Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Jim Rice
Thanks Butch, that's exactly the confirmation I needed. ___ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Butch Evans
On 03/16/2011 03:23 PM, Jim Rice wrote: 1. Configure dynamic clients in radius to get a radius reply that includes the "ip-pool" attribute I could not find an "ip-pool" attribute in the radius dictionary. Is this something I will need to add as a custom attribute to radius, and if so, will the

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Jim Rice
Yes, I know, but some switches will with 802.1x enabled for port based authentication. I just wanted to know if DHCP was the only method available with the router. --- On Wed, 3/16/11, Shayne Lebrun wrote: > From: Shayne Lebrun > Subject: Re: [Mikrotik] Radius MAC Authentication wit

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Shayne Lebrun
m: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- > boun...@mail.butchevans.com] On Behalf Of Jim Rice > Sent: March-16-11 4:23 PM > To: Mikrotik discussions > Subject: Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs > > Thanks Butch, > > > &g

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Jim Rice
Thanks Butch, > 1. Configure dynamic clients in radius to get a radius > reply that includes the "ip-pool" attribute I could not find an "ip-pool" attribute in the radius dictionary. Is this something I will need to add as a custom attribute to radius, and if so, will the MikroTik act upon it?

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Butch Evans
On 03/14/2011 04:38 PM, Jim Rice wrote: Sorry, I should have been more specific ... We are doing MAC authentication from a MySQL database, not local. The DHCP request triggers the Radius Access-Request, and receives the Access-Accept reply. For Static IPs, there is nothing to trigger the Radiu

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Jim Rice
We have an Access Points physically connected to the router interfaces. ___ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik Route

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Butch Evans
On 03/14/2011 03:50 PM, Scott Reed wrote: If you are doing MAC authentication on the interface, it shouldn't matter whether the IP is Static or Dynamic. The authentication happens before you need an IP address. So, the configuration should be the same. This is, of course, assuming you are re

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Jon Auer
Nope, that's just the way it works. We statically assign addresses for static customers using DHCP all the time so we can use RADIUS MAC auth. Sent from my iPad On Mar 15, 2011, at 10:45 AM, Jim Rice wrote: > Those are the requirements. We have a mix of DHCP and Static customers. > The reason

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Josh Luthman
It isn't a limitation in any router, it is a limitation in IP. On Mar 15, 2011 11:46 AM, "Jim Rice" wrote: > Those are the requirements. We have a mix of DHCP and Static customers. > The reasons for it vary. (Commercial accounts, VPNs, VoIP, etc.) > But it seems unlikely that we will be reconfigur

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Jim Rice
Those are the requirements. We have a mix of DHCP and Static customers. The reasons for it vary. (Commercial accounts, VPNs, VoIP, etc.) But it seems unlikely that we will be reconfiguring hundreds of devices to get around what seems to be a limitation of the router. I am hoping that it is just

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Shayne Lebrun
; boun...@mail.butchevans.com] On Behalf Of Jim Rice > Sent: March-14-11 5:38 PM > To: Mikrotik discussions > Subject: Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs > > Sorry, I should have been more specific ... > > We are doing MAC authentication fr

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-14 Thread Scott Reed
Wireless will work, wired will not, as you want. Do the authentication on the Wireless Security Profile, Radius tab On 3/14/2011 5:38 PM, Jim Rice wrote: Sorry, I should have been more specific ... We are doing MAC authentication from a MySQL database, not local. The DHCP request triggers the

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-14 Thread Jim Rice
Sorry, I should have been more specific ... We are doing MAC authentication from a MySQL database, not local. The DHCP request triggers the Radius Access-Request, and receives the Access-Accept reply. For Static IPs, there is nothing to trigger the Radius request. So for those, I have to defau

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-14 Thread Scott Reed
If you are doing MAC authentication on the interface, it shouldn't matter whether the IP is Static or Dynamic. The authentication happens before you need an IP address. So, the configuration should be the same. On 3/14/2011 3:28 PM, Jim Rice wrote: Greetings, I am new to MikroTik. Setting u

[Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-14 Thread Jim Rice
Greetings, I am new to MikroTik. Setting up Radius with MAC authentication. Works fine with DHCP server. But how can I configure it to also authenticate devices with static IP addresses (on the same port)? Thanks, Jim ___ Mikrotik mailing list Mikr