Feature Request: Multiple RADIUS Profiles

RouterOS RouterOS beta
1

In RouterOS, we need to be able to define different Radius Servers per PPP Profile or PPPoE Server.

Nearly all other vendor products allow this and is a must-have feature.

It would have been nice if this option is presented in PPP-Profile configuration so we can define specific RADIUS servers per PPPoE Service.

2

It is really interesting that no body actually supports this idea.
It is absurd that we are forced to use a single RADIUS server per router/service.

3

i think this can be done with realm e.g username@domain1 when your radius server see the suffix @domain1 it will proxy the request to other different radius server, anyway i agree with you if this can be done in a per profile basis we also need this feature, but at this point stability on ROS v7 is currently their focus

4

Are you saying you want different pppoe servers to auth via different radius servers? This can be done already.

Add your pppoe-server name as the “Caller-ID” of the radius server, then that pppoe-server will use that server.

example

/interface pppoe-server server
add authentication=pap default-profile=default disabled=no interface=\
    bridge-pppoe1 service-name=pppoe1
add authentication=pap default-profile=default disabled=no interface=\
    bridge-pppoe2 service-name=pppoe2


/radius
add address=1.1.1.1 called-id=pppoe1 secret=RADIUSSECRET service=ppp timeout=3s
add address=2.2.2.2 called-id=pppoe2 secret=RADIUSSECRET service=ppp timeout=3s
5

oh that’s great i didn’t know that :slight_smile: thanks for the heads up

6

In fact, this request and the complaint came from those who did not know how the software works …

7

Perfect, I didint know that was possible.
Thanks for the info.

8

would this be the proper way to do the following:

We were doing our radius setup via having a cert authority and NPS on a windows server, but cannot go that route anymore and what we’re trying to accomplish is setting it up so if a device is allowed to connect to an access point in one location, then goes to a different location in another city/town that they would automatically connect to the ap there.

I’ve tried using user manager so far but not having any luck with adding in say the mac address of the wireless adapter of one of the approved devices. I did get this to work by first connecting via PSK and having mac authentication set in my radius in security profile, then adding in the mac address of the wireless adapter in the access list in wireless tables.