Community discussions

MikroTik App
 
User avatar
BlackRat
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Sat Jul 21, 2012 8:37 am

PPP + RADIUS + Win.ADDomain = Problem

Fri Jun 14, 2019 2:49 pm

Hi.
My config: 2011UiAS (6.44.3) + Windows 2003 Small Business Server (with Active Directory)...
When I try to use pptp connection I got:
14:39:43 radius,debug new request 1b:02 code=Access-Request service=ppp called-id=ROUTEREXTERNALIP
14:39:43 radius,debug no radius server found for 1b:02
14:39:43 radius,debug timeout for 1b:02

I have this config:
/radius add address=MYADSERVERIP called-id=ROUTEREXTERNALIP domain=MYADDOMAIN secret=SeCrET5242 service=ppp src-address=ROUTERINTERNALIP timeout=2s500ms
/ppp profile add change-tcp-mss=yes dns-server=MYDNSSERVERIP local-address=ROUTERINTERNALIP name=vpn remote-address=vpn-pool
/ppp aaa set accounting=no use-radius=yes

Not working now. :( Is this feature or bug?
 
Cvan
Member Candidate
Member Candidate
Posts: 129
Joined: Sat Jun 09, 2018 3:32 am

Re: PPP + RADIUS + Win.ADDomain = Problem

Mon Jun 17, 2019 3:18 am

Your radius server is not found... start there. Your firewall is probably blocking somewhere.

I have it setup with no issues on both ppp and wireless for radius accounting with win AD+domain.

If radius server found it would look something like this in radius, debug, packet:
new request 1b:00 code=Accounting-Request service=ppp called-id=external-ip domain=your-domain
sending 1b:00 to radius-server-ip:1813
sending Accounting-Request with id 186 to radius-server-ip:1813
...
 
User avatar
BlackRat
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Sat Jul 21, 2012 8:37 am

Re: PPP + RADIUS + Win.ADDomain = Problem

Mon Jun 17, 2019 1:45 pm

I used packet sniffer on MikroTik on internal bridge and did'n found any packets from MikroTik to RADIUS server... As you can see in the log there is no 3 sec (now I use 3 seconds timeout) between all debug messages !
 
User avatar
BlackRat
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Sat Jul 21, 2012 8:37 am

Re: PPP + RADIUS + Win.ADDomain = Problem

Mon Jun 17, 2019 3:21 pm

SOLVED:
I removed "domain" from RADIUS server config page on MikroTik. Now I can see packets from MikroTik to RADIUS server.
 
elaszlo
just joined
Posts: 1
Joined: Sun Feb 07, 2016 9:21 pm

Re: PPP + RADIUS + Win.ADDomain = Problem

Wed Mar 02, 2022 2:48 pm

Same! I removed the domain entry (xy.local) then Radius can auth and working fine. Windows 2016 server and CCR 1009 with 6.49.3

Who is online

Users browsing this forum: abbio90, pe1chl and 120 guests