On Thu, 2 Oct 2025 10:56:17 -0400 Alan DeKok <alan.dekok@inkbridge.io> wrote:
On Oct 2, 2025, at 9:36 AM, Franta Hanzlík via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
If I manage to set it up, I would like to use dynamic VLAN based on the logged in client (or its group).
That should work. And doesn't need checkrad.pl
But it probably won't work for some sophisticated COA, IMO it just need to send to Mikrotik the 'Mikrotik-Wireless-VLANID' attribute with the VLAN number in response to the authentication request. I have found the attribute "manually" and I want to "manually" set it - I don't know if it can be called COA...
That's not CoA. It's just adding an attribute to the reply. There's lots of documentation and examples for adding attributes to the reply.
I'll try to find some example/instructions on the internet on how to set this up. And if someone could send me a link, I'd be very grateful, that would be great.
You don't need the Internet. The server comes with many examples. See sites-available/default. There are lots of example of adding attributes to the reply.
If you want full online documentation, see https://www.freeradius.org/documentation/freeradius-server/3.2.8/
I'm not using it and quick grep over FreeRadius 3.2.8 (which I'm using) sources show that "mikrotik[_snmp]" is used only in checkrad - but checkrad man page says "checkrad is used by the radius server to check ...". Thus it seems as Freeradius uses the Mikrotik nas_type indirectly, when is calling the checkrad.
Yes, it only uses checkrad, but only when you're using Simultaneous-Use. If that doesn't mean anything to you, then you can ignore checkrad and nas_type
Alan DeKok.
Alan, thanks for the valuable advice. In my case, although I will be connected multiple times (e.g. with a tablet and a laptop at the same time), limiting the number of connections per user makes no sense - the WiFi network is small and the number of users is too. So I will not use the "Simultaneous-Use" parameter at all, let it be the number of simultaneous user connections unlimited. In fact, until now I had no idea about the existence of the "Simultaneous-Use" parameter, it does not appear in the installed configuration files. ;) (if I needed to limit the number of simultaneous connections, it would probably be more appropriate to limit the number of user connections per individual VLANs - which is probably a completely different level, with a different method of limitation) -- František Hanzlík Luční 502 Linux/Unix/LAN/Internet Tel: +420-372-222302 33209 Štěnovice e-mail:franta@hanzlici.cz Fax: +420-372-222302 Czech Republic http://hanzlici.cz/ GSM: +420-604-117319 Tento mail neobsahuje viry, byl odeslán z operačního systému Linux