ICMP Blocked
If it can be seen that anything is working (acces to port, authentication etc.) and an ICMP 'Ping' fails then it's assumed that ICMP is being blocked.
Misconfigured RRPS Proxy
The RRPS may not be forwarding authentication requests for the realm in question
Unknown Client
If there are signs of life from the RADIUS port but no response to auth attempts then it's assumed that there's a bad shared secret or the NRPS is an unknown client. Either way there's something wrong with the configuration.
Bad Client Shared Secret
If there are signs of life from the RADIUS port but no response to auth attempts then it's assumed that there's a bad shared secret or the NRPS is an unknown client. Either way there's something wrong with the configuration.
Bad Server Shared Secret
In the NRPS logs there are entries which show that the RADIUS server is attempting to communicate but has the wrong shared secret (or, much less likely, the wrong Message-Authenticator).
Port 1812 Drop
If the server is alive and the port looks like it's open but there's not response to RADIUS authenication requests then it's possible that the port is set to DROP.
NRPS Firewalled
There are limited checks that can be done for Visited Only sites. If there's no response of any sort then it's assumed that either the host is down or the NRPS are firewalled from making incoming connections.
Host Down
There are limited checks that can be done for Visited Only sites. If there's no response of any sort then it's assumed that either the host is down or the NRPS are firewalled from making incoming connections.
For Full sites a host would be flagged as down if it also failed other checks. Basically if nothing worked then it's assumed that the host is down.
No Route
It's possible that there a problem with the network path between NRPS and this RADIUS server. Check the DNS, the IP address and the routing.
RADIUS Daemon Down
If there's sign of life (ICMP works) but there's no response from any of the RADIUS checks then it'll be assumed that the daemon is down.
Port 1812 Reject
If the server is alive but the port is tested as closed then a firewall might be set to REJECT.
IPS Firewall
If there are responses to authentication requests but the RADIUS port appears closed then it's possible that an IPS is stopping the port test.
Status Server Not Working
If Status Server is supposed to be configured then tests will be performed. A lack of response means that it's not actually configured properly.
Missing Realm Account
The authentication is attempted and a negative response received, which implies that there is a problem with the test account (non-existant, expired etc.)
Misconfigured Site IdP
The site's IdP(s) might not be suitably configured to authenticate for the realm in question.
Misconfigured ORPS Proxy
The ORPS may not be proxying authentication requests for the realm in question.
Config pending
Currently it looks like nothing is responding so it could just be that nothing has been configured yet.
Dropping Authentication Requests
Authentication requests going to your site aren't being responded to, thus your site is being marked as down by the NRPS. This could be down to local configuration, or the configuration of a site proxying through yours.
Realm: cheshiresharedservices.gov.uk Full
- Output
- PING OK - Packet loss = 0%, RTA = 10.01 ms
- Last State Change
- Fri Sep 11 12:56:55 2026
- Last Check
- Mon Sep 28 17:06:45 2026
- Next Check
- Mon Sep 28 17:16:44 2026
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Fri Sep 11 13:01:05 2026
- Last Check
- Mon Sep 28 17:01:03 2026
- Next Check
- Mon Sep 28 17:11:03 2026
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Fri Sep 11 12:59:10 2026
- Last Check
