Reviving an old but relevant thread. I’ve followed everything in this thread as well as http://forum.mikrotik.com/t/solved-freeradius-aaa-assign-users-to-groups/47140/1 http://forum.mikrotik.com/t/capsman-dynamic-vlan/124118/1 http://forum.mikrotik.com/t/capsman-freeradius-user-based-vlan/99112/1 http://forum.mikrotik.com/t/feature-request-dynamic-vlan-assignment-wlan/111334/1 http://forum.mikrotik.com/t/wlan-client-isolation-in-dynamic-vlan-assignment/123458/1 http://forum.mikrotik.com/t/add-dynamic-vlan-assignment/76436/1
The issue I have is that I get this error:
dhcp,warning VL60 DHCP offering lease 172.16.60.60 for B0:65:BD:36:XX:XX without success (samsung, not apple)
This error only occurs when I login with WPA2-EAP with freeradius assigned vlan.
WPA2-PSK (not radius) tagged vlan is fine.
WPA2-EAP freeradius user with no-vlan (untagged vlan) is also fine.
What might be the issue. ROS 6.44.3 on HAPAC2.
Thank you.
Here is the radius log:
23:06:57 radius,debug new request 58:2e0 code=Access-Request service=wireless called-id=66-D1-54-3F-XX-XX:RADIUSTEST
23:06:57 radius,debug sending 58:2e0 to 192.168.86.59:1812
23:06:57 radius,debug,packet sending Access-Request with id 164 to 192.168.86.59:1812
23:06:57 radius,debug,packet Signature = 0x4d00fe3e97e6f42fd74f0eff0ac31252
23:06:57 radius,debug,packet Service-Type = 2
23:06:57 radius,debug,packet Framed-MTU = 1400
23:06:57 radius,debug,packet User-Name = “vl60”
23:06:57 radius,debug,packet State = 0x6dd7aae665deb30aba21bd840b612524
23:06:57 radius,debug,packet NAS-Port-Id = “HAPACLITE-1-2”
23:06:57 radius,debug,packet NAS-Port-Type = 19
23:06:57 radius,debug,packet Acct-Session-Id = “82300029”
23:06:57 radius,debug,packet Calling-Station-Id = “B0-65-BD-36-XX-XX”
23:06:57 radius,debug,packet Called-Station-Id = “66-D1-54-3F-XX-XX:RADIUSTEST”
23:06:57 radius,debug,packet EAP-Message = 0x0209002b19001703010020cbdc706573
23:06:57 radius,debug,packet 85b670a0fe74c552022c034b1b621794
23:06:57 radius,debug,packet 4f3759c13b6e47d4c10b67
23:06:57 radius,debug,packet Message-Authenticator = 0xf5cc5b324de16aeadeb1b57417764f9e
23:06:57 radius,debug,packet NAS-Identifier = “HAPAC2”
23:06:57 radius,debug,packet NAS-IP-Address = 192.168.86.1
23:06:57 radius,debug,packet received Access-Accept with id 164 from 192.168.86.59:1812
23:06:57 radius,debug,packet Signature = 0x022a3492791cdde7f7ba3c7337d8f63c
23:06:57 radius,debug,packet MT-Wireless-VLAN-ID = 60
23:06:57 radius,debug,packet MT-Wireless-VLAN-ID-Type = 0
23:06:57 radius,debug,packet User-Name = “vl60”
23:06:57 radius,debug,packet MS-MPPE-Recv-Key = 0xa77f4eb50d0792ca2040d24a142151e8
23:06:57 radius,debug,packet d4cd14be1b5d0dece1ccc145e62b473d
23:06:57 radius,debug,packet d03b83912c96cd7b910c8a61ce9f03b8
23:06:57 radius,debug,packet bf91
23:06:57 radius,debug,packet MS-MPPE-Send-Key = 0xaf5765190f02b1179860f6de54de7da0
23:06:57 radius,debug,packet 9efa9e1aac7d7ed435d9ee3cca115f04
23:06:57 radius,debug,packet 24c56fd8337418c2f7993c58c04d7475
23:06:57 radius,debug,packet 48f9
23:06:57 radius,debug,packet EAP-Message = 0x03090004
23:06:57 radius,debug,packet Message-Authenticator = 0xe749dfa7dd46e58f859e138dbae72441
23:06:57 radius,debug received reply for 58:2e0
23:06:58 dhcp,warning VL60 DHCP offering lease 172.16.60.60 for B0:65:BD:36:XX:XX without success
/caps-man configuration
add datapath.bridge=bridge1 mode=ap name=“RADIUS TEST”
security.authentication-types=wpa2-eap security.eap-methods=passthrough security.encryption=aes-ccm
security.group-encryption=aes-ccm ssid=RADIUSTEST