only-one is ignored when radius auth is used

RouterOS General
1

I am running a PPPoE server on a CCR-1036.

My /ppp profile is:
/ppp profile
add dns-server=192.168.2.2 local-address=192.168.255.1 name=my-pppoe only-one=yes use-compression=no use-encryption=no use-vj-compression=noI use RADIUS for authentication. I see that the only-one parameter is ignored and one user can maintain multiple sessions from different hosts at the same time. This is totally unacceptable.

Why does it ignore the option? I cannot allow my users to share their accounts. Can I make the option “only-one” work when auth is done by RADIUS?

2

What ROS version are you using?

3

I use FreeRADIUS with my hotspots, and it had the same challenge. It is a RADIUS function to stop simultaneous logins.

In FreeRADIUS, I enter “users simultaneous-use := 1” in the radgroupcheck table. You must be careful about stale sessions with this. If the user logout doesn’t get through to the RADIUS server for any reason, the user will not be able to login again until you remove the stale session.