Hi All Need some advice please. Using Mikrotik as a NAS. Wireless clients connect to Mikrotik and i've got RADIUS MAC authentication setup on the Mikrotik. So all the clients MAC addresses are sent to the FreeRadius box in format 00:00:00:00:00:00 (which is the username) and blank password. So in the freeradius mysql db, i've got the following: In the radcheck table, i've got the mac as the username and blank password. In usergroup, i link the mac username to a group called Wireless. In Radgroupcheck i've got an entry for the Wireless group and telling it Auth-Type := Local. In Radgroupreply i only pass a service-type attribute for the wireless group with framed-user as value. Authentication seems to happen okay. In the radpostauth, i get an entry for the username, chap password authentication and access-accept message. The wireless client connect and get a DCHP ip from a pool in the Mikrotik NAS. Question: Is it possible to see which mac addresses/usernames got access-reject messages? I did take my mac out of the list and couldn't connect, but didn't get any messages in the radpostauth table. Also, i'm not getting any accounting in the accounting table. Do you only get accounting from making a PPP connection? Or is it possible to do RADIUS MAC authentication and get accounting detail from the session? Any help would be appreciated. Eldridge NOTICE: Please note that this eMail, and the contents thereof, is subject to the standard NMMU eMail disclaimer which may be found at: <http://www.nmmu.ac.za/disclaimer/email.htm>>
"Van Der Westhuizen, Eldridge \(Mr\) \(Summerstrand Campus North\)" <Eldridge.VanDerWesthuizen@nmmu.ac.za> wrote:
Question: Is it possible to see which mac addresses/usernames got access-reject messages?
Yes. It should be in radius.log.
I did take my mac out of the list and couldn't connect, but didn't get any messages in the radpostauth table.
That's a table for reading, not for writing.
Also, i'm not getting any accounting in the accounting table.
Ask the NAS why it's not sending accounting packets. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Van Der Westhuizen, Eldridge (Mr) (Summerstrand Campus North)