MikroTik

krigevr

See how this works for you: :local name /ip hotspot :foreach i in=[/interface wireless access-list find authentication=yes] do={ :set name [/interface wireless access-list get $i interface]; :if ($name = "(unknown)") do={ /ip hotspot remove $i; :log info "Wireless Access List Interfac...

krigevr

This works correctly under ROS 3.7: :local found :set found "0" /ip route :set found [/ip route find dst-address="0.0.0.0/0"] :if ($found = 0) do={ :log info "Dst-Address not found. Adding."; /ip route add dst-address=0.0.0.0/0 gateway=192.168.15.254; } :if ($found != 0...

krigevr

Give me some more information please,
like the output of your Access List, clearly showing which one you want to remove?

-K

krigevr

No. C1 requests a datastream that cannot exceed (for argument's sake) of 1 mbps from M2. M2 simply requests the same datapackets at the same rate (1mbps) from M1, which requests the same datapackets at the same rate (1mbps) from your ISP. M1 will NOT download faster than what the network needs, and ...

krigevr

M1 will only download as much, or as fast, as the network needs. If the network only requests 256k/512k in total, then that is what will be downloaded. M1 will not download more than it should, because where will it send that data? It's like trying to fill a bottle with a funnel, but you're pouring ...

krigevr

/ip hotspot print Flags: X - disabled, I - invalid, S - HTTPS # NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT 0 hotspot1 hotspot hs-pool-3 hsprof1 5m In this case, you can see my idle time-out is 5 minutes, which is the default. You can change yours to any value you like. By the sound of things,...

krigevr

Glad to be of help!

-K

krigevr

I've written a script that searches for "/" in the address, and strips it, and everything after it in the line. I then incorporated your script to follow on it. Test it and see if it works: :local hip :local dip :local addy :local char :local count :local found :set addy [/ip address get [...

krigevr

Try this: if ( $hip != $dip ) do={ /radius set [/radius find service=hotspot] address=$dip } else={ :log info "No Changes" } Hope it helps. You can't "set 0" in script mode, because indexing (i.e. assigning the number "0" or "1" to a list) can only be done by ...

krigevr

let's say C2 is off. C1 is downloading with 1 mbps speed from M2 so what is the speed that M2 should received data with from M1 ? unlimited as the queue or only 1 mbps as C2 speed? and what is the speed that M1 should received from DSL? 3mbps or only 1 mbps as C2 speed? if M2 received an unlimited ...

krigevr

Good morning Thanks for the vote of confidence, SweetSunday! I'll keep you posted on my progress. Cobus, you are welcome to contact me on MSN (which you can also use as an E-mail address to reach me) and we can hook you up - theq2006@hotmail.com I've got two Radius servers - One running on Linux Fed...

krigevr

I've tested by putting three address list entries called 'spam' into my address lists. If I run this line :foreach i in=[/ip firewall address-list find list=spam] do={ :put $i } It correctly returns the three index values. You seem to have missed an "=" after "in" Hope it works n...

krigevr

Set the Inactivity Timeout.

krigevr

Try this:

:foreach i in (/ip firewall address-list find list=spam) do={
/tool e-mail send to=myname@myaddress.dk from=noreply@youraddress.dk server=your.SMTPserver.ip.addres subject="Subject Line Here" body="Inser your message body"
}

Hope that helps!

krigevr

I've got scripts that can solve that problem, assuming of course that all your IPs are being updated to a service like DynDNS or ChangeIP.

I'll be happy to share, if you want.

krigevr

Are you running Hotspot or PPTP / PPPoE?
Is your /radius server set?
Is your /tool user-manager router added?

In case of Hotspot:
Does your Hotspot Profile have it's Use-Radius set?

In case of PPPoE/PPTP:
Is /ppp aaa use-radius set?

-K

krigevr

What about Bridging Eth1 and Eth3, and giving the Bridge interface IP 62.38.167.2

-K

krigevr

Well, see if you can decypher the Billing subscript of my Automated billing thingy - That one provides for the functionality of E-mailing the client, and yourself, some usage information before resetting the counters. You can chop and change as you like, of course. But yes, it is definitely possible...

krigevr

Excellent, I'll try that one out - That'll solve my problem partly. But let's suppose for the moment that the month lapses, and you have to reset your counters and such, with PPPoE sessions still active - User Manager will set everything to Zero, but the moment another interim-update from an active ...

krigevr

Hey,

If you can't get your Null Modem interface to work, you'll have to either log in by Wireless (which I assume is also not working) or Reset the system.

