EAP TTLS Certificate - Re-sending Access-Challenge

[Alan DeKok]

"Michael Poser" <m.poser at rz.uni-frankfurt.de> wrote:
> But when i want to authenticate with securew2 or odyssey Client the
> authentication stopps after the first Access-Request:
...
> rad_recv: Access-Request packet from host 10.87.80.1:3072, id=151,
> length=117
> Sending duplicate reply to client lancom-ap:3072 - ID: 151
> Re-sending Access-Challenge of id 151 to 10.87.80.1:3072
> --8<--
> 
> After this, the Client sends the same packet with the same id to the Server;
> it goes in circles.

  The client is sending the request to one IP address, and the server
is sending it's reply from a different IP address.  See the "listen"
directive in radiusd.conf.

> The configuration is the same as the working FR-Server with selfsigning
> certificates.

  Did you 'diff' the configurations to be sure?

  Alan DeKok.