External Radius & External Login Page

RouterOS Wireless Networking
1

Hi there

Ive managed to set up a hotspot that authenticates using an external form and passes the job of authentication back to the RB. My login.html on the routerboard redirects to an external page. The external page stores some detail in a database and passes authentication back to the routerboard once the database transaction completes. This works fine.

Im trying to take it to the next level and incorporate external RADIUS authentication.

I have a working RADIUS server which I can test remotely using radtest. All is well.

I have ameded the settings on the hotspot by only checking mac authentication and MAC cookie. I have also reconfigured my RADIUS settings so that they point to the new server rather than the routerboards user manager. This has been done by doing the following:

  1. change the address of the RADIUS server
  2. change the secret
  3. select the ppp and hotspot services on the RB RADIUS configuration
  4. on the Hotspot server profile change the NAS port type to ethernet.

Looking at the log on the RADIUS server at

tail -f /var/log/freeradius/radius.log

it is clear nothing is getting to the RADIUS server.

Furthermore, checking tcpdump on the server shows no attempts at traffic from RB to server however the ports are open on IP tables as proven by radtest from remote.

What else do I need to do to make this work?

2

Dear,
You can leave HotSpot settings on Wireless instead of Ethernet.
When hotspot is put on a bridge where Wireless and some Ethernet are on that bridge it will work for both.
Do you have a static IP address at your location?
When all your settings are correct at least you must see something appearing in the logging on your Radius Server.
Add Radius logging into the logging of your MikroTik Device.
Grtz,
Patrick

3

Thanks Patrick that worked just fine.