Bandwith limit with freeradius

Technical Support for Routers
1

Hello,
I am using the AX6000 (Model GL-MT6000) with freeradius configured to use EAP-TLS for auth.
I want to limit the bandwith of users based on informations in their certificate.
This is my code in /etc/freeradius/3.0/sites-available/default

post-auth {
        if (TLS-Client-Cert-Common-Name == "class.eco") {
          update reply {
              WISPr-Bandwidth-Max-Down = 100
              WISPr-Bandwidth-Max-Up = 100
           }
        }
...
}

In the freeradius logs I have:

Sent Access-Accept Id 97 from 192.168.8.133:1812 to 192.168.8.1:60225 length 201
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   MS-MPPE-Recv-Key = 0xa88ce360d93a2749506632383bc631b91299a204c74c7422398ab3738a078d66
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   MS-MPPE-Send-Key = 0xc0b178c8d89e74486064c21526daa742657ed8d7f23290732eb7f598eebbe8b5
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   EAP-Message = 0x03080004
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   Message-Authenticator = 0x00000000000000000000000000000000
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   User-Name = "class.eco"
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   WISPr-Bandwidth-Max-Down = 100
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   WISPr-Bandwidth-Max-Up = 100
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7)   Framed-MTU += 1014
août 08 11:57:53 H-D-COMPUTER-D3 freeradius[69992]: (7) Finished request

But the router is not considering the limitation.
Is there any attribute to enforce the bandwith limit ?

Regards

2

I don't know FreeRADIUS but I would assume you need to disable network acceleration?

3

Yes I had disabled network acceleration

4

What limitation do you believe 100% will provide?
Your code states use 100% down and 100% up.

  • WISPr-Bandwidth-Min-Up - minimal datarate (CIR) provided for the client upload
  • WISPr-Bandwidth-Min-Down - minimal datarate (CIR) provided for the client download
  • WISPr-Bandwidth-Max-Up - maximal datarate (MIR) provided for the client upload
  • WISPr-Bandwidth-Max-Down - maximal datarate (MIR) provided for the client download

https://wiki.mikrotik.com/wiki/Manual:RADIUS_Client

I've seen a lot of posts state this is units, but there is no way this is the case, what is happening is the equipment is taking the current rate of the incoming and outgoing connection and deciding the % of bandwidth the client can have.

5

Interesting!
I didn't know that it is in %.

6

Is there any attribute to specify the rate limit in Kb please ?