The reset just puts RouterOS back to Default settings - It doesn't wipe RouterOS off.

-Krige

krigevr

I'm struggling with similar issues. As far as I know, one can let FreeRadius send out an Acct-Status-Type value of Start, Stop or Interim-Update. (And 4 others that I'm not going to get into right now.) I'm presuming one must stop it, and start it again. However, records don't get stored in FreeRadi...

krigevr

:foreach i in [ /ip proxy access find] do={ :if ([:find [/ip proxy access get $i comment] "Allow Download"]=0) do={/ip proxy access set $i disabled=no } }; It's Proxy instead of Web-Proxy, and Print command doesn't work in Script for obtaining/assigning index values - but the index 'count...

krigevr

You can write a script to execute the following command at Month's End:

/tool user-manager user
reset-counters

See my Automated Billing script's Month-End script, which may be of help:
http://wiki.mikrotik.com/wiki/AutomatedBilling

-Krige

krigevr

What I would like to establish, is if other radius managers will resolve the problem, i.e do the bytes upload -and download counters increase at the predetermined interim update interval and do the dynamic queues active on the remote router(s) automatically change according to the changes in the ra...

krigevr

Two possible options that I can think of, off the top of my head: First, You can write a script that will check for gateway activity on MT1 / ISP1, and have it update the public address to ChangeIP or something of the kind. Should the gateway fail, MT2 / ISP2 can be forced to update THEIR public add...

krigevr

Hi Cobus I've got two other users - one of which is using my script, with the same problem. While exploring the options on User Manager, I'm also slowly developing a FreeRadius solution. Also thinking about selling realms on my Radius server (which is in Cape Town) to other WISPs, and let them use m...

krigevr

Oops... My bad!

Thanks for noticing, SurferTim.

krigevr

Howdy. I'm looking for a solution to terminate an active accounting session, which is associated with a PPPoE session, without actually killing the PPPoE session. Testing environment is an RB532 running PPPoE Server and User Manager. Under /tool user-manager session, I am able to remove a current ac...

krigevr

Haha! True, but I STILL haven't attempted going back to work yet!

I'm glad to hear my script is performing to your satisfaction.
I'm working on an update.

I wonder if MT will give me another free licence if I write a nifty update and add some features. Hmmm. *chin-rub*

krigevr

ip firewall nat add chain=dstnat action=src-nat protocol=tcp dst-port=5555 dst-address=[your router WAN address] to-ports=5555 to-address=[your client address]

Try that.

krigevr

Hey kids,

Sorry I've been overseas for a while.

I'm looking into that problem, SweetSunday.
Will get back to you guys in due course.

-Krige

krigevr

What I've done is to forward a Non-standard port. Let me explain my setup: Internet -> DSL Router -> Mikrotik RB150(A) -> a network -> Mikrotik RB150(B) -> Client PC My client wants Web access to his home server. But I'm already using Port 80 for my own purposes - So I gave him port 90. Sounds stran...

krigevr

If anyone needs information, I'll gladly enter into this discussion. I've reviewed your posts thus far. So *they* need to be able to access their usage for the current month at any time so's they know where they are with it, and *I* need to know at the month's end if they exceeded their cap and have...

krigevr

Not in my experience...

krigevr

Hey, You can use 192.168.0.1 as a Local Address, and create an Ip Pool with ranges 192.168.0.2 - 192.168.2.254. That should give you approximately 760 IPs to use, under subnet mask 255.255.0.0. (Is that netmask value of /16? Someone correct me!) A nifty advantage for using statically assigned IP add...

krigevr

Thanks a million, the first portion seems to be working fine, still struggling to get the second part working. I'll hack away at it for a while. A problem I've discovered in the meanwhile is that each of my two WANs have different DNS servers. But this information must be passed to the client comput...

krigevr

Hi,

Is that the entire script?
SHow me what else you have.
You may just need a 'get' command here and there to establish the framework that your IF statement runs on.

Can also contact me on MSN (see my user profile) if you have questions.

-Krige

krigevr

Heya, Thanks! I'll give that a shot. However, just reading that solution leaves one problem - That will work for my main station, but the downlinks from the other towers run through a single ethernet port - but I configured them with two IP addresses for each downlink trunk. How, then, can I get my ...

krigevr

Hi, I've got a scenario where I have a few towers, each running ROS with their own PPPoE servers and user managers. (Not the smartest to run several UMs, I know) Each tower has a few clients connected to it, all works beautifully. Towers are interconnected with each other on IP-level, each subnet NA...

krigevr

What version of RouterOS are you using?

