Radius server not responding

I have setup my hotspot to use radius and user manager. But when i try to access login then it will say that the radius srver is not responding. I know that there is another post that is the same but they only tell him to contact support. I already done that and stil waiting for a respons.

i followed the steps on http://wiki.mikrotik.com/wiki/User_Manager/Hotspot_Example

check your routing or adjust radius timeout parameter.

Stil not working, I set the time out to 3000 and also tried to reset the router to default and only to run hotspot and radius.

What else can i do? O have the latest version of routeros 3.23

What RADIUS server software are you using? Normally that error message is a RADIUS setup or server configuration challenge. If you are using user manager in the same router, insure the “/radius” settings are correct. In the same router, 127.0.0.1 for the radius ip is the correct setting. If you need help, post the output of
/radius print
and
/ip hotspot profile print

Hi here it is


[admin@ESW(Work)] > radius print
Flags: X - disabled

SERVICE CALLED-ID DOMAIN ADDRESS SECRET

0 hotspot 127.0.0.1 123456
[admin@ESW(Work)] > /
[admin@ESW(Work)] > ip hotspot profile print
Flags: * - default
0 * name=“default” hotspot-address=0.0.0.0 dns-name=“” html-directory=hotspot
rate-limit=“” http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no
use-radius=no

1 name=“hsprof1” hotspot-address=192.168.99.1 dns-name=“test.test”
html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no
use-radius=yes radius-accounting=yes radius-interim-update=received
nas-port-type=wireless-802.11 radius-default-domain=“”
radius-location-id=“” radius-location-name=“”
radius-mac-format=XX:XX:XX:XX:XX:XX
[admin@ESW(Work)] >


I have check in the status of my radius profile and it show that all the reqeysts are being rejected.

so you are using usermanager on the same router as hotspot server.

what about
/tool user-manager router

admin@ESW(Work)] > tool user-manager
[admin@ESW(Work)] /tool user-manager> router
[admin@ESW(Work)] /tool user-manager router> pr
Flags: X - disabled
0 subscriber=mikrotik name=“router1” ip-address=127.0.0.1
shared-secret=“123456” log=auth-ok,auth-fail,acct-fail
[admin@ESW(Work)] /tool user-manager router>
[admin@ESW(Work)] /tool user-manager router>


Do you maybe know what it may be?

I have exactly the same issue, I can’t find the solution anywhere and this post seems to have stopped as if silenced…
I havn’t even been able to use the radius function (use-radius) even once since I’ve used mikrotik, always the same error.

Has it even been confirmed that setting the radius time out actually works?

Please someone respond with some help!

i figured it out how to make is work. My problem was that the radius server address and the router (add to user-manager) had differant ip? I changed them both to the same ip(192.168.8.1). And now it is working. What are you trying to do? Use Hotspot or wireless? OR?

I do this all the time, works everytime, hotspot server and usermanager in same box

/tool user-manager router pr
Flags: X - disabled
0 subscriber=admin name=“local” ip-address=127.0.0.1
shared-secret=“test” log=auth-fail

/radius pr det
Flags: X - disabled
0 service=hotspot called-id=“” domain=“” address=127.0.0.1 secret=“test”
authentication-port=1812 accounting-port=1813 timeout=300ms
accounting-backup=no realm=“”

Don’t forget to tick “use radius” in hotspot profile

My radius wont work with 127.0.0.1

So i used the ip of the interface of my hotspot. And it is working. Did not had a reqeust timeout ever again.

Im only use wireless service on radius now.

You guys are awesome!!! This was my biggest problem, thank you guys I’m glad I actually posted something and now it works immediately.

I’m trying to use this in a office situation but with MAC login, now I can try and figure out the MAC part at last.

Thanks again

cool do you know what was causing the problem? And what did you change to solve it

I changed the radius server and router ip address to 192.168.0.254 and it worked. Now it seems to be down again (radius server not responding).

I had the issue that I could not connect to the user manager web interface on http://192.168.0.254/userman if the hotspot and radius is on that same address (interface). I just set up a new address to a random port on my RB450 and then could log in to that adress.

Everything worked last night before I left the office and this morning the radius server was not responding again. I will try to redo all my steps after reloading the previous backup and then tell you if I found what went wrong.

fyi - Rebooting router and restarting Firefox doesn’t do a thing.

What does your logs in the http://192.168.0.254/userman/logs look like? Lat night my radus server was also full of nonsense so i deleted all the logs and somehow it came back online and the computer could work again.

Other than the fact that somone was trying to ssh into my router from the wan side on the main log there doesn’t seem to be anything dodgy or nonsensical. Only accounting failure, authorization failure and authorization success (104 total items). I don’t know when these timestamps are as I had to revert to backups a few times and I didn’t put my NTP server up till the middle of the day.

I have come to the conclusion that there is something wrong with the Hotspot setup or maybe even a bug. I have tried everything and when I disabled the hotspot the network ran smoothly. When I enabled it again the Hotspot and radius could communicate and everyone could log in. Hopefully this luck keeps up over night and tomorrow there won’t be issues again.

Only issue now is that I cannot access the radius server on the same IP as the hotspot 192.168.2.254/userman (previously ..0.254) but that I will complain about somewhere else. :laughing: I think I have used my RB450 to it’s capacity.

I will see if I can find a straight answer to these thing but it’s working so I won’t fiddle too much. I still think the obvious solution is to not use 127.0.0.1 anywhere when setting up the raius and the hotspot and the other issues are just reset and restart, also seeing where you made an error in routing or what not.

Thanks again guys

Hi im also unable to log into userman from the wan side, i think that my be something to prevent people from trying to hack into the AP. Im using the wireless feature of the radius. It it almast the same as hotspot but people do not get a login screen. When users turn on their computers then the radius server check if their mac address match and then they are allowed, if not then they are unable to connect and the radius rejects their packets.

The best way to test radius is to have a extra computer and then to reboot it and then check if it connects.

Hey Dude…If you are unable to login the Usermanager with “10.0.0.1/userman” then go to /ip services www and then change the port 80 to something 8080 then add “http://10.0.0.1:8080/userman” to /ip hotspot walled garden dst host and port 8080 to Dst.Port and apply again add 10.0.0.1 to dst address of “walled garden ip”. then you can login the userman without login in hotspot.

Same problem, resolved simply by upgrading from 3.0x to 4.17. This only started happening after hard drive was moved from one motherboard to another.

Hi,
I searched anywhere to solve this problem. but its not working in my case!
sorry for repeat this subject. help me plz…
these are my logs:


[admin@AFIFNET Sadra] >[/color] radius print
Flags: X - disabled

SERVICE CAL… DOMAIN ADDRESS S

0 hotspot 127.0.0.1 1

[admin@AFIFNET Sadra] > ip hotspot profile print
Flags: * - default
0 * name=“default” hotspot-address=0.0.0.0 dns-name=“”
html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d
split-user-domain=no use-radius=no

1 name=“hsprof1” hotspot-address=192.168.100.1 dns-name=“”
html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=mac,http-chap,https,http-pap
mac-auth-password=“” ssl-certificate=none split-user-domain=no
use-radius=yes radius-accounting=no nas-port-type=ethernet
radius-default-domain=“” radius-location-id=“” radius-location-name=“”
radius-mac-format=XX:XX:XX:XX:XX:XX


[admin@AFIFNET Sadra]tool user-manager router pr
int
Flags: X - disabled
0 customer=ramtin name=“router1” ip-address=127.0.0.1 shared-secret=“1”
log=auth-ok,auth-fail,acct-fail use-coa=no

:frowning: :confused: