how do I use the filter-id with radius, which rule I have to create first before using this filter.
For Filter-Id you pass on the name of a chain. When a user logs in and that attribute is received, two dynamic firewall filter rules are installed in the hotspot chain that jump to the chain named via Filter-Id for traffic to and from the user’s IP address.
Below a sample after logging in from IP 10.2.1.254 with RADIUS configured to pass back a value of ‘MT-Test’ for the Filter-Id attribute:
[admin@MikroTik] > /ip fire fil pri all where chain=hotspot
Flags: X - disabled, I - invalid, D - dynamic
26 I chain=hotspot action=jump jump-target=MT-Test src-address=10.2.1.254
27 I chain=hotspot action=jump jump-target=MT-Test dst-address=10.2.1.254
You can see the rules are invalid, that’s because the chain ‘MT-Test’ doesn’t exist. Once that chain is created, the rules turn on:
[admin@MikroTik] > /ip fire fil add chain=MT-Test action=drop
[admin@MikroTik] > /ip fire fil pri all where chain=hotspot
Flags: X - disabled, I - invalid, D - dynamic
26 D chain=hotspot action=jump jump-target=MT-Test src-address=10.2.1.254
27 D chain=hotspot action=jump jump-target=MT-Test dst-address=10.2.1.254
Well I’m trying to use it with a pppoe server, is that customers want to redirect to a page warning, I have a system that will automatically add this attribute to customers and after I select it to connect and create these rules I would like to direct him to page a warning for a given time. look at the result of his connection:
0 D chain=ppp action=jump jump-target=aviso in-interface=
1 D chain=ppp action=jump jump-target=aviso out-interface=
then I want to direct all tragefo this customer to a page after 10 seconds and register it in the address list of the firewall as a client who read the notice and return it to the notice after 1 hours
You cannot redirect in filter chains.
and if I check out those strategies and by that chain, I can create an address list of ips of origin?