OPNsense Forum

Archive => 22.7 Legacy Series => Topic started by: NW4FUN on September 18, 2022, 09:56:00 AM

Title: FreeRADIUS dropping iOS users
Post by: NW4FUN on September 18, 2022, 09:56:00 AM
Hello,

Users are connecting to Wi-Fi via Radius MSCHAPv2. A very simple username and password authentication.
Users can login smoothly, however, very randomly aka with no clear pattern, they're been kicked out requiring for them to re-authenticate.

There's no use expiry nor other timing set to any user and it's very frustrating as I don't know what I'm doing wrong.

What's your guess?

NW4FUN

Edit: I should have added that no other users are logging in other than iOS/MacOS ones
Title: Re: FreeRADIUS dropping iOS users
Post by: mimugmail on September 18, 2022, 10:04:22 AM
Are they moving around? Usually Radius is not able to remove a user from the network
Title: Re: FreeRADIUS dropping iOS users
Post by: NW4FUN on September 18, 2022, 11:51:33 AM
Wi-Fi users are roamers by definition, however unless they are off premises and thus disconnected, Meraki APs are taking care of handoffs.

As said, I can't really identify any clear pattern for this issue. Oddly enough, sometimes, I lose Wi-Fi connection when standing at my desk (~3M away from the closest AP) and browsing on safari. Then I'm forced to select the Wi-Fi ssid and put my ID and PW again. In the FreeRADIUS log I cannot find any error at such.

I'm really not sure what's causing this.

(BTW - thanks for your repository)