Radius Server Not Respond

RouterOS The User Manager
1

Dear Support,

Please help to check, and i got problem with Radius Server.

I have intergrade Mikrotik Hotspot radius with AD radius server.

Before it work fine, but now it got some problem. Most of time I connect, I got message reply: Radius Server Not Respond.

So I need to press button connect many time to log to my account. Some time we need to reconnect SSID from wireless to make it work.

So how to solve this problem?


Thank,
Phearak

2

Please post here
/radius print
/radius monitor <0>

Do not increase RADIUS timeout, when there is no any important reason.

3

Please verify you are using User Manager for your RADIUS server. This implies you are using an AD (Active Directory?) product for the radius server:

I have intergrade Mikrotik Hotspot radius with AD radius server.

I guess sergejs did not like increasing the timeout value, but on FreeRADIUS V2.x, you will be getting a lot of “radius server not responding” messages if you do not increase the timeout. There is a one second delay on Access-Reject, and since the default value is 300ms, that shows as “radius server not responding” on rejects.

4

Hi i am also gtting the same problem. please help us to solve this problem
Untitled-1 co3222py.jpg

5

Hi i am also gtting the same problem. please help us to solve this problem

6

imrankosi, please upgrade to RouterOS v5.4 and try again.

7

I have upgrade Mikrotik RouterOS to version 5.4 already but still got problem.

So do you have any solution for this case?

Please help to advice!

8

What server OS and radius server software are you using?

They deleted my first response. Since you did try it their way without success, then you might want to experiment with my way. I’m not saying leave it this way, but just as an experiment. :smiley:

/radius
print detail
set 0 timeout=2s

Also, insure you have added radius debug to your log.

/system logging
add topics=radius,debug action=memory

Try a login, then check the log.

9

I’m connect to Radius Server of Window IAS (Internet Authentication Server).

as your experience, this case can related to Radius Timeout?

So what number should we set for Radius Timeout on Mikrotik Router?

10

I do not use IAS. I use FreeRADIUS. But the delay in sending an Access-Reject message is part of a brute force hack prevention scheme. It allows only one attempt per second, limiting the number of times a hacker can try to break in. It is possible that IAS uses that scheme also.

I suggest trying the timeout=2s like above (2 seconds), and set the radius logging also as I suggested. Try a login and check the router’s log. Try a user/password that is valid, and one that isn’t. See if there is a difference in the response.

You can always change it back to timeout=300ms if you want. You might want to disable the radius debug logging once you get it working. It does put a lot of entries in the log.

I am not recommending that you do something that I don’t do. My routers are already set with this new timeout.

ADD: If you were using User Manager, especially installed in the same router, then sergejs is correct. Do not change this value. This applies to external RADIUS servers that use an Access-Reject delay.

The best way to tell is try to login with a valid user/password and then with an invalid user/password. If the valid password works, and the invalid password shows “radius server not responding” instead of “invalid user or password”, then this change should take care of that problem.

The reason I like setting the timeout=2s (at least temporarily) is to insure that there is not a setting in IAS/RADIUS that is rejecting all requests.

11

Thank for your support SurferTim, now it simply work well and it do not alert that message again after i increased Radius Timeout to 2s.