MikroTik

rrmcguire

Is it possible to use User Manager for wireless authentication not by MAC but instead using user/password authentication?

rrmcguire

got it....uninstalled user manager files, rebooted router and then reinstalled user-manager package.....thanks

rrmcguire

should I delete the user-manager directory and then reset the config again?

rrmcguire

Have router OS 6.49.8 and have user manager package installed and have reset the configuration on my mikrotik but when I try and login to usermanager at ip/userman receive "invalid user name or password" this is using admin as the user name. I tried opening up a new terminal and entering /...

rrmcguire

When trying to start free radius service I'm receiving the attached message, can someone direct me where to look?

rrmcguire

Good afternoon,

I've installed usermanager package again on my mikrotik but have forgotten the password,

When I open up a new terminal and try and use

/tool user-manager customer print

I get a "bad command name user-manager

rrmcguire

DELETE

?

rrmcguire

Issue is we cannot use windows must be Linux so learning on the fly

rrmcguire

Saw on another site that I can leave as mysqli.

In the install daloradius section

https://draculaservers.com/tutorials/in ... n-9-mysql/

rrmcguire

I'm following this:

and noticed he changed mysqli to mysql

https://www.youtube.com/watch?v=B84NqI7vaWw

at about 9:43 into the video

rrmcguire

when I try and change my daloradius configuration file db engine from mysqli to mysql and then try and login to daloradius I receive the attached message

rrmcguire

when running systemctl status mariadb receive the following:

rrmcguire

for the firewall settings aren't those to be setup on the mikrotik?

rrmcguire

Also within daloradius should Mysql be disabled?

rrmcguire

and for the firewall rule on the mikrotik, the src. address should be of the address of the freeradius server?

rrmcguire

I've done this:

Regarding the firewall, you should allow/accept incoming traffic to 3799/UDP on your ROS,

But how do I allow this:

and 1812-1813/UDP on the Freeradius server.

rrmcguire

should my nas client that was added through the GUI on daloradius also show up in my clients.conf within /etc/freeradius/3.0/clients.conf?

rrmcguire

is the address of my NAS the top address?

rrmcguire

I've gone through ROS A, B, C....what firewall rules would be needed?

ROS - D: Create any necessary firewall rule to accept the incoming radius traffic. Attached is what I currently have

rrmcguire

disregard last post, have added in my nas and a couple of users again, do I need to create my packages now as well? Basically once daloradius is setup, what is my next step?

rrmcguire

so I ran the following to install daloradius:

https://docs.beamnetworks.dev/en/linux/ ... daloradius

And can access the page at ipaddress/daloradius and notice a bunch more tables but what I had entered in through apache is now gone?

rrmcguire

Ok, I'll look at daloradius in the morning

Thanks

rrmcguire

So you recommend using daloradius rather than phpmyadmin?

rrmcguire

ok, got it copied from using filezilla then copying with notepad: Here is my current clients.conf # -*- text -*- ## ## clients.conf -- client configuration directives ## ## $Id$ ####################################################################### # # Define RADIUS clients (usually a NAS, Access P...

rrmcguire

tried copying using putty but will only copy what is currently displayed, not the entire file. Tried changing the lines of scrollback, but will not allow me to apply the change in settings. Just trying to copy from either putty ssh to windows or from powershell ssh to windows to I can share my clien...

rrmcguire

following this I see how to mark the text to select all, but how do I copy then paste within this site? I'm doing this within powershell

rrmcguire

can you tell me how I can copy my entire clients.conf file so that I can have this reviewed possibly? i.e. copy and paste the entire file, I can only copy what is currently displayed

thanks

rrmcguire

dumb question but how do I copy the entire contents of my clients.conf file to paste to show in the forum thread?

rrmcguire

the radcheck table in freeradius server is where all my users are setup, correct?

rrmcguire

It's not that simple. It would help if you shared more detailed information about your configuration. I assume you are missing a ton of configuration, as you didn't provide any. Firstly, the "radiusd -X" is a mode in which Freeradius operates on a debug mode. You could exit from it with C...

rrmcguire

Ok, thanks....following your posts above where should I start to check my configuration.

I've made some changes already to my configuration file on the freeradius server and can share

rrmcguire

So following this setup my radius server, correct? https://docs.beamnetworks.dev/en/linux/networking/freeradius-install I can login to my mikrotik router with the test users that I added on my php myadmin page and show them also in the authentication log on the page Sorry for all the questions, firs...

rrmcguire

This was the site that I followed

https://docs.beamnetworks.dev/en/linux/ ... us-install

rrmcguire

Sorry for the dumb question but what is ROS and RAS, I have most setup in router os on my mikrotik, security profiles, etc

Didn't know what type of authentication type should be used?

