MikroTik

Is there any way to use a MAC wildcard to select a different IP pool? For example, we'd like to be able to put any device with a 0a:00:3e:*:*:* MAC address in a distinct IP pool. (that's the OUI for motorola canopy gear, this would let us utilize DHCP for client radios in bridge mode but have them in a different subnet than the end-users' routers or PCs)

j

Not with the RouterOS DHCP server. ISC's reference DHCP implementation should be able to do this by matching the vendor identifier option.

This is a feature that I've asked for in the past. I'm casting my vote for it here again.

for now, it's possible only with RADIUS...

Just to clarify your post, does the MAC listed in radius have to be specific or can it be done thru a wildcard entry somehow like 0a:00:3e:*:*:*?

I would love this option.

+1

Just to clarify your post, does the MAC listed in radius have to be specific or can it be done thru a wildcard entry somehow like 0a:00:3e:*:*:*?

This depends on your radius server (not MT).

I am using Freeradius. Does it support wildcard macs? Time to do some digging.

maybe something like
in "modules" block, then add that module in "authorize" section

and after that add a record for user "00:BE:EF"

maybe something like

Code: Select all

        attr_rewrite my_super_parser {
                attribute = User-Name
                searchin = packet
                searchfor = "^00:BE:EF:.*$"
                replacewith = "00:BE:EF"
                ignore_case = no
                new_attribute = no
                max_matches = 1
                append = no
        }

in "modules" block, then add that module in "authorize" section

and after that add a record for user "00:BE:EF"

Cool that sounds like the way to go. I have another follow-up question along this line if you will bear with me.

Now, let's assume I have two wireless cards in the AP (wlan1 & wlan2) which are not bridged together but instead have two different real IP subnets. I also want to overlay a private IP subnet onto each wlan card for managing of the transparent wireless devices (00:BE:EF:*:*:*) . I want to hand out these private IP's to these devices via the radius attribute Framed-Pool. Since there are two separate subnets, hence two different pool names, how would you accomplish this?

Eric

huh... I'm not familiar with FreeRADIUS...

two interfaces = two DHCP servers. so you need to set Framed-Pool depending on Called-Station-Id (it's DHCP server name)