Generally speaking, PPPoE is used to hand out IP addresses to clients based on the user (and
workstation, if desired) authentication as opposed to workstation only authentication, when static IP
addresses or DHCP are used. It is adviced not to use static IP addresses or DHCP on the same
interfaces as PPPoE for obvious security reasons.
MikroTik RouterOS can act as a RADIUS client - you can use a RADIUS server to authenticate
PPPoE clients and use accounting for them.
A PPPoE connection is composed of a client and an access concentrator (server). The client may be
any computer that has the PPPoE client protocol support installed. The MikroTik RouterOS
supports both - client and access concentrator implementations of PPPoE. The PPPoE client and
server work over any Ethernet level interface on the router - wireless 802.11 (Aironet, Cisco,
WaveLan, Prism, Atheros), 10/100/1000 Mbit/s Ethernet, RadioLan and EoIP (Ethernet over IP
tunnel). No encryption, MPPE 40bit RSA and MPPE 128bit RSA encryption is supported.
Note that when RADIUS server is authenticating a user with CHAP, MS-CHAPv1 or
MS-CHAPv2, the RADIUS protocol does not use shared secret, it is used only in authentication
reply. So if you have a wrong shared secret, RADIUS server will accept the request. You can use
/radius monitor command to see bad-replies parameter. This value should increase whenever a
client tries to connect.
Supported connections
• MikroTik RouterOS PPPoE client to any PPPoE server (access concentrator)
• MikroTik RouterOS server (access concentrator) to multiple PPPoE clients (clients are
avaliable for almost all operating systems and most routers)
Quick Setup Guide
• To configure MikroTik RouterOS to be a PPPoE client
1. Just add a pppoe-client:
/interface pppoe-client add name=pppoe-user-mike user=mike password=123 \
\... interface=wlan1 service-name=internet disabled=no
• To configure MikroTik RouterOS to be an Access Concentrator (PPPoE Server)
1. Add an address pool for the clients from 10.1.1.62 to 10.1.1.72, called pppoe-pool:
/ip pool add name="pppoe-pool" ranges=10.1.1.62-10.1.1.72
2. Add PPP profile, called pppoe-profile where local-address will be the router's address
and clients will have an address from pppoe-pool:
/ppp profile add name="pppoe-profile" local-address=10.1.1.1 remote-address=pppoe-pool
3. Add a user with username mike and password 123:
/ppp secret add name=mike password=123 service=pppoe profile=pppoe-profile
4. Now add a pppoe server:
/interface pppoe-server server add service-name=internet interface=wlan1 \
\... default-profile=pppoe-profile
Page 335 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
To Next Page
Loading...
General