Thursday, 8 January 2015

PPPOE With Mikrotik and Sequre ISP

PPPOE WITH MIKROTIK AND SEQURE ISP

Interduction

We'll explain how to use the sequreISOP PPPOE module that perfectly works wtih the pppoe server function of mikrotik.


Important

This module only works with mikrotik device you can distrbute the system load into serveral mikrotik devices and everything is centralized in server Radius that works in sequrISP.

You need one or more mikrotik devices working as pppoe server validating the users in sequreISP All users management like names password IP bandwidth control and port forwarding will done by sequre isp by its web interface mikrotik devices are configured one time as pppoe server and then sequre isp controls everything.

EXAMPLE NETWORK

In this case we will use as an example that our sequre isp server is connected to the internet with a lan ip 192.168.20.45 and we have our clients connected to a mikrotik device which will have the ip 192.168.20.2 clients will use ip form the rangs 192.168.20.0/24 because the mikrotik will be working as a Bridge but using pppoe. 


First step is to define the two interfaces that we'll be using in mikrotik

  • ether3 for clients.
  • ether4 connected to the sequre isp server LAN
we need to create a bridge1 which will include the clients interface. This bridge1 will have the IP 192.168.20.2/24 with gateway 192.168.20.45 sequre isp.

the client's IP  will be define on each contract created in sequre isp.



MIKROITK CONFIGURATION

Creating Bridge1


once you entered the mikrotik device using winbox or webfig fo the menu at the left and select the potion bridge on this tab click the add button {+} when creating select in ARP the potion proxy-arp

in bridge window click on ports we'll assign the ports that will conform the bridge1 press the button {+} and in section interface select ether4 sequre isp server and select bridge1 in the bridge section.


setting an IP to the Bridge1

in the menu select IP and then Addresses Now press the {+} button and we'll srart with the configuration you must select bridge1 on the interface section.



Radius Configuration

Go the left menu press Radius and then click on {+} There well set an ip for the Radius in Address and in secret set a password for the server.



PPP Profile

On this section we're going to set up the ppp profile that will be used for the pppoe server.

Go the ppp menu, click on profiles and select the default profile Double click on the name and define the bridge1 IP 192.168.20.2 on laval address select bridge1 in Bridge and enter the dns in the DNS section 192.168.20.45



in the same window click in the Secrets tab pres the button ppp Authentication and Accounting and select the option use radius.


PPPOE Server

inside the ppp window go to pppor servers press the{+} button and create the service difining in interface the eth3 



Gateway

in order to configure the Gateway go to IP select Router and press {+} Create a new route with Dst Address 0.0.0.0/0 and Gateway 192.168.20.45.


SequrISP Configuration


PPPOE MODULE

insde the swqure sip web interface go to the plugins porion and select pppoe click on create new and define the following parameters:

    1. Name      its a name that we will set to configure the radius client.
               2    IP Address    Assign the IP that you've used in bridge1 in mikroitk in our case 192.168.20.2

Netmask

define the same mask that you ve set in mikrotik

secret key

we must use the same password that we used in mikrotik when creating the radius in the secret section the password was freeradius123



and press Create mikrotik radius clinet.

Important

when you finish the creation of the readius server click in Enable Radius server.


Contracts

skype id
awais.razzaq6










0 comments:

Post a Comment