Freeradius: Sending command to Mtk

RouterOS General
1

I’ve a freeradius server running with mysql DB.
I use a **Mikrotik HotSpot (2.4Ghz)**connected with freeradius server as NAS

What to do for terminate a user session without delete his account on the database from the freeradius server?
And terminate when user is already connected (always from the freeradius server)?

And for limiting internet surfing for 2 hours?

I see that Mikrotik NAS read the “radcheck” table for logging and “radreply” attributes only when client confirm the login page on mikrotik routerBoard and
write “radacct” table when client disconnect from HotSpot.

But when client is running what to do for sending commands from server TO Mirotik ?

Thanks

2

Search the forums please. This has been discussed in detail, many, many time before. AFAIK, I made quite a substantial post about how this works and what is needed…

3

I follow the post on http://forum.mikrotik.com/t/freeradius-pod/26294/3

But, when i launch the script on freeradius server (without error), in mikrotik log I’ve the seguent:


01:30:46 radius,debug,packet received Disconnect-Request with id 200 from :57750
01:30:46 radius,debug,packet Signature = 0x1a89e4d0e45b69c7bd87cbd80575dc0b
01:30:46 radius,debug,packet Acct-Session-Id = “8050000f”
01:30:46 radius,debug,packet User-Name = “alessandro”
01:30:46 radius,debug received remote request 36 code=Disconnect-Request from :57750
01:30:46 hotspot,error,info,debug Radius disconnect with no ip provided
01:30:46 radius,debug sending Disconnect-NAK to remote request 36
01:30:46 radius,debug,packet sending Disconnect-NAK with id 200 to :57750
01:30:46 radius,debug,packet Signature = 0xda7dbf1a09a44a3be72d6290ef63a5bf
01:30:46 radius,debug,packet Error-Cause = 406
01:30:46 radius,debug,packet NAS-Identifier = “MikroTik”
01:30:46 radius,debug,packet NAS-IP-Address =


and the pc-client doesn’t disconnect.

—on radius server—
If I execute the command

radwho -r -i -U alessandro

the response is

alessandro,8050000f,shell,S2152726543,Wed 18:52,<MYMIKROTIKIP>,192.168.10.254

If I execute the command

radwho -RU alessandro

the response is

User-Name = "alessandro"
Acct-Session-Id = "8050000f"
NAS-IP-Address = <MYMIKROTIKIP>
NAS-Port = 2152726543
Service-type = Login-User
Framed-IP-Address = 192.168.10.254
Acct-Session-Time = 1036
Calling-Station-Id = "00:18:DE:E0:D5:"

What is the problem?

4

Any news? :frowning:

5

How to send disconnect packet to disconnect wireless client without message ‘Radius disconnect request for uknown IP’ ? I don’t have any IP address since user was authenticated only by his mac address (mac authentication of wireless client).

??

Thanks

6 
01:30:46 hotspot,error,info,debug Radius disconnect with no ip provided

try to send disconnect packet with ip of the client. it will work.

7

I’ve searched the forums and I can’t find an answer to this.

What is the necessary syntax on a freeradius server for terminating a hotspot user session?

Tony