Community discussions

MikroTik App

Search found 10 matches

by KoenraadL
Mon May 27, 2024 12:40 pm
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

I made an error.
In the UserManager /Router/Settings I selected the ca-certificate, that should have been the server-certificate. Not that works also.
by KoenraadL
Mon May 27, 2024 12:07 pm
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

OK, so I installed a certificate on the User Manager and now it works. But it only works if I don't use the exported ca-certificate on the client. I exported it as PEM, but the name ends in crt. With the mikrotik ca and User Manager, the client reports "Unsupported Certificate". Now I can ...
by KoenraadL
Mon May 27, 2024 9:44 am
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

I'm absolutely no expert in radius, but what I understand is that a certificate is used to certify that the server is who it pretends to be. But then the clients need it's counterpart, the CA cert. And yes, my freeradius server presents a certificate (to authenicate WiFi-clients). So I'm going to tr...
by KoenraadL
Sun May 26, 2024 9:12 pm
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

No certificates at this moment.
But isn't that besides the point ? Freeradius authenticates fine, should not mikrotik do the same ? Although I didn't test windows with freeradius.
And the ultimate goal is to have no Freeradius server in this instance.
by KoenraadL
Sun May 26, 2024 11:28 am
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

OK, I restarted from scratch. My setup (topology see the image) : PC1 Freeradius 3.0 user : - user2 with password R1 (default configuration) - Usermanager enabled authentication port (and accounting port) added client (NAS in radius-speach) with ip-address and secret. 2 users : - user1, with passwor...
by KoenraadL
Sat May 25, 2024 2:13 pm
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

After further investigation, I came to the conclusion that I could live with the settings when using Freeradius. I can get access unauthenticated via the correct vlan (guest-vlan). When I authenticate correct, I can get to the desired vlan (Freeradius provides the vlan). Trying to authenticate with ...
by KoenraadL
Tue May 14, 2024 11:12 am
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Re: Default VLAN for non-authenticated users ?

My previous question was theoretical, last evening I went ahead and tried some things. It seems that there are options for what I need, but I would like clarification. Setting up a dot1x-server there are the following options (winbox) : Reject VLAN Guest VLAN Server-fail VLAN I set all of those VLAN...
by KoenraadL
Mon May 13, 2024 12:33 pm
Forum: The User Manager
Topic: Default VLAN for non-authenticated users ?
Replies: 11
Views: 1347

Default VLAN for non-authenticated users ?

Hi, I setup VLAN's with a management VLAN. Now I have on every switch/router a specific port to access the management VLAN. Works, but nevertheless, since those devcies are more or less hidden I need to have a long cable to do modifications without lying on my belly or something like that. So I was ...
by KoenraadL
Wed Aug 16, 2023 9:14 pm
Forum: Beginner Basics
Topic: VLAN performance
Replies: 3
Views: 1211

Re: VLAN performance

There's nothing private, it's a test-setup.
switch.conf.rsc
router.conf.rsc
by KoenraadL
Wed Aug 16, 2023 3:46 pm
Forum: Beginner Basics
Topic: VLAN performance
Replies: 3
Views: 1211

VLAN performance

Hi, I'm rethinking my network-setup to include VLAN's with Mikrotik devices. My gear : RB750Gr3 (Ros 7.10.2) CRS326-24G2S+ (Ros 7.10.2) I followed this tutorial : https://www.youtube.com/watch?v=YLtGQAQ8iS0 to set up the VLAN's. The RB750 as router and the CRS326 as managed switch. Everything works,...