PPPoE FreeRadius Authentication

[acvoliveira]

It is possível to use FreeRadius to authenticate a pppoe connection between a Mikrotik PPPoE Server and a Mikrotik PPPoE Client? If, yes, what would be the Mikirotik configuration and the freeradius? It is working with the straight forward config.

In the Profile configuration of the Server there is a PPP Authentication And Accouting button, clicking it there is a radius option. What is that for? Does it works?

Under radgroupcheck table (radius with mysql support) i’ve entered the following configuration:

id groupname attribute op value
1 pppoe Framed-Compression := Van-Jacobsen-TCP-IP
2 pppoe Framed-Protocol := ppp
3 pppoe Service-Type := Framed-User
4 pppoe Auth-Type := MS-CHAP
5 pppoe Framed-MTU := 1480
6 pppoe Mikrotik-Rate-Limit := 1M
7 pppoe Mikrotik-Recv-Limit := 512k

[acvoliveira]

Right after I’ve send this message the following radius configuration worked:

1 pppoe Framed-Compression := Van-Jacobsen-TCP-IP
2 pppoe Framed-Protocol := ppp
3 pppoe Service-Type := Framed-User
4 pppoe Auth-Type := MS-CHAP
5 pppoe Framed-MTU := 1480
6 pppoe Mikrotik-Rate-Limit := 1M/1M

I still have the following doubts:

Where can I see if the right rate limits where correctly applied? Look at the Server’s active connection there is no information.

It was accepted a user from out of the pppoe radius group to login as a profile, is that correct? Or is a problem with my configuration?

[acvoliveira]

Looking at the pppoe mikrotik client’s status information about the established connection there is always the same information about the Active Service Name.
It doesn’t matter it the profile is configured locally in mikrotik server or using freeradius information. It is always the same.
So where does it say what was the implemented rate limit, since the Active Service Name is not reliable?