Mikrotik-Recv-Limit and IPSoft RADIUS - problem!

iles · December 16, 2007, 7:01pm

All good morning.
At the beginning of my task:
Organize a hotspot, with user authentication via RADIUS.
Installed RouterOS 2.9.50, and RADIUS server IPSoft Billing.
At RouterOS configured hotspot.
Users are registered properly.
Now the problem:

IPsoft Radius server can disable users only POD and SNMP protocol, and in the case of Cisco equipment problems disabled users at zero balance not, but in RouterOS this is not available. What options are possible here?
According to the document http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php, RADIUS server can reply using the package attributes Mikrotik-Recv-Limit Mikrotik-Xmit-Limit and transmit information on the maximum amount of traffic that users get through the hotspot, but in practice it does not work.
log radius and attach screens.
Please help.

Log RADIUS:

Packet R1 16/12/2007 20:50:53.109
IP address: 79.xxx.xxx.222
Source Port: 1024
Code: 1 [Access-Request]
Identifier: 0
Length: 180
Authenticator: 67 45 8B 6B C6 23 7B 32 69 98 3C 64 73 48 33 66
Attributes:
61: 19 [NAS-Port-Type (Unknown)]
31: 00:60:B3:2D:9C:80 [Calling-Station-Id]
30: hotspot1 [Called-Station-Id]
87: ether2 [Unknown]
1: 161521 [User-Name]
5: 2151677952 [NAS-Port]
44: 80400000 [Acct-Session-Id]
8: 192.168.200.249 [Framed-IP-Address]
26: 14988 [Vendor-Specific]
10: АЁИщ
2: 963326 [User-Password]
6: 1 [Service-Type (Login)]
26: 14122 [Vendor-Specific]
3: http://192.168.200.1/logout
32: MikroTik [NAS-Identifier]
4: 79.xxx.xxx.222 [NAS-IP-Address]
Source:

Packet W1 16/12/2007 20:50:53.328
IP address: 79.xxx.xxx.222
Destination Port: 1024
Code: 2 [Access-Accept]
Identifier: 0
Length: 68
Authenticator: 32 21 9A E1 D4 A7 CC 73 9D DE 91 41 77 C7 77 EB
Attributes:
8: 192.168.200.249 [Framed-IP-Address]
9: 255.255.255.255 [Framed-IP-Netmask]
6: 1 [Service-Type (Login)]
26: 14988 [Vendor-Specific]
1: 5242880
26: 14988 [Vendor-Specific]
2: 5242880
Source:

sergejs · December 18, 2007, 11:29am

Do you want to limit bandwidth rate or download/upload amount of bytes ?

iles · December 18, 2007, 1:24pm

Download/upload amount of bytes

sergejs · December 18, 2007, 2:16pm

Is it possible to get exact copy for ‘radius,debug’ logs, to see information sent and received by clients.

iles · December 18, 2007, 4:05pm

There has been picked as the logs in Router OS: ((
Therefore made screens.

Packet W2 18/12/2007 17:55:15.141
IP address: 79.xxx.xxx.222
Destination Port: 1024
Code: 2 [Access-Accept]
Identifier: 0
Length: 68
Authenticator: 02 9D 9C 1C FA 40 DA 1F 0E 8E 78 AA 94 03 D4 2D
Attributes:
8: 192.168.200.253 [Framed-IP-Address]
9: 255.255.255.255 [Framed-IP-Netmask]
6: 1 [Service-Type (Login)]
26: 14988 [Vendor-Specific]
1: 5242880
26: 14988 [Vendor-Specific]
2: 5242880
Source:

iles · December 18, 2007, 7:02pm

but another interesting picture.
if the parameters to convey the importance of equal 100k, which has produced:

Packet W3 18/12/2007 20:58:32.859
IP address: 79.xxx.xxx.222
Destination Port: 1024
Code: 2 [Access-Accept]
Identifier: 1
Length: 62
Authenticator: 3C 3A 90 E4 EE 8C E5 3D 2D 39 B7 7B E2 3A 0C 42
Attributes:
8: 192.168.200.252 [Framed-IP-Address]
9: 255.255.255.255 [Framed-IP-Netmask]
6: 1 [Service-Type (Login)]
26: 14988 [Vendor-Specific]
1: 100k
26: 14988 [Vendor-Specific]
2: 100k
Source:

sergejs · December 19, 2007, 8:41am

I do not know, why values are multiplied to 8 (it looks like RADIUS problem more).
First value is not accepted, because Recv-Limit has limit for ±4GB, so when highest value is received, MikroTik RotuerOS is not able to use it.

