Good Day all,
I am having a situation where when clients exceed their usage limitations, the client is unable to authenticate the PPPOE session as meant to, however the client mikrotik keeps retrying and filling up logs, as well as increasing load on cpu when multiple clients are doing the same thing.
Is there a way to limit the amount of retries per minute or something that the main router will respond to, before it ignores the client for x period.
you can in return do an different type of bandwidth management like an garden zone with an purchase more bandwidth for people that exceed the limit, you can disable the logging if its an huge issue, but its supposed to be there in my opinion.
I am looking for a solution to this problem, as I am unable to migrate to other type of service, as this is already in place, and in any case even if I put a hotspot in place, some users use broadband routers, and I would need to use pppoe for those users, and the problem would still exist, as the broadband routers will also continue try and reconnect.
There must be a way to get this done, with script or something.
what you can do is use your log files better, so that you send all the pppoe to an remote server for troubleshooting if required, you can also in the log change parameters and so forth, it is a bit of a pain, but like i said a lot of things can be disabled if you use the log system correctly you can get more detail on this in the manual, or you can move some of the services off the one device, i understand that his might not be the solution that you are after.
But ath requests will still be processed…looking for a way to minimise the auth requests, logs, i can handle with scripting.
Let the users authenticate but put them in a different IP pool.
Then block traffic to that pool, or webproxy them to a page where you tell them they are over their limits.
Problem when they go over limit they cant auth, so web proxy option no good, i could do that manually for couple of clients, but looking for somthing that would only allow client pppoe for example 3 requests in 3 seconds, then added to a block list for 120 seconds, thus minimising logs, as well as constant pppoe auth requests.
when they go over the limit change their radius profile to put them in a different group
Still let them auth, but give them a different profile.
would require manual input, looking for somthing automated