RADIUS server and 802.1x

RouterOS Wireless Networking
1

Is it possible to make an AP with 802.1x authentication through user manager users?
I’m trying to make this configuration but i can’t manage putting it to work.

2

No, User Manager does not support it.

You need the following scenario,
client — MikroTik AP — RADIUS [FreeRADIUS or any other].

MikroTik AP configuration,

  • radius client with wireless settings.
  • wireless interface, interface wireless security-profile add mode=dynamic-keys eap-methods=passthrough authentication-types=wpa2-eap
3

Ok thanks, i could try my whole life with user manager, since it doesn’t support it :slight_smile:

I will try free radius than.

4

Is there any tutorial on how to configure MT and freeradius besides Ramona tutorial, which is ‘a little’ outdated? :slight_smile:

5

All you need to have on MikroTik,

MikroTik AP configuration,

  • radius client with wireless settings.
  • wireless interface, interface wireless security-profile add mode=dynamic-keys eap-methods=passthrough authentication-types=wpa2-eap
6

Any settings required on the wireless client? Or does the default security profile suffice, since all the authentication is taken care of by the NAS and RADIUS?

7

As far as I know you can use only EAP-TLS with 802.1x, when MikroTik RouterOS is being used as client.