i had the same problem when i wanted to authenticate the hotspot`s user with freeradius.<br>the solution was to make a static mapping on IP - HOTSPOT - IP BINDINGS<br><br>MAC address : THE MAC OF THE SERVER<br>ADDRESS : THE IP ADDRESS OF THE SERVER<br>
TO ADDRESS : THE SAME AS ABOVE<br>SERVER : ALL<br>TYPE : REGULAR or BYPASSED<br><br>and than it worked. it was related since the hotspot connections are passed to the mikrotik`s webproxy ( capture portal/page )<br>
<br><div class="gmail_quote">2009/3/19 Fajar A. Nugraha <span dir="ltr"><<a href="mailto:fajar@fajar.net">fajar@fajar.net</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">2009/3/19 Lazar Cherveniakov <<a href="mailto:lazkom@mail.bg">lazkom@mail.bg</a>>:<br>
</div><div class="im">> Everything looks fine in IP addresses, but the problem is still the same.<br>
<br>
</div>Looks like you got exactly the problem I described. See here :<br>
<br>
> Mikrotik debug log<br>
<div class="im">> 01:33:40 radius,debug sending 53:02 to <a href="http://192.168.200.2:1812" target="_blank">192.168.200.2:1812</a><br>
<br>
</div>Mikrotik thinks radius IP is 192.168.200.2<br>
<div class="im"><br>
> radius server ip`s<br>
> # ifconfig<br>
> eth0 Link encap:Ethernet HWaddr 00:19:66:4E:F4:E8<br>
> inet addr:192.168.200.3 Bcast:192.168.200.255 Mask:255.255.255.0<br>
</div><div class="im">> eth0:1 Link encap:Ethernet HWaddr 00:19:66:4E:F4:E8<br>
> inet addr:192.168.200.2 Bcast:192.168.200.255 Mask:255.255.255.0<br>
<br>
</div>... while that IP is secondary IP on the radius server. Do a tcpdump<br>
on radius and you should see that radius replies comes from<br>
192.168.200.3 (which mikrotik discards, because it's not the IP it<br>
sends the request to).<br>
<br>
There are several ways to fix this (one of them involves recompiling<br>
freeradius with --with-udpfromto, see<br>
<a href="http://wiki.freeradius.org/index.php/FAQ#Why_does_the_NAS_ignore_the_RADIUS_server.27s_reply.3F" target="_blank">http://wiki.freeradius.org/index.php/FAQ#Why_does_the_NAS_ignore_the_RADIUS_server.27s_reply.3F</a><br>
), but the easiest way is simply change mikrotik's config to use<br>
192.168.200.3 as radius IP address.<br>
<br>
Regards,<br>
<font color="#888888"><br>
Fajar<br>
</font><div><div></div><div class="h5"><br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>