Radius CoA and PoD with PPPOE

RouterOS General
1

Hi everybody,

I’m trying to send CoA for pppoe users with radiusclient (freeradius) and have problems…
For example I want to change Mikrotik-Rate-Limit and send:

Sending CoA-Request of id 124 to 217.xx.xx.18 port 1700
        User-Name = "pppoetest"
        NAS-IP-Address = 217.xx.xx.18
        Mikrotik-Rate-Limit = "32k"
        NAS-Identifier = "14m-gw"
        Called-Station-Id = "internet"
        Service-Type = Framed-User
        Framed-IP-Address = 81.xx.xx.190

Get responce:

rad_recv: CoA-NAK packet from host 217.xx.xx.18:1700, id=124, length=40
        Error-Cause = Unsupported-Extension
        NAS-Identifier = "14m-gw"
        NAS-IP-Address = 217.xx.xx.18

In mikrotik log I have:
hotspot error info Radius request for unknown ip 81.xx.xx.190
Sending CoA-NAK…

I tried to send Session-Id and other AV-pairs but without success :frowning:

At the same time PoD (disconnect) is working ok for pppoe. But after user is disconnected and accounting info sent there is also a line in log:
hotspot error info Radius request for unknown ip 81.xx.xx.190

Why hotspot? I didn’t found any restrictions in documentation. It just says:

Change of Authorization
RADIUS disconnect and Change of Authorization (according to RFC3576) are supported as well. These attributes may be changed by a CoA request from the RADIUS server:

  • Mikrotik-Group
  • Mikrotik-Recv-Limit
  • Mikrotik-Xmit-Limit
  • Mikrotik-Rate-Limit
  • Ascend-Data-Rate (only if Mikrotik-Rate-Limit is not present)
  • Ascend-XMit-Rate (only if Mikrotik-Rate-Limit is not present)
  • Mikrotik-Mark-Id
  • Filter-Id
  • Mikrotik-Advertise-Url
  • Mikrotik-Advertise-Interval
  • Session-Timeout
  • Idle-Timeout
  • Port-Limit
    Note that it is not possible to change IP address, pool or routes that way - for such changes a user must be disconnected first.

Maybe CoA works for hotspot only? Why there is no information in docs about that restriction if so? I do not need hotspot - just pppoe.
Please can anybody explain this?

PS: Mikrotik 2.9.50 but tried older versions with the same “results”.

2

PPPoE doesn’t support CoA, only PoD.

3

it mean i can’t send to active PPPoE session Mikrotik-Recv-Limit or Mikrotik-Xmit-Limit or Mikrotik-Rate-Limit? only disconnect this session via PoD?

4

Is there any plans to support CoA on PPPoE/PPTP?

5

I’m working on a php script right now which will change the rate-limit without using radius attr.
but I’m stuck on updating queue/only upload is being changed/

6

It would be nice if Mikrotik wrote there own simple radius server just for Mikrotik.

Matt

7

MikroTik is working on the User-Manager.
That is very simple and user friendly radius-based system,
http://wiki.mikrotik.com/wiki/User_Manager

8

Can anyone inform IF on MK version 3.14 PPPoE support CoA ???

BR

9

Can i assume that it is a YES o CoA request to PPPoE users right??? if yes, i am having problems with CoA Packet and MK 3.14 here is :

echo “User-Name=username,Framed-IP-Address=clientip,Acct-Session-Id=81b0007d,Rate-Limit=512000/512000” | radclient -x mkboxip:1700 coa secret
Sending CoA-Request of id 21 to mkboxip port 1700
User-Name = “username”
Framed-IP-Address = clientip
Acct-Session-Id = “81b0007d”
Rate-Limit = “512000/512000”
rad_recv: CoA-NAK packet from host mkboxip:1700, id=21, length=41
Error-Cause = Unsupported-Extension
NAS-Identifier = “mkboxident”
NAS-IP-Address = mkboxip

BR

10

Do you enable accept for incoming messages ?
/radius incoming set accept=yes

11

Yes, the bellow command works fine :

echo “Acct-Session-Id=sessionid,User-Name=username” | radclient -q mtboxip:1700 disconnect secret

and if you observe carefully on my previous post, you can see that the box answer the request…

BR

12

Getting this error too. “Unsupported Extension” in reply to CoA request. Wondering if this is a bug or if MT just doesn’t support CoA.

13

Does anyone know if this is still unsupported, or have things changed in newer releases?

14

Mikrotik Users.: The implementation of CoA for Mikrotik PPPoE servers. https://www.change.org/petitions/mikrotik-users-the-implementation-of-coa-for-mikrotik-pppoe-servers?share_id=uaMAXsqivo&utm_campaign=twitter_link&utm_medium=twitter&utm_source=share_petition

15

I think we NEED accel-ppp in MT.

16

bump

17

+1 to request CoA support.

18

You Wrong COA works with pope perfectly!!!

19

Please read the changelog before posting.
In 2007 there was no any CoA for any PPP.

20

any trick on pppoe server side ? we are trying to implement COA, but queue not changing.