• Framed-IP-Address - IP address given to client. If address belongs to 127.0.0.0/8 or
224.0.0.0/3 networks, IP pool is used from the default profile to allocate client IP address. If
Framed-IP-Address is specified, Framed-Pool is ignored
• Framed-IP-Netmask - client netmask. PPPs - if specified, a route will be created to the
network Framed-IP-Address belongs to via the Framed-IP-Address gateway; HotSpot - ignored
by HotSpot
• Framed-Pool - IP pool name (on the router) from which to get IP address for the client. If
Framed-IP-Address is specified, this attribute is ignored
NOTE: if Framed-IP-Address or Framed-Pool is specified it overrides remote-address in default
configuration
• Idle-Timeout - overrides idle-timeout in the default configuration
• Session-Timeout - overrides session-timeout in the default configuration
• Port-Limit - maximal mumber of simultaneous connections using the same username
(overrides te shared-users property of the HotSpot user profile)
• Class - cookie, will be included in Accounting-Request unchanged
• Framed-Route - routes to add on the server. Format is specified in RFC2865 (Ch. 5.22), can be
specified as many times as needed
• Filter-Id - firewall filter chain name. It is used to make a dynamic firewall rule. Firewall chain
name can have suffix .in or .out, that will install rule only for incoming or outgoing traffic.
Multiple Filter-id can be provided, but only last ones for incoming and outgoing is used. For
PPPs - filter rules in ppp chain that will jump to the specified chain, if a packet has come
to/from the client (that means that you should first create a ppp chain and make jump rules that
would put actual traffic to this chain). The same applies for HotSpot, but the rules will be
created in hotspot chain
• Mikrotik-Mark-Id - firewall mangle chain name (HotSpot only). The MikroTik RADIUS
client upon receiving this attribute creates a dynamic firewall mangle rule with action=jump
chain=hotspot and jump-target equal to the atribute value. Mangle chain name can have suffixes
.in or .out, that will install rule only for incoming or outgoing traffic. Multiple Mark-id
attributes can be provided, but only last ones for incoming and outgoing is used.
• Acct-Interim-Interval - interim-update for RADIUS client. PPP - if 0 uses the one specified in
RADIUS client; HotSpot - only respected if radius-interim-update=received in HotSpot server
profile
• MS-MPPE-Encryption-Policy - require-encryption property (PPPs only)
• MS-MPPE-Encryption-Types - use-encryption property, non-zero value means to use
encryption (PPPs only)
• Ascend-Data-Rate - tx/rx data rate limitation if multiple attributes are provided, first limits tx
data rate, second - rx data rate. If used together with Ascend-Xmit-Rate, specifies rx rate. 0 if
unlimited. Ignored if Rate-Limit attribute is present
• Ascend-Xmit-Rate - tx data rate limitation. It may be used to specify tx limit only instead of
sending two sequental Ascend-Data-Rate attributes (in that case Ascend-Data-Rate will specify
the receive rate). 0 if unlimited. Ignored if Rate-Limit attribute is present
• MS-CHAP2-Success - auth. response if MS-CHAPv2 was used (for PPPs only)
• MS-MPPE-Send-Key, MS-MPPE-Recv-Key - encryption keys for encrypted PPPs provided
by RADIUS server only is MS-CHAPv2 was used as authentication (for PPPs only)
Page 386 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
