Hey all, i have been settingup usermanager and it works fine except it does not show that any users are connected when a user is connected, it also dosent log the download/uploaded amounts that user has used.. However in the logs it shows authorisation succes, and i can access the internet through that wireless network. I have it set to MAC authentication. Here are a few pics… Now im connected and it does not show users on the status page, and as i said it is shown in the logs that i have connected. Also i can queue myself through rate limiting in usermanager… Does anybody know what this could be? any advice? thanks. -Jordan
!~Bump~! I am not in the wrong section am I? this is a form? should i send this to support@mikrotik.com? serges? any help… Is this how usermanager reacts to just mac authentication? will it work if i use hotspot? … HELP!!!
Can any of the creators of user-manager help me with this… is this a bug im running version 2.49?
Please, make sure that you have correctly configured RouterOS for this client, that all data is sent by RADIUS client of this router to User-Manager.
Please, post here configuration from
interface wireless export
and
radius export
Thank you very much sergejs, i was worried there. here is what you asked for
Wireless export
Terminal vt102 detected, using multiline input mode
[jordan@J*B Wireless] > interface wireless export
dec/28/2007 11:40:54 by RouterOS 2.9.49
software id = UZ4E-FTT
/ interface wireless
set wlan1 name="wlan1" mtu=1500 mac-address=00:15:6D:20:05:70 arp=enabled
disable-running-check=no radio-name="00156D200570" mode=ap-bridge
ssid="JB Wireless" area="" frequency-mode=manual-txpower
country=no_country_set antenna-gain=0 frequency=2462 band=2.4ghz-b/g
scan-list=default rate-set=default
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
basic-rates-b=1Mbps basic-rates-a/g=6Mbps max-station-count=2007
ack-timeout=dynamic tx-power-mode=default noise-floor-threshold=default
periodic-calibration=default periodic-calibration-interval=60
burst-time=disabled dfs-mode=none antenna-mode=ant-b wds-mode=disabled
wds-default-bridge=none wds-default-cost=100 wds-cost-range=50-150
wds-ignore-ssid=no update-stats-interval=disabled
default-authentication=yes default-forwarding=yes default-ap-tx-limit=0
default-client-tx-limit=0 proprietary-extensions=post-2.9.25 hide-ssid=no
security-profile=default disconnect-timeout=3s on-fail-retry-time=100ms
hw-retries=15 preamble-mode=long compression=no allow-sharedkey=no
comment="" disabled=no
/ interface wireless nstreme
set wlan1 enable-nstreme=no enable-polling=yes framer-policy=none
framer-limit=3200
/ interface wireless manual-tx-power-table
set wlan1 manual-tx-powers=1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbp
s:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17
/ interface wireless security-profiles
set default name="default" mode=none authentication-types=""
unicast-ciphers="" group-ciphers="" wpa-pre-shared-key=""
wpa2-pre-shared-key="" eap-methods=passthrough tls-mode=no-certificates
tls-certificate=none static-algo-0=none static-key-0="" static-algo-1=none
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none
static-sta-private-key="" radius-mac-authentication=yes
group-key-update=5m
add name="profile1" mode=dynamic-keys authentication-types=wpa-psk
unicast-ciphers=tkip group-ciphers=tkip wpa-pre-shared-key="fourtrax"
wpa2-pre-shared-key="" tls-mode=no-certificates tls-certificate=none
static-algo-0=none static-key-0="" static-algo-1=none static-key-1=""
static-algo-2=none static-key-2="" static-algo-3=none static-key-3=""
static-transmit-key=key-0 static-sta-private-algo=none
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
/ interface wireless align
set frame-size=300 active-mode=yes receive-all=no
audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 ssid-all=no
frames-per-second=25 audio-min=-100 audio-max=-20
/ interface wireless snooper
set multiple-channels=yes channel-time=200ms receive-errors=no
/ interface wireless sniffer
set multiple-channels=no channel-time=200ms only-headers=no receive-errors=no
memory-limit=10 file-name="" file-limit=10 streaming-enabled=no
streaming-server=0.0.0.0 streaming-max-rate=0
[jordan@JB Wireless] >
Radius export
[jordan@J*B Wireless] > radius export
dec/28/2007 11:42:53 by RouterOS 2.9.49
software id = UZ4E-FTT
/ radius
add service=wireless called-id="" domain="" address=192.168.0.5
secret="123456" authentication-port=1812 accounting-port=1813
timeout=300ms accounting-backup=no realm="" comment="" disabled=no
/ radius incoming
set accept=yes port=1700
[jordan@J*B Wireless] >
There it is!
