Mikrotik Lecture 8 (Kics UET Lahor) Navttc Training Class RADIUS server
RADIUS, short for Remote Authentication Dial-In User Service, is a remote server that provides authentication and accounting facilities to various network appliances. RADIUS authentication and accounting gives the ISP or network administrator the ability to manage PPP user access and accounting from one server throughout a large network. The MikroTik RouterOS has a RADIUS client that can authenticate for HotSpot, PPP, PPPoE, PPTP, L2TP, and ISDN connections. The attributes received from the RADIUS server override the ones set in the default profile, but if some parameters are not received they are taken from the respective default profile.
The RADIUS server database is consulted only if no matching user access record is found in the router's local database.
If RADIUS accounting is enabled, accounting information is also sent to the RADIUS server default for that service.
Note: When RADIUS server is authenticating user with CHAP, MS-CHAPv1, MS-CHAPv2, it is not using shared secret, secret is used only in authentication reply, and router is verifying it. So if you have wrong shared secret, RADIUS server will accept request, but router won't accept reply. You can see that with /radius monitor command, "bad-replies" number should increase whenever somebody tries to connect.
Award winning RADIUS and DOCSIS billing solution
Used in 150 countries worldwide
Web based Adminstration Control Panel and User Control Panel
FreeRadius 2 engine
Available in 17 languages
Multilingual support (UTF-8), customizable design and language
Supporting multiple resellers
Prepaid, postpaid and Hotspot MAC accounts
Professionally looking prepaid and refill cards, integrated card generator
Supporting 7 payment gateways
Mikrotik, Cisco, StarOS, ChilliSpot, pfSense and DD-WRT NAS support
Real-time accounting and billing
Instant access services (purchase PIN codes online)
Self registration and account identity verification (SMS)
Multi protocol support (PPPoE, Hotspot, PPtP, L2tP, DOCSIS)
Data rate control
Special accounting periods (night mode etc).
Special data rates (dynamic throttling, no need to reconnect)
Automatic disconnection of expired users
Wireless and DOCSIS signal level monitoring
Burst mode and priority option
Linux mailbox synchronization with disk quotas
Connection Tracking System (IP address, port, user name, time, protocol)
Financial accounting, customizable invoice form
Email and SMS alerts