Shulou(Shulou.com)05/31 Report--

This article mainly explains "what is the method of RouterOS docking expansion". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "what is the method of RouterOS docking expansion".

Add access device configuration in ToughRADIUS

RouterOS device information must be configured in the ToughRADIUS system, otherwise all authentication messages will be discarded.

RouterOS radius configuration

Radius service configuration

Note that for the forced logoff feature to be effective, be sure to start the authorization function and open port 3799 to Radius.

Enable radius accounting on RouterOS

For the billing interval, if it is a monthly package, the billing interval should be set a little longer, which can effectively reduce the burden on the radius server. If you want to obtain more billing data, adjust the required billing interval appropriately.

Pppoe configuration on RouterOS

Configure address pool, pppoe authentication interface, encryption options according to the actual situation, usually do not consider mschapv1

RouterOS docking extension

Through the tariff strategy mechanism of ToughRADIUS, the function extension can be added to RouterOS.

Some Radius extension properties supported by RouterOS

Mikrotik-Recv-Limit receives a limit on the total number of bytes of messages received from the client, which can be used to charge based on traffic. Mikrotik-Xmit-Limit sent to the client to receive the total number of bytes limit, can be used to charge based on traffic. Mikrotik-Group user group, you can use this attribute to return whether the user belongs to the full group or another group when using radius authentication Mikrotik to manage users. Mikrotik-Wireless-Forward forwarding item, when radius returns the attribute value = 0 to Mikrotik The rate limit of frames from Mikrotik wireless clients that are not forwarded to infrastructureMikrotik-Rate-Limit customers. The format is rx-rate [/ tx-rate] [rx-burst-rate [/ tx-burst-rate] [rx-burst-threshold [/ tx-burst-threshold] [rx-burst-time [/ tx-burst-time] [priority] [rx-rate-min [/ tx-rate-min], where the content in [] indicates optional. "rx" indicates the upload rate of the customer and the download rate of the "tx" customer. Burst-rate burst rate, burst-threshold burst threshold, burst-time burst duration. Mikrotik-Realm account domain suffix. The original IP address of the Mikrotik-Host-IP HOTSPOT client Mikrotik-Mark-Id firewall magle chain name. For HOTSPOT only. Mikrotik-Advertise-URL notification page address (URL). It is generally used to advertise the gateway address of the client in the DHCP address pool in the HOTSPOTMikrotik-Advertise-Interval URL advertisement interval Mikrotik-Ascend-Client-Gateway HOTSPOT application. Mikrotik-Ascend-Data-Rate is similar to rate-limit, but the attribute is ignored by rate-limit, but the download rate limit of Mikrotik-Ascend-Xmit-Rate is ignored by rate-limit. Thank you for your reading. The above is the content of "what is the method of RouterOS docking expansion?" after the study of this article, I believe you have a deeper understanding of what the method of RouterOS docking expansion is, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.