EAP packets from 2 different upstream servers

Alan Buxey alan.buxey at gmail.com
Mon Sep 18 21:08:43 CEST 2017


hi,  IIRC the UK national eduroam proxies will ensure that an EAP
session isnt sprayed to different servers
but if the next hop up is throwing them to different boxes then they
cant do anything about that....would suggest
that you ran a full tcpdump (capture packets in entirety) and view
them with a RADIUS-capable reader to see
what the packets are showing you - hopefully the contents will have
some attributes to help find the source
of the issues (either from Europe or from a UK site with poorly
configured RADIUS server... i'd go for NPS box with
basic loadbalance values that mean it sprays but it could equally be a
FreeRADIUS < 2.2.6 box with load-balance enabled
for EAP :(  (thats if the source IS from the eduroam side....)

alan


More information about the Freeradius-Users mailing list