Freeradius 3.0.12 - Cisco EAP-Fast Supported?
Greetings folks, This is my first time posting to this mailing list, I am hoping you can answer a question/help me out. Does the newest Freeradius version 3.0.12 support the CISCO version of EAP-FAST? I have been trying to get the newly created EAP FAST module to work with a Cisco WLC and Cisco device to authenticate via EAP-Fast, but I keep getting the error message about: (37) mschap: Client is using MS-CHAPv2 (37) mschap: ERROR: MS-CHAP2-Response is incorrect I am running on CentOS 7, as well. If the answer is Yes to supporting Cisco EAP FAST, then I can definitely provide the full output of radiusd -X for assistance. Thank you! Kevin Morrison Systems Administrator T: +1 (704) 378-9235 C: +1 (980) 255-9668 kmorrison@vectorusa.com<mailto:kmorrison@vectorusa.com> VectorUSA 2520 Whitehall Park Drive, Suite 300 Charlotte, NC 28273 Customer Service: +1 (877) 569-8800 [cid:AVectorUSA_logo_com_on_white.bmp]<www.vectorusa.com>
On Dec 14, 2016, at 3:54 PM, Kevin Morrison <kmorrison@vectorusa.com> wrote:
Greetings folks,
This is my first time posting to this mailing list, I am hoping you can answer a question/help me out. Does the newest Freeradius version 3.0.12 support the CISCO version of EAP-FAST?
It's been tested against other EAP-FAST implementations.
I have been trying to get the newly created EAP FAST module to work with a Cisco WLC and Cisco device to authenticate via EAP-Fast, but I keep getting the error message about:
(37) mschap: Client is using MS-CHAPv2 (37) mschap: ERROR: MS-CHAP2-Response is incorrect
The full debug may be more useful.
I am running on CentOS 7, as well.
If the answer is Yes to supporting Cisco EAP FAST, then I can definitely provide the full output of radiusd -X for assistance.
If the same password works for PEAP (try it), it should also work for EAP-FAST. Alan DeKok.
On Wed, Dec 14, 2016 at 08:54:43PM +0000, Kevin Morrison wrote:
(37) mschap: Client is using MS-CHAPv2 (37) mschap: ERROR: MS-CHAP2-Response is incorrect
Default eap type in eap config is set to mschapv2 and the client is trying that first instead of EAP-FAST? Just a thought. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
Alan DeKok -
Kevin Morrison -
Matthew Newton