Realm: bsmht.nhs.uk Full

bsmht.nhs.uk/ORPS: bsmht-nhs-uk-0
bsmht.nhs.uk/bsmht-nhs-uk-0/NRPS: roaming0.govroam.uk (212.219.190.139) - All good
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming0.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 10.36 ms
Last State Change
Fri Mar 21 13:45:44 2025
Last Check
Mon Mar 24 02:15:34 2025
Next Check
Mon Mar 24 02:25:34 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming0.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:46:07 2025
Last Check
Mon Mar 24 02:16:05 2025
Next Check
Mon Mar 24 02:26:05 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming0.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Sun Mar 23 20:53:26 2025
Last Check
Mon Mar 24 02:13:25 2025
Next Check
Mon Mar 24 02:23:25 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming0.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:45:36 2025
Last Check
Mon Mar 24 02:15:34 2025
Next Check
Mon Mar 24 02:25:34 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/NRPS: roaming1.govroam.uk (212.219.209.43) - All good
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming1.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 8.44 ms
Last State Change
Fri Mar 21 13:47:55 2025
Last Check
Mon Mar 24 02:17:45 2025
Next Check
Mon Mar 24 02:27:45 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming1.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:47:36 2025
Last Check
Mon Mar 24 02:17:34 2025
Next Check
Mon Mar 24 02:27:33 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming1.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Fri Mar 21 13:46:22 2025
Last Check
Mon Mar 24 02:16:21 2025
Next Check
Mon Mar 24 02:26:21 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming1.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:46:40 2025
Last Check
Mon Mar 24 02:16:37 2025
Next Check
Mon Mar 24 02:26:37 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/NRPS: roaming2.govroam.uk (212.219.247.59) - All good
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming2.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 15.05 ms
Last State Change
Fri Mar 21 13:47:43 2025
Last Check
Mon Mar 24 02:17:32 2025
Next Check
Mon Mar 24 02:27:32 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming2.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:47:54 2025
Last Check
Mon Mar 24 02:17:52 2025
Next Check
Mon Mar 24 02:27:52 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming2.govroam.uk/ Server Shared Secret
Output
UNKNOWN: No Data. No logs to check for last day
Last State Change
Sun Mar 23 17:09:08 2025
Last Check
Mon Mar 24 02:17:07 2025
Next Check
Mon Mar 24 02:27:07 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming2.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:46:00 2025
Last Check
Mon Mar 24 02:15:58 2025
Next Check
Mon Mar 24 02:25:57 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/NRPS: roaming3.govroam.uk (195.194.21.203) - All good
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming3.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 12.66 ms
Last State Change
Fri Mar 21 13:46:14 2025
Last Check
Mon Mar 24 02:16:04 2025
Next Check
Mon Mar 24 02:26:04 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming3.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:45:41 2025
Last Check
Mon Mar 24 02:15:39 2025
Next Check
Mon Mar 24 02:25:39 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming3.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Fri Mar 21 13:46:02 2025
Last Check
Mon Mar 24 02:16:01 2025
Next Check
Mon Mar 24 02:26:01 2025
bsmht.nhs.uk/bsmht-nhs-uk-0/roaming3.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:48:22 2025
Last Check
Mon Mar 24 02:18:19 2025
Next Check
Mon Mar 24 02:28:19 2025
bsmht.nhs.uk/ORPS: bsmht-nhs-uk-1
bsmht.nhs.uk/bsmht-nhs-uk-1/NRPS: roaming0.govroam.uk (212.219.190.139) - All good
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming0.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 10.68 ms
Last State Change
Fri Mar 21 13:46:20 2025
Last Check
Mon Mar 24 02:16:10 2025
Next Check
Mon Mar 24 02:26:10 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming0.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:43:15 2025
Last Check
Mon Mar 24 02:13:14 2025
Next Check
Mon Mar 24 02:23:14 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming0.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Sun Mar 23 20:54:33 2025
Last Check
Mon Mar 24 02:14:32 2025
Next Check
Mon Mar 24 02:24:32 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming0.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 14:18:23 2025
Last Check
Mon Mar 24 02:18:18 2025
Next Check
Mon Mar 24 02:28:18 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/NRPS: roaming1.govroam.uk (212.219.209.43) - All good
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming1.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 13.59 ms
Last State Change
Fri Mar 21 13:44:42 2025
