destination unreachable (port unreachable)

[Alan DeKok]

inl2goal wrote:
> FreeRadius was working perfectly with EAP/MD5 a few weeks ago here. But some
> providers came here to offer a NAC solution and messed with the network
> configuration.

  Isn't NAC great?

> Authentication stopped working, and by using a sniffer we realised that
> packets get to the freeRADIUS server, to which it responds with a challenge
> but apparently that challenge never gets back to the switch and it sends a
> "destination unreachable (port unreachable)" message.
> 
> Any ideas why that might happen? 

  A firewall on the switch is blocking RADIUS traffic.

  Alan DeKok.