Page 1 of 1
Radius DHCP Authenticaion
Posted: Tue Apr 20, 2010 6:15 pm
by dancms
I am running RADIUS DHCP Authentication and would like to redirect un-authenticated users to a web site.
Meaning -
I would like un-authenticated users to obtain an IP from a separate IP pool.
I do not want to do this using the Hotspot service. Eventhough thats what I described.
Is there a way to do this? ( I would like un-authenticated users to obtain an IP from a separate IP pool. )
Thanks!
Re: Radius DHCP Authenticaion
Posted: Tue Apr 20, 2010 8:09 pm
by dancms
It would be awesome if I could do this >
0 name="dhcp-1" interface=ether2 lease-time=1d address-pool=network-1 authoritative=no use-radius=yes
1 name="dhcp-2" interface=ether2 lease-time=1d address-pool=network-2 authoritative=after-10sec-delay use-radius=no
This would do what I need it to do, but it wont allow me to add another server to the same interface......
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 3:25 am
by Chupaka
so what's problem? you just assign any address from different address space and then redirect all requests to the webpage
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 7:12 am
by dancms
That's the problem, if a user is not in radius, they don't get an ip because ips are given to only those in radius.
How do I assign an ip to a user that's not in radius?
thanks,
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 10:43 am
by martini
create pool for untrusted users on MT and function on mysql that give untrusted users address from pool
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 6:15 pm
by dancms
Yeah, that would work, but I dont think my radius server supports it. Using RadiusNT by IEA software.
There is no way to do this with the mikrotik itsself?
Thanks,
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 10:36 pm
by Chupaka
if RADIUS says 'Reject', then ROS will reject the request. 'but maybe...' is impossible, AFAIK
Re: Radius DHCP Authenticaion
Posted: Fri Apr 23, 2010 10:42 pm
by dancms
I talked to IEA software, the software does support this function, and it will fix my issue.
Thanks