Community discussions

Search found 34 matches

by rdelacruz
Wed Sep 11, 2019 4:40 pm
Forum: General
Topic: DHCP-RADIUS Accounting packets
Replies: 1
Views: 275

Re: DHCP-RADIUS Accounting packets

Interim update accounting request contains the following attribute
http://prntscr.com/p4rbxx


However, the stop doesn't provide the accounting data. Any thoughts or suggestions? Is this a bug?
http://prntscr.com/p4rc7q
by rdelacruz
Fri Aug 16, 2019 5:16 pm
Forum: Beginner Basics
Topic: Problem with DHCP
Replies: 9
Views: 638

Re: Problem with DHCP

You can also try using Carrier-Grade NAT (100.64.0.0/10) on your network. I believe there's another DHCP server on the Dlink device causing the routing and NAT to not work because the same addresses occur on both inside and outside network interfaces.
by rdelacruz
Wed Jul 17, 2019 12:53 am
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

rdelacruz - Please note that accounting will work only for those users which has a queue. Data for accounting is taken from queue statistics Yes, I'm aware of it. Are you referring to this queue? http://i66.tinypic.com/14x16b8.png If yes, can you please confirm that this added feature will work if ...
by rdelacruz
Wed Jun 19, 2019 1:56 am
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

rdelacruz - Please note that accounting will work only for those users which has a queue. Data for accounting is taken from queue statistics Yes, I'm aware of it. Are you referring to this queue? http://i66.tinypic.com/14x16b8.png If yes, can you please confirm that this added feature will work if ...
by rdelacruz
Tue Jun 18, 2019 2:21 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

rdelacruz - Please note that accounting will work only for those users which has a queue. Data for accounting is taken from queue statistics Yes, I'm aware of it. Are you referring to this queue? http://i66.tinypic.com/14x16b8.png If yes, can you please confirm that this added feature will work if ...
by rdelacruz
Thu May 30, 2019 7:09 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

We ask, We hope, but MiktoTik... is silent...
+1
by rdelacruz
Wed May 22, 2019 3:41 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

rdelacruz - Please note that accounting will work only for those users which has a queue. Data for accounting is taken from queue statistics Yes, I'm aware of it. Are you referring to this queue? http://i66.tinypic.com/14x16b8.png If yes, can you please confirm that this added feature will work if ...
by rdelacruz
Tue May 21, 2019 10:50 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

*) dhcpv4-server - added RADIUS accounting support with queue based statistics;


I tried to test it, but it's not working yet. Is it an added feature that works if we use RADIUS for accounting and lease?
Please confirm this. Thanks
by rdelacruz
Tue May 21, 2019 4:33 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

*) dhcpv4-server - added RADIUS accounting support with queue based statistics;


I tried to test it, but it's not working yet. Is it an added feature that works if we use RADIUS for accounting and lease?
by rdelacruz
Fri May 10, 2019 8:35 pm
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

What's new in 6.45beta42 (2019-May-08 12:44): MAJOR CHANGES IN v6.45: ---------------------- !) dot1x - added support for IEEE 802.1X Port-Based Network Access Control (CLI only); !) ike2 - added support for EAP authentication methods (eap-tls, eap-ttls, eap-peap) as initiator (CLI only); ----------...
by rdelacruz
Wed May 08, 2019 3:38 pm
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

Yes, I believe there are many people interested in this topic. Any response would be pleased. "We plan to implement" or "We don't plan to implement" would be sufficient :).
+1
by rdelacruz
Thu Mar 14, 2019 10:58 pm
Forum: General
Topic: DHCP-RADIUS Accounting packets
Replies: 1
Views: 275

DHCP-RADIUS Accounting packets

We are using DHCP-RADIUS authentication, unfortunately, accounting doesn't provide all necessary attributes to the RADIUS server.