There are some known errors in the scripting for 2.9.x, which seems to have been solved by 3.0rcX.

Post the script as you have it now, and let's see if we can debug it some more.

-K

krigevr

I got mine in the Separate packages downloads for RC5 (and rc6) for both the RB500 series as well as x86-based.

-K

krigevr

Your PPPoE server is set to use a certain PPP Profile.

In your PPP Profile you can specify what DNS server address to issue, and you can also specify what firewall filters will apply to anyone using that profile.

See if that helps.

-K

krigevr

Huh? What do you mean RC6 (or above) didn't come out with UserManager? I'm running an RB532A with RC6 out in the field, which has UserManager on it...

I still have the install file.
I'll upload it to my web server if you want it.

-K

krigevr

... script? I've not dealt with communicating with the Serial port before, but a script can execute just about any console command. See what commands you will use to send the comms using a Keyboard, and put it down in a script, and see what happens. I'm going to start experimenting with it as well, ...

krigevr

Mikrotik's Serial setup responds to standard AT commands.

http://en.wikibooks.org/wiki/Serial_Pro ... T_Commands

I'm not sure which of these commands are (or are not) supported by (or necessary for) Mikrotik.

krigevr

Nope, you can't change the Run Count.

You'll have to replace the Scheduler entry entirely if you want to get rid of the high number.

krigevr

For your FOREACH statement, you return index values based on a search for a Name under Interface, according to your script. But then you proceed to trigger a Monitor under /interface/wireless. The index values under Wireless are not the same list as is shown under Interface. You'll see if you do /in...

krigevr

Check out the Access-Accept attributes list in the manual.

Specifically MS-MPPE-Encryption-Policy
and MS-MPPE-Encryption-Types.

If you're using MySQL, you can either add it in RadGroupReply or something. Not entirely sure what the Values should be,

-K

krigevr

If you're using PPPoE for your internet connections, you can use IP addresses on your client's home and office to connect them on a 'virtual LAN' - Of course there are some security risks. Alternatively (And this is one option that I've implemented for a client) is to set up their CPE to also be abl...

krigevr

No need for new license when upgrading.

-K

krigevr

Whoo-hoo! Got my Level 6.

Thanks MikroTik!!! MUCH appreciated.

-K

krigevr

That's quite odd - Not working at all? What was wrong with them? Perhaps report the bug... I'm running Rc5, Rc6 And Rc7 on 6 different devices (3 RB532A and 3 AMD machines) in a production environment. Works perfectly. But yea, it's still a beta. And the Stable version has Script issues as far as I ...

krigevr

I wonder if one can put a Routing metric limit on it... Limit the TTL - Can that be done in MT?

krigevr

I'm serving about 80 clients with a configuration that is nearly identical to yours... Works fine.

My phone rang off the hook when I first started using PPPoE... but it works MUCH better than the previous system I used. Clients are happy now.

krigevr

Your configuration should work perfectly fine.

Ask again if you run into trouble - Will be happy to help.

-K

krigevr

Obviously you've got an IP address assigned to your LAN ethernet interface on MT. If you remove that address, there won't be a gateway for the non-PPPoE kids to route data through. Just remember to have a Local-Address assigned to the PPPoE-Server. Alternatively, if you Need IP-networking on the LAN...

krigevr

In PPPoE Profile, set the Local Address to something static, like 10.10.10.1. And in your NAT Rules, in your srcnat chain, you have to specify an Out-Interface (e.g. your WAN / internet connection.) This connection's gateway must obviously be set up, and /ip/dns must be configured. Hope that helps. -K

krigevr

The syntax on the dst-host command looks very strange... dst-host=:^www\\.paypal\\.com\$ dst-host=:^content\\.paypalobjects\\.com\$ What does the ":^" mean, and why all the backslashes? I'd imagine this would work: dst-host="www.paypal.com/$" dst-host="content.paypalobjects....

krigevr

Many scripts that I have written doesn't want to work under 2.9.x.
Try upgrading to 3.0rc5 or above.

krigevr

Thanks. Did some reading in the IT manual yesterday but there seem to be so many ways of doing 'virtually' the same thing - PPPoE, EoIP, PPP, L2TP &etc - all no doubt with their peculiar pros and cons for specific situations I know nothing of - that it's hard to know where to start. Well I'm go...

krigevr

Of course it can.

