Radius MAC authentication problem

stutteringp0et · Thu Apr 17, 2008 2:16 am

is it possible to send the mac address in lower case instead of upper case. Authenticating against Cisco ACS with a mixture of Cisco AP 1200 and mikrotik access points. Cisco sends password in lower case, need mikrotik to match

taglio · Fri Dec 11, 2009 6:03 pm

I know that this is an old POST, but a customer of mine have exactly this problem. Anyone have a solution?

Please reply,

Best Regards,

RG.

taglio · Mon Dec 14, 2009 11:59 am

No reply mk team?

Chupaka · Mon Dec 14, 2009 3:18 pm

a few hours is not enough for answer =) also, you'd better write to support at mikrotik dot com

taglio · Tue Dec 15, 2009 11:40 am

@Chupaka: i agree with you about that is better to send email to support at mikrotik dot com. But i also thing that using forum is better for community help.

So now i'll send email to please answer at this post

Chupaka · Tue Dec 15, 2009 12:14 pm

unfortunately, community still cannot modify ROS directly =)

jirristols · Fri Mar 26, 2010 12:38 pm

Hi,

I am using hotspot on MikroTik V3.30 and my external radius server (Emerald Management suite V.5 with RadiusNT) cannot create a username with ":" as a character.

I am trying to do MAC Authentication on a private office network where bandwidth needs to be measured websites blocked and authentication has to be transparent.

I have set up the MAC Authentication on Usermanager a lot with no problems but the problem is the format that mikrotik uses for MAC addresses XX:XX:XX:XX:XX:XX. Even if I set the => Hotspot > Server Profile > Hsprof1 > Radius > MAC Format to XX-XX-XX-XX-XX-XX this only shows up as the caller ID in my Radius online list but it doesn't look like that in the HotSpot hosts list. I believe this MAC Format feature is only for accounting not for Authentication. Is there a way that the MAC format used for Authentication in can be changed to "-" or "_" instead of ":"

In userman the MAC User must be set to xx:xx:... to be able to Auth all other formats are ignored as MAC's and thought of as strings for usernames. Even if I can use XXXXXXXXXXXX as MAC this would help.

Please Help!

Thanks for the link to the original forum(*thread), so I am basically stuck until ROS can be modified by the community?

Because this is a ROS issue completely i think this should be a feature request.
We should be able to define the format of MAC's as there is no standard accross platforms.

Someone from the Mikrotik Team Please answer

SurferTim · Fri Mar 26, 2010 1:59 pm

I think there is already a standard mac address format: XX:XX:XX:XX:XX:XX
I think there is also a format for ip addresses: xxx.xxx.xxx.xxx

Maybe you should contact the software company and inform them the software does not conform to recommended internet standards. That would be a good way for you to help with the standardization!

ADD: After a quick check of the RFCs, the XX-XX-XX-XX-XX-XX mac format should also be recognized. That would be a MikroTik concern if it does not use the hyphens (-) in the user name.

jirristols · Fri Mar 26, 2010 4:27 pm

Exaclty what I was thinking, hyphens would solve my problems.

If only MikroTik would conform

but when this would happen is another thing altogether.

I don't know if this is dumb but would it be possible to use some type of script for this?
Or have userman be a server to the hostpot but also a client to another radius?

SurferTim · Fri Mar 26, 2010 6:07 pm

Exaclty what I was thinking, hyphens would solve my problems.
If only MikroTik would conform

Maybe you should email support (at) mikrotik.com with your problem. Maybe they don't know it does that.

jirristols · Mon Mar 29, 2010 10:24 am

I will give that a try, thanks

Radius MAC authentication problem

Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Re: Radius MAC authentication problem

Who is online