topic Re: Mikrotik as Radius server with ngfw in Spark Firewall (SMB)

Mikrotik as Radius server with ngfw

elicro — Sun, 17 Jan 2021 08:16:16 GMT

I have NGFW 1530 and I would like to connect it to a local Mikrotik GW.
The local users connect to the Mikrotik via pptp/l2tp/pppoe/hotspot and for now receive a static IP address.

This way I can manage easily the policies on the 1530.

I wan to make the setup a bit more dynamic using the radius server on the Mikrotik.

Any recommendations or experience with such a setup?

Re: Mikrotik as Radius server with ngfw

Shlomi_Feldman — Sun, 17 Jan 2021 09:45:11 GMT

Hi,

I don't have experience with the issue, however I found some instructions here https://systemzone.net/mikrotik-radius-server-userman-installation-and-configuration/#:~:text=RADIUS%20Server%20is%20a%20centralized,server%20throughout%20a%20large%20network.

Re: Mikrotik as Radius server with ngfw

elicro — Mon, 18 Jan 2021 09:37:23 GMT

Hey Shlomi,

I was thinking about a Radius server like a NAS not for Authentication.
I assume this model doesn't have such level function.
I do however manage to do it using clish and remote expert session.
Ie when the Radius receives a login/logout trigger it shots a ssh connection towards the device and runs a simple clish command that adds or removes the IP from a network group.