Realm: candi.nhs.uk Full
candi.nhs.uk/candi-nhs-uk-0/roaming0.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 4.66 ms
- Last State Change
- Tue Jul 14 18:36:59 2026
- Last Check
- Thu Jul 16 04:56:49 2026
- Next Check
- Thu Jul 16 05:06:49 2026
candi.nhs.uk/candi-nhs-uk-0/roaming0.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 14 18:35:02 2026
- Last Check
- Thu Jul 16 04:55:00 2026
- Next Check
- Thu Jul 16 05:05:00 2026
candi.nhs.uk/candi-nhs-uk-0/roaming0.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Tue Jul 7 08:46:47 2026
- Last Check
- Thu Jul 16 04:56:46 2026
- Next Check
- Thu Jul 16 05:06:46 2026
candi.nhs.uk/candi-nhs-uk-0/roaming0.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Tue Jul 14 18:36:30 2026
- Last Check
- Thu Jul 16 04:56:28 2026
- Next Check
- Thu Jul 16 05:06:28 2026
candi.nhs.uk/candi-nhs-uk-0/roaming0.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Wed Jul 15 10:47:07 2026
- Last Check
- Thu Jul 16 04:57:05 2026
- Next Check
- Thu Jul 16 05:07:05 2026
candi.nhs.uk/candi-nhs-uk-0/roaming1.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 4.67 ms
- Last State Change
- Tue Jul 14 18:37:08 2026
- Last Check
- Thu Jul 16 04:57:00 2026
- Next Check
- Thu Jul 16 05:06:58 2026
candi.nhs.uk/candi-nhs-uk-0/roaming1.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 7 08:45:29 2026
- Last Check
- Thu Jul 16 04:55:27 2026
- Next Check
- Thu Jul 16 05:05:27 2026
candi.nhs.uk/candi-nhs-uk-0/roaming1.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Tue Jul 7 08:41:30 2026
- Last Check
- Thu Jul 16 04:51:28 2026
- Next Check
- Thu Jul 16 05:01:28 2026
candi.nhs.uk/candi-nhs-uk-0/roaming1.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Tue Jul 14 18:35:46 2026
- Last Check
- Thu Jul 16 04:55:44 2026
- Next Check
- Thu Jul 16 05:05:44 2026
candi.nhs.uk/candi-nhs-uk-0/roaming1.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Sat Jul 11 13:20:23 2026
- Last Check
- Thu Jul 16 05:00:21 2026
- Next Check
- Thu Jul 16 05:10:21 2026
candi.nhs.uk/candi-nhs-uk-0/roaming2.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 11.36 ms
- Last State Change
- Tue Jul 7 08:41:42 2026
- Last Check
- Thu Jul 16 04:51:32 2026
- Next Check
- Thu Jul 16 05:01:32 2026
candi.nhs.uk/candi-nhs-uk-0/roaming2.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 7 08:37:55 2026
- Last Check
- Thu Jul 16 04:57:54 2026
- Next Check
- Thu Jul 16 05:07:54 2026
candi.nhs.uk/candi-nhs-uk-0/roaming2.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Tue Jul 7 08:37:06 2026
- Last Check
- Thu Jul 16 04:57:05 2026
- Next Check
- Thu Jul 16 05:07:05 2026
candi.nhs.uk/candi-nhs-uk-0/roaming2.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Tue Jul 14 21:17:19 2026
- Last Check
- Thu Jul 16 04:57:17 2026
- Next Check
- Thu Jul 16 05:07:17 2026
candi.nhs.uk/candi-nhs-uk-0/roaming2.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Tue Jul 7 08:37:03 2026
- Last Check
- Thu Jul 16 04:55:02 2026
- Next Check
- Thu Jul 16 05:05:02 2026
candi.nhs.uk/candi-nhs-uk-0/roaming3.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 10.75 ms
- Last State Change
- Tue Jul 7 08:33:23 2026
- Last Check
- Thu Jul 16 04:53:13 2026
- Next Check
- Thu Jul 16 05:03:13 2026
candi.nhs.uk/candi-nhs-uk-0/roaming3.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 7 08:34:38 2026
- Last Check
- Thu Jul 16 04:54:36 2026
- Next Check
- Thu Jul 16 05:04:36 2026
candi.nhs.uk/candi-nhs-uk-0/roaming3.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Tue Jul 7 08:31:28 2026
