Filter-Id attribute in RADius Accept-Response cause ppp connection drops

RouterOS General
1

Hi all,

I set up the Mikrotik as a VPN server using L2TP and RADius authentication.
When I add the attribute “Filter-Id” to the Accept-Response, the established connection will be dropped.
The error message in the log is:

could not add filter: outgoing interface matching not possible in input and prerouting chains (6)

I tried to add firewall chain with the same name in the filter but had no success.
Is it a bug or is there any other thing I need to set up?

Thank you.

2

Expected behaviour, the input and prerouting chains are processed before a routing decision is made, so they cannot know what the output interface will be.

3

I found the problem.

I put the jump action to evaluate the PPP filters in the “input” chain which cause an error when the dynamic rules are created (include in & out interface in the rules)
You have to put it in the forward chain which accepts either in or out interface.