Mikrotik PPPoE Server, RADIUS, Windows Xp issue

When I connect using PPPoE to my Microtik from a Windows XP (SP2) box (have tried two now - with different PPPoE client software) my connection slows to zero after a few MB of download when using a RADIUS server, but not when using the local user database. I am using v3.3.

This doesn’t appear to happen when using Windows Vista, Linux, OpenBSD.

I don’t know whether it is the same issue I noticed with my other post, or whether one leads to another.

Any ideas?

i am getting the same problem, and i am on 3.3, thinking of upgrading to 4.1, and that happens for few clients, after the first few mb of download the connection drops to and yes am using radius server here !

4.1 has same problem, anybody who can shed some light here.

Use only PAP for authentication and problem will be solved .

will try that, but won’t it effect other users. vista, 7, linux and routers, smc, linksys and d-link ?

No, actually every os or device can normally work with pap authentication .

PAP is far less secure than CHAP. Using PAP is not a solution.

As far as i know you can use CHAP and MS-CHAP, but don’t use MS-CHAP v2. I think that there are some issues in linux kernel regarding MPPE encryption and losing sync after few MB. It is not Mikrotik issue, it is linux MPPE issue from while ago.

Yes, XP clients don’t authenticate unless you disable MS-CHAP v2 in profile settings.

when u connect it does authenticate, and u can surf for some time and then the connection goes dead, the connection is still there but no data flow.

From what you wrote you have RouterOS 3.3? Upgrade to 3.30 and check again. The upgrade is harmless.

Hi everybody,

I had the same problem. I’m using RouterOS version 4.3 and Freeradius. While I was using chap, mschap v1 and v2 in MKs, the client’s conecction was “freezing” after some minutes. Then I changed to pap authentication ONLY and the problem was resolved.

I don’t know if this problem is in MK or in FreeRadius. But in all version of MK I saw this same problem. Maybe Mikrotik could verify this situation and make some changes in next version.

Thank you.

Júlio Henrique