Community discussions

MikroTik App
 
User avatar
SoundGuyFYI
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 74
Joined: Wed Jun 05, 2013 12:43 am

Mikrotik-Group with Radius

Thu Aug 14, 2014 11:02 pm

After attempting to setup a radius server (Microsoft Server 2008) and I am wanting to use the profiles in mikrotik using the Mikrotik-Group attribute

This is going to be used for pptp connections.

The issue I'm having is that the radius server appears to be sending a "MT-Group" instead of a "Mikrotik-Group" when responding with the access-accept.

Is this how it should be?
 
SurferTim
Forum Guru
Forum Guru
Posts: 4636
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: Mikrotik-Group with Radius

Sat Aug 16, 2014 3:08 pm

The issue I'm having is that the radius server appears to be sending a "MT-Group" instead of a "Mikrotik-Group" when responding with the access-accept.

Is this how it should be?
No. It should send Mikrotik-Group. I use this with the hotspot logins.
http://wiki.mikrotik.com/wiki/Manual:RADIUS_Client
http://wiki.mikrotik.com/wiki/Manual:RA ... dictionary

Do you see this in the radius response in your router's log?
 
User avatar
SoundGuyFYI
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 74
Joined: Wed Jun 05, 2013 12:43 am

Re: Mikrotik-Group with Radius

Sun Aug 17, 2014 10:37 pm

Yes. When looking at the logs of the client mikrotik, the radius server is responding with the access-accept and then a classifier of;

MT-Group = "VPN"

I figured it was wrong.

Is there anyway to change that vendor-specific classifier in server 2008?
 
User avatar
SoundGuyFYI
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 74
Joined: Wed Jun 05, 2013 12:43 am

Re: Mikrotik-Group with Radius

Mon Sep 08, 2014 8:59 pm

I hate to pester everyone but is there anyway to change the attribute within the server? I am really confused as to why it sends it as MT-Group instead of mikrotik-group
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: Mikrotik-Group with Radius

Wed Sep 10, 2014 12:21 am

Did you define MikroTik dictionary (custom VSAs) on your RADIUS server?
http://technet.microsoft.com/en-us/libr ... 10%29.aspx
What are currently defined Access-Accept atributes?

Regards,
 
User avatar
SoundGuyFYI
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 74
Joined: Wed Jun 05, 2013 12:43 am

Re: Mikrotik-Group with Radius

Mon Dec 15, 2014 10:19 pm

I think the radius attribute is broken. I have now tried this same option with the mikrotik user manager and it is still sending MT-Group instead of Mikrotik-Group. Has anyone else had this issue? This is all with 6.23!

I don't know if there is a way to change it or what but it is currently my only hurdle to using radius.
 
User avatar
SoundGuyFYI
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 74
Joined: Wed Jun 05, 2013 12:43 am

Re: Mikrotik-Group with Radius

Mon Dec 15, 2014 10:37 pm

So it turns out all radius attributes are coming accross as MT-****** This must be a sumerization the is made for the logs. This is very annoying.

Aside from that, shouldn't the MT-Group attribute work for ppp and choosing a profile?

Who is online

Users browsing this forum: sybadi and 70 guests