I currently have all of my WISP customers authenticating via PPPoE, using the MT AP’s as concentrators. Has worked very well for me. I want to take all of that to a Freeradius server using mysql. I have the server setup - and it will authenticate properly. I have a few different PPPoE profiles setup for various tiers of service. Can somebody help me setup the radius server to tell the MT which profile to use? Is this even possible?
I use this with the hotspot service, but the procedure should be the same.
I set up two or more user profiles on the RB router, and assign each user to the profile (group) I want that user to have bandwidth/permissions/etc of that profile (group).
Then in freeRadius, I enter in the radreply or radgroupreply for that user:
Attribute=‘Mikrotik-Group’
Value=‘groupname’
The profile (group) must exist, or you will get a configuration error from the service when it receives the reply from the radius server. At least the hotspot does.
It looks like your setup is in ‘/user group’
I believe /users is just for local users. I could be wrong - but I don’t think that is applicable in this situation.
Where are you entering these profiles in the MT box? If
/ppp profile
that should work too. It works in
/ip hotspot user profile
/ppp secret has a user/password/profile setting just like the hotspot users.