Re: [WISPA] Authentication for WISP's
Joshua, There are several WISPA members who are Mikrotik Engineers. I would expect you could get some advice from one of them with very little cost. (Butch Evans, Dennis Burgess, Scott Reed come to mind.) I know from talking to Butch Evans less than a month ago that he has a system that allows you to setup DHCP at the Router, The DHCP relay Authenticates the Mac against the Radius and gets the assigned IP, creates the queue and reports back to the radius and accounting info. We still use Hotspot on ours and have no issue, but I am not the programmer and cant give you any info with how that is handled. I do know that they have told me that with hotspot it makes it easier to direct customers to a payment portal when suspended and it is the same setup if we put a hotspot in a public area to get short term customer logins at an event. Steve Barnes General Manager PCS-WIN/RC-WiFihttp://www.rcwifi.com/ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Wednesday, July 13, 2011 5:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org]mailto:[mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.commailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340tel:937-552-2340 Direct: 937-552-2343tel:937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way
Re: [WISPA] Authentication for WISP's
Hi Joshua, Have you thought about using 802.1x with multiple VLAN's instead of PPOE and setting up a restricted vlan for those who shouldn't be granted access for whatever reason.? --Eric Roth Technology Specialist Webjogger Internet Services (845) 757-4000 www.webjogger.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Steve Barnes Sent: Thursday, July 14, 2011 8:42 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Joshua, There are several WISPA members who are Mikrotik Engineers. I would expect you could get some advice from one of them with very little cost. (Butch Evans, Dennis Burgess, Scott Reed come to mind.) I know from talking to Butch Evans less than a month ago that he has a system that allows you to setup DHCP at the Router, The DHCP relay Authenticates the Mac against the Radius and gets the assigned IP, creates the queue and reports back to the radius and accounting info. We still use Hotspot on ours and have no issue, but I am not the programmer and cant give you any info with how that is handled. I do know that they have told me that with hotspot it makes it easier to direct customers to a payment portal when suspended and it is the same setup if we put a hotspot in a public area to get short term customer logins at an event. Steve Barnes General Manager PCS-WIN/RC-WiFi http://www.rcwifi.com/ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Wednesday, July 13, 2011 5:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows
Re: [WISPA] Authentication for WISP's
Maybe authentication is the wrong word to use. I want a different solution whether it is mac auth or something else that will use my radius server and use my billing server for accounting. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Scott Reed Sent: Wednesday, July 13, 2011 6:40 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Exactly my thought when I read the original post. Aren't you already doing authentication in RADIUS? What are you really trying to accomplish with authentication? On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Scott Reed Owner NewWays Networking, LLC Wireless Networking Network Design, Installation and Administration Mikrotik Advanced Certified www.nwwnet.nethttp://www.nwwnet.net (765) 855-1060 (765) 439-4253 (855) 231-6239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
Eric, No I hadn't thought of that but I am interested in hearing more about it. Can you give me some more insight on how that would work? Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Eric Roth Sent: Thursday, July 14, 2011 8:43 AM To: 'WISPA General List' Cc: supp...@webjogger.net Subject: Re: [WISPA] Authentication for WISP's Hi Joshua, Have you thought about using 802.1x with multiple VLAN's instead of PPOE and setting up a restricted vlan for those who shouldn't be granted access for whatever reason.? --Eric Roth Technology Specialist Webjogger Internet Services (845) 757-4000 www.webjogger.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Steve Barnes Sent: Thursday, July 14, 2011 8:42 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Joshua, There are several WISPA members who are Mikrotik Engineers. I would expect you could get some advice from one of them with very little cost. (Butch Evans, Dennis Burgess, Scott Reed come to mind.) I know from talking to Butch Evans less than a month ago that he has a system that allows you to setup DHCP at the Router, The DHCP relay Authenticates the Mac against the Radius and gets the assigned IP, creates the queue and reports back to the radius and accounting info. We still use Hotspot on ours and have no issue, but I am not the programmer and cant give you any info with how that is handled. I do know that they have told me that with hotspot it makes it easier to direct customers to a payment portal when suspended and it is the same setup if we put a hotspot in a public area to get short term customer logins at an event. Steve Barnes General Manager PCS-WIN/RC-WiFihttp://www.rcwifi.com/ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Wednesday, July 13, 2011 5:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org]mailto:[mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.commailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340tel:937-552-2340 Direct: 937-552-2343tel:937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues
Re: [WISPA] Authentication for WISP's
