I know the debug log I sent was rather long, but would you be able to review it for any misconfigurations that might be breaking EAP-Fast? Kevin Morrison Systems Administrator T: +1 (704) 378-9235 C: +1 (980) 255-9668 kmorrison@vectorusa.com VectorUSA 2520 Whitehall Park Drive, Suite 300 Charlotte, NC 28273 Customer Service: +1 (877) 569-8800 -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+kmorrison=vectorusa.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, December 16, 2016 8:55 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius 3.0.12 - Cisco EAP-Fast Supported? On Dec 16, 2016, at 8:51 AM, Kevin Morrison <kmorrison@vectorusa.com> wrote:
We've tested the password, as well, with LEAP authentication and it works. Is there something else we can check? Or something else we can configure?
There is no configuration which un-breaks MS-CHAP. MS-CHAP shouldn't be broken.
What puzzles me about this whole thing is that PEAP works with an eapol_test, but then also fails with EAP-FAST. Using eapol_test should eliminate any issues with it being a CISCO EAP FAST implementation, right?
If it fails with eapol_test, then something weird is going on. It works for me when I use eapol_test, and the local Cisco switches. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html