Feature Request: adding RADIUS atributtes in 802.1x

RouterOS General
1

Hi everybody,

We have just finish the testing with 802.1x via AAA server in one of
my hotspots (ROS 6.18) two week ago and realized that the authenticacion
was correct, but the accounting packet does not have the
Calling-Station-Id attribute and Called-Station-Id attribute

*Acct-Request Example *:

rad_recv: Accounting-Request packet from host 192.168.51.186 port 42639, id=17, length=191
         Service-Type = Framed-User
         NAS-Port-Id = "vap-AKIWIFI-Seguro"
         NAS-Port-Type = Wireless-802.11
         User-Name = "aafe8518"
         Acct-Session-Id = "82600024"
         Acct-Multi-Session-Id = "D6-CA-6D-07-57-7D-00-95-0E-00-4F-4A-82-60-00-00-00-00-00-1D"
         Acct-Authentic = RADIUS
         Acct-Status-Type = Start
         NAS-Identifier = "ESCS0271-HOTCAB001:Entidad Local"
         Acct-Delay-Time = 0
         NAS-IP-Address = 192.168.51.186

I wrote a post related to inhttp://forum.mikrotik.com/t/wireless-ap-radius-problem/79478/1

I request to add to Accounting-Request the attributes:

  • Called-station-id


  • Calling-station-id

Thanks,
Santiago

Support for 802.1x auth on ethernet ports
2

+1 :slight_smile:

3

According to the RFC 2865:

5.30. > Called-Station-Id

Description

This Attribute allows the NAS to send in the Access-Request packet
the phone number that the user called, using Dialed Number
Identification (DNIS) or similar technology. Note that this may
be different from the phone number the call comes in on. > It is
only used in Access-Request packets.

…

5.31. > Calling-Station-Id

Description

This Attribute allows the NAS to send in the Access-Request packet
the phone number that the call came from, using Automatic Number
Identification (ANI) or similar technology. > It is only used in
Access-Request packets.

Regards,