User Manager/4/PPP Setup

From MikroTik Wiki
< User Manager‎ | 4
Revision as of 11:02, 22 October 2009 by Aashu (talk | contribs) (→‎User Manager Configurations)
Jump to: navigation, search

Introduction

Now Advanced Mikrotik User Manager can be used as a Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) for PPP Clients.

PPPoE Server Configurations

  • First, add the PPPoE server to the local interface: PPP -> PPPoE Servers

Pppoeserver.jpg 

 / interface pppoe-server server add interface=ether1 service-name=pppoe one-session-per-host=yes disabled=no
  • Specify the use of User Manager for PPPoE clients: PPP -> Secrets -> PPP Authenciation & Accounting

Pppoeradius.jpg 

 / ppp aaa set use-radius=yes


  • Set IP address of the PPPoE server, IP address might not be assigned to the interface of PPPoE server. Moreover static IP address or DHCP should not be used on the same interfaces as the PPPoE server for security reasons: PPP -> Profiles -> default

Ipserver.jpg 

 / ppp profile set default local-address=10.0.0.1


  • Add radius client to consult User Manager for PPP service: Radius

Radius12.jpg 

 / radius add service=ppp address=127.0.0.1 secret=123456


  • Configure radius client to accept Disconnect request from UM: Radius -> Incoming

Radiusdc.jpg 

 / radius incoming set accept=yes port=1700

'secret' is equal to User Manager router secret.

'127.0.0.1' is the User Manager router address.

  • Note, first the local PPP database is consulted, then the User Manager database.

User Manager Configurations

where "Router_IP_address" must be replaced with IP address of your router.

Use username: admin and keep password blank to login.


  • Add PPP server information to router list: USERMANAGER -> Routers

Umroute.jpg 

/ tool user-manager router add coa-port=1700 comment="" customer=admin disabled=no ip-address=127.0.0.1 log=auth-fail name=Mikrotik shared-secret=123456

'127.0.0.1' is the address of the PPPoE-server router. 'shared-secret' should match on both User Manager and PPPoE-server routers.

  • Add Profile Limitation: USERMANAGER -> Profiles -> Limitations

rate limit: use the following string: x1k/y1k x2k/y2k x3k/y3k x5/y5 P x6k/y6k

x1k/y1k: Rate (txrate/rxrate i.e 128k/1024k)

x2k/y2k: Burst Rate (i.e 256k/2048k)

x3k/y3k: Burst Threshold (i.e 160k/1280k)

x5/y5: Burst Time (in seconds i.e: 60/60)

Priority: P (use integer from 1-8)

Minimum rate: x6k/y6k (i.e 32k/256k)

means:

Rate:24k/128k

Burst Rate: 32k/256k

Burst Threshold: 24k/196k

Burst Time: 30/30

Priority: 8

Minimum rate: 16k/64k

Profiless.jpg

  • Add PPPoE client information:

Userreg.jpg 

/ tool user-manager user customer=admin name=demo password=demo ip-address=10.0.0.2 shared-users=1
Retrieved from "https://wiki.mikrotik.com/index.php?title=User_Manager/4/PPP_Setup&oldid=14059"