Page 1 of 1

New Usermanager v5

Posted: Wed Jun 29, 2011 8:23 pm
by Fumi
Hi all!

I need to configure usermanager and I have some questions.

There is manual for new usermanager?

I need to know how configure user--> wireless

Wireless->
Preshared key:
Enc key:
Enc algo:


What is the configuration in usermanager GUI and winbox?

Thanks..

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 11:18 am
by Fumi
Please mikrotik guys! I need some help! :?

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 11:19 am
by normis
let's start by moving your topic to the correct forum section

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 11:29 am
by Fumi
sorry...

There is any example or something to configure wireless section?

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 1:28 pm
by sergejs
http://wiki.mikrotik.com/wiki/User_Mana ... ss_Example

I recommend to start from the link above.

For
Preshared key: Set this key for WPA/WPA2 (the same as WPA Pre-Shared Key/WPA2 Pre-Shared Key in Winbox).
Enc key: leave it blank for WPA/WPA2.
Enc algo: select AES-CCM or TKIP (AES is more recommended);

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 2:12 pm
by Fumi
Thanks!! and sorry to put this message in wrong site..

Two last question..

Wireless clients should be Mikrotik? I try with laptop and log: got RADIUS accept for XX:XX:XX:XX:XX:XX on wlan1, but failed to validate encryption key.

UserManager support EAP authentication?

Thanks!

Re: New Usermanager v5

Posted: Thu Jun 30, 2011 2:39 pm
by Fumi
I follow the steps in manual but if I don't active WEP or WPA in wireless security profiles, then the comunication is not encrypted.

If in security profiles leave Mode: none (encryption) then RADIUS users can connect via wireless!!
But if I set Mode: dinamyc keys then users cannot connect..

I need RADIUS wireless users connection ecnrypted.

Re: New Usermanager v5

Posted: Fri Jul 01, 2011 2:14 pm
by Fumi
anyone have any idea about it?

Re: New Usermanager v5

Posted: Fri Jul 01, 2011 4:26 pm
by sergejs
UserManager support EAP authentication?
No.

If in security profiles leave Mode: none (encryption) then RADIUS users can connect via wireless!!
But if I set Mode: dinamyc keys then users cannot connect..
I need RADIUS wireless users connection ecnrypted.
Use mode=dynamic-keys
Configure WPA/WPA2 PSK on client laptop.

Re: New Usermanager v5

Posted: Mon Jul 04, 2011 11:50 am
by Fumi
Ok... but what is the function of wireless parameter in usermanager v5? wireless key?
If I configure security profile with dynamic keys wpa psk then I put a unique key.. I don't understand what is the function of parameters (wireless encryption) in usermanager v5

Re: New Usermanager v5

Posted: Wed Jul 06, 2011 11:23 am
by Fumi
Anybody know about this?

Re: New Usermanager v5

Posted: Wed Jul 06, 2011 4:35 pm
by sergejs
For
Preshared key: Set this key for WPA/WPA2 (the same as WPA Pre-Shared Key/WPA2 Pre-Shared Key in Winbox).
Enc key: leave it blank for WPA/WPA2.
Enc algo: select AES-CCM or TKIP (AES is more recommended);
Which key do you mean? Please post screenshot!

Re: New Usermanager v5

Posted: Thu Jul 07, 2011 12:13 pm
by Fumi
This paramaeters

Re: New Usermanager v5

Posted: Thu Jul 07, 2011 2:23 pm
by sergejs
Did you see my post above?
Preshared key: Set this key for WPA/WPA2 (the same as WPA Pre-Shared Key/WPA2 Pre-Shared Key in Winbox).
Enc key: leave it blank for WPA/WPA2.
Enc algo: select AES-CCM or TKIP (AES is more recommended);

Re: New Usermanager v5

Posted: Thu Jul 07, 2011 7:15 pm
by Fumi
I don't understand the function of parameters "preshared key" and "Enc algo". I set this parameters to user and nothing happen.. The problem is I don't understand how to use this paramaters.
Sorry :(

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 7:56 am
by normis
I don't understand the function of parameters "preshared key" and "Enc algo". I set this parameters to user and nothing happen.. The problem is I don't understand how to use this paramaters.
Sorry :(
Sergejs clearly posted their function! Is it so hard to read?

Preshared key: This is the WPA key (wireless password)
Enc key: ignore this setting (leave empty)
Enc algo: select AES-CCM

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:08 am
by Fumi
Ok but how can I use this parameters???

I set a user with a MAC? or I set user with username and password?? This parameters work with hotspot?

Can I configure user demo with this parameters and the connection will be encrypted??
Or not work with hotspot? Only work with wireless? (no hotspot, no ppp, no login)

If work with wireless I need to configure user with MAC address??

I test all this functionalities and any work! I don't say this system not work! Only say that I don't undestand how it work and only I need a help..

Thanks for patience

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:10 am
by normis
your questions indicate that your understanding of networking and RouterOS in general is very low, I advise you to take some mikrotik training course, or watch online tutorials;

http://gregsowell.com/?page_id=951
http://www.tiktube.com/?category=8

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:13 am
by Fumi
And normis I don't need this comments..

I say: The problem is I don't understand how to use this paramaters.

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:14 am
by Fumi
It's so hard to put and example??

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:19 am
by Fumi
Can you post me a videotutorial o documentation how to use this settings? It's only I need!

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:21 am
by sergejs
Preshared key: Set this key for WPA/WPA2 (the same as WPA Pre-Shared Key/WPA2 Pre-Shared Key in Winbox).
Enc key: leave it blank for WPA/WPA2.
Enc algo: select AES-CCM or TKIP (AES is more recommended);

Look at the picture attached, it shows required configuration on client router (Winbox configuration).

Preshared key is number 2 on the picture;
Enc Algo is number 1 on the picture.

Additional configuration required between router and User Manager,
http://wiki.mikrotik.com/wiki/User_Mana ... ss_Example
file.jpg

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:28 am
by Fumi
Thanks sergejs,

this type of configuration only work on client mikrotik devices?
On AP configuration --> http://wiki.mikrotik.com/wiki/User_Mana ... ss_Example --> in security profile I leave Mode: none?

I test this configuration and thanks

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:31 am
by sergejs
this type of configuration only work on client mikrotik devices?
No, it works for other OS too.
For example on Windows, AES will be selected automatically and you will need to enter Network Key (the same as PreShared key at User Manager).

On AP configuration --> http://wiki.mikrotik.com/wiki/User_Mana ... ss_Example --> in security profile I leave Mode: none?
You have to use mode=dynamic-keys for WPA/WPA2.

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 11:41 am
by Fumi
Then If I put in AP dynamic Keys WPA2-PSK and aes.com I need to put WPA2 Pre-Shared Key.
In client I need to configure WPA2 Pre-Shared Key.

If I put PreShared Key in client and AP... The wireless settings in usermanager don't have utility no? Or the functionality is for Radius server to know the preshared key and they can authenticate MAC-addres??

Thanks

Re: New Usermanager v5

Posted: Fri Jul 08, 2011 1:43 pm
by sergejs
Fumi,

Setup,
User-Manager <> AP <> Client

AP configuration,
http://wiki.mikrotik.com/wiki/User_Mana ... ss_Example
Use the same security-profiles configuration + mode=dynamic-keys set additionally.