- Last Check
- Thu Jul 16 04:51:26 2026
- Next Check
- Thu Jul 16 05:01:26 2026
candi.nhs.uk/candi-nhs-uk-0/roaming3.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Thu Jul 9 10:51:48 2026
- Last Check
- Thu Jul 16 04:51:47 2026
- Next Check
- Thu Jul 16 05:01:47 2026
candi.nhs.uk/candi-nhs-uk-0/roaming3.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Wed Jul 15 11:42:31 2026
- Last Check
- Thu Jul 16 04:52:30 2026
- Next Check
- Thu Jul 16 05:02:29 2026
candi.nhs.uk/candi-nhs-uk-1/roaming0.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 7.83 ms
- Last State Change
- Tue Jul 14 18:36:59 2026
- Last Check
- Thu Jul 16 04:56:49 2026
- Next Check
- Thu Jul 16 05:06:49 2026
candi.nhs.uk/candi-nhs-uk-1/roaming0.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 14 18:44:22 2026
- Last Check
- Thu Jul 16 04:54:22 2026
- Next Check
- Thu Jul 16 05:04:21 2026
candi.nhs.uk/candi-nhs-uk-1/roaming0.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Mon Jul 13 08:15:21 2026
- Last Check
- Thu Jul 16 04:55:20 2026
- Next Check
- Thu Jul 16 05:05:20 2026
candi.nhs.uk/candi-nhs-uk-1/roaming0.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Wed Jul 15 04:50:21 2026
- Last Check
- Thu Jul 16 05:00:19 2026
- Next Check
- Thu Jul 16 05:10:18 2026
candi.nhs.uk/candi-nhs-uk-1/roaming0.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Tue Jul 7 08:50:39 2026
- Last Check
- Thu Jul 16 04:58:37 2026
- Next Check
- Thu Jul 16 05:08:37 2026
candi.nhs.uk/candi-nhs-uk-1/roaming1.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 7.25 ms
- Last State Change
- Tue Jul 14 18:35:36 2026
- Last Check
- Thu Jul 16 04:55:28 2026
- Next Check
- Thu Jul 16 05:05:26 2026
candi.nhs.uk/candi-nhs-uk-1/roaming1.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 14 18:36:31 2026
- Last Check
- Thu Jul 16 04:56:29 2026
- Next Check
- Thu Jul 16 05:06:29 2026
candi.nhs.uk/candi-nhs-uk-1/roaming1.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Mon Jul 13 08:19:51 2026
- Last Check
- Thu Jul 16 04:59:50 2026
- Next Check
- Thu Jul 16 05:09:50 2026
candi.nhs.uk/candi-nhs-uk-1/roaming1.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Wed Jul 15 00:50:16 2026
- Last Check
- Thu Jul 16 05:00:15 2026
- Next Check
- Thu Jul 16 05:10:15 2026
candi.nhs.uk/candi-nhs-uk-1/roaming1.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Thu Jul 9 17:30:06 2026
- Last Check
- Thu Jul 16 05:00:04 2026
- Next Check
- Thu Jul 16 05:10:04 2026
candi.nhs.uk/candi-nhs-uk-1/roaming2.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 14.66 ms
- Last State Change
- Wed Jul 8 02:43:29 2026
- Last Check
- Thu Jul 16 04:53:17 2026
- Next Check
- Thu Jul 16 05:03:17 2026
candi.nhs.uk/candi-nhs-uk-1/roaming2.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Tue Jul 7 08:38:41 2026
- Last Check
- Thu Jul 16 04:58:39 2026
- Next Check
- Thu Jul 16 05:08:39 2026
candi.nhs.uk/candi-nhs-uk-1/roaming2.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Mon Jul 13 08:15:08 2026
- Last Check
- Thu Jul 16 04:55:07 2026
- Next Check
- Thu Jul 16 05:05:06 2026
candi.nhs.uk/candi-nhs-uk-1/roaming2.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Thu Jul 16 00:50:27 2026
- Last Check
- Thu Jul 16 05:00:26 2026
- Next Check
- Thu Jul 16 05:10:26 2026
candi.nhs.uk/candi-nhs-uk-1/roaming2.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Wed Jul 15 10:49:25 2026
- Last Check
- Thu Jul 16 04:59:24 2026
- Next Check
- Thu Jul 16 05:09:24 2026
candi.nhs.uk/candi-nhs-uk-1/roaming3.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 12.90 ms
