I have a RB433 AH connected to a RB600 with 3 Antenna as access point. These antennas serve internet to some wireless users. The users have a Nano Station radio as station on their own side. The authentication method in my network is PPPoE that set on Nano Station Radios.
The problem is when a PPPoE account does not have credit to connect, the Nano Station radio sends a lot of authentication packets to my RB433 AH router that has PPPoE server enabled on his interface and the router will crash.
How can I able to drop these authentication packets ?!
Yes I have,
I already set the time out to 3000 ms and I think it means it should work better than 10000 ms option (really I don;t know) ?!
Anyway is there any better solution for doing this issue ?!
The best solution would be program the RADIUS server to OK the request despite there not being any credits, but to serve a special IP pool for the PPPoE server to assign the client IP from, or an address list parameter. Then you could use http://wiki.mikrotik.com/wiki/Payment_Reminders to redirect IPs from that pool and show a reminder telling people that they have no credits. It’s informative for the customer, and doesn’t cause the CPE to keep on trying to authenticate because it already managed to authenticate.
Thank you fewi for your attention, but I have to say I did this before as “notice page project” on my ISP.
The thing that I want is specifically a firewall rule or script or something like that that prevent the continuously authentication.
you cant stop them from sending the auth packets. so as fewi said, let them authenticate but firewall them from the internet or redirect or whatever you fancy.