Freeradius 3.0.12 - Cisco EAP-Fast Supported?
Kevin Morrison
kmorrison at vectorusa.com
Thu Dec 15 22:54:17 CET 2016
Hi Alan,
Thank you for your assistance with this!
I worked with my network engineer today and we were able to confirm that PEAP works to authenticate, but when changed over to EAP-FAST, it fails as before.
I have a debug log of PEAP working and then EAP-FAST failing, however, it is pretty dang large at over 4k lines in Notepad++. I am attaching the text file, with some information changed to protect internal names, MAC addresses, etc.
I am extremely grateful for whatever help you can render me.
Warmest regards,
Kevin Morrison
Systems Administrator
T: +1 (704) 378-9235
C: +1 (980) 255-9668
kmorrison at vectorusa.com
VectorUSA
2520 Whitehall Park Drive, Suite 300
Charlotte, NC 28273
Customer Service: +1 (877) 569-8800
-----Original Message-----
Date: Wed, 14 Dec 2016 16:21:15 -0500
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: Freeradius 3.0.12 - Cisco EAP-Fast Supported?
Message-ID: <04774D10-8DB6-409F-9589-8FC7DFAE5A55 at deployingradius.com>
Content-Type: text/plain; charset=us-ascii
> On Dec 14, 2016, at 3:54 PM, Kevin Morrison <kmorrison at vectorusa.com> wrote:
>
> Greetings folks,
>
> This is my first time posting to this mailing list, I am hoping you can answer a question/help me out. Does the newest Freeradius version 3.0.12 support the CISCO version of EAP-FAST?
It's been tested against other EAP-FAST implementations.
> I have been trying to get the newly created EAP FAST module to work with a Cisco WLC and Cisco device to authenticate via EAP-Fast, but I keep getting the error message about:
>
> (37) mschap: Client is using MS-CHAPv2
> (37) mschap: ERROR: MS-CHAP2-Response is incorrect
The full debug may be more useful.
> I am running on CentOS 7, as well.
>
> If the answer is Yes to supporting Cisco EAP FAST, then I can definitely provide the full output of radiusd -X for assistance.
If the same password works for PEAP (try it), it should also work for EAP-FAST.
Alan DeKok.
------------------------------
Subject: Digest Footer
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------
End of Freeradius-Users Digest, Vol 140, Issue 23
*************************************************
-------------- next part --------------
A non-text attachment was scrubbed...
Name: EAP-FAST_debug.log
Type: application/octet-stream
Size: 199083 bytes
Desc: EAP-FAST_debug.log
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20161215/3ed85228/attachment-0001.obj>
More information about the Freeradius-Users
mailing list