We have hotspot based on routeros and a bunch of wifi AP connected to hotspot through L3. On all APs is set up dhcp relay and DHCP server is located on hotspot. All users makes RADIUS authentication. Now we need to send user’s MAC addresses to RADIUS in access request to apply different policies based on MAC. But in calling-station-id we see AP’s LAN MAC and the same MAC as client in hotspot active path. But we want to send to RADIUS true user’s MAC, as we can see it in DHCP binding table. How can we achieve this?
May be we can do this with on-login script?
Wouldn’t it be easier to tunnel (L2) those APs to the hotspot router?