Freeradius 3.0.12 - Cisco EAP-Fast Supported?

[Kevin Morrison]

Hi Alan,

Thank you for your assistance with this!

I worked with my network engineer today and we were able to confirm that PEAP works to authenticate, but when changed over to EAP-FAST, it fails as before.

I have a debug log of PEAP working and then EAP-FAST failing, however, it is pretty dang large at over 4k lines in Notepad++.  I am attaching the text file, with some information changed to protect internal names, MAC addresses, etc.

I am extremely grateful for whatever help you can render me.

Warmest regards,



Kevin Morrison
Systems Administrator
T: +1 (704) 378-9235
C: +1 (980) 255-9668
kmorrison at vectorusa.com

VectorUSA
2520 Whitehall Park Drive, Suite 300
Charlotte,  NC 28273

Customer Service: +1 (877) 569-8800



-----Original Message-----
Date: Wed, 14 Dec 2016 16:21:15 -0500
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: Freeradius 3.0.12 - Cisco EAP-Fast Supported?
Message-ID: <04774D10-8DB6-409F-9589-8FC7DFAE5A55 at deployingradius.com>
Content-Type: text/plain; charset=us-ascii


> On Dec 14, 2016, at 3:54 PM, Kevin Morrison <kmorrison at vectorusa.com> wrote:
>
> Greetings folks,
>
> This is my first time posting to this mailing list, I am hoping you can answer a question/help me out.  Does the newest Freeradius version 3.0.12 support the CISCO version  of EAP-FAST?

  It's been tested against other EAP-FAST implementations.

>  I have been trying to get the newly created EAP FAST module to work with a Cisco WLC and Cisco device to authenticate via EAP-Fast, but I keep getting the error message about:
>
> (37) mschap: Client is using MS-CHAPv2
> (37) mschap: ERROR: MS-CHAP2-Response is incorrect

  The full debug may be more useful.

> I am running on CentOS 7, as well.
>
> If the answer is Yes to supporting Cisco EAP FAST, then I can definitely provide the full output of radiusd -X for assistance.

  If the same password works for PEAP (try it), it should also work for EAP-FAST.

  Alan DeKok.




------------------------------

Subject: Digest Footer

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

------------------------------

End of Freeradius-Users Digest, Vol 140, Issue 23
*************************************************
-------------- next part --------------
A non-text attachment was scrubbed...
Name: EAP-FAST_debug.log
Type: application/octet-stream
Size: 199083 bytes
Desc: EAP-FAST_debug.log
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20161215/3ed85228/attachment-0001.obj>