Community discussions

MikroTik App
 
sbeyribey
just joined
Topic Author
Posts: 3
Joined: Thu Dec 17, 2015 1:56 pm

different radius server per SSID

Thu Dec 17, 2015 2:01 pm

Hi,

I'm very new to RouterOS but have long term experience in networking.

I've 3 different SSIDs with WPA2-EAP and all three have to connect different radius servers.

How can I associate a SSID to specific radius server for peap authentication?

I've tried configuration with 1 ssid and 1 radius, it works as expected. But what if I have different SSIDs each has its own radius server for authentication? How to distinguish between them?

Best regards.
 
sbeyribey
just joined
Topic Author
Posts: 3
Joined: Thu Dec 17, 2015 1:56 pm

Re: different radius server per SSID

Thu Dec 17, 2015 2:14 pm

By the way the device is RB2011uias-2hnd-in and RouterOS 6.33.3 (Stable)

any help would be appreciated.
 
User avatar
leemans
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Thu Apr 07, 2005 12:55 am
Location: Belgium
Contact:

Re: different radius server per SSID

Thu Dec 17, 2015 4:00 pm

Dear,
From my point of view the best way to do this is the following:

Then only way to do this is to work with MetaRouter and to have Different Virtual RouterOS instances AP's per needed SSID.
In this way you can sent separate Radius Requests from different RouterOS systems. Radius settings in the RouterOS (AP in this case) are set per Router and are not related to other settings like different SSID's.or Vlans.
Then you have to setup UM (Userman) to accept these requests.
You can have different Customers in Userman for each AP.

Kind regards,
Patrick Leemans
 
sbeyribey
just joined
Topic Author
Posts: 3
Joined: Thu Dec 17, 2015 1:56 pm

Re: different radius server per SSID

Thu Dec 17, 2015 5:00 pm

Thanks for the clarification Patrick,

I think first I'll try my chance with openwrt on rb2011. If it doesnt work as expected, I'll move on metarouter path.

Best regards.
 
User avatar
leemans
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Thu Apr 07, 2005 12:55 am
Location: Belgium
Contact:

Re: different radius server per SSID

Fri Dec 18, 2015 12:20 am

Dear,
You better use small Router OS instances as AP which you can create for free in Metarouter.
They can be very small with all the RouterOS features you need for the AP.
Patrick.
 
flameproof
Frequent Visitor
Frequent Visitor
Posts: 80
Joined: Tue Sep 01, 2015 3:17 pm

Re: different radius server per SSID

Wed Dec 30, 2015 11:34 pm

Do you really need to use three completely different RADIUS servers? Because using NAS-Port or other attributes, you can handle each request in a different section of the server's config, no need for three separate servers.
 
User avatar
leemans
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Thu Apr 07, 2005 12:55 am
Location: Belgium
Contact:

Re: different radius server per SSID

Wed Jan 20, 2016 6:24 pm

No one is enough.
I'm talking about 3 different AP's and not about 3 different Radius servers.
Radius requests must come from different IP addresses to work properly.
Anyway it's how you're familiar with different setups.

Who is online

Users browsing this forum: No registered users and 30 guests