hi all
i have configured usermanager V7.15 and connected 3 router to that
Usermanager IP address is : 1.1.1.1
Router A IP address is : 1.1.1.2
Router B IP address is : 1.1.1.3
Router C IP address is : 1.1.1.4
i want to authenticate user ‘test’ only from Router A and drop it from Router B and C
so i added NAS-IP-Address ATTRIBUTE vendor id 0 (standard) type id 4 (NAS-IP-Address)
then i make new User Groups “Group-A” and add NAS-IP-Address Attribute : 1.1.1.2
also set user ‘test’ group to “Group-A”
but that user still can authenticate from all Routers
anyone have a suggestion for that?
Nothing in https://help.mikrotik.com/docs/display/ROS/User+Manager#UserManager-Overview suggests that User Manager could (currently!) use anything else than User-Name and Calling-Station-Id when searching through the list of users. The attributes list configured for a user indicates which attributes to send in the User Manager responses.
So the closest to what you want is probably to specify an address list name in the Mikrotik-Address-List attribute or a group name in the Mikrotik-Group one, depending on what you use the User-Manager for, and accordingly either handle traffic matching that address list differently in the firewall of your three routers or set the user rights for that group differently. I.e. on all routers the user will be able to log in, but on some of them they won’t be able to get anywhere/do anything.