Hello,
Does RouterOS support the RADIUS CoA packet?
When I sent a CoA request to it i get a CoA-NaK back telling me that it’s an unsupported extension even though the documentation says otherwise.
Any help would be greatly appreciated.
RADIUS disconnect and Change of Authorization (according to RFC3576) are supported as well. These attributes may be changed by a CoA request from the RADIUS server:
Note that it is not possible to change IP address, pool or routes that way - for such changes a user must be disconnected first.
Mikrotik-Group
Mikrotik-Recv-Limit
Mikrotik-Xmit-Limit
Mikrotik-Rate-Limit
Ascend-Data-Rate (only if Mikrotik-Rate-Limit is not present)
Ascend-XMit-Rate (only if Mikrotik-Rate-Limit is not present)
Mikrotik-Mark-Id
Filter-Id
Mikrotik-Advertise-Url
Mikrotik-Advertise-Interval
Session-Timeout
Idle-Timeout
Port-Limit
Thats the part of the manual that I have read that says it supports the CoA packet. However when i try to test it (using freeradius radclient tool the device will tell me it was a bad packet, and when using my custom tool is says the extension is unsupported). In the Coa packet i am sending:
NASIPAddress
AcctSessionId
UserName
FramedIPAddress
MikrotikRateLimit
Are there any specific values that should be included that I am missing?
Actually, is CoA supported on PPP connections by the Mikrotiks? (i noticed in the log that ‘hotspot’ is saying it cant perform the CoA request because it can’t find the user - but all the users on the device are PPP connections)
Sorry for beating the dead horse, may I ask please how much information on this still relevant/updated/obsolete?
We have an inquiry from a potential customers to use MT gears on their network to replace an ageing mixed stuff consist of nokia,adtran and cisco “we don’t have an exact details” but we were told before moving the discussion to phase 2 they want to know what’s the MT capability/limitations and advance features with regards to CoA support no specifics has been given to us but what we know they are looking information for each protocol below
802.1x
DHCP
PPPoE
Firewall
My last implementation of CoA was with Aruba and it works extremely well though a separate license has to purchase, my google-fu of me doesn’t work in this areas, can someone shed some ligh on this please?