View my Wiki post on Automated Billing - I have at least 4 IF-statements there that works in conjuction with the E-mail command.

I think the IF statement's boolean arguments are not working correctly.

krigevr

*eek*

OK
That's uber ood.

Not even a router somewhere within your network?
What does a Traceroute say about that address?

krigevr

I'm gonna assume there's a NAT gateway in there somewhere with an address of 192.168.0.20.
The addresses listed there looks to me like all connection originating from host or network behind 192.168.0.20.

... or not.

-K

krigevr

The one is a PPPoE Client, the other is a PPPoE Server.

The server is for handling incoming PPPoE connections,
and the Client is for facilitating a PPPoE connection from your router to another server.

The PPPoE Client tool is very handy for CPE applications where the APs run PPPoE server.

-K

krigevr

Have another script that runs every couple of hours, or every day or so, that Removes the 2-second script's entry from Scheduler, and replaces it with a fresh one.

Let me know if you need help with the coding.

-K

krigevr

I've also got the server specified under /tool/email, but I put it in all my scripts anyway, just to be safe.

Other than that, I think it might be your IF statements.
I'll play with them a little bit and see if I can find the fault.

-K

krigevr

UP ===== ... /tool e-mail send to="support@xxxx.net" subject="Main BackBone UP - ".($TimeUp) body=("Main BackBone is UP at : ".($TimeUp). "Total TimeDown is : ". ($TimeUp - $TimeDown )) You have not specified your Server address. I'm also not sure what the :t...

krigevr

Greetings I've written quite an extensive automated billing script, and posted it on wiki in the Scripts section, along with lots of descriptions, guidelines, output examples and the works. http://wiki.mikrotik.com/wiki/AutomatedBilling I've also E-mailed Support with this information. Thanks a bunc...

krigevr

You've not specified an Index value for your queue rules to set. Try this: /queue simple set [/queue simple find name="Personal Users"] max-limit=64000/256000 Insert that piece for all your commands dealing with Simple Queue. I'm assuming that "Personal Users" is the Name of the ...

krigevr

I'm not sure if a single netwatch entry can run more than one script. But you can enter two or three identical netwatch or scheduler entries to run your second or third script. In one case, I have a scheduler triggering one script. This script then triggers a different script, which searches for inf...

krigevr

A lot of information I don't need, but you answered my question, thanks a million! So it's simpler than I thought to do it... Just one more thing - What is written in the Address field of the Routers entryin /tool/user-manager/routers? And how is /radius/incoming set up? I just don't have a test-ben...

krigevr

Put a Scheduled task to run at the beginning of the Working Day, and set the interval to 24h. Put another Scheduled tas to run at the End of the Working Day, and also set interval to 24h. Each one of the two scripts that this scheduler triggers, must remove the previous Netwatch entry, and replace i...

krigevr

Hi I have two possible options for you: Option 1: Enter 5 entries into the scheduler that will run your script - Set the first one to execute on a date that falls on a monday, the second one on a date that falls on a Tuesday and so forth. Set all Intervals to 7 days. Then you'll have 5 scheduled tas...

krigevr

Hi 'print' commands won't run under the scripting environment. /queue simple print; (This part won't run.) :set a [/queue simple get 0 name] ; (This will therefore not run either, since Index numbers are not assigned to the queues. The Print command does this, but won't work under scripting.) / queu...

krigevr

I've had similar problems with 2.9.46 - Since I upgraded to 3.0rc5 (and 6 and 7) it seemed to be working OK.

krigevr

Keepalive Timeout: ...the server sits there twiddling its thumbs with an open connection just waiting to hear from it? Yes. Pretty much. But why does the CPE need to start a new session? Just because it needs an address for its pppoe-out interface? But my pppoe addresses don't come from a pool. The...

krigevr

Currently our keepalive time-out is set to 10s but given that we have one-session-per-host anyway isn't the 'no disconnect' situation what I want? When there is an active session from UserName, and UserName for some reason gets disconnected, but the Connection session (and therefore also the Accoun...

krigevr

Put in some :put commands everywhere -
Each time you assign a value to a variable - :put it.
That way you can see what gets assigned, and what does not.

