27 Nov
2007
27 Nov
'07
2:33 p.m.
inl2goal wrote:
FreeRadius was working perfectly with EAP/MD5 a few weeks ago here. But some providers came here to offer a NAC solution and messed with the network configuration.
Isn't NAC great?
Authentication stopped working, and by using a sniffer we realised that packets get to the freeRADIUS server, to which it responds with a challenge but apparently that challenge never gets back to the switch and it sends a "destination unreachable (port unreachable)" message.
Any ideas why that might happen?
A firewall on the switch is blocking RADIUS traffic. Alan DeKok.