So you have to use,
Mikrotik-Recv-Limit-Gigawords
Mikrotik-Xmit-Limit-Gigawords

4G (2^32) bytes of total receive limit (bits 32..63, when bits 0..31 are delivered in Mikrotik-Recv-Limit).

iles · December 19, 2007, 10:25am

In RADIUS No problems, can be seen on the log itself RADIUS. He correctly refers to RouterOS what I said. But as it takes RouterOS-more like a bug.

Packet W2 19/12/2007 12:16:53.766
IP address: 79.xxx.xxx.222
Destination Port: 1024
Code: 2 [Access-Accept]
Identifier: 0
Length: 60
Authenticator: 80 2F 91 B0 0C 17 B6 B3 78 2E 7D DA 14 68 07 1D
Attributes:
8: 192.168.200.251 [Framed-IP-Address]
9: 255.255.255.255 [Framed-IP-Netmask]
6: 1 [Service-Type (Login)]
26: 14988 [Vendor-Specific]
14: 100
26: 14988 [Vendor-Specific]
15: 100
Source:
02 00 00 3C 80 2F 91 B0 0C 17 B6 B3 78 2E 7D DA
14 68 07 1D 08 06 C0 A8 C8 FB 09 06 FF FF FF FF
06 06 00 00 00 01 1A 0B 00 00 3A 8C 0E 05 31 30
30 1A 0B 00 00 3A 8C 0F 05 31 30 30

The following picture:

iles · December 19, 2007, 11:12am

here is another picture.
in this case, refer to the RADIUS RouterOS information on the speed, time limit of the session and traffic. And that is produced data on the speed limit of time and RouterOS understood, but the traffic of limit-no!

Packet W1 19/12/2007 13:8:10.875
IP address: 79.xxx.xxx.222
Destination Port: 1024
Code: 2 [Access-Accept]
Identifier: 0
Length: 83
Authenticator: 3E AD D9 A6 83 C6 9A CF 1C CA 75 51 5E 4C F0 02
Attributes:
8: 192.168.200.251 [Framed-IP-Address]
9: 255.255.255.255 [Framed-IP-Netmask]
6: 1 [Service-Type (Login)]
26: 14988 [Vendor-Specific]
14: 100
26: 14988 [Vendor-Specific]
15: 100
27: 300 [Session-Timeout]
26: 14988 [Vendor-Specific]
8: 256k/256k
Source:
02 00 00 53 3E AD D9 A6 83 C6 9A CF 1C CA 75 51
5E 4C F0 02 08 06 C0 A8 C8 FB 09 06 FF FF FF FF
06 06 00 00 00 01 1A 0B 00 00 3A 8C 0E 05 31 30
30 1A 0B 00 00 3A 8C 0F 05 31 30 30 1B 06 00 00
01 2C 1A 11 00 00 3A 8C 08 0B 32 35 36 6B 2F 32
35 36 6B

iles · December 21, 2007, 7:19am

someone who answered my question?

shivachitta · July 27, 2010, 6:27am

Hi ,

How can i send 5GB-200MB( i.e 5120MB) in Mikrotik-Recv-Limit-Gigawords..

Please help me ..
Thanks in advance

Chupaka · July 27, 2010, 12:33pm

Mikrotik-Recv-Limit-Gigawords=1
Mikrotik-Recv-Limit=1283457024

Mikrotik-Recv-Limit-Gigawords - 4G (2^32) bytes of total receive limit (bits 32..63, when bits 0..31 are delivered in Mikrotik-Recv-Limit)