Hotspot, Radius and Framed-IP-Address

RouterOS Wireless Networking
1

Hi.

We’ve just upgraded our office router from 3.28 to 4.10, and find that the router now ignores Framed-IP-Address in the radreply packet sent by freeradius.

We’re using the hotspot method of controlling staff logins using their MAC address, which was working seemlessly with 3.28.

Freeradius reports sending this: (IP address taken out)

Sending Access-Accept of id 239 to x.x.x.x port 54983
Mikrotik-Rate-Limit := “1M/1M 2M/2M 756K/756K 3600/3600 5 512K/512K”
Framed-IP-Address = 192.168.11.82

But the router just seems to ignore the Framed-IP-Address and instead allocates another IP from the dhcp pool. The rate limit however seems to continue working exactly as expected.

I turned on hotspot debug logging, and the router does see the IP, like this:

ip x.x.x.x from RADIUS

but then reports:

getting ip address from pool - which it does.

It looks like a bug to me, but I’m not sure.

Did anyone else have this issue? Or have any ideas on how to resolve?

Cheers.

2

Is the framed-ip-address within the range of a dhcp server? Look in “/ip dhcp-server lease” and see if the ip was already issued (leased) to another mac. I found that will cause the router to ignore the framed-ip-address.

3

Hi, thanks for the reply but no - I already checked that.

:slight_smile:

It is however, in the same subnet - do you think that might be causing it?

Cheers.

4

No. Mine were too, just not within the main ip pool range. I found Framed-Pool to be better for me. I did not use a mac as the username, and I had clients that logged in from other than their computer (different mac). But they had special access, so I just use the ip range of the Framed-Pool in the bypass, queues, etc, rather than each ip.

I haven’t tried it on V4.11 yet. If there is no reason you can see for the fail, you might want to try the login, then create a supout.rif and email it to support with the explanation of the problem.

ADD: You also checked “/ip hotspot host” for a to-address assigned that ip? Just checking everything I can remember.

FYI: The Framed-IP-Address and Framed-Pool attributes do not change the ip issued to the client. It only changes the to-address in “/ip hotspot host”.

5

For us, keeping the pool on the radius server is preferable - it works (or used to :confused: ) very nicely.

Are you currently on 4.10? Did you definitely try Framed-IP-Address on 4.10?

Yes, the host to-address record shows as the incorrect IP assigned form the local hotspot pool.

I’ll probably sent a request to support. I’ll probably try 4.11 tonight too.

Thanks.

6

I am currently on V4.11, but I have not tried it with this version. The previously mentioned setup was for a client, not my system.

Sounds like you should try the login, create the supout.rif file, and email it to support. :frowning:

7

I have verified that Framed-IP-Address does work with V4.11. The original ip issued by my dhcp server shows in “/ip hotspot host” as the address, but the to-address shows the ip I sent with Framed-IP-Address for that user.

I modify the mysql database for radius directly, so all on one line after you login to mysql and connect to the radius database:
insert into radreply (Username,Attribute,Op,Value) VALUES (‘test’,‘Framed-IP-Address’,‘=’,‘192.168.1.5’);

ADD: Look in “/ip hotspot user” and see if you have assigned that ip to a local user.

8

Thanks, I’ll try tonight and let you know.

9

Hi, I found the problem :astonished:

The user profile was set to the hotspot pool and this was overriding the Framed-IP-Address.

I gues this changed between 3.x and 4.x.

Anyway, it seems to be working fine now, so thanks a lot for your help.

Cheers.

10

Hi SurferTim,

How can i change the ip issued to cliente using “Framed-IP-Address”? It is possible?

Thanks in advanced.
Daniel.