PPP Auth Log
Overview
The PPP Authentication Log records every PPPoE login attempt processed by the RADIUS authentication server. This log is essential for troubleshooting PPPoE connectivity problems and for detecting unauthorised or suspicious access attempts.
What Is Recorded
Each entry in the log represents a single authentication request from a PPPoE client. The following information is captured:
| Column | Description |
|---|---|
| Timestamp | The date and time of the authentication attempt. |
| Username | The PPPoE username submitted by the client device. |
| IP Address | The IP address assigned to the client on a successful authentication, or the source IP on a failure. |
| NAS Identifier | The Network Access Server (NAS) that forwarded the authentication request — typically the MikroTik router serving the customer's zone. |
| Result | The outcome: Accept (credentials valid, session established) or Reject (authentication failed). |
Common Use Cases
Troubleshooting PPPoE Connectivity
When a customer reports they cannot connect, search the log by their username. Check whether recent authentication attempts are returning Accept or Reject. A consistent Reject result may indicate:
- An incorrect or expired password.
- The customer's account is suspended.
- A misconfigured PPPoE client on the customer's router.
Detecting Unauthorised Access
Repeated Reject entries from an unexpected IP address or an unusual NAS identifier can indicate that someone is attempting to use a customer's credentials from an unauthorised device. Use the date filter to look for bursts of failed attempts within a short time window.
Searching and Filtering
Use the search bar to search by username, IP address, or NAS identifier. Use the date range filter to focus on a specific incident window.
Exporting to CSV
Click Download CSV to export the filtered results for offline analysis or inclusion in a security report.
Adding Reviewer Notes
Click any log entry to annotate it with a Reviewer Note. This is useful for flagging suspicious patterns, recording the outcome of an investigation, or leaving context for a colleague.