Difference between revisions of "User Manager/QA/How to make MAC authentication"

From MikroTik Wiki
Jump to navigation Jump to search
 
m
Line 14: Line 14:
   /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik
   /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik


We add user information belonging to the particular [[subscriber | subscribers]], it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.
We add user information belonging to the particular [[User Manager/Subscribers | subscriber]], it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.

Revision as of 07:01, 12 October 2006

Let's consider configuration scenario, when we need HotSpot users MAC authentication trough User Manager. We assume that User Manager already provides AAA for HotSpot router. HotSpot MAC authentication method allows to authenticate clients as soon as they appear in the hosts list, using client's MAC address as username.

Configuration required on HotSpot server router:

 /ip hotspot profile set hsprof1 login-by=mac use-radius=yes

Command enables MAC authentication for the particular profile and forces to use RADIUS for AAA. Note, first local HotSpot database is consulted, then User Manager database.

User Manager configuration:

 /too user-manager user add username=XX:XX:XX:XX:XX:XX subscriber=MikroTik

We add user information belonging to the particular subscriber, it allows HotSpot user with MAC-address XX:XX:XX:XX:XX:XX to authenticate in HotSpot without prompting login/password.