Different Gateways depending on username...

RouterOS General
1

I really didn’t know where to post this one…
I have 7 (mikrotik) access points that use hotspot, and one mikrotik with usermanager that all the access points ask for hostpot login.
The default gateway for the access points is the mikrotik with the usermanager.
What i want to do, is to give different gateway to the users from the hostpots, depending on their usernames.
Can anyway give me a hint???

2

I’m not sure how to do this in MT yet but I would like to too soon as well for a project. I know here in UK our telecom wholesaler does it by domains names. The user login goes to the main NAS and the username@domain.com then the request is sent to the radius server with that domain.

I wonder if this is possible with MT?

3

Well what i thought of, but i don’t know how to implement, it is this:
Seperate the users by the username, for example “group A” users will always have an “GA” in the beggining of the username. And then the moment a user with “GA” logs in, a script would run to find out his ip, and put it on the correct list, so that his packets would get a specific routing mark. That’s the idea… The main problem is that i have little experience with scripting, and NO idea how to talk to the server that has the usermanager! :slight_smile:

4

I don’t know if you can do this with the user manager, but RADIUS authentication allows you to set a packet mark rule specific to each user or user group. You can then use this to decide which gateway to use.

Nick.

5

Depending on you network config.. (addressing and subnetting etc)..

Usermanager allows for setting the IP address or pool for every user.

You can then set rules based in IP address or address ranges that would use different gateways (route rules)..

IE now you have a user to address cross referance and can route based on IP / user name..

That should do it…

6

Each AP has an ip range 172.18.XXX.0/24,
what you suggest csickles is very intresting, indeed there is such an option. I’m not sure how that will work since to get to the login page the users have to have an ip… so… anyway, you gave me something to look for… thanks :slight_smile: