Is it possible to issue a unique wpa key from a radius server for each user?
I am wondering if we can do that with MT? Obviously we can input into our database a custom generated wep key in radreply coresponding to the users mac address along with the users rate limit. When the user connects with the key they got issued by rad reply. Can the MT recieve the key when authing the mac address and put it into access list like it can with the mac?
You can create WPA encryption scenario over RADIUS in the following way,
configure security-profile,
‘interface wireless security-profiles add mode=dynamic-keys authentication-types=wpa[2]-eap eap-methods=passthrough’
configure RADIUS client to communicate with RADIUS server.
Set appopriate configuration to the RADIUS server, then client connected to AP will get security settings from RADIUS server.
Awesome. That will totally secure the hotspot.
Also thanks for answering!! This is the first time anybody has helped me on this forum for ages here. Most questions go un-answered 
Thanks my good man…
Don’t know if anybody can help but i’m having problems getting this to work!
I have the mac address authorizing OK from the radius server and I have the key being sent to the MT from the radius server according to the logs.
My windows laptop cannot connect when trying to connect with the wep key from the radius database. All I want is for the private key to be sent and then accepted by the AP. I have checked the windows config not to use certificates or smart cards.
In the MT logs it shows the mac beeing accepted and the key being recieved from radius, then it says 2 things depending on whether I set the reply Mikrotik-Wireless-Enc-Algo to 2 or some other number logs give auth OK but wep fail.
If I do not set Mikrotik-Wireless-Enc-Algo get no error but windows give error gives the error that certificate not found.
What about encryption type for wpa? Docs dont mention setting for radius wpa?
And is there any special config for freeradius needed? Cant find anything from docs..