Freeradius + wireless + Mikrotik-Rate-Limit

[conchalnet]

Hi all,

I want to use freeradius to authenticate the mac addresses of my wireless customers (like the access list).

I don’t want to use DHCP and hotspot, just authenticate the macs.

This is work fine but I’m no able to do the Mikrotik-Rate-Limit to work when the client is associate to my AP.

The parameter Mikrotik-Rate-Limit doesn’t work. The customer don’t have the band limited.

Regards,

Fabrício

[acim]

Have you tried WISPr-Bandwidth-… attributes? Have you checked if Mikrotik-Rate-Limit attribute is sent back to client at all? Try this is freeradius debug mode.

[conchalnet]

@acim

Have you tried WISPr-Bandwidth-… attributes? Have you checked if Mikrotik-Rate-Limit attribute is sent back to client at all? Try this is freeradius debug mode.

Yes I tryed this another option but the bandwith is not controled too.

I try to run the Freeradius with the option -X but I don’t see the option Mikrotik-Rate-Limit on the log… how can I certify that the mikrotik AP are receiving the attribute?

[acim]

@conchalnet

I try to run the Freeradius with the option -X but I don’t see the option Mikrotik-Rate-Limit on the log… how can I certify that the mikrotik AP are receiving the attribute?

If you don’t see it here, then it is not sent to MT. You can also try to use radtest or radexample client utility to test what freeradius sends back. Then you don’t need to run server in debug mode. You probably have to use MAC as username and blank password.

[conchalnet]

@acim

@conchalnet

I try to run the Freeradius with the option -X but I don’t see the option Mikrotik-Rate-Limit on the log… how can I certify that the mikrotik AP are receiving the attribute?

If you don’t see it here, then it is not sent to MT. You can also try to use radtest or radexample client utility to test what freeradius sends back. Then you don’t need to run server in debug mode. You probably have to use MAC as username and blank password.

Where can I found this programs to test my server?

I’m using the MAC address as username and an empty string as password.

Regards

[acim]

What Linux do you use? You should have one of these installed with freeradius package. Or you can try one of these Windows test clients:

http://www.radutils.com/download/RadiusTestSetup.exe
http://www.novell.com/coolsolutions/tools/downloads/ntradping.zip

You should probably select PAP authentication.

[conchalnet]

Hi acim,

My freeradius is running on a FreeBSD machine.

I test the radius server with the radtest command and the result was:

=============================================
radtest ‘00:4F:62:09:CF:EB’ ‘’ 192.168.33.2 1814 TEST
Sending Access-Request of id 44 to 192.168.33.2 port 1812
User-Name = “00:4F:62:09:CF:EB”
User-Password = “”
NAS-IP-Address = 255.255.255.255
NAS-Port = 1814
rad_recv: Access-Accept packet from host 192.168.33.2:1812, id=44, length=32
WISPr-Bandwidth-Max-Up = 128000

How we can see the Mikrotik receive the attribute WISPr-Bandwidth-Max-Up. I try with the parameter Mikrotik-Rate-Limit but the speed of the connection is not limited and the client has no bandwidth control.

I don’t know but I think that the bandwidth control throught Radius DOESN’T WORK with FIXED IP ADDRESS.

Regards,

Fabrício F.: Kammer

[acim]

http://forum.mikrotik.com/t/wireless-bandwidth-limitation-by-radius/9034/1

Maybe you should also try atribute Ascend-Data-Rate also, but this is maybe not supported at all.

[conchalnet]

Sorry but make a mistake. The attribute Mikrotik-Rate-Limit is not sent to the Mikrotik, just the attributes WISPr-Bandwidth-* are sento to the mikrotik, but the bandwidth is not controled.

Regards,

Fabrício F.: Kammer

[mishaM]

I have the same problem

[fewi]

The rate limit attributes are for Hotspots.