And begin debugging from there.

krigevr

We'll be hosting a cruise with a British company called Noble Caledonia to the Baltic (and of course stopping over in Latvia) in September 2008. Looking forward to it!

krigevr

*chuckle*

Funny.

krigevr

Not sure about your ISA card, but I had the same problem with Realtek 8139-based cards on 2.9.x, but since I upgraded to 3.0rc5, all works OK with the Realtek cards.

krigevr

Here she is! This script checks in /interface/pppoe-server for all users that are connected to a specified Service Name and pulls the Interface Name, then strips it down from "<pppoe-UserName>" down to "UserName" From here you can pull index values for this UserName from either /...

krigevr

So far, Scripting has allowed me to solve any shortcomings that User Manager / Router OS' billing has. I'll be publishing my scripts on Wiki soon.

krigevr

Running what I have in the script appears to simply re-set the up-time, upload and download fields to nil but the session remains active. As the client is presumably unaware of the 'reset-counters' run on the server it continues sending accounting updates with the same accounting-session id (?) and...

krigevr

Is is possible to have User-Manager functioning as a PPP radius client and server on the same box, ie access requests being authenticated and accounting being maintained on the same MT router? Yes it is possible. Remember that Radius (or User Manager) is a package on it's own, that runs pretty much...

krigevr

I've not encountered any problems with upgrading - Everything still works 100%.

I'm not sure what the changes are - You'll have to review the Changelogs.

krigevr

under the heading 'Connection Termination from RADIUS' which suggests (to me) that the MT implementation of Radius CAN terminate an accounting session on a NAS. It just doesn't tell you how. There is a command under /tool user-manager session = close-session which might do it ... Hmm. I'll look int...

krigevr

Howdy I'm pleased to announce my latest version of my script. This one has one script that is set to run Daily - You can set that up in Scheduler. I call this one "Oversight". It calls for a script to check if it is month-end. If it is, it triggers the Auto Billing E-mailer script. If it i...

krigevr

Upload the new packages via FTP, log into webbox and click Upgrade.

I've had 2.9.46 on an AMD K8 machine which I upgraded to RC5, works perfectly fine.
Also an RB532A that had 2.6.38 on, upgraded that to RC6, works perfectly fine.

krigevr

I've experienced the same problem.

krigevr

Most of us are on 1GB or more a month but a couple of light users are on less - only 250MB in one case. So some will need four character places and others only three. I 'could' use "0250 MB" but think it looks ugly in an email to the user. You can use an :if statement to check if the Cap ...

krigevr

Remove it using the same 'find' method you are using with the other remove commands.

/file remove [/file find name=YourFileName]

krigevr

Set 'one session per host' to 'yes'?

It will kill the already-active PPPoE session before establishing the new one.

krigevr

You put the current month in the user's 'pool-name' field ... which is compared with the value returned by the :get month from the system date. If they differ it must be the first run of a new month so reset-counters is triggered ... I guess that would be a solution if you run the script on the Fir...

krigevr

Here she is! This script uses global variable "found" to return True or False if it is the last day of the month (or not). You can set the scheduler to run this one every day just before midnight, and feed the global variable's value into another script that will then execute the Reset, or...

krigevr

...so accessing the User area of U-M just presents them with a long table of entries. I see what you mean. They should add a function where users can pull a report (like in the User Manager admin interface) for just this month's use. Anyway. Uncapped broadband? Oh, how the rest of the world lives. ...

krigevr

Well, I'm running an AMD machine with 3.0rc5 (which is my gateway to the big wide world) and a 532A with 3.0rc6 on. Works fine. Not sure why you can't set up a default gateway on the 532 running rc6... I just did mine in the /setup. For me, the whole E-mail thing was a big one. Spent 3 days writing ...

krigevr

So you have to use Netwatcher I gather to...I'm guessing now...ping/monitor your/itself and when the existing IP is not reachable any longer, you run the ChangeIP script. But no wait, now the netwatcher settings is also a dud because the IP changed and it will show up as off line all the time. So t...

krigevr

Break it down mathematically. 23 / 10 = 2 (in mikrotik) even though the answer is 2.3 It truncates the answer automatically, seeing as both input variables are Integers, but the answer is not an integer, but must also be an integer. The Decimal simply gets chucked out. So, what to do. You're now sit...

krigevr

Don't worry about the fact that the Default Gateway on your PPP connection is the same as it's own IP address. Same happens here - it works. Try pinging your Mikrotik router's LAN port that you are connected to, then also try pinging the address of the virtual interface on the MT side. Then try ping...

