Community discussions

MikroTik App
 
TopHatProductions115
newbie
Topic Author
Posts: 32
Joined: Fri Dec 10, 2021 2:44 am

RADIUS/PEAP Authentication for Wireless Users (RouterOS 7)

Sun Oct 15, 2023 8:13 pm

I have a Chateau 5G ax (RouterOS 7) with two SSIDs - one for 2.4GHz and one for 5GHz. It currently is setup so that users connect with a pre-shared key. I want to instead have users authenticate with Active Directory credentials. I have a RADIUS proxy running in a VM, and want to have the Chateau use the RADIUS proxy for authenticating users. I've been trying to get that to work for around a month, but haven't had any luck. Some of the materials I used for reference: From the limited testing that I've done so far, the mode=dynamic-keys and eap-methods=passthrough don't appear to work anymore. They aren't available via GUI on my end. When I try to use them from the command line, I receive error messages. Many configuration options mentioned in previous tutorials and threads I've seen online aren't available with WiFi Wave2 security profile.

Has this been done with newer RouterOS 7 devices (using Wave2 wireless) before? Something tells me that I'm missing something obvious. I'm still reviewing the settings on the Chateau. I can also post my current configuration here if necessary.
 
User avatar
Brain2000
newbie
Posts: 36
Joined: Thu Sep 26, 2024 6:20 am

Re: RADIUS/PEAP Authentication for Wireless Users (RouterOS 7)

Thu Sep 26, 2024 6:21 am

I have noticed the same thing. I can't find any reference to the eap-methods=passthrough being removed, or how to work around it. No matter what I have been doing, I cannot seem to make this thing call the radius server.
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 3145
Joined: Mon Apr 08, 2019 1:16 am

Re: RADIUS/PEAP Authentication for Wireless Users (RouterOS 7)

Thu Sep 26, 2024 4:27 pm

 
Guntis
MikroTik Support
MikroTik Support
Posts: 221
Joined: Fri Jul 20, 2018 1:40 pm

Re: RADIUS/PEAP Authentication for Wireless Users (RouterOS 7)

Thu Sep 26, 2024 4:46 pm

There is no eap-methods=passthrough in Wifi, if eap authentication methods are used, AP will use passthrough.
Properties related to EAP, are only relevant to interfaces in station mode. APs delegate (passthrough) EAP authentication to the RADIUS server.
https://help.mikrotik.com/docs/display/ROS/WiFi
You can find example with EAP and Radius server here: https://help.mikrotik.com/docs/display/ ... Manager+v5