Does ROS support RFC 3580 ?
I have several Ubiquiti Unifi Pro AP’s and MK based AP’s. Ubiquiti doesn’t support RFC 3580 or wel the new AC AP’s do support it but i’m not planning on buying new AP’s constantly so if ROS supports RFC 3580 then i go with ROS.
For those too lazy to look up RFC3580 - he means 802.1x with RADIUS back-end.
I want to say that you can set up a wpa-enterprise wlan with Mikrotiks… I’ve never done it personally, but search the wiki for wifi authentication.
I’m sorry thats not what I ment. I already have a wpa2-radius setup with ROS and the ubiquiti ap’s a long time.
With rfc 3580 you can make dynamic vlan’s. So you can asign specific users to a specific vlan based on their login username or you can allow access to a specific ssid for a specific user. You can create user groups like staff and students and assign them to different vlans. Or you can use a single ssid and assing authenticated users to their specific vlan to separate traffic of user groups. Now I have several ssids for different vlans.
See http://searchnetworking.techtarget.com/feature/Combining-8021X-and-VLANs-for-WLAN-authorization
Search in this forum with the key “eduroam” ..you’ll find some hints
Thanks for the tip.
I wil do that.
A quick search of the forums (since I am interested in this answer to) yields the following which seems to contain the info I need:
http://forum.mikrotik.com/t/eduroam-vlan-assignment-based-on-radius-802-1x-reply/74268/1
http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client/vendor_dictionary
When I get to work I may play with this using my ACS test-bed.
It doesn´t work for me. Does anyone have a working example config for the vlan/capsman part on routeros?