krigevr

When adding your NAT entry, try also specifying Connection Type as PPTP.
So, your NAT entry would be:

/ip firewall nat add chain=srcnat action=masquerade connection-type=pptp out-interface=ether2

Try that out.
-Krige

krigevr

Hi. I've got a solution for you. First, lemme outline my scenario: Locations A, B and C. - Location A is running a FreeRADIUS server, running behind dynamic-IP ADSL. - Location B is a network that has 3 Mikrotik boxes that auths against Location A. - Location C is a single Mikrotik x86 machine also ...

krigevr

Try a script that uses a :foreach loop that runs against your user database, that calls for the /tool/e-mail script to send whatever it is you want to send. Of course it will mean that every User entry in your database will need an E-mail address in it, and probably names too, and any other variable...

krigevr

Is that a bug, perhaps in that particular release for that particular board or system type? The crappy thing about 2.9.46 not being able to :put stuff, is that I can't tell if my :set (and Get) commands were successful. Which makes debugging downright impossible. Unless I'm just missing something so...

krigevr

Hey I've loaded 2.9.46 onto an AMD machine, and the script doesn't work. I can't get a single :put command to run. I've tried other things, like adding an entry under /radius, which works... I'll go see the changelogs and find out if they've made some changes to the scripting stuf between 2.9.46 and...

krigevr

Sure, I still have install files of 2.9.46 on disk here, will load that up and see what happens. The :put command is extremely simple - If you have a script - and all the script contains is the following: #Begin Script :put hello :put bye #End Script And you run it, you should see this echoed on scr...

krigevr

I can't see anything wrong with it. I don't know if it's possibly the versions that may make the difference... I've just tested it again by retyping every single line of your code, and it works. What I do often to debug my scripts, is to use the ":put" command. So after each ':set' command...

krigevr

Was wondering if you came right, seeing as you haven't posted in a while. Small bug in the script - You need to actually draw a list of items for the FOREACH to check against (and not just point to a directory) - So amend your code as shown: :local date :local cap :local clientname /tool user-manage...

krigevr

i have tried and tried to get somthing to make the users log out but it just isnt hapening ,, below are some of the things i have tried ip hotspot active remove 0 ... /ip hotspot active remove 17 I've had the exact same problem with Radius entgries. Here's my solution: You've got your Foreach loop,...

krigevr

Hey Sorry I haven't gotten to the script yet, have some time today to look at it. But to answer your question, here's a line out of a script that I wrote that automatically sends out a bill via E-mail to all my clients at the end of the month: /tool user-manager user reset-counters X Where X is the ...

krigevr

The resetting can be implemented in the same script. As for changes in user manager having no effect until you reconnect - That's correct. I'm sure it is possible to disconnect a user under ip-hotspot, much the same you can terminate a PPPoE connection by killing it in /interface/pppoe-server/ I wil...

krigevr

Since the original script is mine, I'll be happy to consult on adapting it. The download-used and upload-used attributes in the /tool/user-manager/user section is the Total downloads since Sign-Up, or since it was last reset. Resetting this does not affect the counters you will see in User Manager w...

krigevr

I gave you a script illustrating the principles, and told you that I have not tested it, or tried debugging it. Has anyone attempted debugging? Here's a working version under ROS 3.0rc5: :local user :local bytesin :local bytesout :local megstotal /tool user-manager user :foreach i in=[/tool user-man...

krigevr

Perhaps signal loss happening somewhere?

krigevr

From what I understand from the manual I think an attempt to start a new PPPoE session terminates the previous one - as long as there is a 'one connection only' limit on the link, I guess. Yep, you understand correctly - That'll do the trick - under /interface/pppoe-server/server, you can set the &...

krigevr

User Manager:
http://wiki.mikrotik.com/wiki/MikroTik_User_Manager

While PPP/Secrets are usernames and passwords entered directly into the Mikrotik console, that will work only for that mikrotik box. The PPP/Secrets are checked to do auths before it checks the user manager (or radius) for logins.

krigevr

The script works on my machine, running ROS 3.0rc5.

You have not answered my question from the other thread:
Are you using User Manager or PPP/secrets?
The script is written for User Manager.

If you log into your router and run the script manually,
what error message do you get?

