Mac-auth-mode ( mac-as-username | mac-as-username-and-password Default: mac-as-username)Īllows to control User-Name and User-Password RADIUS attributes when using MAC authentication. Interval between scheduled RADIUS Interim-Update messages. Name of the interface or interface list the server will run on. In order for mac-auth authentication type to work, the server interface should receive at least one frame containing a client's device source MAC address. When both options are selected at the same time, the server will prefer dot1x authentication type and only after 3 retrans-timeout periods, the authentication type will fall back to mac-auth. Used authentication type on a server interface. Total time available for EAP authentication.Īuth-types ( dot1x | mac-auth Default: dot1x) Whether to send RADIUS accounting requests to authentication server. rejected - the server denied the authentication.interface is down - the parent interface is not running.error - an internal error has occurred.connecting - initial stage of the authentication process.authenticating - the server is reached and authentication process is ongoing.authenticated without server - access to the port is granted without communication with server.

authenticated - the client has successfully authenticated.

Status ( authenticated | authenticating | disabled) Name of the interface the client will run on. Supplicant identity used for EAP authentication. Ordered list of EAP methods used for authentication. Necessary when eap-tls method is used.Įap-methods ( eap-tls | eap-ttls | eap-peap | eap-mschapv2 Default: ) Name of a certificate listed in System/Certificates. If not set, value from identity parameter will be used for outer layer EAP authentication. Used only with eap-ttls and eap-peap methods. Identity for outer layer EAP authentication. Supported EAP methods for supplicant are EAP-TLS, EAP-TTLS, EAP-MSCHAPv2 and PEAPv0/EAP-MSCHAPv2. Currently both authenticator and supplicant sides are supported in RouterOS. 802.1X consists of a supplicant, an authenticator and an authentication server (RADIUS server).

Main purpose is to provide port-based network access control using EAP over LAN also known as EAPOL. 4.1.2 Dynamic switch rule configurationĭot1x is implementation of IEEE 802.1X standard in RouterOS.4.1 RouterOS Authenticator configuration.

Routeros raspberry