....the UK national eduroam proxies will ensure that an EAP session isnt sprayed to different servers but if the next hop up is throwing them to different boxes then they cant do anything about that....would suggest that you ran a full tcpdump (capture packets in entirety) and view them with a RADIUS-capable reader to see what the packets are showing you - hopefully the contents will have some attributes to help find the source of the issues (either from Europe or from a UK site with poorly configured RADIUS server... i'd go for NPS box with basic loadbalance values that mean it sprays but it could equally be a FreeRADIUS < 2.2.6 box with load-balance enabled for EAP :( (thats if the source IS from the eduroam side....)
O.K. I just configured one of my ORPS boxes to be "client only" as far as the NRPS kit is concerned (eduroam4), and all my EAP error messages have gone away. Tomorrow I'll install the latest FR 3.0 code so I can see where the requests coming from... guess it'll verify that they're via the NRPS servers. ... and then go down the tcpdump route for detailed stuff A On 18 September 2017 at 20:08, Alan Buxey <alan.buxey@gmail.com> wrote:
hi, IIRC the UK national eduroam proxies will ensure that an EAP session isnt sprayed to different servers but if the next hop up is throwing them to different boxes then they cant do anything about that....would suggest that you ran a full tcpdump (capture packets in entirety) and view them with a RADIUS-capable reader to see what the packets are showing you - hopefully the contents will have some attributes to help find the source of the issues (either from Europe or from a UK site with poorly configured RADIUS server... i'd go for NPS box with basic loadbalance values that mean it sprays but it could equally be a FreeRADIUS < 2.2.6 box with load-balance enabled for EAP :( (thats if the source IS from the eduroam side....)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html