Freeradius 3.0.12 - Cisco EAP-Fast Supported?

[Kevin Morrison]

I know the debug log I sent was rather long, but would you be able to review it for any misconfigurations that might be breaking EAP-Fast?



Kevin Morrison
Systems Administrator
T: +1 (704) 378-9235
C: +1 (980) 255-9668
kmorrison at vectorusa.com

VectorUSA
2520 Whitehall Park Drive, Suite 300
Charlotte,  NC 28273

Customer Service: +1 (877) 569-8800



-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+kmorrison=vectorusa.com at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: Friday, December 16, 2016 8:55 AM
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Re: Freeradius 3.0.12 - Cisco EAP-Fast Supported?

On Dec 16, 2016, at 8:51 AM, Kevin Morrison <kmorrison at vectorusa.com> wrote:
> We've tested the password, as well, with LEAP authentication and it works.  Is there something else we can check? Or something else we can configure?

  There is no configuration which un-breaks MS-CHAP.  MS-CHAP shouldn't be broken.

> What puzzles me about this whole thing is that PEAP works with an eapol_test, but then also fails with EAP-FAST.  Using eapol_test should eliminate any issues with it being a CISCO EAP FAST implementation, right?

  If it fails with eapol_test, then something weird is going on.  It works for me when I use eapol_test, and the local Cisco switches.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html