EAP-FAST failure in v3.0.12
Hi, I'm new to RADIUS servers and I'm trying to enable EAP-FAST. Is there a documentation I can use to enable it? I'm using version 3.0.12. Anyway, this is what I've done. EAP file edits: tls-config tls-common { cipher_list = "ALL:!EXPORT:!eNULL:!SSLv2" disable_tlsv1_2 = yes } fast { tls = tls-common pac_lifetime = 604800 authority_identity = "1234" pac_opaque_key = "0123456789abcdef0123456789ABCDEF" virtual_server = inner-tunnel } I don't know where to look at in the debug output but shown below is part of it. (9) eap_fast: Got tunneled Access-Reject (9) eap_fast: Reject (9) eap: ERROR: Failed continuing EAP FAST (43) session. EAP sub-module failed (9) eap: Sending EAP Failure (code 4) ID 12 length 4 (9) eap: Failed in EAP select (9) [eap] = invalid (9) } # authenticate = invalid (9) Failed to authenticate the user (9) Using Post-Auth-Type Reject Are there other files I need to configure before running the RADIUS server? Please tell me what part of the debug output is needed to help with investigation. Kindly help me with the configuration. Best Regards, RT
On Oct 4, 2016, at 6:19 AM, STE SQE <mnlstesqe@gmail.com> wrote:
I'm new to RADIUS servers and I'm trying to enable EAP-FAST. Is there a documentation I can use to enable it? I'm using version 3.0.12.
The documentation in the EAP module is all you need.
Anyway, this is what I've done.
That should work.
I don't know where to look at in the debug output but shown below is part of it.
(9) eap_fast: Got tunneled Access-Reject (9) eap_fast: Reject (9) eap: ERROR: Failed continuing EAP FAST (43) session. EAP sub-module failed
Well... look at the *earlier* messages to see what's wrong. If you're running it in a terminal, the error message will even be colourised to show importance. Alan DeKok.
participants (2)
-
Alan DeKok -
STE SQE