- Mon Sep 28 17:07:08 2026
- Next Check
- Mon Sep 28 17:17:08 2026
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sun Sep 27 00:47:03 2026
- Last Check
- Mon Sep 28 17:07:02 2026
- Next Check
- Mon Sep 28 17:17:02 2026
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Mon Sep 28 11:06:32 2026
- Last Check
- Mon Sep 28 17:06:30 2026
- Next Check
- Mon Sep 28 17:16:30 2026
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
- Output
- PING OK - Packet loss = 0%, RTA = 10.25 ms
- Last State Change
- Fri Sep 11 13:01:18 2026
- Last Check
- Mon Sep 28 17:01:10 2026
- Next Check
- Mon Sep 28 17:11:08 2026
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Fri Sep 11 12:59:21 2026
- Last Check
- Mon Sep 28 16:59:19 2026
- Next Check
- Mon Sep 28 17:09:19 2026
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Fri Sep 11 12:57:44 2026
- Last Check
- Mon Sep 28 17:05:42 2026
- Next Check
- Mon Sep 28 17:15:42 2026
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Mon Sep 28 01:47:19 2026
- Last Check
- Mon Sep 28 17:07:17 2026
- Next Check
- Mon Sep 28 17:17:17 2026
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Mon Sep 28 10:58:29 2026
- Last Check
- Mon Sep 28 16:58:27 2026
- Next Check
- Mon Sep 28 17:08:27 2026
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
- Output
- PING OK - Packet loss = 0%, RTA = 15.35 ms
- Last State Change
- Fri Sep 11 13:00:58 2026
- Last Check
- Mon Sep 28 17:00:47 2026
- Next Check
- Mon Sep 28 17:10:47 2026
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Fri Sep 11 13:01:08 2026
- Last Check
- Mon Sep 28 17:01:06 2026
- Next Check
- Mon Sep 28 17:11:06 2026
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Fri Sep 11 12:59:34 2026
- Last Check
- Mon Sep 28 17:07:33 2026
- Next Check
- Mon Sep 28 17:17:33 2026
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sat Sep 26 08:56:39 2026
- Last Check
- Mon Sep 28 17:06:39 2026
- Next Check
- Mon Sep 28 17:16:38 2026
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Mon Sep 28 10:57:59 2026
- Last Check
- Mon Sep 28 17:07:58 2026
- Next Check
- Mon Sep 28 17:17:58 2026
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
- Output
- PING OK - Packet loss = 0%, RTA = 15.32 ms
- Last State Change
- Fri Sep 11 12:59:00 2026
- Last Check
- Mon Sep 28 16:58:51 2026
- Next Check
- Mon Sep 28 17:08:50 2026
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Fri Sep 11 12:59:16 2026
- Last Check
- Mon Sep 28 16:59:14 2026
- Next Check
- Mon Sep 28 17:09:14 2026
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Fri Sep 11 13:00:54 2026
- Last Check
- Mon Sep 28 16:58:53 2026
- Next Check
- Mon Sep 28 17:08:52 2026
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sat Sep 26 05:20:11 2026
- Last Check
- Mon Sep 28 17:00:10 2026
- Next Check
- Mon Sep 28 17:10:10 2026
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Fri Sep 25 09:36:14 2026
- Last Check
- Mon Sep 28 17:06:12 2026
- Next Check
- Mon Sep 28 17:16:12 2026
- Output
- UNKNOWN: No Data
- Last State Change
- Fri Sep 18 14:02:31 2026
- Last Check
- Mon Sep 28 16:57:28 2026
- Next Check
- Mon Sep 28 17:12:26 2026
- Output
- UNKNOWN: No Data
- Last State Change
- Fri Sep 18 13:58:55 2026
- Last Check
- Mon Sep 28 16:53:50 2026
- Next Check
- Mon Sep 28 17:08:49 2026
- Output
- UNKNOWN: No data
- Last State Change
- Fri Sep 18 13:58:49 2026
- Last Check
- Mon Sep 28 16:53:45 2026
- Next Check
- Mon Sep 28 17:08:44 2026
- Output
- UNKNOWN: No data
- Last State Change
- Fri Sep 18 14:00:56 2026
- Last Check
- Mon Sep 28 16:55:54 2026
- Next Check
- Mon Sep 28 17:10:52 2026
- Output
- UNKNOWN: No Data
- Last State Change
- Fri Sep 18 14:00:44 2026
- Last Check
- Mon Sep 28 16:55:43 2026
- Next Check
- Mon Sep 28 17:10:42 2026