Last Check
Mon Mar 24 02:14:31 2025
Next Check
Mon Mar 24 02:24:31 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming1.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:44:12 2025
Last Check
Mon Mar 24 02:14:11 2025
Next Check
Mon Mar 24 02:24:11 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming1.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Fri Mar 21 13:45:46 2025
Last Check
Mon Mar 24 02:15:44 2025
Next Check
Mon Mar 24 02:25:44 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming1.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:47:09 2025
Last Check
Mon Mar 24 02:17:08 2025
Next Check
Mon Mar 24 02:27:07 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/NRPS: roaming2.govroam.uk (212.219.247.59) - All good
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming2.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 13.61 ms
Last State Change
Fri Mar 21 13:46:39 2025
Last Check
Mon Mar 24 02:16:29 2025
Next Check
Mon Mar 24 02:26:29 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming2.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:46:57 2025
Last Check
Mon Mar 24 02:16:56 2025
Next Check
Mon Mar 24 02:26:56 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming2.govroam.uk/ Server Shared Secret
Output
UNKNOWN: No Data. No logs to check for last day
Last State Change
Fri Mar 21 17:26:58 2025
Last Check
Mon Mar 24 02:14:56 2025
Next Check
Mon Mar 24 02:24:56 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming2.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:46:59 2025
Last Check
Mon Mar 24 02:16:57 2025
Next Check
Mon Mar 24 02:26:57 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/NRPS: roaming3.govroam.uk (195.194.21.203) - All good
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming3.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 15.86 ms
Last State Change
Fri Mar 21 13:46:56 2025
Last Check
Mon Mar 24 02:16:46 2025
Next Check
Mon Mar 24 02:26:46 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming3.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Fri Mar 21 13:49:12 2025
Last Check
Mon Mar 24 02:09:10 2025
Next Check
Mon Mar 24 02:19:10 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming3.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Fri Mar 21 13:47:26 2025
Last Check
Mon Mar 24 02:17:25 2025
Next Check
Mon Mar 24 02:27:25 2025
bsmht.nhs.uk/bsmht-nhs-uk-1/roaming3.govroam.uk/ StatusServer
Output
OK: Return code is as expected,
Last State Change
Fri Mar 21 13:46:29 2025
Last Check
Mon Mar 24 02:16:28 2025
Next Check
Mon Mar 24 02:26:27 2025
Called Station ID Check
Output
WARNING: 2% Lower case characters in MAC (last: 2025-03-23 20:08:06). 0% Missing SSID, as of 2025-03-23 16:34:41
Last State Change
Fri Mar 21 13:49:09 2025
Last Check
Mon Mar 24 02:14:06 2025
Next Check
Mon Mar 24 02:29:05 2025
Meaning:
The Called-Station-ID contains the MAC address of the device the client connects to as well as, potentially, the SSID of the wireless network it connected to. The format of the MAC address is specified in RFC 3580 as 'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all upper case. The SSID should be appended.
Solution:
Configure your wireless system to provide the CSI in the RFC3580 format.
Calling Station ID Check
Output
WARNING: 81% MAC format wrong, contains lower case (last: 2025-03-23 23:07:04)
Last State Change
Fri Mar 21 13:48:06 2025
Last Check
Mon Mar 24 02:13:04 2025
Next Check
Mon Mar 24 02:28:02 2025
Meaning:
Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
Solution:
Configure your wireless system to use upper case and '-' separated pairs.
Operator Check
Output
OK: 100% Operator-Name present (last: 2025-03-23 23:07:04)
Last State Change
Fri Mar 21 13:47:52 2025
Last Check
Mon Mar 24 02:17:50 2025
Next Check
Mon Mar 24 02:32:48 2025
Realm Syntax Check
Output
OK: 100.0% Good syntax (last: 2025-03-23 23:07:04)
Last State Change
Fri Mar 21 13:47:24 2025
Last Check
Mon Mar 24 02:17:21 2025
Next Check
Mon Mar 24 02:32:20 2025
VLAN Check
Output
CRITICAL: 2% Tunnel-Type attr present (last: 2025-03-23 20:08:06). 2% Tunnel-Medium-Type attr present (last: 2025-03-23 20:08:06). 2% Tunnel-Private-Group-ID (last: 2025-03-23 20:08:06)
Last State Change
Sun Mar 23 17:17:48 2025
Last Check
Mon Mar 24 02:17:47 2025
Next Check
Mon Mar 24 02:32:46 2025
Meaning:
Various attributes such as Tunnel-Type, Tunnel-Medium-Type and Tunnel-Private-Group-ID being sent out in responses. The 'Tunnel' attributes are commonly used to instruct wireless controllers which VLAN to place a client in. Thus if these attributes aren't filtered out then one site might be sending these attributes to another site. At best users won't be connected, at worst they'll be placed on an inappropriate VLAN.
Solution:
Apply filters on the RADIUS servers to restrict the attributes to just the set as specified in the Tech Spec. Both outgoing AND incoming packets need the filters applied to them for everyone's protection