It would be very handy to be able to submit the MAC address in different formats to the RADIUS server, as well as optionally submit some sort of password.
In my accounting database, the username is limited to 13 characters. A MAC address in the format of “001122334455” just barely fits, in the format of “00:11:22:33:44:55” it is far too long. I can work around this by configuring a freeradius proxy server to rewrite the username, but it seems silly to have to have a server just to rewrite usernames in this manner.
I propose a simple functionality of being able to selelct a few different ways of submitting the MAC address as the username. The common formats I’ve seen on various software are “00:11:22:33:44:55” (the current method), “001122334455” (the method used by hostapd), and “001122-334455” (the method used by my older Orinoco equipment). Just being able to choose formats would be aboon, as some people do face user name length limitations due to pre-existing software that can’t be changed.
Another function would be to submit some sort of username, in my particular situation I would like to use RADIUS MAC authentication; but it is unacceptable to have usernames in my system with blank passwords as they can be used to authenticate other services.
I’m not sure what this would entail in the guts of Mikrotik, but it seems like it should be pretty easy. I propose that two options be available for the password. A fixed “shared” password that would be submitted and identical on all MAC addresses (simmilar to Orinoco functionality), or to simply submit the MAC address as the password in the same format as the username.
These two functions, at least to me, sound like they would be fairly simple to implement, and would add some much needed flexability to the RADIUS MAC Authentication feature.
The standard (IEEE 802) format for printing MAC-48 addresses in human-readable media is six groups of two hexadecimal digits, separated by hyphens (-) in transmission order, e.g. 01-23-45-67-89-ab. This form is also commonly used for EUI-64. Other conventions include six groups of two separated by colons (:), e.g. 01:23:45:67:89:ab; or three groups of four hexadecimal digits separated by dots (.), e.g. 0123.4567.89ab; again in transmission order.
MT should everywhere accept MAC adresses in different formats. There are far to many soruces MAC addresess are rerad from and limiting entries in this manner can be very annoying.
Another function would be to submit some sort of username, in my particular situation I would like to use RADIUS MAC authentication; but it is unacceptable to have usernames in my system with blank passwords as they can be used to authenticate other services.
Should read:
Another function would be to submit some sort of > password> , in my particular situation I would like to use RADIUS MAC authentication; but it is unacceptable to have usernames in my system with blank passwords as they can be used to authenticate other services.