MikroTik

I'm having trouble with PoD.

root@nabuco:~# echo "User-Name := eduardo" | radclient -x 192.168.2.100 disconnect secret
Sending Disconnect-Request of id 23 to 192.168.2.100 port 1700
User-Name := "eduardo"
rad_recv: Disconnect-ACK packet from host 192.168.2.100 port 1700, id=23, length=34
rad_verify: Received Disconnect-ACK packet from client 192.168.2.100 port 1700 with invalid signature (err=2)! (Shared secret is incorrect.)
Sending Disconnect-Request of id 23 to 192.168.2.100 port 1700
User-Name := "eduardo"
rad_recv: Disconnect-NAK packet from host 192.168.2.100 port 1700, id=23, length=40
rad_verify: Received Disconnect-NAK packet from client 192.168.2.100 port 1700 with invalid signature (err=2)! (Shared secret is incorrect.)

When I run the radclient command, Mikrotik drops the connection and returns an ACK. But somewhere in the process, something goes wrong and the radclient try to send again the PoD, but the connection is already dropped and it goes into a loop.

I don't know what can be this. The secret is correct. I tried to change the localhost secret to, now they are the same (localhost and mikrotik).

??

The command disconnected the client successfully, but after that it started to get loop errors. But it 'worked'.

In other topics I have read that it worked well. Only CoA does not work with PPPoE, but with Hotspots works nice.

Thanks for the answer.

Is there any documentation somewhere on how the disconnect message is used? I haven't been able to dig anything up.

RouterOS doesn't support POD (Packet of Disconnect) the other RADIUS access request packet that performs a similar function as Disconnect Message.

Is there any chance to support this option. It is very important and I believe it will be useful

Until that day, I need to hack freeRadius with
Notice

-r 1

which means retry only once and give up.

rad_verify: Received Disconnect-ACK packet from client 192.168.2.100 port 1700 with invalid signature (err=2)! (Shared secret is incorrect.)

I'll sort that bit out before even going any further with this...

And just FYI - I suggest you read a few RFC documents. You need to send the NAS more information than just the User-Name. Please see the post at http://forum.mikrotik.com/viewtopic.php ... disconnect where it was discussed and imlpemented successfully, when MT introduced the radius listener into MT.

From experience, you can definately disconnect PPPoE connections from within Radius using a Disconnect Message as Normis said, not a POD.

is the problem solved? if yes write how please
i have same problem

No it is not solved...

Use my trick shown above ...

Another option is to use Mtik API...