So, to clarify; the Astaro does not perform the RADIUS authentication; it merely allows the AP, or the Client, to access RADIUS? I saw a bunch of RADIUS traffic trying to go through while trying to authentication a client (it still doesn't work for me), so I added packet filters... still no go. I tried one of the other tester's examples, still no dice. Does Astaro have an official (or unofficial) how-to on getting RADIUS authentication, with WPA-2 Enterprise authentication, to work with this? I must be missing something, but for the life of me, I don't know what.
Bruce and Helmut, I don't have an Astaro WAP. I agree that it sounds like a bug, but I thought it might be an experiment worth making to see if RADIUS auth worked if a RADIUS server were placed ahead of the AD server in 'Users >> Authentication'.
I'm guessing you could see the authentication in the User Auth Daemon live log and that it's related to the bug that RADIUS authorization fails for L2TP if the AD server is ahead of the RADIUS server.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
Bruce and Helmut, I don't have an Astaro WAP. I agree that it sounds like a bug, but I thought it might be an experiment worth making to see if RADIUS auth worked if a RADIUS server were placed ahead of the AD server in 'Users >> Authentication'.
I'm guessing you could see the authentication in the User Auth Daemon live log and that it's related to the bug that RADIUS authorization fails for L2TP if the AD server is ahead of the RADIUS server.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005