How to set up Freeradius to work with CoA and MikroTik?

Question

Mikrotik

Good day.
There is freeradius, to which mikrotik with a hotspot is connected. Mikrotik dictionaries also have a Filter-ID parameter. And, according to the CoA protocol, it can be dynamically changed. And everything would be fine, but I just can’t get Freeradius to correctly transmit CoA requests. Perelovapitl all radius configs, but something is really bad with me. Can anyone tell me how to correctly set the radius and MikroTik to work with CoA?

Answer 1

Ivan Moiseev : if the radius sends packets to the gateway, then src-nat is enabled on the gateway. You either dst-nat the required port, or set up routing without masquerading between radius and mikrotik

Answer 2

radius to debug and look at the log, write an authorization module. the $RAD_REQUEST{'EAP-TLS'} value is responsible for CoA,