Ruckus, Radius & EduRoam

[Asgard]

We are configuring our Ruckus ZoneDirector (9.7.0.0 build 220) to work with the JANET eduroam service using Microsoft Server 2008 R2 NPS as the RADIUS authentication server.

 

We have come across an issue with 802.1x authentication sessions for users on our site being proxied through eduroam to their “home” site. We are finding users who’s home service relies on Microsoft NPS are unable to authenticate due to the remote server discarding the messages . Users with a home RADIUS server based on FreeRADIUS work fine as do our own local users.

 

Investigation has revealed the ZoneDirector is sending a couple of Ruckus VSA attributes in its request, we believe this may be causing the remote system to discard the RADIUS requests rather than simply ignore them.

 

Amongst these attributes is the Ruckus VSA for the WISPr-Location-Name which is odd as the WISPr service is disabled on the WLAN configuration.

 

Has anyone setup Eduroam using Microsoft NPS and a Ruckus controller

 

Tried to ask Ruckus directly, but our reseller said we have to go via them and cant ask Ruckus directly........

 

Cheers

 

John Paul

[snagrat]

Ask the reseller then. If they can't sort it then they can raise it with Ruckus.

[Asgard]

I have, must of missed that in my original post

 

Ruckus basically just sent back the howto on creating a link to a radius box

 

I just wanted to see if anyone else had experienced it....

Edited July 1, 2014 by Asgard

[Smokebomb]

We are configuring our Ruckus ZoneDirector (9.7.0.0 build 220) to work with the JANET eduroam service using Microsoft Server 2008 R2 NPS as the RADIUS authentication server.

 

We have come across an issue with 802.1x authentication sessions for users on our site being proxied through eduroam to their “home” site. We are finding users who’s home service relies on Microsoft NPS are unable to authenticate due to the remote server discarding the messages . Users with a home RADIUS server based on FreeRADIUS work fine as do our own local users.

 

Investigation has revealed the ZoneDirector is sending a couple of Ruckus VSA attributes in its request, we believe this may be causing the remote system to discard the RADIUS requests rather than simply ignore them.

 

Amongst these attributes is the Ruckus VSA for the WISPr-Location-Name which is odd as the WISPr service is disabled on the WLAN configuration.

 

Has anyone setup Eduroam using Microsoft NPS and a Ruckus controller

 

Tried to ask Ruckus directly, but our reseller said we have to go via them and cant ask Ruckus directly........

 

Cheers

 

John Paul

 

Hi, know this is an old thread but did you ever resolve this? We are just trying to get eduroam working with a Ruckus controller and appear to be having a similar problem. Thanks

[Asgard]

Hi

Yep we solved it.

 

Do you have the "Location" field of your AP's populated?

Once we removed that it started working - feel free to drop me a PM and ill give you my real email address and you can have a nose at our setup if you want.

[Smokebomb]

Thank you for responding. Managed to resolve our issue, it was related to NAT.