Proxying question for Eduroam

Peter Kruppa Peter.Kruppa at phl.be
Wed Oct 20 09:18:30 CEST 2010


Hi,

>  what is your MTU set to for EAP packets - you may need to reduce this
to eg 1024
>  to stop UDP fragmentation of such traffic

Bingo, thanks Alan

Best regards, Peter

-----Oorspronkelijk bericht-----
Date: Thu, 14 Oct 2010 09:35:25 +0100
From: Alan Buxey <A.L.M.Buxey at lboro.ac.uk>
Subject: Re: Proxying question for Eduroam
To: FreeRadius users mailing list
	<freeradius-users at lists.freeradius.org>
Message-ID: <20101014083525.GA4395 at lboro.ac.uk>
Content-Type: text/plain; charset=utf-8

Hi,

>    I managed to reproduce that situation by using eapol_test, in that
case
>    requests to IAS aren?t logged and it never replies with a
>    Access-Challenge.

if you run wireshark on the IAS host - of eg RSPAN its port to sniff
traffic,
fo you see the RADIUS traffic going to the IAS box and its daemon? 

does nothing log at all in IAS?

what is your MTU set to for EAP packets - you may need to reduce this to
eg 1024
to stop UDP fragmentation of such traffic

..and, finally, is 'Framed-MTU' RADIUS attribute being proxied through
or is it being filtered?

alan







More information about the Freeradius-Users mailing list