On Oct 2, 2025, at 9:36 AM, Franta Hanzlík via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
If I manage to set it up, I would like to use dynamic VLAN based on the logged in client (or its group).
That should work. And doesn't need checkrad.pl
But it probably won't work for some sophisticated COA, IMO it just need to send to Mikrotik the 'Mikrotik-Wireless-VLANID' attribute with the VLAN number in response to the authentication request. I have found the attribute "manually" and I want to "manually" set it - I don't know if it can be called COA...
That's not CoA. It's just adding an attribute to the reply. There's lots of documentation and examples for adding attributes to the reply.
I'll try to find some example/instructions on the internet on how to set this up. And if someone could send me a link, I'd be very grateful, that would be great.
You don't need the Internet. The server comes with many examples. See sites-available/default. There are lots of example of adding attributes to the reply. If you want full online documentation, see https://www.freeradius.org/documentation/freeradius-server/3.2.8/
I'm not using it and quick grep over FreeRadius 3.2.8 (which I'm using) sources show that "mikrotik[_snmp]" is used only in checkrad - but checkrad man page says "checkrad is used by the radius server to check ...". Thus it seems as Freeradius uses the Mikrotik nas_type indirectly, when is calling the checkrad.
Yes, it only uses checkrad, but only when you're using Simultaneous-Use. If that doesn't mean anything to you, then you can ignore checkrad and nas_type Alan DeKok.