Opened 7 years ago

Closed 6 years ago

Last modified 5 weeks ago

#367 closed request (fixed)

no IP on eduraom and ietf-a.1x

Reported by: Ronald.vanderPol@… Owned by: chelliot@…
Priority: tbd Milestone: ietf-080
Component: incoming Keywords:
Cc: My Current Location:
My MAC Address: My OS:

Description (last modified by msackett@…)

Karen reports this as functional. Closing ticket.

I get associated on eduroam and ietf-1.1x, but I do not get an
IP address (v4 nor v6). I am 00:23:6c:8d:1e:5a and I am in
congress III (IEPG).

	rvdp

None

Attachments (1)

None (195 bytes) - added by Ronald.vanderPol@… 7 years ago.
Added by email2trac

Download all attachments as: .zip

Change history (18)

Changed 7 years ago by Ronald.vanderPol@…

Attachment: None added

Added by email2trac

comment:1 Changed 7 years ago by llynch@…

Owner: changed from llynch@… to msackett@…
Status: newassigned

Morgan -

I think Chris did some EduRoam? testing yesterday - may still be waiting on response from the EduRoam? contact. If this is elated to the v6 dhcp issue, do we want to add a catagory for dhcp issues?

  • Lucy

comment:2 Changed 7 years ago by chelliot@…

Eduroam had a power outage, but all is good now. Karen has tested and verified eduroam is working.

Can you test again and let us know if you get an IP address, but v4 and v6?

Thanks!
Chris.

comment:3 Changed 7 years ago by msackett@…

Description: modified (diff)
Resolution: fixed
Status: assignedclosed

comment:4 Changed 7 years ago by chelliot@…

Attaching email:

ietf-1.1x is working now (PEAP MSCHAPv2).

eduraom is not working, 802.1X is in authenticating state. I am
using rvdp@… as login.

rvdp

comment:5 Changed 7 years ago by chelliot@…

I'll continue to look into this. Can you give us a bit more details--your OS and version, as well as the MAC address of your wireless card would help.

Morgan--can you have some of the NOC folks test as they have a chance? I pasted the test eduroam credentials in our noc room yesterday--and can paste them again if needed.

I'll check the logs, etc. to see what I can find.

You can assign this ticket to me if you want.

Chris.

comment:6 Changed 7 years ago by chelliot@…

Attaching email:

It is MacOSX Snow Leopard with mac 00:23:6c:8d:1e:5a.

My eduroam account is rvdp@….

My .1x config is:

WPA2 Enterprise

These are enabled:
TLS
PEAP
TTLS (MSCHAPv2 as inner auth)
EAP-FAST

The SSID ietf-a.1x is working fine with the same settings and ietf/ietf
as login.

rvdp

comment:7 Changed 7 years ago by chelliot@…

Ronald,

I'm not seeing the RADIUS server dead messages that I was seeing earlier associated with your authentication attempts. Can you contact sara.nl and verify if they are seeing the authentication requests being properly proxied to their RADIUS server? And can you have them verify that your login is still active?

I've enabled more logging on our side, so we'll capture these messages centrally. I'm having other folks test, and they have so far reported success authenticating on eduroam.

Thanks!
Chris.
chelliot@…

comment:8 Changed 7 years ago by chelliot@…

Resolution: fixed
Status: closedreopened

comment:9 Changed 7 years ago by chelliot@…

Owner: changed from msackett@… to chelliot@…
Status: reopenedassigned

comment:10 in reply to:  6 Changed 7 years ago by msackett@…

Ronald,

Please disable TLS and try again. We've experienced issues with that method on OS X.

Morgan

Replying to chelliot@…:

Attaching email:

It is MacOSX Snow Leopard with mac 00:23:6c:8d:1e:5a.

My eduroam account is rvdp@….

My .1x config is:

WPA2 Enterprise

These are enabled:
TLS
PEAP
TTLS (MSCHAPv2 as inner auth)
EAP-FAST

The SSID ietf-a.1x is working fine with the same settings and ietf/ietf
as login.

rvdp

comment:11 Changed 7 years ago by llynch@…

in email Ronald reports:

I disabled TLS, but it still does not work.

This is what Michal Krsek of Cesnet is saying:


Date: Sun, 27 Mar 2011 12:42:18 +0200
From: Michal Krsek <michal@…>
To: Ronald van der Pol <rvdp@…>
Subject: Re: eduroam

Eduroam does not work. Problem with integrating local network into
global eduroam infrastructure.

Michal


rvdp

Date: Sun, 27 Mar 2011 13:56:32 +0200
From: Ronald van der Pol <Ronald.vanderPol@…>

comment:12 Changed 7 years ago by chelliot@…

This was an old comment from Michal. Eduroam does work, and we've verified that with the admins. We now have the ability to see real-time stats from eduroam radius authentications, so please try again and ping us asap if it doesn't work.

comment:13 Changed 7 years ago by chelliot@…

Adding email:

Yes, it is working now.

However, the first time it took about 15 seconds before I got a
certificate from radius.surfnet.nl (country entry for sara.nl).
And then it took about 2 minutes before I got .1x authenticated
by sara.nl.

I disconnected and tried again. It authenticated immediately.
Did you do some intervention the first time?

rvdp

comment:14 Changed 6 years ago by chelliot@…

Eduroam is working in Quebec City. We expect to have continuing authentication timeouts with Eduroam because of the number of Radius proxy hops involved in some authentications. We are working to improve this situation by configuring Radiator and a TCP-based Radius connection to Eduroam.

Ticket closed.

comment:15 Changed 6 years ago by chelliot@…

Eduroam is working in Quebec City. We expect to have continuing authentication timeouts with Eduroam because of the number of Radius proxy hops involved in some authentications. We are working to improve this situation by configuring Radiator and a TCP-based Radius connection to Eduroam.

Ticket closed.

comment:16 Changed 6 years ago by llynch@…

Resolution: fixed
Status: assignedclosed

comment:17 Changed 5 weeks ago by Rick Alfvin

Milestone: ietf-80ietf-080

Milestone renamed

Note: See TracTickets for help on using tickets.