Feature request: DHCP accounting through Radius

Would be nice if the routerOS dhcp-server allow logging with radius accounting.
We use dhcp-server from mikrotik and we need have a log of each IP we offer to each client and when, through radius.

But… ALREADY you can do that…

Really?
In which version?

Sorry if already can do this :blush:

I see that option (but i do not use this) on RouterOS 6.7+

I have a routerboards with 6.1v and 6.5v and not see that option.
Mikrotik manual http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server does not say anything about it, maybe it is not updated?

When evaluate something, use near last version…

but I can see on the wiki the “use-radius” option… you not?

It is also possible to hand out leases for DHCP clients using the RADIUS server, here are listed the parameters for used in RADIUS server.

About how it work, I do not know, I never try.

But that option doesn’t make accounting, it just make authorization.
We need accounting.

Let me to give you an example:

1- device ask for IP to routerboard
2- routerboard ask for IP a radius server (autorization)
3- freeradius replies to routerboard with an IP address for the client
4- routerboard offer an IP to device

…this is what does the routerboard currently.

Even though, if it also does the accounting

1- device ask for IP to routerboard
2- routerboard ask for IP a radius server (autorization)
3- freeradius replies to routerboard with an IP address for the client
4- routerboard offer an IP to device
5- the router reports to server that provided the IP xxx to customer Y (accounting)

This allows to use a DHCP server and pool of IPs in the routerboard and only use the radius server for accounting of IPs offered:

1- device ask for IP to routerboard
2- routerboard offer a IP from own pool to a device
3- the routerboard reports to server that provided the IP xxx to customer Y (accounting)

Currently can not keep track of the IPs that the routerboard delivers to customers.

But this three passages can be done by user-manager…

I must verify that, but about FreeRADIUS, i do not use it.
I can try only on RouterOS user-manager.

But… from user-manager manual:

Note, first local router database is consulted, then User Manager database. User will be unable to obtain DHCP lease, if DHCP router and User Manager server will not contain any information about user’s data.

We not have any information from user data, is just a DHCP dynamic server.

But you want ANYONE connect, or only authenticated users?

Anyone.

the dhcp-server allow logging with radius accounting
But accounting from one not existend account?
One account to be acconuted must be create first…

we need have a log of each IP we offer to each client and when, through radius.
I think what you need is HotSpot to track on radius the IP offered…


what do you mean?

Feature request: DHCP accounting through Radius
description:
anyone connect to dhcp-server must be converted to radius user and be logged on radius for that user the ip offered to client and when

Just checked and on future 6.14 version are added this:
*) dhcp server - added option use-framed-as-classless and added support for DHCP-Classless-Static-Route RADIUS attribute;

Sorry, it is perhaps difficult to understand me because I’m not good with english.

No. Is only account, not auth. Can be done, because are two different things:
Authentication and authorization allow or deny services.
Account keeps track of resources used.
…and can work together or independently.

For example:
PPPoE user dials but is not registered. His login fail because his account is not registered (auth), however his attempt is logged (account).
In the same way you can keep a log or “accounting” of things that are not registered.
Registration is not required for accounting.


Now I remember, this was already asked. Inclusive I voted for this! :laughing:

http://forum.mikrotik.com/t/feature-request-dhcp-server-radius/69706/1

The only difference is add the option of accounting also in the case that the allocation of IP is from a pool of the same routerboard (instead of assigning an IP from a remote radius server).

Use radius works but no accounting is sent for dhcp clients.


MIKROTIK PLEASE CONFIRM THIS IS GETTING ADDED\FIXED IN 6 OR 7???

+1 to implementation of DHCP accounting requests

  • 1

+1

I am amazed this is NOT already there.

Hi!
Any news about support of radius accounting from DHCP?

+1 for accounting

dhcp with accounting - please…