Community discussions

 
wassimdaccache
just joined
Topic Author
Posts: 9
Joined: Sun Feb 13, 2011 9:31 pm

Winbox Profile TACAS or Raduis

Wed Oct 25, 2017 5:31 pm

Greetings:

I wonder if there is a way to get administrators authenticated by a raduis or tacas server to get access to winbox with a specific privilege. In a large Mikrotik deployment how can administrator changes be tracked and how can we restrict admin/users roles.

Thank you
 
User avatar
nickshore
Member
Member
Posts: 473
Joined: Thu Mar 03, 2005 4:14 pm
Location: Suffolk, UK.
Contact:

Re: Winbox Profile TACAS or Raduis

Wed Oct 25, 2017 5:45 pm

See https://wiki.mikrotik.com/wiki/Manual:R ... Remote_AAA for RADIUS

You can set a default user group for all logins, maybe read only, and then override that in the radius response.

eg set MikroTik-Group = full

Hope that helps
Nick
Nick Shore MTCNA MTCWE MTCRE MTCINE MTCTCE
LinITX.com - MultiThread Consultants
Get your MikroTik RBs and Training: http://linitx.com/brand/mikrotik
Official UK MikroTik Distributor
IRC chan: #routerboard on irc.z.je (IPv4 and IPv6)
 
wassimdaccache
just joined
Topic Author
Posts: 9
Joined: Sun Feb 13, 2011 9:31 pm

Re: Winbox Profile TACAS or Raduis

Fri Oct 27, 2017 7:38 am

Thank you nick will try it.

One more question, can the router os be a raduis server to different switches/routers?

Who is online

Users browsing this forum: No registered users and 79 guests