Community discussions

MikroTik App
User avatar
Topic Author
Posts: 518
Joined: Tue Feb 10, 2009 4:08 pm
Location: UK

RADIUS and service types...

Thu Mar 06, 2014 11:19 am

I have a problem. We have a RB which acts as a concentrator/LNS and uses RADIUS.

We have some people connecting who should only use L2TP, some who may use SSTP or L2TP and some who may use PPTP

Using RADIUS, is there a way of limiting the service type permitted for a specific user? I've done a load of debugging and cannot see the requested service type being passed to RADIUS, so I am unable to do a radcheck against something like a Service-Type attribute. For information, this is what I receive on a vanilla L2TP connection request:
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 36292
NAS-Port-Type = Virtual
User-Name = "bsjtf4ju7txfka"
Calling-Station-Id = ""
Called-Station-Id = ""
MS-CHAP-Challenge = 0x8ebe3fffb7892da507bd5c2253
MS-CHAP2-Response = 0x0100d745c723c3267b82423c32e955bc56acc1d1918457d0
NAS-Identifier = "Sydney"
NAS-IP-Address =
Is the only way of doing this to have separate boxes each supporting only specific tunnel mechanisms?

Who is online

Users browsing this forum: Baidu [Spider], Bing [Bot], Google [Bot], JawadSikandaryHerat and 137 guests