Thanks

rrmcguire

getting the attached message when try to authenticate

rrmcguire

It also has a duplicated NAS client. rlm_sql (192.168.88.1): Client "test mikrotik" (sql) added rlm_sql (sql): Adding client 10.108.21.198 (test mikrotik 2) to global clients list Failed to add duplicate client test mikrotik 2 Failed to add client, possible duplicate? Ok, have resolved th...

rrmcguire

Go to system->logging and add a logging rule with topics "radius" and "debug", action memory, then watch the log window while doing an authentication. How to configure wireless authentication depends on the driver being used (wireless vs wifi). Your freeradius instance is not st...

rrmcguire

fixed the above by running the following:

Run 'service freeradius restart' and 'service freeradius stop' commands Then run the command,'freeradius -X' you will not face binding issue anymore. This fixed the failed to bind error, but still unable to connect to wireless

rrmcguire

when running sudo freeradius -X this is what I get: radius@freeradius:~$ sudo freeradius -X FreeRADIUS Version 3.0.26 Copyright (C) 1999-2021 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute cop...

rrmcguire

I ran through the following after adding my users to the users file on the radius server and still won't connect to wireless....where can I locate and/or run the logs to troubleshoot

https://wiki.mikrotik.com/wiki/Manual:W ... FreeRADIUS

rrmcguire

sorry, this is the first time doing this...can you point me to where in radius and the mikrotik I need to be looking for the logs at? I can login to my mikrotik with one of my radius users so I know they're "talking" to each other. Just when I try and connect to the wireless I have the ima...

rrmcguire

ok, I've changed the src address to default. Are you talking logs from the radius server or from the mikrotik?

rrmcguire

on my wireless connection I'm showing the attached with the settings suggested.

rrmcguire

yes, I have only wireless checked, the address of my freeradius server in "address", with my secret, then in Src. Address have the address of my mikrotik.

rrmcguire

I have gone through all the steps at the site listed below:

https://gist.github.com/dedanirungu/c5c ... 5a99ad01b2

How do I setup my Mikrotik now? I'm not finding anything definitively that explains the mikrotik setup with a free radius server setup

thanks

rrmcguire

Good afternoon, I've setup my freeradius server by following this: https://docs.beamnetworks.dev/en/linux/networking/freeradius-install I'm stuck at the point now how to get my mikrotik router to use it for authenticating users. If someone could point me in the right direction or provide a link to f...

rrmcguire

I have my radius server setup now using ubuntu and freeradius and have added one of my radius clients(routers) into NAS....what needs to be done on the mikrotik itself?

rrmcguire

Also, I'm on router os version 6.49.8 and can access user manager from the web but its not showing up in winbox. Is there something else which needs to be done so that it can be viewed within Winbox as well? Also could someone point me in the direction of setting up Radius using usermanager or would...

rrmcguire

which would be the better route to set this up? Through User Manager or something like freeradius being that going the route through active directory doesn't appear to be an option for us. Is there an option using freeradius that incorporates a GUI as well?

rrmcguire

so do we still setup the radius server on windows? I don't believe we can go this route where the radius server is setup on windows. Is there a way to setup a radius server where its not on a ddomain controller? What is the radius menu for in router OS on the mikrotik? Sorry really new doing it this...

rrmcguire

would this be the proper way to do the following: We were doing our radius setup via having a cert authority and NPS on a windows server, but cannot go that route anymore and what we're trying to accomplish is setting it up so if a device is allowed to connect to an access point in one location, the...

rrmcguire

thanks for the reply.....aside from using user manager what would be the best way to accomplish this? Scenario is we're wanting to limit the devices which have access to our wireless AP's in multiple locations, but if that device has access in one location and they travel to another, it will automat...

rrmcguire

So I got it working where if i initially connect via PSK, then add the mac address to the access list. The wireless will only connect while I have the mac in the access list. If I remove it, I cannot connect to the SSID. Is there a way to get this working similar to this via user manager? Also, am t...

rrmcguire

Good afternoon, Trying to setup a mikrotik router with authenticating users via a radius server. We don't want use active directory with network policy and cert authentication. I read about setting this up through mac address authentication but is there a way to do this easier as what do you do when...

rrmcguire

By NSP, do you mean the Network Policy Server? I don't think that using an NPS is going to be an option where we are moving to a not on premise site. Is there a way to set this up using user manager and if we have multiple locations where going off of mac address we wouldn't have to change the list ...

rrmcguire

If we are setting up radius authentication by Mac address where we have one laptops mac in one location and want that Mac to be able to authentic when available inanother location Does the Mac address need to be setup in each user manager for each mikrotik. And we would want to be using the mikrotik...

rrmcguire

Also, very new to radius setup here but if doing mac authentication, is your mikrotik router the radius server? Then the usermanager authenticates based on the mac addresses set as the users?

rrmcguire

we have multiple locations and going the route of Network Policy Server/Active Directory authentication was the original plan but we are going to be migrating to Azure through our parent company and this may not be a possibility of going this route although is working currently. The next plan was to...

rrmcguire

Good afternoon, Trying to setup a mikrotik router with authenticating users via a radius server. We don't want use active directory with network policy and cert authentication. I read about setting this up through mac address authentication but is there a way to do this easier as what do you do when...

rrmcguire

Was there ever a resolution on this? I'm having the same issue

Thanks

rrmcguire

Good morning, Is there a way to create a certificate that we would import into a gpo for our end users to automatically connect to a wireless SSID? Would the following work? How do you initally create the cert? https://www.reddit.com/r/meraki/comments/lszt4t/certificate_based_wifi_authentication/ Is...

Search found 61 matches