problems with RADIUS and pppoe

dormador · Fri Oct 15, 2010 3:36 pm

Hi every one
I used radius and all points take authentication of a single box without any problems .
the problem, which happened to me there are as follows, I have a new network I have to merge three Internet lines where after merger i have an imbalance! The imbalance was due to the exit of the request of validated across the Line of Internet is not defined in main radius I mean, if if the request of validated went out of the pppoe1 be acceptance ..the request of the pppoe 2 or pppoe3 shows a letter there was no response from server I hope a solution to this problem.... so that it would be the exit of the request of the authentication from pppoe1 only

How can i do that !!

Ibersystems · Fri Oct 15, 2010 3:41 pm

Hi,

you can use mangle to mark all packets with destination your radius server IP, and mark all with a routeing mark to use only pppoe1

dormador · Fri Oct 15, 2010 4:29 pm

thanks Ibersystems for rapid assistance

this is a mangle where is the point which will help in solving the problem .

 /ip firewall mangle> p
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=input action=mark-connection new-connection-mark=wan1 passthrough=yes 
     connection-state=new in-interface=pppoe-out1 

 1 I chain=input action=mark-connection new-connection-mark=wan2 passthrough=yes 
     connection-state=new in-interface=pppoe-out2 

 2 X chain=input action=mark-connection new-connection-mark=wan3 passthrough=yes 
     connection-state=new in-interface=pppoe-out3 

 3   chain=output action=mark-routing new-routing-mark=wan_1 passthrough=no 
     connection-mark=wan1 

 4   chain=output action=mark-routing new-routing-mark=wan_2 passthrough=no 
     connection-mark=wan2 

 5 X chain=output action=mark-routing new-routing-mark=wan_3 passthrough=no 
     connection-mark=wan3 

 6   chain=prerouting action=mark-connection new-connection-mark=wan1 
     passthrough=yes dst-address-type=!local in-interface=lan 
     per-connection-classifier=both-addresses-and-ports:3/0 

 7   chain=prerouting action=mark-connection new-connection-mark=wan2 
     passthrough=yes dst-address-type=!local in-interface=lan 
     per-connection-classifier=both-addresses-and-ports:3/1 

 8 X chain=prerouting action=mark-connection new-connection-mark=wan3 
     passthrough=yes dst-address-type=!local in-interface=lan 
     per-connection-classifier=both-addresses-and-ports:3/2 

 9   chain=prerouting action=mark-routing new-routing-mark=wan_1 passthrough=yes 
     in-interface=lan connection-mark=wan1 

10   chain=prerouting action=mark-routing new-routing-mark=wan_2 passthrough=yes 
     in-interface=lan connection-mark=wan2 

11 X chain=prerouting action=mark-routing new-routing-mark=wan_3 passthrough=yes 
     in-interface=lan connection-mark=wan3

I have to disabled pppoe2&pppoe3 until the end of the imbalance

Ibersystems · Fri Oct 15, 2010 4:47 pm

hi,

I think first you have to mark connection, then mark packet and later mark routing of these packets.

dssmiktik · Sun Oct 17, 2010 11:39 pm

dormador,
When you choose a topic, please choose something more descriptive. I just don't like clicking into the topics having no idea what they're about, when people say they need immediate solution.

update: topic has been changed

dormador · Sat Oct 30, 2010 6:10 pm

Thanx everybody but until know the problem stell here !!!

problems with RADIUS and pppoe

problems with RADIUS and pppoe

Re: ooooops a big problem for me need an immediate solution

Re: ooooops a big problem for me need an immediate solution

Re: ooooops a big problem for me need an immediate solution

Re: ooooops a big problem for me need an immediate solution

Re: problems with RADIUS and pppoe

Who is online