WEP is crackable in as little as 5 min. Average is around 15. On Wed, Jul 13, 2011 at 6:38 PM, Wilson Hernandez wil...@optimumwireless.com wrote: I'm doing straight MAC auth with MT and nothing else. Today I noticed an intruder who cloned a client's NS2 MAC address and it looks like it did a ipscan to get a customer's ip address and access the internet... That's the only tower I have without WEP key... I have all towers with mac auth and wep key. That happens for being lazy. On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
It works like an IDS. Say you have your system set up to allow all users in a specific group access to the network, and then one of those uses doesn't pay. You can remove that user from the allowed users group and then they will get sent to the default vlan that doesn't have any access to the internet. When they pay up, you add them back to the group and then they are allowed back on at the next EAP request from the access point. If you research IDS systems, you'll find a lot of useful information. --Eric Roth Technology Specialist Webjogger Internet Services (845) 757-4000 www.webjogger.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Thursday, July 14, 2011 9:58 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Eric, No I hadn't thought of that but I am interested in hearing more about it. Can you give me some more insight on how that would work? Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Eric Roth Sent: Thursday, July 14, 2011 8:43 AM To: 'WISPA General List' Cc: supp...@webjogger.net Subject: Re: [WISPA] Authentication for WISP's Hi Joshua, Have you thought about using 802.1x with multiple VLAN's instead of PPOE and setting up a restricted vlan for those who shouldn't be granted access for whatever reason.? --Eric Roth Technology Specialist Webjogger Internet Services (845) 757-4000 www.webjogger.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Steve Barnes Sent: Thursday, July 14, 2011 8:42 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Joshua, There are several WISPA members who are Mikrotik Engineers. I would expect you could get some advice from one of them with very little cost. (Butch Evans, Dennis Burgess, Scott Reed come to mind.) I know from talking to Butch Evans less than a month ago that he has a system that allows you to setup DHCP at the Router, The DHCP relay Authenticates the Mac against the Radius and gets the assigned IP, creates the queue and reports back to the radius and accounting info. We still use Hotspot on ours and have no issue, but I am not the programmer and cant give you any info with how that is handled. I do know that they have told me that with hotspot it makes it easier to direct customers to a payment portal when suspended and it is the same setup if we put a hotspot in a public area to get short term customer logins at an event. Steve Barnes General Manager PCS-WIN/RC-WiFi http://www.rcwifi.com/ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Wednesday, July 13, 2011 5:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules
Re: [WISPA] Authentication for WISP's
Have you looked into Azotel - Billing, Monitoring, UBB, etc. From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Thursday, July 14, 2011 8:44 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Maybe authentication is the wrong word to use. I want a different solution whether it is mac auth or something else that will use my radius server and use my billing server for accounting. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Scott Reed Sent: Wednesday, July 13, 2011 6:40 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Exactly my thought when I read the original post. Aren't you already doing authentication in RADIUS? What are you really trying to accomplish with authentication? On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Scott Reed Owner NewWays Networking, LLC Wireless Networking Network Design, Installation and Administration Mikrotik Advanced Certified www.nwwnet.net (765) 855-1060 (765) 439-4253 (855) 231-6239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
Carl, No I have not but I will google it.have you or anyone you know used it? Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Carl Shivers Sent: Thursday, July 14, 2011 1:28 PM To: 'WISPA General List' Subject: Re: [WISPA] Authentication for WISP's Have you looked into Azotel - Billing, Monitoring, UBB, etc. From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Thursday, July 14, 2011 8:44 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Maybe authentication is the wrong word to use. I want a different solution whether it is mac auth or something else that will use my radius server and use my billing server for accounting. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Scott Reed Sent: Wednesday, July 13, 2011 6:40 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Exactly my thought when I read the original post. Aren't you already doing authentication in RADIUS? What are you really trying to accomplish with authentication? On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Scott Reed Owner NewWays Networking, LLC Wireless Networking Network Design, Installation and Administration Mikrotik Advanced Certified www.nwwnet.nethttp://www.nwwnet.net (765) 855-1060 (765) 439-4253 (855) 231-6239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless
Re: [WISPA] Authentication for WISP's
