I have a Mikrotik 5.16 box and a Windows 2008 R2 server.
I also have multiple internal VLANs
VLANA - 192.168.100.0/24
VLANB - 192.168.101.0/24
VLANC - 192.168.102.0/24
I would like to assign different PPP dial-in users to different subnets (depending on some group membership which I can play around in with the Windowz RADIUS server).
My questions are:
1) Is it possible to restrict users to a specific VLAN?
2) What if they needed access to more than one VLAN?
3) What attributes would I need to send from the RADIUS server to restrict traffic?
4) Any useful tutorials for the above?
Many thanks in advance,
Chris