Re: which nas_type for Mikrotik WiFi AP NAS ?

On Thu, 2 Oct 2025 10:56:17 -0400
Alan DeKok <[email protected]> wrote:

> On Oct 2, 2025, at 9:36 AM, Franta Hanzlík via Freeradius-Users <[email protected]> wrote:
> > If I manage to set it up, I would like to use dynamic VLAN based on 
> > the logged in client (or its group).  
> 
>   That should work.  And doesn't need checkrad.pl
> 
> > But it probably won't work for some sophisticated COA, IMO it just need 
> > to send to Mikrotik the 'Mikrotik-Wireless-VLANID' attribute with 
> > the VLAN number in response to the authentication request.
> > I have found the attribute "manually" and I want to "manually" set it
> > - I don't know if it can be called COA...  
> 
>   That's not CoA.  It's just adding an attribute to the reply.  There's lots of documentation and examples for adding attributes to the reply.
> 
> > I'll try to find some example/instructions on the internet on how to 
> > set this up. And if someone could send me a link, I'd be very grateful, 
> > that would be great.  
> 
>   You don't need the Internet.  The server comes with many examples.  See sites-available/default.  There are lots of example of adding attributes to the reply.
> 
>    If you want full online documentation, see https://www.freeradius.org/documentation/freeradius-server/3.2.8/
> 
> > I'm not using it and quick grep over FreeRadius 3.2.8 (which I'm using) 
> > sources show that "mikrotik[_snmp]" is used only in checkrad - but checkrad 
> > man page says 
> > "checkrad is used by the radius server to check ...".
> > Thus it seems as Freeradius uses the Mikrotik nas_type indirectly, when is
> > calling the checkrad.  
> 
>   Yes, it only uses checkrad, but only when you're using Simultaneous-Use.  If that doesn't mean anything to you, then you can ignore checkrad and nas_type
> 
>   Alan DeKok.


Alan, thanks for the valuable advice.
In my case, although I will be connected multiple times (e.g. with a 
tablet and a laptop at the same time), limiting the number of connections 
per user makes no sense - the WiFi network is small and the number of 
users is too. So I will not use the "Simultaneous-Use" parameter at all, 
let it be the number of simultaneous user connections unlimited.
In fact, until now I had no idea about the existence of the 
"Simultaneous-Use" parameter, it does not appear in the installed 
configuration files. ;)
(if I needed to limit the number of simultaneous connections, it would 
probably be more appropriate to limit the number of user connections 
per individual VLANs - which is probably a completely different level, 
with a different method of limitation)
-- 
František Hanzlík

Luční 502           Linux/Unix/LAN/Internet       Tel: +420-372-222302
33209 Štěnovice    e-mail:[email protected]      Fax: +420-372-222302
Czech Republic        http://hanzlici.cz/         GSM: +420-604-117319
Tento mail neobsahuje viry, byl odeslán z operačního systému Linux
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html