Framed-IP-Address and Framed-Pool priority

RouterOS General
1

Hello all I want to make such setup of mikrotik and freeradius which I all my users are in some radius groups lets say pppoe1 pppoe2 pppoe3 and so on - in which group they will receive diferent IP addresses from the different pools configured in mikrotik. I give this pools by Framed-Pool reply form radius to this groups and this works fine! But I want some users to have dedicated IP addresses and I give them this IP addresses with Framed-IP-Address

Its logical in this case Framed-IP-Address to override the Framed-Pool but NO :slight_smile: it doesnt work and the users receive again IP from the pool.

I tested this on 2.9.6 and 2.9.10 its the same!

paste from the documentaion from url: http://www.mikrotik.com/docs/ros/2.9/guide/aaa_radius

  1. Framed-IP-Address - if Framed-IP-Address is specified, Framed-Pool is ignored

  2. Framed-Pool - IP pool name (on the router) from which to get IP address
    for the client. If specified, overrides Framed-IP-Address

So If I read this I can not get wich one overrides which ?

Anyone have a clue for this ?

Mikrotik ignores Framed-IP-Address from radiusdatabase
2

I just tested this on 2.8.28 and its the same :frowning: does not work the client continues receice IP from the pool - Radius returns to the mikrotik this:


Framed-IP-Address = 10.20.30.40
Framed-Protocol := PPP
Service-Type := Framed-User
Framed-Pool := “pppoe3”
Session-Timeout := 679307

The pool pppoe3 is given by the group of the user and I can not stop sending this to the replay unless I make custom config for each of the users . Then some of them will have Framed-Pool := “pppoeX” and others Framed-IP-Address = 10.20.30.XX , but this is not the right way …

3

come on guys dont tell me none of you use this ?

4

Hello,

just add to you radreply table for the user:

Framed-Pool == “”
Framed-IP-Address == “a.b.c.d”

Of course without quotes

5

Framed-Pool over writes Framed-IP-Address in MT (not Radius). The Radius server needs to send Framed-IP-Address only

Can be done by configuring Radius properly.