I have the following requirement:
Authenticate MAC address of client via RADIUS on one server (FreeRADIUS)
Authenticate Active Directory User with PEAP and MSChapV2 via RADIUS on another server (IAS)
Currently I am doing this with all my Cisco AP’s (About 65 of them!) There I can specify a MAC RADIUS Server and an EAP RADIUS Server independantly from one anoter
With the MikroTik, it seems that you cannot specify one RADIUS server for MAC authentication and another for EAP authentication. It would really be great if such a feature could be added.
At this stage I can get it to work by using the IAS server as the RADIUS server and using Connection Request Policies to forward MAC authentication requests to the FreeRADIUS server. It is quite cumbersome, but at least it works.
I am using RouterOS 3 rc4
Thanks in advance
Andries Venter (Stellenbosch University)