Community discussions

MikroTik App
 
User avatar
ramona
just joined
Topic Author
Posts: 23
Joined: Fri Nov 04, 2005 2:13 pm
Location: Africa , pointe noir

mikrotik with radius problem

Wed Nov 09, 2005 12:41 am

hi guys
i want to use freeradius with mikrotik i setup freeradius and mysql all fine till now , i need help to know how to control mikrotik from mysql and radius i know there's attributes and i can use them but i need examples plz to begin let's say add user with username and password and mac address :wink:

c'mon guys let's see experts talk :P i know this is the hard part in mikrotik but i want to see guys speak and show their knowledge :lol:
let's make it :P
 
kenk
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Sat Jun 05, 2004 7:22 am
Location: Tumbi Umbi, Australia

Wed Nov 09, 2005 2:30 pm

As you know what attributes are I dont have to explain those. You have to
select the attributes you want to apply to your users, and have those accessible by column in your Mysql database keyed by user.
When you process the radius request from the Microtik, you reference
items in your database such as username, password, bytes left as check attributes, and provide information back to the Microtik from the Mysql
database such as queue attributes, speeds as reply attributes.
Something like
AuthColumnDef 0,Password,check
AuthColumnDef 1,Simultaneous-Use,check
AuthColumnDef 2,Framed-IP-Address,reply
AuthColumnDef 3,Mikrotik-Recv-Limit,reply
AuthColumnDef 4,Mikrotik-Xmit-Limit,reply
etc..

etc.. although this is from Radiator not FreeRadius, but the same principal
applys.
 
User avatar
acim
Member
Member
Posts: 415
Joined: Mon Sep 12, 2005 12:26 am
Location: Serbia
Contact:

Thu Nov 10, 2005 2:00 pm

You can use dialupadmin, PHP software bundled with freeradius to add/edit users attributes. On the Mikrotik side, you just have to setup authentication over remote radius. Then you can add any attributes you need. You can read Mikrotik supported attributes in the Mikrotik's documentation. I use freeradius to authenticate my hotspot users and to limit their bandwidth when they login and this work like a charm, no problem.