someone stole all my user info and now is login in

RouterOS General
1

Hello,

Someone stole my users info pppoe username and password and this person connects using different users sometimes… I created new passwords for all my users and secured my router, today somehow the individual was connecting again. I want to use mac auth but the problem is that the mt router sometimes reads the radio mac address and sometimes the clients computers mac address… How can this be fix?

thanks

2

I am not to familiar with 802.x type stuff but I think if you get the intruders MAC address you can go on the Internet and figure out what brand of wifi or NIC uses that range. That would be some info. Also, perhaps you could drive around with a wireless sniffer untill you find his MAC?

Also, on PPPoE you should limit one logon per username. Once you notice him logged on you could likely use the Mikrotik sniffer to capture all his traffic.

Matt

3

So when you enable “radius-mac-authentication=yes” the mikrotik sees the client instead of the radio?