How can we send these accounting data to the RADIUS every time the device disconnects from the network.
Image
by rdelacruz
Thu Mar 14, 2019 7:10 pm
Forum: General
Topic: HOTSPOT login https error
Replies: 11
Views: 813

Re: HOTSPOT login https error

Some Facts about HTTPS redirection Hotspot does not redirect SSL 443 sites , unless you enable HTTPS redirection and use a signed or self-signed certificate. By using self signed certificate, SSL redirect warnings will still be present. As part of SSL protocol, cause hotspot captive portal will be ...
by rdelacruz
Thu Mar 14, 2019 7:02 pm
Forum: Beginner Basics
Topic: Hotspot Bypass
Replies: 9
Views: 543

Re: Hotspot Bypass

How do i set the router to bypass a WiFi repeater from hotspot login page.

>for clarity.. i am using xiaomi mi WiFi repeater 2 which doesn't have a browser interface...
Is the device MAC address available on the "hosts" tab of the hotspot server? If yes, you can create a binding rule for it.
by rdelacruz
Thu Mar 14, 2019 5:00 pm
Forum: General
Topic: IP lease not the same on the Hotspot
Replies: 14
Views: 3332

Re: IP lease not the same on the Hotspot

You can use IP Bindings. It allows you to block all unknown addresses, and allow only the hotspot network to authenticate to your Hotspot server.

Image
by rdelacruz
Thu Mar 07, 2019 5:16 pm
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

Image

It would be best if Mikrotik can send these accounting data to the RADIUS every time the device disconnected or through interim updates.
by rdelacruz
Thu Mar 07, 2019 5:08 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69917

Re: v6.45beta [testing] is released!

Image

It would be best if Mikrotik can send these accounting data to the RADIUS when using DHCP+RADIUS authentication.
by rdelacruz
Wed Mar 06, 2019 3:17 pm
Forum: General
Topic: Get bytes (stats) from simple queue with api; dhcp + freeradius
Replies: 1
Views: 340

Re: Get bytes (stats) from simple queue with api; dhcp + freeradius

How did you get the accounting data from simple queue with api?
by rdelacruz
Wed Mar 06, 2019 3:07 pm
Forum: General
Topic: DHCP accounting and RADIUS packets
Replies: 35
Views: 13180

Re: DHCP accounting and RADIUS packets

What's the best way to get the accounting data ( Acct-Input-Octets and Acct-Output-Octets) when using DHCP auth without relying on Mikrotik?
by rdelacruz
Mon Feb 11, 2019 9:43 pm
Forum: General
Topic: hotspot - added "https-redirect" under server profiles
Replies: 0
Views: 452

hotspot - added "https-redirect" under server profiles

What's new with the https-redirect? I haven't found any changes on the interface?
by rdelacruz
Thu Feb 07, 2019 10:35 pm
Forum: General
Topic: Mikrotik Access-Request for VLAN [SOLVED]
Replies: 1
Views: 442

Re: Mikrotik Access-Request for VLAN [SOLVED]

Update: The answer is no, and I opted using the Called-Station-Id.
by rdelacruz
Fri Dec 28, 2018 12:30 am
Forum: Beginner Basics
Topic: Create a Hotspot server profile
Replies: 1
Views: 292

Re: Create a Hotspot server profile

Yes, you should update the login.html file, this is how it should look likes.


Image
by rdelacruz
Fri Dec 21, 2018 12:05 am
Forum: General
Topic: Mikrotik Access-Request for VLAN [SOLVED]
Replies: 1
Views: 442

Mikrotik Access-Request for VLAN [SOLVED]

Hi, I have several DHCP servers; I have a separate DHCP server for management and customer's devices. Management devices are on VLAN interface. All the devices are authenticating on the RADIUS servers. Now, I want to assign an IP address based on the interface where the equipment is connected. I am ...
by rdelacruz
Thu Dec 20, 2018 7:33 pm
Forum: General
Topic: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request
Replies: 12
Views: 1200

