User Manager/QA/How to make MAC authentication: Difference between revisions

From MikroTik Wiki
Jump to navigation Jump to search
mNo edit summary
No edit summary
 
(11 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Let's consider configuration scenario, when we need HotSpot users MAC authentication trough User Manager.
Let's consider configuration scenario, when we need HotSpot users MAC authentication trough User Manager.
HotSpot MAC authentication method allows to authenticate clients as soon as they appear in the hosts list, using client's MAC address as username.
We assume that User Manager already provides AAA for HotSpot router.
We assume that User Manager already provides AAA for HotSpot router.
HotSpot MAC authentication method allows to authenticate clients as soon as they appear in the hosts list, using client's MAC address as username.


Configuration required on HotSpot server router:
Configuration required on HotSpot server router:
Line 10: Line 10:
Note, first local HotSpot database is consulted, then User Manager database.
Note, first local HotSpot database is consulted, then User Manager database.


User Manager configuration:
User Manager configuration (for each mac-address):


   /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik
   /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik


We add user information belonging to the particular [[User Manager/Subscribers | subscriber]], it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.
We add user information belonging to the particular [[User Manager/Subscribers | subscriber]], it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.

Latest revision as of 08:17, 13 August 2007

Let's consider configuration scenario, when we need HotSpot users MAC authentication trough User Manager. HotSpot MAC authentication method allows to authenticate clients as soon as they appear in the hosts list, using client's MAC address as username. We assume that User Manager already provides AAA for HotSpot router.

Configuration required on HotSpot server router:

 /ip hotspot profile set hsprof1 login-by=mac use-radius=yes

Command enables MAC authentication for the particular profile and forces to use RADIUS for AAA. Note, first local HotSpot database is consulted, then User Manager database.

User Manager configuration (for each mac-address):

 /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik

We add user information belonging to the particular subscriber, it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.