Change of Authorization with FreeRadius and Mikrotik

RouterOS General
1

Who can explain me how I can use Change of Authorization attribute on Mikrotik and FreeRadius?
I want to change Mikrotik-Rate-Limit while client is logged via hotspot.
AAA works fine with radius server.

Thank you.

Regards,
Piotr Reda

2

Rate-Limit is setup during the Authentication process, not during the accounting process.

Unless you constantly re-authenticate your client (i.e. session-timeout = 600 (for 10 minutes), you cannot alter rate-limit

3

It is possible to change Rate-Limit using Radius CoA request. Without Rate-Limit attribute it is required to include Framed-IP-Address as well for client identification.

Be sure to enable “/radius incoming” and to send CoA request from IP listed under “/radius”.

4

Thanks normis,

It’s works great with radclient utility.

5

Could you write the radclient command which sends change-of-authorization request? I can only do disconnect request but not change-of-authorization.
Thank you very much

6

http://wiki.freeradius.org/Radclient

echo "Framed-IP-Address=<client ip>,Rate-Limit=<limit values>" | /usr/local/bin/radclient <routeros ip>:1700 coa s3cr3t
7

Hi, thank you… it works.


Tried to change a User Profile of a Hotspot User logged in. There is a two profiles (default and advert). I tried to change profile using radclient

echo User-Name=999003,Framed-IP-Address=192.168.0.94,Acct-Session-Id=80f0004b,Mikrotik-Group:=advert | radclient 192.168.0.1:1700 coa secret
Received response ID 56, code 44, length = 46
NAS-Identifier = “ul_amigonet_office”
NAS-IP-Address = 192.168.0.1

but, no advertisement has been shown. The user profile was still default I think. I tried several syntaxes like Mikrotik-Group=advert or Group=Advert etc. but still no advertisement for logged user. Have you any experience with changing a hotspot User profile? (session time, rate limit etc. works fine, but Mikrotik-Group)

Thanks