On Dec 15, 2016, at 4:54 PM, Kevin Morrison <kmorrison@vectorusa.com> wrote:
I worked with my network engineer today and we were able to confirm that PEAP works to authenticate, but when changed over to EAP-FAST, it fails as before.
That's an issue then.
I have a debug log of PEAP working and then EAP-FAST failing, however, it is pretty dang large at over 4k lines in Notepad++. I am attaching the text file, with some information changed to protect internal names, MAC addresses, etc.
I am extremely grateful for whatever help you can render me.
EAP-FAST is more than a bit magical. We've tested it with a bunch of equipment. But if it fails in the MS-CHAP calculation.. then something bad is going wrong. FreeRADIUS has been doing MS-CHAP for almost 20 years. If that calculation fails, then either the other end is buggy, or the password really is incorrect. Alan DeKok.