If you look in the third picture it shows the prepaid amount 4w2d1h1s in the left amount it has 4w2h23m35s But does not show the amount used... Just another thing i thought i should point out.... -Jordan
Hey sergejs , justing bumping this so maybe you see it… I gave your the export data. thanks -Jordan
You have enabled ‘default-authentication’ (yes). It means that client will get access without RADIUS authentication.
Set ‘default-authenticate=no’, then it should contact RADIUS for authentication.
Ok i changed it but it did not change the results…
Wireless export:
/ interface wireless
set wlan1 name=“wlan1” mtu=1500 mac-address=00:15:6D:20:05:70 arp=enabled
disable-running-check=no radio-name=“00156D200570” mode=ap-bridge
ssid=“J*B Wireless” area=“” frequency-mode=manual-txpower
country=no_country_set antenna-gain=0 frequency=2462 band=2.4ghz-b/g
scan-list=default rate-set=default
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
basic-rates-b=1Mbps basic-rates-a/g=6Mbps max-station-count=2007
ack-timeout=dynamic tx-power-mode=default noise-floor-threshold=default
periodic-calibration=default periodic-calibration-interval=60
burst-time=disabled dfs-mode=none antenna-mode=ant-b wds-mode=disabled
wds-default-bridge=none wds-default-cost=100 wds-cost-range=50-150
wds-ignore-ssid=no update-stats-interval=disabled
default-authentication=no default-forwarding=yes default-ap-tx-limit=0
default-client-tx-limit=0 proprietary-extensions=post-2.9.25 hide-ssid=no
security-profile=default disconnect-timeout=3s on-fail-retry-time=100ms
hw-retries=15 preamble-mode=long compression=no allow-sharedkey=no
comment=“” disabled=no
/ interface wireless nstreme
set wlan1 enable-nstreme=no enable-polling=yes framer-policy=none
framer-limit=3200
/ interface wireless manual-tx-power-table
set wlan1 manual-tx-powers=1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbp
s:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17
/ interface wireless security-profiles
set default name=“default” mode=none authentication-types=“”
unicast-ciphers=“” group-ciphers=“” wpa-pre-shared-key=“”
wpa2-pre-shared-key=“” eap-methods=passthrough tls-mode=no-certificates
tls-certificate=none static-algo-0=none static-key-0=“” static-algo-1=none
static-key-1=“” static-algo-2=none static-key-2=“” static-algo-3=none
static-key-3=“” static-transmit-key=key-0 static-sta-private-algo=none
static-sta-private-key=“” radius-mac-authentication=yes
group-key-update=5m
add name=“profile1” mode=dynamic-keys authentication-types=wpa-psk
unicast-ciphers=tkip group-ciphers=tkip wpa-pre-shared-key=“fourtrax”
wpa2-pre-shared-key=“” tls-mode=no-certificates tls-certificate=none
static-algo-0=none static-key-0=“” static-algo-1=none static-key-1=“”
static-algo-2=none static-key-2=“” static-algo-3=none static-key-3=“”
static-transmit-key=key-0 static-sta-private-algo=none
static-sta-private-key=“” radius-mac-authentication=no group-key-update=5m
/ interface wireless align
set frame-size=300 active-mode=yes receive-all=no
audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 ssid-all=no
frames-per-second=25 audio-min=-100 audio-max=-20
/ interface wireless snooper
set multiple-channels=yes channel-time=200ms receive-errors=no
/ interface wireless sniffer
set multiple-channels=no channel-time=200ms only-headers=no receive-errors=no
memory-limit=10 file-name=“” file-limit=10 streaming-enabled=no
streaming-server=0.0.0.0 streaming-max-rate=0
Here is more pics, there worth a thousand words so maybe thes can help you…
If there is ANYTHING you need extra let me know and ill post it here.. thanks sergejs -Jordan
Hi Jordantrx,
I am again, I have problem with usermanager and hotspot. But not same to you.
I have posted this topic more than 1 month before.
You can see it here. http://forum.mikrotik.com/t/user-manager-stops-functioning-after-upgrading/16959/1
Enable ‘radius,debug’ logs, post the results here (enabled/disable wireless interface and force user to re-authenticate).