Re: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request

Another solution is a script to kick any host that is not authorized that runs every 10-30 seconds. Maybe combine this with a delayed redirect of equal time. This can be done with login time-out. However, 10-30 seconds would cause "Already Authorizing, retry later error" if the RADIUS is not done t...
by rdelacruz
Wed Dec 19, 2018 12:48 am
Forum: General
Topic: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request
Replies: 12
Views: 1200

Re: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request

Maybe you can use framed-pool to attribute. Suspended subscriber will still be authenticated, but will be using a different subnet. Create some firewall rules to redirect them to a specific page where they have the option to reactivate their device after paying their bills. This can be done by using...
by rdelacruz
Wed Dec 19, 2018 12:40 am
Forum: The User Manager
Topic: MAC Authentication + DHCP + Radius
Replies: 5
Views: 2035

Re: MAC Authentication + DHCP + Radius

Framed-pool is available in freeRadius. It's the attribute which contains the name of an assigned address pool that should be used to assign an address for the user.

https://freeradius.org/rfc/rfc2869.html#Framed-Pool

I am not so familiar with DaloRADIUS.
by rdelacruz
Wed Dec 19, 2018 12:35 am
Forum: General
Topic: Adding variable to the Web proxy redirection URL
Replies: 2
Views: 326

Re: Adding variable to the Web proxy redirection URL

Hey Why not just "Your MAC is not yet registered. Please log in to save the new MAC address." The registration is on another page, so the info will be lost anyway and needs to be input by user... It would be best if the MAC address is available on the page, as some users are not techy enough to fin...
by rdelacruz
Thu Dec 13, 2018 11:29 pm
Forum: General
Topic: Adding variable to the Web proxy redirection URL
Replies: 2
Views: 326

Adding variable to the Web proxy redirection URL

Hello, I wanted to implement DHCP-Radius, and redirect unknown devices to a website through a firewall rule and web proxy. However, as opposed to Hotspot, I cannot get the user's MAC address or IP address programmatically into the redirection URL of the Web proxy. I know that RADIUS can get the mac ...
by rdelacruz
Thu Dec 13, 2018 6:25 pm
Forum: General
Topic: RADIUS - Framed-Pool
Replies: 1
Views: 528

Re: RADIUS - Framed-Pool

Make sure that you have "dhcp_wifi-guests" address pool on your Mikrotik router.
by rdelacruz
Thu Dec 13, 2018 6:21 pm
Forum: General
Topic: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request
Replies: 12
Views: 1200

Re: Hotspot with mac-login, external captive portal and RADIUS auth - How to force a second auth request

The login timeout is the best solution for it; however, 3 seconds is too short. Try setting it into 5 minutes.
by rdelacruz
Wed Dec 12, 2018 11:25 pm
Forum: The User Manager
Topic: MAC Authentication + DHCP + Radius
Replies: 5
Views: 2035

Re: MAC Authentication + DHCP + Radius

You can set the RADIUS to send a Framed-Pool attribute to any unknown devices. Make sure to have such address pool on the Mikrotik router, so the DHCP will use that address pool for unregistered devices.

Image
by rdelacruz
Fri Aug 19, 2016 7:40 pm
Forum: General
Topic: IP lease not the same on the Hotspot
Replies: 14
Views: 3332

Re: IP lease not the same on the Hotspot

Unfortunately, the address pool on IP/HotSpot/Servers is already set to none.
Image

With this issue, what's the best way to assign static IP for Hotspot clients?
by rdelacruz
Thu Aug 18, 2016 9:20 pm
Forum: General
Topic: IP lease not the same on the Hotspot
Replies: 14
Views: 3332

Re: IP lease not the same on the Hotspot

I don't think that it has something to do with the address pool. I am trying to figure this out with only one client.
And please also note that on the "Leases" tab of DHCP server, the active IP address is the same with the Address on the Hotspot server.
Image
by rdelacruz
Thu Jul 14, 2016 8:15 pm
Forum: General
Topic: IP lease not the same on the Hotspot
Replies: 14
Views: 3332

Re: IP lease not the same on the Hotspot

I am having the same issue. Any updates about it?