

Hotspot + EAP AD together?

Fri Jul 22, 2022 9:40 am

Good day, everyone. If anyone knows, please ask for advice. I have many WiFi access points and they are controlled from one device, through CAPsMAN. We also have a HOTSPOT which is formed through a guest bridge and goes to a separate provider, everything I am going to talk about is set up on one CRS125 manager, same place as CAPsMAN. On the main - master interfaces are configured EAP authorization through the domain NPS RADIUS, on the slave interface of each access point is configured just the same HOTSPOT - client access to the Internet via WiFi. If you enable EAP WiFi authorization on the master interface, and HOTSPOT on the slave interface, nothing works, neither EAP AD nor HOTSPOT, does HOTSPOT use EAP that interferes with EAP authorization? How to make both HOTSPOT and EAP AD work in this scheme? The Mikrotik CRS125 configuration is shown below.
Code: Select all
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz frequency=2462 name=2.4_ch11_2462 tx-power=20
add band=2ghz-g/n control-channel-width=20mhz frequency=2437 name=2.4_ch6_2437 tx-power=20
add band=2ghz-g/n control-channel-width=20mhz frequency=2412 name=2.4_ch1_2412 tx-power=20
add band=5ghz-n/ac control-channel-width=20mhz frequency=5180 name=5_ch36_5180 tx-power=20
add band=5ghz-n/ac control-channel-width=20mhz frequency=5220 name=5_ch44_5220 tx-power=20
add band=2ghz-g/n control-channel-width=20mhz frequency=2422 name=2.4_ch3_2422 tx-power=20
add band=5ghz-n/ac control-channel-width=20mhz frequency=5260 name=5_ch52_5260 tx-power=20
add band=5ghz-n/ac control-channel-width=20mhz frequency=5300 name=5_ch60_5300 tx-power=20
/caps-man datapath
add bridge="LAN Bridge" client-to-client-forwarding=no interface-list=LAN local-forwarding=no name=WF_work_datapath
add bridge="Guest Bridge" name=WF_client_datapath
/caps-man security
add authentication-types=wpa2-eap eap-methods=passthrough eap-radius-accounting=no encryption=aes-ccm group-encryption=aes-ccm name=WF_work_security
add authentication-types="" encryption="" name=WF_client_security
/caps-man configuration
add channel=2.4_ch1_2412 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_work_2.4_ch1_2412_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=2.4_ch3_2422 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_work_2.4_ch3_2422_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=2.4_ch6_2437 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_work_2.4_ch6_2437_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=2.4_ch11_2462 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_work_2.4_ch11_2462_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=2.4_ch1_2412 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_2.4_ch1_2412_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=2.4_ch3_2422 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_2.4_ch3_2422_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=2.4_ch6_2437 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_2.4_ch6_2437_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=2.4_ch11_2462 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_2.4_ch11_2462_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=5_ch36_5180 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=default \
    name=WF_work_5_ch36_5180_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=5_ch44_5220 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=default \
    name=WF_work_5_ch44_5220_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=5_ch52_5260 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=default \
    name=WF_work_5_ch52_5260_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=5_ch60_5300 country=russia4 datapath=WF_work_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=default \
    name=WF_work_5_ch60_5300_conf rx-chains=0,1,2,3 security=WF_work_security ssid=WORK_FIWI tx-chains=0,1,2,3
add channel=5_ch36_5180 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_5_ch36_5180_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=5_ch44_5220 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_5_ch44_5220_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=5_ch52_5260 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_5_ch52_5260_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
add channel=5_ch60_5300 country=russia4 datapath=WF_client_datapath disconnect-timeout=3s frame-lifetime=0ms guard-interval=any hw-protection-mode=none hw-retries=7 installation=indoor keepalive-frames=enabled max-sta-count=40 multicast-helper=\
    default name=WF_client_5_ch60_5300_conf rx-chains=0,1,2,3 security=WF_client_security ssid=HOTSPOT_Clients tx-chains=0,1,2,3
/caps-man interface
add arp-timeout=auto channel=2.4_ch1_2412 comment="WF_work" configuration=WF_work_2.4_ch1_2412_conf datapath=WF_work_datapath disabled=no l2mtu=1600 mac-address=64:AA:54:AA:8A:BB master-interface=none name=AP1 radio-mac=\
    64:AA:54:AA:8A:BB radio-name=64AA54AA8ABB security=WF_work_security
add arp-timeout=auto channel=2.4_ch1_2412 configuration=WF_client_2.4_ch1_2412_conf datapath=WF_client_datapath disabled=no l2mtu=1600 mac-address=66:AA:54:AA:8A:BB master-interface=2G-53-MT-AP1 name=AP1-CLIENTS radio-mac=00:00:00:00:00:00 \
    radio-name="" security=WF_client_security
/caps-man aaa
set called-format=mac interim-update=disabled mac-caching=disabled mac-format=XX:XX:XX:XX:XX:XX mac-mode=as-username
Last edited by AlexPebody on Mon Jul 25, 2022 6:56 am, edited 1 time in total.
Top
 
User avatar
AlexPebody
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Fri Nov 12, 2021 3:50 pm

Re: Hotspot + EAP AD together?

Mon Jul 25, 2022 6:37 am

Anybody know, can help please?
Top
Post Reply
  4. RouterOS
  5. Beginner Basics