We are 2 wisps that want to share the same infrastructure. How can we run 2 radius servers for each of our clients?
Radius servers hosted on same location.
Example.
Wisp 1 . Wisp 2
Client from wisp 2 pppoe auth. To wisp 1, gets rejected since account not on radius. Automatically tries to auth with radius 2. Connection established since user is on radius 2.
I know this can be achieved by installing a PFsense.org box which has the option to split to 2 usermans, but would like to keep it mikrotik only.
How can know the MK where should be validating an incoming connection client in one radius or other radius?
The simplest way is to have only ONE radius server, with private zones for each wisp. In this way one wisp can add, modify, etc., only her users without the other wisp can manage this. You must put attention in privileges of use in the radius, with one admin user that understands it. It’s not easy but is possible.
I think two simultanneous radius in MK is not possible.
Which RADIUS do you suggest that can have “private zones for each wisp”?
I see FREERADIUS has a RADIUS PROXY, which I can split to two seperate RADIUS servers, one begin USERMAN (Wisp 1) & other one Radius Billing Manager (Wisp 2)
Is there a better suggestion? Or pointers on what to do regarding your post.
Other valid option is to use separate domains… I.E. user@wisp1 and user@wisp2 to differentiate users incoming from one or other wisp, but all of them validating over same radius server. Each wisp should can admin only your own domain. Freeradius is a god option for achieve this objectives I think so.