Powercode and Azotel are similar. I tried to look into Azotel but that's failed a couple of times so I gave up. I started and continue to use Powercode. Neither of these two will use RADIUS like what you want. On Jul 14, 2011 2:55 PM, Josh Bowsher jbows...@midwaynet.net wrote: Carl, No I have not but I will google it.have you or anyone you know used it? Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Carl Shivers Sent: Thursday, July 14, 2011 1:28 PM To: 'WISPA General List' Subject: Re: [WISPA] Authentication for WISP's Have you looked into Azotel - Billing, Monitoring, UBB, etc. From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Bowsher Sent: Thursday, July 14, 2011 8:44 AM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Maybe authentication is the wrong word to use. I want a different solution whether it is mac auth or something else that will use my radius server and use my billing server for accounting. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Scott Reed Sent: Wednesday, July 13, 2011 6:40 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Exactly my thought when I read the original post. Aren't you already doing authentication in RADIUS? What are you really trying to accomplish with authentication? On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Scott Reed Owner NewWays Networking, LLC Wireless Networking Network Design, Installation and Administration Mikrotik Advanced Certified www.nwwnet.nethttp://www.nwwnet.net (765) 855-1060 (765) 439-4253 (855) 231-6239
Re: [WISPA] Authentication for WISP's
What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netwrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. ** ** Regards, ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netwrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's ** ** What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? ** ** Cameron ** ** Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ ** ** WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
Profiles for speed and specifiying IP pools or addresses. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:43 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.comwrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netwrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's ** ** What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? ** ** Cameron ** ** Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ ** ** WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com mailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678 tel:219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net mailto:jbows...@midwaynet.net *From:*wireless-boun...@wispa.org mailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678 tel:219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net mailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org mailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org mailto:wireless@wispa.org Subscribe/Unsubscribe: http
Re: [WISPA] Authentication for WISP's
I understand that and so I am reaching out for ideas on how to use it with mikrotik and without pppoe. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:46 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.commailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless
Re: [WISPA] Authentication for WISP's
With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.commailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.orgmailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo
Re: [WISPA] Authentication for WISP's
So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.netwrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP’s ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Sam Tetherow *Sent:* Wednesday, July 13, 2011 4:49 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's ** ** How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. ** ** Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org
Re: [WISPA] Authentication for WISP's
Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.commailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340tel:937-552-2340 Direct: 937-552-2343tel:937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.netmailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer
Re: [WISPA] Authentication for WISP's
You don't need hotspot or pppoe. I have customers using straight mac auth through radius (Freeradius) and the radius passes back whatever attributes are in either the radreply or radgroupreply tables. Cameron On Wed, Jul 13, 2011 at 4:57 PM, Josh Luthman j...@imaginenetworksllc.comwrote: So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.netwrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP’s ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Sam Tetherow *Sent:* Wednesday, July 13, 2011 4:49 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's ** ** How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. ** ** Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe
Re: [WISPA] Authentication for WISP's
What are your CPE? If you're using MikroTik you can also control rate limits in addition to device authentication. You can assign IPs via RADIUS, but you will have to start allocating IP blocks to AP's, or to a router at a tower site which feeds multiple AP's. IP assignment in MikroTik's RADIUS is separate from wireless auth rate limiting, so you can split the two between multiple devices. Feel free to contact me privately if you want to discuss off-list. -- Blake Covarrubias On Jul 13, 2011, at 14:58, Josh Bowsher jbows...@midwaynet.net wrote: Yes that’s exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP’s Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom
Re: [WISPA] Authentication for WISP's
Using EAP? On Jul 13, 2011 6:02 PM, Cameron Crum cc...@wispmon.com wrote: You don't need hotspot or pppoe. I have customers using straight mac auth through radius (Freeradius) and the radius passes back whatever attributes are in either the radreply or radgroupreply tables. Cameron On Wed, Jul 13, 2011 at 4:57 PM, Josh Luthman j...@imaginenetworksllc.comwrote: So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP’s ** ** Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net ** ** *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Sam Tetherow *Sent:* Wednesday, July 13, 2011 4:49 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's ** ** How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. ** ** Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Wednesday, July 13, 2011 4:37 PM *To:* WISPA General List *Subject:* Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org