-K

krigevr

The problem with generated reports as per above is that they're session based, not date based. So if a session spans a month change-over it all gets allocated to the previous month - ie. if I generate a 'this month' report it only includes sessions that start during the month. Hence on my userman r...

krigevr

OK but "by does everything" I assume you mean uptime and data accounting kept in databases on the router itself. But where are they? When I do a > tool/userman/database print all I get is a 'yes' and a size report. Can they be shadowed to a remote db for security? Can they be directly acc...

krigevr

How many radio devices are there on each router?

krigevr

I'm assuming you're running single-WLAN routerboards with WDS. Each time your data hops on one access point, your bandwidth throughput essentially gets halved. (Ignoring processing time) Starting with 10mbps: By the time you get from A to D, you only have 2mbps theoretical throughput. Half that once...

krigevr

Do Scripts count, with a good description on how to adapt/use them? I've got two scripts that I want to publish: One that does automatic invoicing E-mails for all users in a User-Manager based system, and one that checks whether or not it's the last day of the month, that compensates for whether or ...

krigevr

You're about Halfway there. Local users/AAA does everything dependent on the local MT box. Cannot be run from elsewhere. Now, with Radius and User Manager, things get tricky. The "/radius" thingy in RouterOS is simply a Radius Client daemon, used to point your box to a Radius server - whic...

krigevr

I will debug the script through the day and give you one that works by this afternoon.

Check this post again later for a working version.

Thanks!
-Krige

krigevr

Also - YOURSUBSCRIBERNAME must not be replaced with one of the users' names. It must be replaced with the name of a "Customer" from your user manager, in other words, the Username that you use to log into the User Manager web interface. Are you using User Manager, or are you entering your ...

krigevr

Why didn't you post the reply on that topic where I gave you that script? That way, I would be able to respond immediately on my work. In the script that I wrote for you, there are two lines like this one: /tool user-manager user set [/tool user-manager user find user=$i ] rate-limit=40k/100k Change...

krigevr

You can reset counters to Zero with this command: (Assuming you use User manager - my script is written for User Manager) /tool user-manager user reset-counters X Where X is the Index number for the user. I'm doing this in my script. It also calculates and informs clients of usage, but I have a pack...

krigevr

Assuming you're using User Manager: :local user :local bytesin :local bytesout :local megstotal :local user /tool user-manager user :foreach i in=[/tool user-manager user find subscriber=YOURSUBSCRIBERNAME ] do={ :set user [get $i name] :set bytesin [get $i download-used] :set bytesout [get $i uploa...

krigevr

I've got a script that sends out invoices to customers roundabout the end of the month, but I can't find a way to have a script figure out which day is the last day of the month - 30, 31, or 28 in Feb, and for a leapyear, 29. So at this stage I have a script that runs every 30 days and 10 hours, sta...

krigevr

Hi, I run a WISP using User Manager for both PPPoE and one-time hotspot users. For the PPPoE users, I'd like to keep track of my invoice numbers somehow. Currently I'm doing it by using the Comment field under the user's attributes, which my billing script updates each time it successfully runs. Can...

krigevr

I've just been trying the same thing - Go to /interface/ppptp-server/server Set enabled to yes If you're using /ppp/secrets for user accounts, go ahead and create your account, but remember to set your Service attribute for the account to PPTP, if not Any. Remember to set a proper Local and Remote a...

krigevr

Thanks for the heads-up.

I've noticed that under /ip/services, there are no ports being listened on that resembles a Radius engine. What port does User Manager listen on for incoming requests?

Thanks
-Krige

krigevr

Haha! Good thing you tested other machines, because I was completely stumped. A while ago I've experienced a similar error with wireless clients. But the common denominator was one of my wireless relay stations - a very powerful, and very costly one. I ended up replacing the entire electronics assem...

krigevr

Here is a Follow Up #define a couple of variables :local uptime :local count :local usrname :local clientname :local clientsurname # Loop through all the users in User Manager /tool user-manager user :foreach i in=[ /tool user-manager user find subscriber=admin ] do={ #Pull some data from it, and pr...

krigevr

Hey Here's a little something I whipped up to see if I can write something like this, coz I need something similar. Haven't gotten to the E-mailing thing yet, but I'll take a stab at it. Here's what I have so far: This is my source code just pasted. With some comments. #define a couple of variables ...

krigevr

Okay, so Radiusd.conf is fine - No probs there. In my case, the Interim-Update feature of Mikrotik has been giving me some issues, but I haven't really paid any attention to sorting it out. For the moment, I've just disabled Interim-Update under PPP/AAA. Though I don't know how your accounting reque...

krigevr

Hmmm. Quite frankly, I'm stumped. All you pasted here was Accounting Request and Response - So I assume Access Request and Accept/Reject works? But, as far as I read your dump - the Acct_Unique module is returning OK, even with that error, so I guess it's non-fatal. Do you have any entries of the xl...

krigevr

Hi

I'd like to know if it is possible to let Linux's poptop server auth against User Manager using the normal linux radius client - and on what ports, if other than the normal Radius ports, does User Manager listen on for incoming requests.

