Community discussions

MikroTik App
 
brianchrist
newbie
Topic Author
Posts: 44
Joined: Mon Feb 27, 2006 4:50 pm

Filter-Id attribute in RADius Accept-Response cause ppp connection drops

Wed Sep 22, 2021 11:34 am

Hi all,

I set up the Mikrotik as a VPN server using L2TP and RADius authentication.
When I add the attribute "Filter-Id" to the Accept-Response, the established connection will be dropped.
The error message in the log is:

could not add filter: outgoing interface matching not possible in input and prerouting chains (6)

I tried to add firewall chain with the same name in the filter but had no success.
Is it a bug or is there any other thing I need to set up?

Thank you.
Last edited by brianchrist on Thu Sep 23, 2021 8:07 am, edited 2 times in total.
 
tdw
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat May 05, 2018 11:55 am

Re: Filter-Id attribute in RADius Accept-Response cause ppp connection drops

Wed Sep 22, 2021 2:03 pm

Expected behaviour, the input and prerouting chains are processed before a routing decision is made, so they cannot know what the output interface will be.
 
brianchrist
newbie
Topic Author
Posts: 44
Joined: Mon Feb 27, 2006 4:50 pm

Re: Filter-Id attribute in RADius Accept-Response cause ppp connection drops  [SOLVED]

Thu Sep 23, 2021 12:27 am

I found the problem.

I put the jump action to evaluate the PPP filters in the "input" chain which cause an error when the dynamic rules are created (include in & out interface in the rules)
You have to put it in the forward chain which accepts either in or out interface.

Who is online

Users browsing this forum: lurker888, tangent and 58 guests