Manual:RADIUS Client

From MikroTik Wiki
Revision as of 17:38, 27 October 2009 by Marisb (talk | contribs) (Created page with '{{Versions|2.9, v3, v4}} <div class=manual> <h2>Summary</h2> <p><b>Sub-menu:</b> <code>/radius</code></p> <p><b>Standards:</b> <code>ARP RFC 2865</code></p> <br /> <p> RADIUS, …')
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Applies to RouterOS: 2.9, v3, v4


Sub-menu: /radius

Standards: ARP RFC 2865

RADIUS, short for Remote Authentication Dial-In User Service, is a remote server that provides authentication and accounting facilities to various network apliances. RADIUS authentication and accounting gives the ISP or network administrator ability to manage PPP user access and accounting from one server throughout a large network. The MikroTik RouterOS has a RADIUS client which can authenticate for HotSpot, PPP, PPPoE, PPTP, L2TP and ISDN connections. The attributes received from RADIUS server override the ones set in the default profile, but if some parameters are not received they are taken from the respective default profile.

The RADIUS server database is consulted only if no matching user acces record is found in router's local database.

Traffic is accounted locally with MikroTik Traffic Flow and Cisco IP pairs and snapshot image can be gathered using Syslog utilities. If RADIUS accounting is enabled, accounting information is also sent to the RADIUS server default for that service.

Radius Client


Property Description
address (IP; Default: ) IP address to be mapped

Connection Terminating from RADIUS

Sub-menu: /radius incoming

This facility supports unsolicited messages sent from RADIUS server. Unsolicited messages extend RADIUS protocol commands, that allow to terminate a session which has already been connected from RADIUS server. For this purpose DM (Disconnect-Messages) are used. Disconnect messages cause a user session to be terminated immediately.

Note that RouterOS doesn't support POD (Packet of Disconnect) the other RADIUS access request packet that performs a similar function as Disconnect Messages.


Supported RADIUS Attributes