Packet Of Disconnect

I am in the process of replacing Unifi APs and Routers with Mikrotik to manage a hotspot that has been giving me grief for a long time. Everything is working as it should, with one little exception.

We have a RB850 running a hotspot that is connected to a remote Radius (Freeradius) which authenticates and accounts as expected, what does not work is the Disconnect once a user has exceeded their bandwidth allocated. Which was the same issue we had using Unifi Voucher system.

I appreciate that the Packet of Disconnect can not connect directly to the Mikrotik without us having to open ports on the ADSL router and port forward to the Mikrotik, this really is not an option.

My plan was to somehow have a script that would query another script on the Radius machine to check the usage of the client and if the usage was exceeded it would then tell the local script to disconnect. Now I really am not sure if such a thing is possible, and merely looking at logic.

If someone could let me know, or guide me in another more likely direction, I would truly appreciate it.

is a tunnel to/from the radius server/network not possible…?

+1 To this, is the easiest solution and will avoid you a lot of headaches.

Been working on deployments like this lately, Radius Server being hosted on an IaaS provider we create tunnels between the VM and the HS server.