<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Have some new information now. These errors seems to have gone away on their own on our load-balanced service; however, the five eduroam (non-load balanced service) errors over the past few weeks are all for umn.edu logins so it's highly likely that this is
a problem with the umn.edu eduroam server. We have users from many organizations using eduroam and only that org's logins are failing occasionally.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma; font-size:13px">---
<div><span id="ms-rterangepaste-start"></span><span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Roberto Ullfig - rullfig@uic.edu</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Systems Administrator</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Enterprise Architecture and Development | ACCC</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">University of Illinois - Chicago</span>
<div><span id="ms-rterangepaste-end"></span></div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Heikki Vatiainen <hvn@open.com.au><br>
<b>Sent:</b> Tuesday, September 10, 2019 11:41 AM<br>
<b>To:</b> Ullfig, Roberto Alfredo <rullfig@uic.edu>; radiator@lists.open.com.au <radiator@lists.open.com.au><br>
<b>Subject:</b> Re: [RADIATOR] EAP Response type 25, but no expected type known - Rogue Access Point?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On 04/09/2019 16.06, Ullfig, Roberto Alfredo wrote:<br>
<br>
> "Outside Interference From Nearby WiFi Networks Negatively Impacts Yours<br>
> The signal from nearby wireless networks and access points can impact <br>
> performance on your network. Access points on the same channel can <br>
> affect your network performance and cause dropped connections or lost <br>
> packets while using the internet."<br>
<br>
There's one idea you could try based on the quote of the above article: <br>
Add on top level Radiator configuration this flag:<br>
<br>
EAP_UseState<br>
<br>
In case the client gets handled by another AP/controller during the <br>
authentication and this causes the RADIUS message attributes to change, <br>
this could cause problems keeping track of current authentications.<br>
<br>
The above flag changes the tracking to use State attribute which could <br>
help. If you use AuthBy EAPBALANCE, see the reference manual, because <br>
it's likely to cause compatibility problems:<br>
<br>
<a href="https://open.com.au/radiator/ref/EAP_UseState_Global.html">https://open.com.au/radiator/ref/EAP_UseState_Global.html</a><br>
<br>
This option has been available for a while now and it seems to be <br>
working fine. It's likely something that could be a default in the <br>
future releases.<br>
<br>
Thanks,<br>
Heikki<br>
<br>
-- <br>
Heikki Vatiainen <hvn@open.com.au><br>
<br>
Radiator: the most portable, flexible and configurable RADIUS server<br>
anywhere. SQL, proxy, DBM, files, LDAP, TACACS+, PAM, Active Directory,<br>
EAP, TLS, TTLS, PEAP, WiMAX, RSA, Vasco, Yubikey, HOTP, TOTP,<br>
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, etc.<br>
</div>
</span></font></div>
</body>
</html>