Mikrotik as NAS with PPPoE - checkval
Hi! I want to bind a login with Calling-Station-Id but i've got problems... *I've had added the Calling-Station-Id to mysql radcheck table. *I've had turned on the rlm_checkval by adding it into authorize section *I've had set the notfound-reject variable to yes I get the following errors in debug: rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55 rlm_checkval: Could not find attribute named Calling-Station-Id in check pairs ++[checkval] returns notfound What is the problem? Please help! Thanks for all!!! -- ------------------------ Maciej Drobniuch
I want to bind a login with Calling-Station-Id but i've got problems... *I've had added the Calling-Station-Id to mysql radcheck table. *I've had turned on the rlm_checkval by adding it into authorize section *I've had set the notfound-reject variable to yes
I get the following errors in debug: rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55 rlm_checkval: Could not find attribute named Calling-Station-Id in check pairs ++[checkval] returns notfound
What is the problem?
Why do you need checkval? User will be rejected if there is no Calling-Station-Id in the request anyway since you have that attribute in radcheck. Ivan Kalik Kalik Informatika ISP
Yes, you needn't. What you need is to create a normal user account and add these attributes in radreply: Framed-Protocol = PPP, Framed-IP-Address = 10.0.0.x, Framed-IP-Netmask = 255.255.255.0, Be carefull because you have to modify the ppp profiles in the Mikrotik client in the option /ppp profiles. You have to set the remote address with the PPP gateway. See the next explample where my PPP gateway is 10.200.0.10 /ppp profile set default change-tcp-mss=yes comment="" name="default" only-one=default \ remote-address=10.200.0.10 use-compression=default use-encryption=default \ use-vj-compression=default you set the pptp/l2tp client with this profile when you insert the username/password. You needn't to add Dafault route. If you need mor help, ask for and I will send you my manual in Spanish. Sanitago
To: freeradius-users@lists.freeradius.org> Subject: Re: Mikrotik as NAS with PPPoE - checkval> Date: Wed, 20 Aug 2008 11:26:05 +0100> From: tnt@kalik.net> > >I want to bind a login with Calling-Station-Id but i've got problems...> >*I've had added the Calling-Station-Id to mysql radcheck table.> >*I've had turned on the rlm_checkval by adding it into authorize section> >*I've had set the notfound-reject variable to yes> >> >I get the following errors in debug:> >rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55> >rlm_checkval: Could not find attribute named Calling-Station-Id in check> >pairs> >++[checkval] returns notfound> >> >What is the problem?> > Why do you need checkval? User will be rejected if there is no> Calling-Station-Id in the request anyway since you have that attribute> in radcheck.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nuevo Canal Messenger http://www.vivelive.com/ilovemessenger/
Thank you for the reply but you did miss the point of Calling-Station-ID Greetz! On Wed, 20 Aug 2008 12:05:58 +0000, Santiago Balaguer García <santiagoawa@hotmail.com> wrote:
Yes, you needn't. What you need is to create a normal user account and add these attributes in radreply: Framed-Protocol = PPP, Framed-IP-Address = 10.0.0.x, Framed-IP-Netmask = 255.255.255.0,
Be carefull because you have to modify the ppp profiles in the Mikrotik client in the option /ppp profiles. You have to set the remote address with the PPP gateway. See the next explample where my PPP gateway is 10.200.0.10
/ppp profile set default change-tcp-mss=yes comment="" name="default" only-one=default \ remote-address=10.200.0.10 use-compression=default use-encryption=default \ use-vj-compression=default
you set the pptp/l2tp client with this profile when you insert the username/password. You needn't to add Dafault route.
If you need mor help, ask for and I will send you my manual in Spanish. Sanitago
To: freeradius-users@lists.freeradius.org> Subject: Re: Mikrotik as NAS with PPPoE - checkval> Date: Wed, 20 Aug 2008 11:26:05 +0100> From: tnt@kalik.net> > >I want to bind a login with Calling-Station-Id but i've got problems...> >*I've had added the Calling-Station-Id to mysql radcheck table.> >*I've had turned on the rlm_checkval by adding it into authorize section> >*I've had set the notfound-reject variable to yes> >> >I get the following errors in debug:> >rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55> >rlm_checkval: Could not find attribute named Calling-Station-Id in check> >pairs> >++[checkval] returns notfound> >> What is the problem?> > Why do you need checkval? User will be rejected if there is no> Calling-Station-Id in the request anyway since you have that attribute> in radcheck.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nuevo Canal Messenger http://www.vivelive.com/ilovemessenger/ --
Maciej Drobniuch
id - username - attribute - op 1139 gojko Calling-Station-Id 00:50:70:AE:04:54 == Mikrotik wants uppercase MAC address and OP must be == It works for me and you need to insert this in radcheck table On Wed, Aug 20, 2008 at 2:34 PM, Maciej Drobniuch <maciej@drobniuch.pl>wrote:
Thank you for the reply but you did miss the point of Calling-Station-ID Greetz!
