Is there a Radius Attribute that we can use on our Radius server to authenticate by MAC in combination with Username/Password? Just like using a Hotspot with username and password and setting up an IP Binding for something like a Wii or Roku, but have that binding information come from our Radius Server instead of managing it on the router?
Thanks.
Yes.
If you are using FreeRADIUS then run it in debug mode ‘radiusd -X’ and you will see the attribute ‘callingstationid’ → thats the MAC.
now that freeradius has it you need to figure out what to do with it
So can that be used in unison with a username and password?
Or better question, can I have 4 different ‘callingstationid’ sent from Radius to the router and if the end user computer is using one of the 4, that device is allowed access?
Its not for Mikrotik to do its for you to configure on FreeRADIUS
so for example on freeradius (one example) you can use rlm_perl and then on authentication check that callingstationid and reference it in your database or something and make sure that the user with that username can use those mac addresses.
I’m not sure if freeradius has default support for this, maybe they do and maybe they dont
edit:
Callingstationid is sent to the radius server, not sent from radius server
edit:
this will give you some ideas http://wiki.freeradius.org/guide/Mac-Auth