- Last State Change
- Tue Jul 7 08:35:02 2026
- Last Check
- Thu Jul 16 04:54:51 2026
- Next Check
- Thu Jul 16 05:04:51 2026
candi.nhs.uk/candi-nhs-uk-1/roaming3.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Wed Jul 8 17:28:01 2026
- Last Check
- Thu Jul 16 04:58:00 2026
- Next Check
- Thu Jul 16 05:07:58 2026
candi.nhs.uk/candi-nhs-uk-1/roaming3.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Mon Jul 13 08:19:31 2026
- Last Check
- Thu Jul 16 04:59:29 2026
- Next Check
- Thu Jul 16 05:09:29 2026
candi.nhs.uk/candi-nhs-uk-1/roaming3.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Thu Jul 16 04:53:01 2026
- Last Check
- Thu Jul 16 04:52:59 2026
- Next Check
- Thu Jul 16 05:02:59 2026
candi.nhs.uk/candi-nhs-uk-1/roaming3.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Thu Jul 9 13:20:07 2026
- Last Check
- Thu Jul 16 05:00:06 2026
- Next Check
- Thu Jul 16 05:10:06 2026
Called Station ID Check
- Output
- WARNING: 98% Lower case characters in MAC (last: 2026-07-16 04:41:46)
- Last State Change
- Tue Jul 7 08:19:24 2026
- Last Check
- Thu Jul 16 04:59:22 2026
- Next Check
- Thu Jul 16 05:14:22 2026
- Meaning:
-
The Called-Station-ID contains the MAC address of the device the client
connects to as well as, potentially, the SSID of the wireless network it
connected to. The format of the MAC address is specified in RFC
3580 as
'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all
upper case. The SSID should be appended.
Having the Called-Station-ID included in proxied requests makes it possible to ensure that the SSID being broadcast matches the service requirements. - Solution:
- Configure your wireless system to provide the CSI in the RFC3580 format.
Calling Station ID Check
- Output
- WARNING: 100% MAC format wrong, contains lower case (last: 2026-07-16 04:41:46)
- Last State Change
- Tue Jul 7 08:21:41 2026
- Last Check
- Thu Jul 16 04:46:36 2026
- Next Check
- Thu Jul 16 05:01:36 2026
- Meaning:
- Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
- Solution:
- Configure your wireless system to use upper case and '-' separated pairs.
Operator Check
- Output
- OK: 100% Operator-Name present (last: 2026-07-16 04:41:46)
- Last State Change
- Wed Jul 15 11:22:53 2026
- Last Check
- Thu Jul 16 04:52:51 2026
- Next Check
- Thu Jul 16 05:07:49 2026
Realm Syntax Check
- Output
- OK: 100.0% Good syntax (last: 2026-07-16 04:41:46)
- Last State Change
- Wed Jul 15 12:20:40 2026
- Last Check
- Thu Jul 16 04:50:38 2026
- Next Check
- Thu Jul 16 05:05:38 2026
VLAN Check
- Output
- CRITICAL: 72% Tunnel-Type attr present (last: 2026-07-16 04:41:46). 72% Tunnel-Medium-Type attr present (last: 2026-07-16 04:41:46). 72% Tunnel-Private-Group-ID (last: 2026-07-16 04:41:46)
- Last State Change
- Tue Jul 7 08:22:12 2026
- Last Check
- Thu Jul 16 04:47:09 2026
- Next Check
- Thu Jul 16 05:02:09 2026
- Meaning:
- Various attributes such as Tunnel-Type, Tunnel-Medium-Type and Tunnel-Private-Group-ID being sent out in responses. The 'Tunnel' attributes are commonly used to instruct wireless controllers which VLAN to place a client in. Thus if these attributes aren't filtered out then one site might be sending these attributes to another site. At best users won't be connected, at worst they'll be placed on an inappropriate VLAN.
- Solution:
- Apply filters on the RADIUS servers to restrict the attributes to just the set as specified in the Tech Spec. Both outgoing AND incoming packets need the filters applied to them for everyone's protection