On Wed, 20 Aug 2008 12:05:58 +0000, Santiago Balaguer García <santiagoawa@hotmail.com> wrote:
Yes, you needn't. What you need is to create a normal user account and add these attributes in radreply: Framed-Protocol = PPP, Framed-IP-Address = 10.0.0.x, Framed-IP-Netmask = 255.255.255.0,
Be carefull because you have to modify the ppp profiles in the Mikrotik client in the option /ppp profiles. You have to set the remote address with the PPP gateway. See the next explample where my PPP gateway is 10.200.0.10
/ppp profile set default change-tcp-mss=yes comment="" name="default" only-one=default \ remote-address=10.200.0.10 use-compression=default use-encryption=default \ use-vj-compression=default
you set the pptp/l2tp client with this profile when you insert the username/password. You needn't to add Dafault route.
If you need mor help, ask for and I will send you my manual in Spanish. Sanitago
To: freeradius-users@lists.freeradius.org> Subject: Re: Mikrotik as NAS with PPPoE - checkval> Date: Wed, 20 Aug 2008 11:26:05 +0100> From: tnt@kalik.net> > >I want to bind a login with Calling-Station-Id but i've got problems...> >*I've had added the Calling-Station-Id to mysql radcheck table.> >*I've had turned on the rlm_checkval by adding it into authorize section> >*I've had set the notfound-reject variable to yes> >> >I get the following errors in debug:> >rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55> >rlm_checkval: Could not find attribute named Calling-Station-Id in check> >pairs> >++[checkval] returns notfound> >> What is the problem?> > Why do you need checkval? User will be rejected if there is no> Calling-Station-Id in the request anyway since you have that attribute> in radcheck.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nuevo Canal Messenger http://www.vivelive.com/ilovemessenger/ --
Maciej Drobniuch
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It works now properly! BIG THANKS! On Wed, 20 Aug 2008 14:40:12 +0200, "Marinko Tarlac" <mangia81@gmail.com> wrote:
id - username - attribute - op 1139 gojko Calling-Station-Id 00:50:70:AE:04:54 ==
Mikrotik wants uppercase MAC address and OP must be ==
It works for me and you need to insert this in radcheck table
On Wed, Aug 20, 2008 at 2:34 PM, Maciej Drobniuch <maciej@drobniuch.pl>wrote:
Thank you for the reply but you did miss the point of Calling-Station-ID Greetz!
On Wed, 20 Aug 2008 12:05:58 +0000, Santiago Balaguer García <santiagoawa@hotmail.com> wrote:
Yes, you needn't. What you need is to create a normal user account and add these attributes in radreply: Framed-Protocol = PPP, Framed-IP-Address = 10.0.0.x, Framed-IP-Netmask = 255.255.255.0,
Be carefull because you have to modify the ppp profiles in the
Mikrotik
client in the option /ppp profiles. You have to set the remote address with the PPP gateway. See the next explample where my PPP gateway is 10.200.0.10
/ppp profile set default change-tcp-mss=yes comment="" name="default" only-one=default \ remote-address=10.200.0.10 use-compression=default use-encryption=default \ use-vj-compression=default
you set the pptp/l2tp client with this profile when you insert the username/password. You needn't to add Dafault route.
If you need mor help, ask for and I will send you my manual in Spanish. Sanitago
To: freeradius-users@lists.freeradius.org> Subject: Re: Mikrotik as NAS with PPPoE - checkval> Date: Wed, 20 Aug 2008 11:26:05 +0100> From: tnt@kalik.net> > >I want to bind a login with Calling-Station-Id but i've got problems...> >*I've had added the Calling-Station-Id to mysql radcheck table.> >*I've had turned on the rlm_checkval by adding it into authorize section> >*I've had set the notfound-reject variable to yes> >> >I get the following errors in debug:> >rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55> >rlm_checkval: Could not find attribute named Calling-Station-Id in check> >pairs> >++[checkval] returns notfound>
What is the problem?> > Why do you need checkval? User will be rejected if there is no> Calling-Station-Id in the request anyway since you have that attribute> in radcheck.> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nuevo Canal Messenger http://www.vivelive.com/ilovemessenger/ --
Maciej Drobniuch
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Maciej Drobniuch
I want to check by the pppd 3 attributes that must match: -Login -Password -MAC Address So if someone on another machine who uses the login and the password will be rejected. The mikrotik NAS doc shows that there is a Calling-Station-ID http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php I want EVERYONE to be checked for the calling station id. Thank you for the reply. On Wed, 20 Aug 2008 11:26:05 +0100, "Ivan Kalik" <tnt@kalik.net> wrote:
I want to bind a login with Calling-Station-Id but i've got problems... *I've had added the Calling-Station-Id to mysql radcheck table. *I've had turned on the rlm_checkval by adding it into authorize section *I've had set the notfound-reject variable to yes
I get the following errors in debug: rlm_checkval: Item Name: Calling-Station-Id, Value: 00:11:22:33:44:55 rlm_checkval: Could not find attribute named Calling-Station-Id in check pairs ++[checkval] returns notfound
What is the problem?
Why do you need checkval? User will be rejected if there is no Calling-Station-Id in the request anyway since you have that attribute in radcheck.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --
Maciej Drobniuch
participants (4)
-
Ivan Kalik -
Maciej Drobniuch -
Marinko Tarlac -
Santiago Balaguer García