03.12.2011 02:52:45
Anderson
Posts: 13
|
Hi.
Preciso implementar WPA2-PSK e preciso usar a chave correspondente a Cleartext-Password no freeradius. Onde encontro essa chave?
Obrigado.
|
|
|
0
• permalink
|
03.12.2011 10:44:53
Admin
Administrator
Posts: 1833
|
You must use WPA-Enterprise.
|
|
|
0
• permalink
|
03.12.2011 12:24:02
Anderson
Posts: 13
|
This key Cleartext-Password corresponding a WPA-Enterprise on TekRadius?
|
|
|
0
• permalink
|
06.12.2011 21:52:37
Anderson
Posts: 13
|
Hi!
Is there a setting that uses the key "Cleartext-Password" in freeradius to validate the user's password in "check". The WPA key is returned by the key "Mikrotik-Wireless-PSK."
If I use the key "User-Password" to validate the password does not work. I wonder what the key that corresponds to "Cleartext-Password" in TekRadius?
I believe that I am not using the correct key and this is not working to validate the user's password.
Thank you!
|
|
|
0
• permalink
|
07.12.2011 10:22:25
Admin
Administrator
Posts: 1833
|
Hi,
Can you send TekRADIUS log entries (Accessible through File menu) after setting log level to debug at Settings / Service Parameters?
Best regards,
Yasin KAPLAN
|
|
|
0
• permalink
|
09.12.2011 04:24:36
Anderson
Posts: 13
|
Hi!
I am using Radius in Mikrotik on "Wireless" "Security Profile" to allow only registered MAC in the Radius. I choose this setting when authentication is by username and password (both I pass the MAC).
According to the manual, I should set the Radius to authenticate the keys as follows:
EA-50-A2-D6-C6-EC -> Cleartext-Password: = "EA-50-A2-D6-C6-EC" (Check)
EA-50-A2-D6-C6-EC -> Mikrotik-Wireless-PSK = "psk_key_individual_client"
But, unfortunately is not working, view the log.
RadAuth req. from : 192.168.1.130:33526 - 09/12/2011 00:24:50
Size : 154 / 154
Identifier : 7
Attributes :
NAS-Port-Id = WAN
Called-Station-Id = 00-02-6F-53-50-67:Rede7
Service-Type = 2
Calling-Station-Id = 50-EA-D6-A2-C6-EC
NAS-IP-Address = 192.168.1.130
Acct-Session-Id = 82400002
NAS-Identifier = MikroTik
User-Name = 50:EA 6:A2:C6:EC
09/12/2011 00:24:50 - PAP Authentication commencing for user '50:EA6:A2:C6:EC'
09/12/2011 00:24:50 - Check items control - Start (Group : Default).
09/12/2011 00:24:50 - Check items control - Stop (Group : Default).
09/12/2011 00:24:50 - Authentication failed for user '50:EA6:A2:C6:EC'
|
|
|
0
• permalink
|
09.12.2011 09:30:48
Admin
Administrator
Posts: 1833
|
Hi,
Have you added following attribute to TekRADIUS dictionary?
ATTRIBUTE Mikrotik-Wireless-PSK 16 string
You do not have to add Cleartext-Password or User-Passord to user profile. Just add Mikrotik-Wireless-PSK as a success-reply attribute for the user profile 50-EA-D6-A2-C6-EC.
Best regards,
Yasin KAPLAN
|
|
|
0
• permalink
|
09.12.2011 13:17:32
Anderson
Posts: 13
|
Hi!
Thanks for the reply, but I had already added this attribute and had not worked.
The impression is that because he does not authenticate the password. I've tried using the User-Password key, but it did not work.
Regards,
Anderson
|
|
|
0
• permalink
|
09.12.2011 15:06:13
Admin
Administrator
Posts: 1833
|
Please also remove check attributes under Default user group.
|
|
|
0
• permalink
|