Hotspot/PPP Subscriber caps

Hi All

I’ve developed a system utilising Mikrotik, Radiator and MS SQL server to manage hotspot and PPP clients. It works in a similar manner to the Mikrotik hotspot manager.

The one thing I’m trying to work out is to see if there is a way I can “refresh” the RADIUS attributes mid-session. So, for example - a user authenticates and RADIUS tells Mikrotik to throttle them to 1mbs connection speed. Now - is there anyway either with RADIUS or Mikrotik whereby I can re-send the RADIUS attributes with a slower speed (e.g. 64k) without disconnecting the Hotspot/PPP session?

What I’m trying to achieve is rather than disconnect a user when their card expires, I’d like to restrict them to a slower speed (64k) without them having to disconnect/reconnect.

Is this possible? Any comments/suggestions are appreciated.

i am VERY interested in seeing what you have done already, i have never played with it before from the radius side, but i know you can get it to change the bandwidth limit using winbox ir the command line.

if you will please email me with the info or where i can see it…

jason (at) freemotion.bb

In RouterOS version 2.9 RADIUS CoA (Change-of-Authorization) Messages
(RFC3576) can be used for that purpose. It has to be enabled on RouterOS:

/radius incoming set accept=yes port=1700

Hi Normis - I read that particular RFC a while back but didnt find many NAS devices that supported it (or, it wasnt well advertised).

So from my RADIUS server I could send a CoA message with some new attributes and the Mikrotik would honour these attributes and adjust the connection as appropriate?

Actually only hotspot allows to change some attributes. PPP only accepts
Disconnect Requests. Hotspot accepts Disconnect Requests as well.

Hotspot allows to change almost any attribute. Only IP address, route and
Acct-Interim-Interval cannot be changed.