help with proxy settings for EDUROAM

[Olivier Beytrison]

On 21.01.2013 16:39, Hocine M wrote:
> Hello,
> 
> Could anyone help me?
> 
> I'm trying setting up  freeradius 2.1.12 for eduroam.
> The local auth works well, but the proxy part not so.

First you should have a look at
https://confluence.terena.org/display/H2eduroam/How+to+deploy+eduroam+on-site+or+on+campus#Howtodeployeduroamon-siteoroncampus-FreeRADIUS
where you have a complete and extensive example on how to configure FR
for eduroam

> Sending Access-Request of id 243 to 193.51.224.109 port 1812
>     NAS-Port-Id = "AP42/1"
>     Calling-Station-Id = "74-2F-68-ED-12-1C"
>     Called-Station-Id = "00-0B-0E-94-89-40:eduroam"
>     Service-Type = Framed-User
>     EAP-Message = 0x0201001a016573757064656d40756e69762d726f75656e2e6672
>     User-Name = hidden
>     NAS-Port = 57286
>     NAS-Port-Type = Wireless-802.11
>     NAS-IP-Address = 192.168.58.5
>     NAS-Identifier = "Trapeze"
>     Message-Authenticator = 0x00000000000000000000000000000000
>     Proxy-State = 0x3436
> Mon Jan 21 15:29:56 2013 : Debug: Waking up in 4.0 seconds.
> Mon Jan 21 15:30:00 2013 : Info: Cleaning up request 228 ID 46 with
> timestamp +1976
> Mon Jan 21 15:30:00 2013 : Proxy: Marking home server 193.51.224.109
> port 1812 as zombie (it looks like it is dead).

Seems your FLTR Eduroam server is not replying to your request. Check
that you have the correct secret, that they configured the correct IP,
that your firewall is open (be careful, because the proxied packet is
usually sent from port 1814)

Olivier
-- 

 Olivier Beytrison
 Network & Security Engineer, HES-SO Fribourg
 Mobile: +41 (0)78 619 73 53
 Mail: olivier at heliosnet.org