EAP packets from 2 different upstream servers

[Alex Sharaz]

>....the UK national eduroam proxies will ensure that an EAP
>session isnt sprayed to different servers
>but if the next hop up is throwing them to different boxes then they
>cant do anything about that....would suggest
>that you ran a full tcpdump (capture packets in entirety) and view
>them with a RADIUS-capable reader to see
>what the packets are showing you - hopefully the contents will have
>some attributes to help find the source
>of the issues (either from Europe or from a UK site with poorly
>configured RADIUS server... i'd go for NPS box with
>basic loadbalance values that mean it sprays but it could equally be a
>FreeRADIUS < 2.2.6 box with load-balance enabled
>for EAP :(  (thats if the source IS from the eduroam side....)

O.K. I just configured one of my ORPS boxes to be "client only"  as far as
the NRPS kit is concerned  (eduroam4), and all my EAP error messages have
gone away.

Tomorrow I'll install the latest FR 3.0 code so I can see where the
requests coming from... guess it'll verify  that they're via the NRPS
servers.

... and then go down the tcpdump route for detailed stuff

A


On 18 September 2017 at 20:08, Alan Buxey <alan.buxey at gmail.com> wrote:

> hi,  IIRC the UK national eduroam proxies will ensure that an EAP
> session isnt sprayed to different servers
> but if the next hop up is throwing them to different boxes then they
> cant do anything about that....would suggest
> that you ran a full tcpdump (capture packets in entirety) and view
> them with a RADIUS-capable reader to see
> what the packets are showing you - hopefully the contents will have
> some attributes to help find the source
> of the issues (either from Europe or from a UK site with poorly
> configured RADIUS server... i'd go for NPS box with
> basic loadbalance values that mean it sprays but it could equally be a
> FreeRADIUS < 2.2.6 box with load-balance enabled
> for EAP :(  (thats if the source IS from the eduroam side....)
>
> alan
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>