Hotspot with MAC Auth - How to define the Simple Queue Name

RouterOS General
1

Hi all,

Today I’m using the hotspot to do the MAC Authentication of my customers, but the simple queue is created with a name like this: hotspot-00:EE:BB:99:33:FF.

Can I send (from the radius server) a name to be displayed in place of the default name? I want something to be easy to locate the customer on the list of simple queues.

Best regards

Fabrício F. Kammer
http://www.conchalnet.com.br

2

No, to specify name you need to use static queues then.

3

Thank you sergejs… I’ll keep the simple queue name default of the hotspot…

I tested yesterday the hotspot + wireless mac authentication and the bandwidth control is OK now. Thanks!

Can you help with another doubt?

I want that ALL users have the MAC authenticated in the wireless (just will associate to the AP the customers that have the MAC Address into my FreeRadius database). This is work fine today.

I activate the hotspot MAC Authentication too and it’s work very well too. The mikrotik do the wireless MAC auth and after this is done the hotspot MAC Auth is do and the user can use my network.

Now I need that just some users use username/password (not all the users). But the hotspot MAC Authentication prevails on the HTTP Authentication. How can I force that the mikrotik does the Username/Password authentication? (I need to keep the MAC address of the user on my FreeRadius database to do the wireless authentication). I think that I’ll have to use the password option of the MAC authentication of the hotspot, but I tried it without success.

Best regards

Fabrício

4

Have you enabled HTTP-Chap authentication method in HotSpot profile ?

5

Hi sergejs, thank you for the reply. If I enable the MAC and HTTP-Chap methods and I’ve the MAC address of the client on the FreeRadius database the RouterOS don’t request the username/password.

I want to implement the username/password gradually.

But now is more important to me resolve the problem that we are speeking by support email. After this we can test this problem.

Regards

Fabrício

6

If RouterOS don’t request username/password from RADIUS,

  • there is no use-radius for HotSpot profile;
  • there is no service=hotspot at RADIUS client configuration.
7

Sergejs, the RouterOS don’t request the username/password because the client was authenticated yet by the MAC Address.

Regards

8

Sergejs, the RouterOS don’t request the username/password because the client was authenticated yet by the MAC Address.

Are you talking about wireless or HotSpot ?
For HotSpot the reason could be,

  • there is no use-radius for HotSpot profile;
  • there is no service=hotspot at RADIUS client configuration.

Have you applied this configuration ?

9

Hi Sergejs,

I think that I’m not clear yet. I’ll try to explain better.

Today I do the wireless authentication of clients using FreeRadius server and it’s working fine.

Now I’m working to implement the hotspot authentication. Initially I’ll do the hotspot MAC Authentication and I want a way to migrate my customers little to little to the Username/Password authentication (but I need to mantain the MAC authentication for the wireless associations). The problem is, if the MAC authentication and the HTPP is activate on the hotspot and the MAC address exists on the Radius database (to do the wireless authentication) the RouterOS don’t request the username/password.

Was I clear now?

Best regards

Fabrício F. Kammer