On 12/15/2011 06:18 AM, Indrajaya Pitra Perdana wrote: > The problem still persist even i created my own certificate using the > steps in mkcertificate.sh goodies , my windows didn't respon to the eap > challenge sent by Radiator, do u have any clue on this? or perhaps the > problem is within my 2950 catalyst ? thanks :-)
You could try enabling debug for EAP authentication on the switch to see how it reacts to EAP messages. Meanwhile you could also try running wireshark on Windows to see if the challenge with the certificate is sent by the switch to the XP box. One thing you could try first is to use even lower value for EAPTLS_MaxFragmentSize The messages before certifcate are much smaller and so this challenge would be the first that can reach the maximum size. Thanks! -- Heikki Vatiainen <h...@open.com.au> Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. _______________________________________________ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
