two pppoe servers in the same network

Hi!

I have one pppoe server that works on the mikrotik with linux radius. Now i want to make one more pppoe server, but only certain users to need to authenticate on new server, not all.
First server and entire wireless network is in the 172.31.0.0/16 subnet, so how can i make new server to use same network, but only allowed users to authenticate on the new server?

I tried to give second server address that is not in the same range like first, and to make firewall/filter rule to drop all packets from 172.31.0.0/16 subnet, but nothing! server is accepting requests from 172.31.0.0/16 and all mess up.

I using RouterOS 3.11 and linux freeradius

Thanks! :slight_smile:

MikroTik RouterOS has option,
service-name (text) - the PPPoE service name.

Specify different service-names for PPPoE servers, specify appropriate service-name on the PPPoE client configuration.

Yes this works, but before i made a second PPPoE server, i did not assign a service name to my clients, so all my clients have a blank service name.

SERVER 1 : 172.31.1.1/16 subnet
SERVER 2 : 172.16.1.1/16 subnet
ACCESS POINTS : 172.31.1.x/16 subnet

I want through the same network to authenticate users, but users who don’t have a service name tries to authenticate on the second server sometimes.
How can i make second server “invisible” to users who don’t have a service name? only visible to users whoes i assign service name? is this posible?
I tried to apply this firewall rule, but nothing: ip firewall filter add chain=input src-address=172.31.0.0/16 action=drop

Thanks! :slight_smile: :slight_smile: :slight_smile:

Nobody knows how to do this? can anybody help me with this please.

I’ve same problem. Is there any solution? Anyone solved this? Two pppoe server on same network with two different service name…clients with blank service name try authenticate on both pppoe server. Thanks in advance

You need to put those customers and the other PPPoE server on a different VLAN, that is the only other way of solving this, to my knowledge.

I would agree with mducharme. Pppoe clients connect to whatever server answers first. You need to use service-name I’m afraid.

Sent from my tablet with Tapatalk. Sorry for my typos.