Framed-Route in v4.11

RouterOS General
1

Having issues with framed-route working, tried in 4.6 and upgraded to 4.11 same issue:

00:00:57 radius,debug,packet Framed-IP-Address = 10.100.100.2
00:00:57 radius,debug,packet MT-Rate-Limit = “256k/1M”
00:00:57 radius,debug,packet Framed-Route = “10.200.200.0/30”
00:00:57 radius,debug,packet Session-Timeout = 172800

However, no route is added to the mikrotik.
All other attributes working.

Any ideas?

Thanks,

2

http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client#Access-Accept

Framed-Route - routes to add on the server. Format is specified in RFC 2865 (Ch. 5.22), can be specified as many times as needed

http://tools.ietf.org/html/rfc2865#page-43

For IP routes, it SHOULD contain a destination prefix in dotted
quad form optionally followed by a slash and a decimal length
specifier stating how many high order bits of the prefix to use.
That is followed by a space, a gateway address in dotted quad
form, a space, and one or more metrics separated by spaces. For
example, “192.168.1.0/24 192.168.1.1 1 2 -1 3 400”. The length
specifier may be omitted, in which case it defaults to 8 bits for
class A prefixes, 16 bits for class B prefixes, and 24 bits for
class C prefixes. For example, “192.168.1.0 192.168.1.1 1”.

Whenever the gateway address is specified as “0.0.0.0” the IP
address of the user SHOULD be used as the gateway address.

So without knowing the exact topology you’re trying to implement, here’s how you’d implement a route to 10.200.200.0/30 through 10.100.100.2: “10.200.200.0/30 10.100.100.2 1”. You can omit the Framed-IP-Address if it’s dynamic by using quad zeroes, which the NAS should substitute with the Framed-IP-Address: “10.200.200.0/30 0.0.0.0 1”

3

Thanks for the quick reply, I though I had used framed-route on an older version like I had specified before, but I changed to the following:

00:36:04 radius,debug,packet Framed-IP-Address = 10.100.100.2
00:36:04 radius,debug,packet MT-Rate-Limit = “256k/1M”
00:36:04 radius,debug,packet Framed-Route = “10.200.200.0/30 0.0.0.0 1”
00:36:04 radius,debug,packet Session-Timeout = 172800

Didnt work, trying with framed address in place of 0.0.0.0

4

No go either:

00:43:00 radius,debug,packet Framed-IP-Address = 10.100.100.2
00:43:00 radius,debug,packet MT-Rate-Limit = “256k/1M”
00:43:00 radius,debug,packet Framed-Route = “10.200.200.0/30 10.100.100.2 1”
00:43:00 radius,debug,packet Session-Timeout = 172800

5

Then I don’t know - maybe proactively open a ticket with support@mikrotik.com, but you very probably won’t hear back until Monday.

6

I opened a ticket, I will keep trying things in the mean time. I appreciate your help!

Thanks!

7

Per Mikrotik - Framed-Route is not supported in DHCP-Server .

8

Is it documented somewhere exactly what radius attributes the MT DHCP server does NOT support?

Eric

9

Ya I think it only works in PPP