Hello, I’m playing with the Filter-Id (also Framed-Filter-Id) radius attribute and PPPoE sessions.
I need to “mangle” traffic from specific users.
I’m trying to done this including a Filter-Id value in the access accept sent from my radius to my mikrotik PPPoE terminator.
As described in the mkt manual, Filter-Id will create a filter rule, in this case for the ppp interface of the current user in the chain ppp with a jump action to the desired chain (the one I set in the filter-id attribute).
After running some tests and get all working, I can see the Filter Rule created when the PPP session is validated, I can see the jump action to the desired chain specified in the filter-id attribute, but the filter Rule keep invalid, I can see via winbox the filter rule in red with an “I” letter in the the flags section.
Also, first of all I created a rule on the top to send all the traffic to the ppp chain with the following command:
/ip firewall filter
add action=jump chain=forward comment="" disabled=no jump-target=ppp
And also this rule keep invalid (Red in winbox and with an I letter). See the pic attached.
What’s wrong ? Any ideas ?
Regards,
Jack.-