Hi every one
in my company we are trying to use Mikrotik router hotspot and active directory and freeradius in order to allow access to internet.
the authentication is complete and active directory users can login via hotspot login page.
now our change is to restrict the each users bandwidth and internet volume monthly.
i wonder is it possible to do it with Mikrotik router and active directory and freeradius ? and if it's possible how can we do it.
assumed you set the freeradius to talk directly to your AD.
Generaly you need to read
https://wiki.mikrotik.com/wiki/Manual:R ... Attributes , and find the way to map AD user attribute to Radius Attribute.
But for 'internet volume monthly', I think it'll hard if you use AD only.
It's about accounting side of radius protocol, and I could not fine how to use AD as FreeRadius Accounting.
If I were you
I will set freeRadius to use rlm_rest, build a web application that serve :
1. Mikrotik remote centralized login page
2. Freeradius Authentication, Authorization, Accounting
3. Make that web app to use your AD as source of truth.
-bino-