Diskusi report: Trouble PPPoE yang menggunakan radius server pada General Networking | Mikrotik | Forum Mikrotik Indonesia : [admin@MT-PPPoE] > ppp aaa pr use-radius: yes accounting: yes interim-update: 0s ...

cumie · #1 (**permalink**) 26-05-2009, 12:54

[admin@MT-PPPoE] > ppp aaa pr
use-radius: yes
accounting: yes
interim-update: 0s
pppoe active dengan menggunakan radius server

[admin@MT-PPPoE] > ppp prof pr
Flags: * - default
0 * name="default" local-address=172.21.1.1 use-compression=default
use-vj-compression=default use-encryption=default only-one=yes
change-tcp-mss=no dns-server=172.17.19.1
bagian profile, only-one=yes default atau no tidak berpengaruh sama sekali, namun saat radius di non aktifkan dan dibuatkan account pppoe, user tidak bisa melakukan multiple login

[admin@MT-PPPoE] > ip pool pr
# NAME RANGES
0 bisnis 172.21.1.3-172.21.1.253
1 unlimited 172.25.0.3-172.25.63.253
2 office 172.22.1.3-172.22.1.253
pool di atas yang diberikan untuk user radius

[admin@MT-PPPoE] > ppp active pr
Flags: R - radius
# NAME SERVICE CALLER-ID ADDRESS UPTIME ENCODING
0 R herry pppoe 00:4F:62:1A:09:05 172.25.63.253 8h18m4s
1 R hrujgad3 pppoe 00:15:6D:AD:3D:13 172.25.63.251 4h38m17s
2 R rahman pppoe 00:23:4D:BB:67:14 172.25.63.239 3h19m34s
3 R rahman pppoe 00:22:43:3A:45:F5 172.25.63.238 2h57m51s
4 R meity pppoe 00:21:27:CC:7A:B3 172.25.63.236 2h30m
5 R hrbwg9gy pppoe 00:0C:42:39:41:56 172.21.1.253 29m3s
6 R havid pppoe 00:1F:B0:C8:B4:69 172.21.1.252 9m39s
7 R havid pppoe 00:21:27:CC:77:BA 172.21.1.251 25s
ada user yang aktif dengan nama yang sama pada mac yang berbeda

Berikut adalah Gambar Jika dilihat di Winbox :

gimana nih ya... mohon masukannya, thx
catatan, saya menggunakan server pc, routerOs x86 3.24, dom lvl 6. saya sudah coba pada versi 3.xx , 4 beta, hasilnya negative

d3v4 · #2 (**permalink**) 26-05-2009, 13:49

lihat punya ku :

Code:

[XXXXXX@DMZ-router] > /ppp profile print   
Flags: * - default 
 0 * name="default" use-compression=default use-vj-compression=default use-encryption=default only-one=yes 
     change-tcp-mss=yes 

 2 * name="default-encryption" local-address=192.168.88.13 remote-address=pptp use-compression=no 
     use-vj-compression=no use-encryption=yes only-one=yes change-tcp-mss=default

Code:

[XXXXXXXXX@DMZ-router] > /radius print detail 
Flags: X - disabled 
 0   service=ppp,login called-id="" domain="" address=127.0.0.1 secret="XXXXX" authentication-port=1812 
     accounting-port=1813 timeout=300ms accounting-backup=no realm=""

Code:

[XXXXXXX@DMZ-router] > /system package print 
Flags: X - disabled 
 #   NAME                                      VERSION                                     SCHEDULED              
 0   system                                    3.20                                                               
 1   hotspot                                   3.20                                                               
 2   ppp                                       3.20                                                               
 3   wireless                                  3.20                                                               
 4   security                                  3.20                                                               
 5 X ipv6                                      3.20                                                               
 6 X mpls                                      3.20                                                               
 7   routerboard                               3.20                                                               
 8   routeros-powerpc                          3.20                                                               
 9   dhcp                                      3.20                                                               
10   routing                                   3.20                                                               
11   advanced-tools                            3.20                                                               
12   user-manager                              3.20

works perfectly
kok beda ya ??

cumie · #3 (**permalink**) 26-05-2009, 14:11

user gak bisa multiple login ?
profile yang digunakan default encryption / default ?

d3v4 · #4 (**permalink**) 26-05-2009, 14:16

ngga bisa multi login

profil :
default

cumie · #5 (**permalink**) 26-05-2009, 14:57

Quote:

