I have a rb751 with a dhcp server in an ethernet interface with 'use RADIUS=yes', and a freeradius attached to another interface/subnet.
I added the radius in ros with dhcp service enabled only, and mikrotik as nas in freeradius, communication is ok.
I can see the Access-Request in freeradius log:
Code: Select all
(1094) User-Name = "20:3D:B2:A9:BD:25"
(1094) NAS-Port-Type = Ethernet
(1094) NAS-Port = 2198865362
(1094) Service-Type = Framed-User
(1094) Calling-Station-Id = "my user id"
(1094) Called-Station-Id = "dhcp3"
(1094) User-Password = ""
(1094) NAS-Identifier = "MikroTik"
(1094) NAS-IP-Address = 172.16.166.1
I think that "my user id" is more representative than mac, that changes by devices, while user remains the same.
Is this Access-Request customizable ? or Extendable ? Can I interchange fields example 'User-Name' with 'Calling-Station-Id' ?
There is not 'vendor id' that client device send it to dhcp server. Can I add it to Access-Request ?
There is not a clear documentations about this. Anything for dhcp authenticate other than MAC with much appreciated by me.
thanks in advance