Radius Attribute

RouterOS General
1

We would like to automatically add users during pppoe login to some dynamic address lists.
We have a rb1000 as pppoe server, and a linux freeradius server.
In a Pdf Document from mum presentations we found:

Address lists can be created:

  • Manually
  • Automatically from PPP profile – just specify address-list option and as soon as the client connects it will be added to the proper address list
  • Automatically from RADIUS – attribute “Mikrotik:19”

What we need is use that attribute “Mikrotik:19” directely from Radius.

Anyone can help?

Thx.

2

Ok, i’ve found that in my dictionary.mikrotik there wasn’t the attribute Mikrotik-Address-List.
When we put it, the connections where correctely registered in address list as we wanted.

Thanks to everyone.

3

you are welcome =)

4

Can someone shed a light on this? I also, would like to know how to add a user to the address list based on the property I set for the user in FreeRadius, say 512 or 1024, which in turn I would like to use for my pcq queue and not settle with the simple queues that freeradius creates for me in mikrotik based on the datarates.

What I like to achieve, is to not set data rates on freeradius, but to organise my router with HTB queues based on the specific property I set for the user.

Thanks

5

If you don’t have an attribute with numerical value 19 in your Mikrotik dictionary add it as per http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client#MikroTik_Specific_RADIUS_Attribute_Numeric_Values

Often these dictionary files are in /usr/share/freeradius/, but it depends on your platform. Then there will often be a file called dictionary.mikrotik, again this depends on your platform.

This file contains one line per attribute, the third column is a numerical id. If there is no line for value 19, add this before the ‘END-VENDOR Mikrotik’ line:

ATTRIBUTE       Mikrotik-Address-List           19      string

Restart FreeRADIUS. You can now set a “Mikrotik-Address-List” attribute, and people authenticated by the RADIUS server will dynamically be added to that address list. You can then mark packet based on these address lists and build HTBs accordingly. Refer to the FreeRADIUS documentation for details.