Re: [WISPA] Authentication for WISP's
Exactly my thought when I read the original post. Aren't you already doing authentication in RADIUS? What are you really trying to accomplish with authentication? On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net mailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org mailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Scott Reed Owner NewWays Networking, LLC Wireless Networking Network Design, Installation and Administration Mikrotik Advanced Certified www.nwwnet.net (765) 855-1060 (765) 439-4253 (855) 231-6239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Authentication for WISP's
Use DHCP with radius auth and attributes to set your shaping queues, etc... Eric On Jul 13, 2011 6:00 PM, Josh Bowsher jbows...@midwaynet.net wrote: Yes that's exactly what I am after. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Wednesday, July 13, 2011 4:58 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's So you don't want to use hotspot or pppoe, but do want to use RADIUS? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:49 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: With profiles in the profiles.txt file. You can specify rate limits and IP pools I do it currently but I use the hotspot mac auth in the mikrotik AP's Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Sam Tetherow Sent: Wednesday, July 13, 2011 4:49 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's How do you get it to provide rate limits and ip addresses outside of PPPoE, last time I looked if you were doing MAC Auth out of radius you couldn't pass IP and queues, it has been a while though so this may have changed. On 7/13/11 4:46 PM, Cameron Crum wrote: Radius can do authentication and provisioning...keep poeple off the network who don't belong, set up queues, assign IP's, set up rules to redirect non-paying customers, etc. It can be a fantastic tool when used properly. It's not jsut for PPPOE. Cameron On Wed, Jul 13, 2011 at 4:42 PM, Josh Luthman j...@imaginenetworksllc.com mailto:j...@imaginenetworksllc.com wrote: What do you want Radius to do if you're not using PPPOE (assuming it's all wireless customers)? Josh Luthman Office: 937-552-2340tel:937-552-2340 Direct: 937-552-2343tel:937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 13, 2011 at 5:39 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I like radius I am just having some random issues with pppoe. I do not want to get away from radius. I use Platypus ISP billing and Vircom Radius. Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212tel:219-866-7946%20ext%3A%20212 Cell 219-863-0678tel:219-863-0678 www.midwaynet.nethttp://www.midwaynet.net/ jbows...@midwaynet.netmailto:jbows...@midwaynet.net From: wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.orgmailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Wednesday, July 13, 2011 4:37 PM To: WISPA General List Subject: Re: [WISPA] Authentication for WISP's What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP's and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP's but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP's and public IP's only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance
Re: [WISPA] Authentication for WISP's
I'm doing straight MAC auth with MT and nothing else. Today I noticed an intruder who cloned a client's NS2 MAC address and it looks like it did a ipscan to get a customer's ip address and access the internet... That's the only tower I have without WEP key... I have all towers with mac auth and wep key. That happens for being lazy. On 7/13/2011 5:37 PM, Cameron Crum wrote: What don't you like about radius? MT can do straight MAC auth through radius on the wireless interface. I'm not real sure how your radius server is going to provision anything if it isn't doing the authentication. What are you using as a billing/provisioning platform? Cameron Cameron On Wed, Jul 13, 2011 at 4:10 PM, Josh Bowsher jbows...@midwaynet.net mailto:jbows...@midwaynet.net wrote: I am interested in finding an alternative way to authenticate all of my wireless customers. Currently we use pppoe and I would like to get away from it. I use mikrotik AP’s and my network is OSPF routed. I tried using hotspot mac auth and it worked and still works in some of my AP’s but some of the more crowded locations fell on their face. I am looking for either a way to improve that method or I need a centralized box that would control authentication and let my billing server and radius server still provision speeds and determine that a customer has paid their bill. Currently I am open to suggestions of what authentication options are available with my mikrotik equipment and I am willing to pay consultation fees if necessary when I get an Idea that will work like I want it to. Also, I hand out both private IP’s and public IP’s only when the customer requests them, and currently if a customer requests a public static I create a custom profile in radius and they get the only IP in a custom pool setup for that profile. Thank you in advance for any and all advice and ideas. Regards, Joshua S. Bowsher Director of Internet Services Midwaynet.net Midway Electronics NWIIS a division of MidwayNet, LLC 1250 N McKinley Ave Rensselaer, IN 47978 Office 219-866-7946 ext: 212 Cell 219-863-0678 www.midwaynet.net http://www.midwaynet.net/ jbows...@midwaynet.net mailto:jbows...@midwaynet.net WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org mailto:wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
