Mikrotik-Group for PPPoE

Hi All.

RouterOS 6.12

I have questions, can we VSA Mikrotik-Group for PPPoE solution?, we know Hotspot solution is able to use Mikrotik-Group Attribute.

Code: Access-Accept
Identifier: 54
Authentic: <171><168>p<165>_r~<177><161><246>wH<243><30><19><162>
Attributes:
Framed-IP-Address = 10.10.10.1
Class = “DNM-BASI”
Mikrotik-Group = “DNM-BASI”
Framed-IP-Netmask = 255.255.255.255
-Mikrotik Logs:
15:17:26 radius,debug,packet Signature = 0xaba870a55f727eb1a1f67748f31e13a2
15:17:26 radius,debug,packet Framed-IP-Address = 10.10.10.1
15:17:26 radius,debug,packet Class = 0x444e4d2d42415349
15:17:26 radius,debug,packet MT-Group = “DNM-BASI”
15:17:26 radius,debug,packet Framed-IP-Netmask = 255.255.255.255


/ppp profile
add local-address=10.10.20.1 name=DNM-BASI rate-limit=“1m/1m 2m/2m 512k/512k 5s” session-timeout=1d


but the queue subscriber is not populated in simple-queue, if i do this on hotspot, it’s working.

1m/1m 2m/2m 512k/512k 5s

try to delete the last char “s”

the brust-time default-unit is like second ,so you give a Integer number should be ok

i have change the seconds of the burst time. but still no luck. any idea ?

2 name=“DNM-BASI” local-address=10.10.20.1 remote-ipv6-prefix-pool=(unknown) session-timeout=1d use-ipv6=yes use-mpls=default
use-compression=default use-vj-compression=default use-encryption=default only-one=default change-tcp-mss=default
rate-limit=1m/1m 2m/2m 512k/512k 5 address-list=“”

hi mikrotik support,

would you help me to explain, is it possible or not ?

thank you.

The manual says “Hotspot default profile for Hotspot users” so that value may only be valid for the Hotspot function. I’m not 100% on that but if you can get it working fine for hotspot but not PPPoE then it sounds likely. I know from my own testing that there are a lot of supported radius attributes that are only valid for certain services.

If your goal is to bandwidth limit the user using queues then I’m only aware of two solutions. (I’m currently using the first (simple) method although we’ve been testing the second method to give us better control over contention)

  1. Use the Mikrotik-Rate-Limit radius attribute (Appears to be same format as you’re already using)
    A new queue is created dynamically when the users connects which is applied to their PPPoE interface. This is really easy and just works.

The downside with this is that if 5 users all log in with say 10M limits, they all get their own 10M queue, allowing these users to use up to 50M of bandwidth combined, whereas we’d prefer to have a smaller cap on the group to provide contention.

  1. Use the Mikrotik-Address-List attribute to add the user’s PPPoE address to an address list
    Using this method takes a bit more work but provides more control. You can configure, via radius, multiple users to go into the same address list, then use firewall mangle rules to tag all their traffic. After that you can use PCQ queues to apply an overall limit for all the tagged traffic, but also have individual limits for each user (using src/dst address to distinguish them).

hi usdmatt,

thanks for the answers. the second method works perfectly. currently i’m using 1st method.