I’m looking for information on RADIUS integration. We are moving over from VISP and our sites are setup with Mikrotik using Hotspot authentication and queuing. Do we need to create our own RADIUS server? The casts and any documentation are very vague or don’t touch on the RADIUS server aspect of provisioning. We’re very technical, so point us in the right direction.
Kind Regards,
This will get you on the right direction. This is what we did and hopefully tomorrow with support switching over from VISP for auth.
Jason
https://sonar.software/casts/provisioning/using-radius-pppoe-and-address-lists will probably be helpful too.
Update, I successfully setup RADIUS server and have Sonar talking to it successfully. I probably went through too much trouble in having a RADIUS server with a separate MySQL backend. However, it seems to be writing data to SQL server from Sonar. I would like to set it up where our existing queuing and hotspot authentication was working, however, I may try to test with PPPoE method. I just moved away from PPPoE due to performance issues.
We didn’t want to use PPPOE either which is why we requested to change to the user section of RADIUS to allow username only for MAC auth in the Mikrotik. It looks like that was added. Now to see if it’s pushing the username only to the RADIUS database.
Where are you seeing this option? I have upgraded to 1.1.3, but am not seeing. Thanks!
**Edit
Is this what you were referring to:
RADIUS Accounts New Feature
It is now possible to create RADIUS accounts without passwords.
Accounts | Network | RADIUS
This is where you enter the username and password for the customer’s RADIUS authorization. MAC-Auth doesn’t use the password so we needed the password required option turned off.
So are you basically using the MAC address of the device as the username and leaving the password field blank? Is there a way to use the MAC from the device that’s inventoried/assigned to that customer?
I’m sorry, I may not be clear. I’m just trying to make sure I’m doing best practices. Do you create a RADIUS account and set the username as the MAC address of the radio while leaving the password field blank?
Yes. That is what I’ve done.
Please note that I don’t have RADIUS fully active yet, because the blank password issue just got resolved.
Any update on getting this working? We are looking to use MAC based auth for devices so basically scan, assign, they can get online.