radius authentication through the MT

*** Please move if this isn’t the correct forum ***

We have a number of rb450g’s in a bgp routed network.

Some locations are too large to be covered with onboard adapters, so I use external AP’s to provide coverage (typically Engenius ap’s.)

What I would like to do is use radius authentication to centralize user managment.

Most of the articles I have seen assume on board adapters.

Can anyone point me to a HowTo/example setup with workstations connecting to an external AP using wpa, which then passes authentication through the MT to a server 2003 ias for authentication?

Currently, I see authentication traffic in wireshark, but an ip is never assigned.
If I set a static ip, no traffic passes over ip - though I do see broadcast traffic from various routers/print servers. I never get a prompt for username/password, though that may be my cached credentials passing through - I dunno.

Like I said - a pointer to articles not specific to onboard cards would be helpful.

If it’s an external AP and an external RADIUS server, the RouterOS device really isn’t involved in the chain other than forwarding the traffic between the two external endpoints, so I guess you just make sure that the traffic isn’t blocked by firewall filters.