Hi,
I’m very new to RouterOS but have long term experience in networking.
I’ve 3 different SSIDs with WPA2-EAP and all three have to connect different radius servers.
How can I associate a SSID to specific radius server for peap authentication?
I’ve tried configuration with 1 ssid and 1 radius, it works as expected. But what if I have different SSIDs each has its own radius server for authentication? How to distinguish between them?
Best regards.
By the way the device is RB2011uias-2hnd-in and RouterOS 6.33.3 (Stable)
any help would be appreciated.
Dear,
From my point of view the best way to do this is the following:
Then only way to do this is to work with MetaRouter and to have Different Virtual RouterOS instances AP’s per needed SSID.
In this way you can sent separate Radius Requests from different RouterOS systems. Radius settings in the RouterOS (AP in this case) are set per Router and are not related to other settings like different SSID’s.or Vlans.
Then you have to setup UM (Userman) to accept these requests.
You can have different Customers in Userman for each AP.
Kind regards,
Patrick Leemans
Thanks for the clarification Patrick,
I think first I’ll try my chance with openwrt on rb2011. If it doesnt work as expected, I’ll move on metarouter path.
Best regards.
Dear,
You better use small Router OS instances as AP which you can create for free in Metarouter.
They can be very small with all the RouterOS features you need for the AP.
Patrick.
Do you really need to use three completely different RADIUS servers? Because using NAS-Port or other attributes, you can handle each request in a different section of the server’s config, no need for three separate servers.
No one is enough.
I’m talking about 3 different AP’s and not about 3 different Radius servers.
Radius requests must come from different IP addresses to work properly.
Anyway it’s how you’re familiar with different setups.