Originally Posted by d3v4

lihat punya ku :

Code:

[XXXXXX@DMZ-router] > /ppp profile print   
Flags: * - default 
 0 * name="default" use-compression=default use-vj-compression=default use-encryption=default only-one=yes 
     change-tcp-mss=yes 

 2 * name="default-encryption" local-address=192.168.88.13 remote-address=pptp use-compression=no 
     use-vj-compression=no use-encryption=yes only-one=yes change-tcp-mss=default

works perfectly
kok beda ya ??

seperti diatas ini, default-encrytion yang dipakai, local-address & remote adressnya diisiin. beda dengan punya saya, saya gak make remote address karena account pppoenya ada 3 paket dengan ip pool beda, jadi user yang dikasih pool name.

cuman kayaknya itu bukan penyebab bisanya multilogin, soalnya biar masukin remote-address=bisnis , tetap saja bisa multiple login.

gimana ya

dimppkke · #6 (**permalink**) 26-05-2009, 15:10

Kenapa ngga di Kunci aja Mac Address nya om.
Masukkan di Caller id nya

/ppp secret print detail

3 name="juragan" service=any caller-id="00:80:48:1C:90:26" password="axioo" profile=AP routes="limit-bytes-in=0 limit-bytes-out=0

kalo di aku sih bisa.
http://www.forummikrotik.com/images/...u/th_drop2.gif

cumie · #7 (**permalink**) 26-05-2009, 15:25

Quote:

Originally Posted by dimppkke

Kenapa ngga di Kunci aja Mac Address nya om.
Masukkan di Caller id nya

/ppp secret print detail

3 name="juragan" service=any caller-id="00:80:48:1C:90:26" password="axioo" profile=AP routes="limit-bytes-in=0 limit-bytes-out=0

kalo di aku sih bisa.
http://www.forummikrotik.com/images/...u/th_drop2.gif

sorry gan, kan pake radius, jadi di ppp secret, kosong sama sekali

klo pake di secret situ, gk masalah, gk bs multiple login koq.

d3v4 · #8 (**permalink**) 27-05-2009, 10:42

itu server address nya di buat supaya semua client punya gateway yang sama.

tapi ip address client nya beda2 pake pool di masukan di user man.

Code:

[XXXXX@DMZ-router] /tool user-manager> export 
# jan/12/1970 18:41:14 by RouterOS 3.20
# software id = 
#
/tool user-manager customer
add comment="" disabled=no login=admin parent=admin password=XXXXX paypal-accept-pending=no paypal-allowed=no \
    paypal-secure-response=no permissions=owner signup-allowed=no subscriber=admin time-zone=+00:00
/tool user-manager router
add comment="" disabled=no ip-address=127.0.0.1 log=auth-ok,auth-fail,acct-ok,acct-fail name=admin \
    shared-secret=XXXXXX subscriber=admin
/tool user-manager user
add comment="" disabled=no name=proxy18 password=XXXXX pool-name=pptp subscriber=admin

log nya

Code:

69 subscriber=admin user="proxy18" user-orig="proxy18" nas-port=168 nas-port-type=virtual 
   calling-station-id="192.168.18.2" user-ip=192.168.88.200 host-ip=127.0.0.1 status=accounting-success 
   time=mar/19/2009 15:18:37 

70 subscriber=admin user="proxy18" user-orig="proxy18" nas-port=169 nas-port-type=virtual 
   calling-station-id="192.168.18.2" host-ip=127.0.0.1 status=authorization-success time=mar/19/2009 15:20:38 

71 subscriber=admin user="proxy18" user-orig="proxy18" nas-port=169 nas-port-type=virtual 
   calling-station-id="192.168.18.2" user-ip=192.168.88.199 host-ip=127.0.0.1 status=accounting-success 
   time=mar/19/2009 15:20:38 

72 subscriber=admin user="proxy18" user-orig="proxy18" nas-port=169 nas-port-type=virtual 
   calling-station-id="192.168.18.2" user-ip=192.168.88.199 host-ip=127.0.0.1 status=accounting-success 
   time=mar/19/2009 15:21:39 

73 subscriber=admin user="proxy18" user-orig="proxy18" nas-port=170 nas-port-type=virtual 
   calling-station-id="192.168.18.2" host-ip=127.0.0.1 status=authorization-success time=mar/19/2009 15:21:53