External Radius Server

RouterOS The User Manager
1

Hello,
i´m form Germany,
I hope you can help me.

I need an external RADIUS server, for connecting the hotspot staions.

I createt an Ubunut 14.04 LTS Server with Acccessmanager ( http://www.accessmanager.in ) but i have some problems…
The Support of Accessmanager is very poor…

Give it other solutions???

I hope you understand my bad english,
an someone can help me with my problem.


Best regards Patrick from Germany
hotspot.jpg

2

Hi,

why don’t you use FreeRadius (like everybody else)? :wink:

3

First of all, Mikrotik User Manager is very good solution. Beside this, I prefer Free Radius which is the best in ever. You can try Dalo Radius as open source software.

Else you have different options for commercial radius like Radius Manager.

4

how can i configuration external radius server and userman

5

Dear,
You have to setup Userman first.
Or in the same router (not recommended) or in a separate router (device) or VM.
Read the documentation of Userman how to setup subscribers, profiles, routers, users, etc…
Then in the AP in winbox menu Radius put IP address of Userman + secret and rest of config.
This should work but you have to read the manuals first.
Grtz,
Patrick

6

i have tried userman configuration, but i have a problem with the external NAS ip address, in my scenario, every day the IP address of the external hotspot Change and is possible to accept radius request from every IP Address.

Anyone have a solution?

7

In order to get everything working well you need public fixed IP addresses on all sites.
Another solution is to make VPN’s to your central point if this is possible and then you’re authenticating through a fixed connection with fixed IP address.
Patrick

8

Yes i know this solution, but is not good for my request becaus some device doesen’t support VPN (Cloud Device)… but is possibile add a subnet in the nas ip addresS?

9

I don’t know about UserMan, but FreeRADIUS lets you do that.

Do realize that it can be a security weakness because if someone captures your RADIUS secret, they can connect to your server from that same range and start making brute force attempts on your passwords.

10