Framed-Pool NPS Radius Wireless

RouterOS General
1

So I am trying to get this Framed-Pool attribute working with MT router for wireless clients authenticating against AD/NPS.
I have it configured in the NPS to return Framed-Pool=“staging”. On MT router I have pool setup called ‘staging’.
In IP Address I have address setup matching the pool 192.168.1.1.0/26 on same interface as the dhcp server for the wireless group (SSID) clients.

In the logs I can see the ‘Framed-pool’ response in the ‘Accept-Request’ radius log; and it is set to ‘staging’ which
is the name of the pool. And there is no ‘Framed-IP-Address’ attribute being specified..

But dhcp server only ever assigns an IP from the first original pool; dhcp_pool1 for the wireless group(SSID) clients.
It refuses to use the ‘staging’ pool from the ‘Framed-Pool’ attribute. So why is this not working

Note: Framed-Pool is working with VPN connections on my other MT but not with wireless 802.1x; are vlans required for framed-pool

What am I missing?

2

Hi Cvan,

I trust you are well.

Did you ever manage to solve this issue.

I am stuck on trying to use framed-pool for VPN termination and assigning a radius user a certain pool.

Any assistance on how you got this working would be greatly appreciated.

Thanks,

Liam

3

Not to worry - solved my issue.

Working fine now for VPN.