topic Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work? in Aerohive Migrated Content

There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Tue, 10 Sep 2019 16:42:38 GMT

There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Tue, 10 Sep 2019 16:44:09 GMT

going through this thread: https://getsatisfaction.com/aerohive/topics/id-manager-no-radsec-proxy

how to check : Are you allowing the management network/Hivemanager address access to the IDM cloud service?

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

ashley_finch — Tue, 10 Sep 2019 17:37:02 GMT

exec aaa idm-test radsec-proxy would probably be the best command to use to verify if it can reach the service.

What is the output from 'show idm' and '_Show radsec elct-pool'

Additionally if you do a "show clock" command, is the time on the AP correct?

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Tue, 10 Sep 2019 22:06:04 GMT

show clock

2019-09-10 14:45:33 Tuesday

P-1-01#exec aaa idm-test rad

AP-1-01#exec aaa idm-test radsec-proxy

The Aerohive device establish a TCP session with the ID Manager auth gateway successfully.

AP-1-01#

AP-1-01#_show radsec elct-pool

DA IP address: 10.1.199.107

MGT0 IP address: 10.1.199.105

current device is DA: No

Radsec proxy function is running: No

Auto-election pool is valid: No

P-1-01#show idm

IDM client: Enabled Per SSID

IDM Proxy IP: 10.1.199.105

IDM proxy: Disabled

RadSec Certificate state: Valid

RadSec Certificate Issued: 2019-09-09 15:48:44 GMT

RadSec Certificate Expires: 2020-09-08 15:48:44 GMT

any suggestions please ??

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

ashley_finch — Tue, 10 Sep 2019 22:23:27 GMT

All looks normal except from the show idm which shows the IDM proxy IP as itself but the proxy status is disabled. If you push a complete upload or reboot the AP does it change at all? Which firmware version are you on?

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Wed, 11 Sep 2019 22:01:27 GMT

Hi, Customer tried rebooting AP several times, reset AP, different FW, still the same. current version is HiveOS 8.2r4 build-207023

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Wed, 11 Sep 2019 22:03:19 GMT

2019-09-10 14:45:46 info ah_cli: security: admin:<exec aaa idm-test radsec-proxy >

2019-09-10 14:44:32 info ah_cli: security: admin:<exec aaa idm-test radsec-proxy >

2019-09-10 14:44:25 info ah_cli: security: admin:<exec aaa idm-test radsec-proxy >

2019-09-10 14:43:18 info sshd[31258]: aaa: ah_tpa_radc_conf_fetch: fetch the config for IDM_GLOBAL failed

2019-09-04 14:35:09 err ah_capture: application: [IDM-PPSK] Fetch PPSK password from IDM failed, error code = -11

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

akshara_agarwal — Wed, 11 Sep 2019 22:12:46 GMT

Line 224: 2019-09-10 14:46:31 debug ah_auth: [auth_info]: Send event to query if self act as the RadSec proxy server.

Line 280: 2019-09-10 14:46:26 debug ah_auth: [auth_info]: Send event to query if self act as the RadSec proxy server.

Line 334: 2019-09-10 14:46:17 debug ah_auth: [auth_info]: Send event to query if self act as the RadSec proxy server.

Line 368: 2019-09-10 14:44:49 info ah_scd: aaa: response to HM successfully, self isn't a elected Radsec proxy server.

Line 455: 2019-09-10 14:39:49 info ah_scd: aaa: response to HM successfully, self isn't a elected Radsec proxy server.

Line 550: 2019-09-10 14:34:50 info ah_scd: aaa: response to HM successfully, self isn't a elected Radsec proxy server.

Line 1738: 2019-09-10 13:24:49 info ah_scd: aaa: response to HM successfully, self isn't a elected Radsec proxy server.

Line 2921: 2019-09-03 11:16:54 err ah_scd: aaa: ah_radsec_cddt_send_elct_msg:error happen when send msg.

Line 2972: 2019-08-27 16:14:27 err ah_scd: aaa: ah_radsec_cddt_send_elct_msg:error happen when send msg.

Line 3155: aaa radius-server proxy radsec realm DEFAULT primary idmAuthServer

Line 3156: aaa radius-server proxy radsec enable

Line 5186: RADSEC proxy parameters:

Line 5188: RADSEC proxy: Enabled

Line 5193: RADSEC proxy be elected: No

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

DanS — Wed, 02 Feb 2022 13:05:18 GMT

Hello, was this ever solved?

Having the same issue now on 10.3.3.0 with some AP250's

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there anything else need to be allowed from Firewall or in hivemanager for PPSK to work?

Hans — Wed, 09 Mar 2022 08:55:45 GMT

Same issue here, alle tests are fine however no RADSEC proxy AP elected. We are using AP130's with firmware 10.4.3.0.

Re: There is no RADSEC proxy enabled for the network, though port 2083 test is successful. Is there

BrThomas — Tue, 03 Sep 2024 15:18:05 GMT

Was this issued ever solved I'm having the same issue at one of my locations?