Here it is, in a picture, i didnt know how to use telnet to get log data… -Jordan
~Bump~
Ok i have tired what seems to be everything, i upgraded the router to the lastest version or Router OS 3.rc13, i used this RouterOS - RouterOS - MikroTik Documentation wiki to redo the entire setup of usermanager and radius. And i log in using MAC authentication it shows up in the logs it consents usermanager & radius in the winbox logs, I dont know what else to do why is it so hard for me to setup...................... If someoneone has a database that i can load that is mac authentication with the mac address of 00:90:4B:DB:B1:81 & 00:07:CA:03:9B:B2 and router ip address of 192.168.0.6 GOOD luck!
here are my exports...
Wireless export
/interface wireless security-profiles
set default authentication-types="" eap-methods=passthrough group-ciphers=""
group-key-update=5m interim-update=0s mode=none name="default"
radius-eap-accounting=no radius-mac-accounting=no
radius-mac-authentication=yes radius-mac-caching=disabled
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username
static-algo-0=none static-algo-1=none static-algo-2=none
static-algo-3=none static-key-0="" static-key-1="" static-key-2=""
static-key-3="" static-sta-private-algo=none static-sta-private-key=""
static-transmit-key=key-0 supplicant-identity="JB Wireless"
tls-certificate=none tls-mode=no-certificates unicast-ciphers=""
wpa-pre-shared-key="" wpa2-pre-shared-key=""
add authentication-types=wpa-psk group-ciphers=tkip group-key-update=5m
interim-update=0s mode=dynamic-keys name="profile1"
radius-eap-accounting=no radius-mac-accounting=no
radius-mac-authentication=no radius-mac-caching=disabled
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username
static-algo-0=none static-algo-1=none static-algo-2=none
static-algo-3=none static-key-0="" static-key-1="" static-key-2=""
static-key-3="" static-sta-private-algo=none static-sta-private-key=""
static-transmit-key=key-0 supplicant-identity="JB Wireless"
tls-certificate=none tls-mode=no-certificates unicast-ciphers=tkip
wpa-pre-shared-key="fourtrax" wpa2-pre-shared-key=""
/interface wireless
set 0 ack-timeout=dynamic adaptive-noise-immunity=no allow-sharedkey=no
antenna-gain=0 antenna-mode=ant-b area="" arp=enabled band=2.4ghz-b/g
basic-rates-a/g=6Mbps basic-rates-b=1Mbps burst-time=disabled comment=""
compression=no country=no_country_set default-ap-tx-limit=0
default-authentication=no default-client-tx-limit=0 default-forwarding=yes
dfs-mode=none disable-running-check=no disabled=no disconnect-timeout=3s
frame-lifetime=0 frequency=2462 frequency-mode=manual-txpower hide-ssid=no
hw-retries=15 mac-address=00:15:6D:20:05:70 max-station-count=2007
mode=ap-bridge mtu=1500 name="wlan1" noise-floor-threshold=default
on-fail-retry-time=100ms periodic-calibration=default
periodic-calibration-interval=60 preamble-mode=long
proprietary-extensions=post-2.9.25 radio-name="00156D200570"
rate-set=default scan-list=default security-profile=default ssid="JB
Wireless" station-bridge-clone-mac=00:00:00:00:00:00
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps tx-power-mode=default
update-stats-interval=disabled wds-cost-range=50-150
wds-default-bridge=none wds-default-cost=100 wds-ignore-ssid=no
wds-mode=disabled wmm-support=disabled
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100
audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00
frame-size=300 frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10
multiple-channels=no only-headers=no receive-errors=no
streaming-enabled=no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=n
Radius export
[jordan@JB Wireless] > radius export
jan/01/2000 05:00:47 by RouterOS 3.0rc13
software id = UZ4E-FTT
/radius
add accounting-backup=no accounting-port=1813 address=192.168.0.6
authentication-port=1812 called-id="" comment="" disabled=no domain=""
realm="" secret="123456" service=wireless timeout=300ms
/radius incoming
set accept=yes port=1700
[jordan@J*B Wireless] >
I REALLY need a working user-manager for my network and its realllly slowing down any progress of me gettting going..... thanks guys .......
jordantrx,
ok, wireless clients are not shown in status, because there is no accounting information, User-Manager is being used only for wireless client authentication (information is shown in logs).
You may try and disable ‘radius-mac-authentication’ at the security profile, then client will not be able to authenticate, as RADIUS will not be used and he/she is not included into local access-list.
That did it!!! its working now, i cant finally use it! and the automated billing script! thanks sergejs, much appreciated!! -Jordan