Thanks!
Krige

krigevr

Cool, thanks - I guess there's little point in this exercise other than to satisfy my own inquisitive nature.

Thanks for the information!
Appreciated.

krigevr

Ag no

Oh well - I'll hack away at it anyway.
Any suggestions for routers?

-K

krigevr

I've been wondering the same thing - I've found a router that has a similar processor architecture to the Mikrotik routerboards, so in the coming week I'm going to see if I can do a remote install on that router. http://www.acconet.co.za/detail.php?cat=93&sub=90&id=5074 This is the router th...

krigevr

I've now started running User Manager as well - Works very nicely. Here is my opinion of FreeRadius vs. UserManager FreeRadius, although far more complicated to set up than UserManager, offers Complete Versatility. However, to utilize this versatility to the fullest, you need to be either quite an a...

krigevr

Forgot to mention - When running Radius in Debug mode (radiusd -x) you will see the machine dumping the "Access-Request received from..." stuff, as well as the "Access Accept" list of attributes that it sends back to the MT box. Check if the attributes you have specified is liste...

krigevr

Hey Sean As far as I can see, the Third of your tries (of code in your previous post) is as close to what I have as can be, except I only have the Ascend-Data-Rate attribute in my Radgroupreply table, no Xmit rate. And it works perfectly. Also, just make sure you can Telnet to your Auth Server's Rad...

krigevr

Use Groups.

In your Radius database in SQL, under the 'radgroupreply' table,
you'll see your groups listed. Just add your different acct-ascend entries with their respective values for each group or pool that you want to serve.

krigevr

Captive Portal is when you attempt to open a website using your browser, but automatically get redirected to the Hotspot Login page. I'm trying to get User Manager running, to serve as a Failover database - but the web interface is very buggy. Struggled for 15 mins trying to add a user - just keeps ...

krigevr

Try posting it on the video thread - someone there might be able to help.

krigevr

I'm running Linux Fedora core 7 on my server, just for reference. For editing/adding/removing the tables/rows/databases in SQL, I use PHPMyAdmin. See section 2 of this How-To for PHPMyAdmin installation: http://www.howtoforge.com/virtual_hosting_with_proftpd_and_mysql_fedora7 This how-to is designed...

krigevr

Fabulous!!

Well I'll start cranking out videos on any/all aspects of my WISP.

Thanks a million!

krigevr

Hmm. I've got several ideas for Mikrotik videos.

If more than one of my videos are Key-Worthy,
do I get one key per video?

I need more than one.
I'll buy if I must, but hey, I'm willing to work for them!
I'm studying Film, after all, so it should be a fun exercise.

krigevr

I'm using FreeRadius running on a Linux Fedora box, sitting in my office in one town, handling Authentication and Accounting for tree networks in three other towns. http://www.freeradius.org The documentation tells you just about everything you need to know about it, but I'll be happy to consult if ...

krigevr

Over here I've got FreeRADIUS running on a Linux Fedora box, sitting in my office, serving three separate networks in three different towns. RADIUS queries MySQL for user info and bandwidth settings etc, and got a very simple PHP interface to alter the SQL database - add users, remove them, change b...

krigevr

I've got a similar problem, but my problem is that there are no tall buildings in the area I serve! I target underserviced areas in South Africa, i.e. small towns. What I'm going to do is to have a single AP serve as my backhaul, and several base stations connect to it on IP-level to pull data. Each...

krigevr

I've solved the problem, for anyone's reference: When using the "/radius remove 0" command, there must first be a "0" entry to begin with. Of course, there is an entry in the list. But these entries are not assigned numerical index values until you execute the Print command. But ...

krigevr

Hi I've got a problem were I cannot get a service entry in '/radius' removed. What I'm trying to do, is to run a simple Netwatcher and "replacement" script. The Netwatcher thing works, so I"m gonna skip over it. When Netwatcher's Down-Script is triggered, it should run this: /radius r...

Search found 155 matches