Realm: cheshiresharedservices.gov.uk Full

cheshiresharedservices.gov.uk/ORPS: cheshiresharedservices-gov-uk-0
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/NRPS: roaming0.govroam.uk (212.219.190.139) - Dropping Auth Requests /
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming0.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 12.12 ms
Last State Change
Sun Jun 29 00:26:22 2025
Last Check
Wed Jul 2 02:16:12 2025
Next Check
Wed Jul 2 02:26:12 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming0.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Sun Jun 29 00:24:20 2025
Last Check
Wed Jul 2 02:14:18 2025
Next Check
Wed Jul 2 02:24:18 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming0.govroam.uk/ Server Shared Secret
Output
UNKNOWN: No Data. No logs to check for last day
Last State Change
Sun Jun 29 00:22:53 2025
Last Check
Wed Jul 2 02:10:53 2025
Next Check
Wed Jul 2 02:20:52 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming0.govroam.uk/ Simple Authentication
Output
OK: Return code is as expected, Access-Reject
Last State Change
Sun Jun 29 00:23:18 2025
Last Check
Wed Jul 2 02:13:15 2025
Next Check
Wed Jul 2 02:23:15 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming0.govroam.uk/ Zombie
Output
CRITICAL: Marked as down within the last day
Last State Change
Mon Jun 30 11:45:00 2025
Last Check
Wed Jul 2 02:14:58 2025
Next Check
Wed Jul 2 02:24:58 2025
Meaning:
Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:
An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/NRPS: roaming1.govroam.uk (212.219.209.43) - Dropping Auth Requests /
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming1.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 12.45 ms
Last State Change
Sun Jun 29 00:28:53 2025
Last Check
Wed Jul 2 02:18:44 2025
Next Check
Wed Jul 2 02:28:44 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming1.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Sun Jun 29 00:29:27 2025
Last Check
Wed Jul 2 02:19:26 2025
Next Check
Wed Jul 2 02:29:26 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming1.govroam.uk/ Server Shared Secret
Output
OK: Good shared secret over last day
Last State Change
Wed Jul 2 01:24:16 2025
Last Check
Wed Jul 2 02:14:14 2025
Next Check
Wed Jul 2 02:24:14 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming1.govroam.uk/ Simple Authentication
Output
OK: Return code is as expected, Access-Reject
Last State Change
Mon Jun 30 15:40:50 2025
Last Check
Wed Jul 2 02:10:48 2025
Next Check
Wed Jul 2 02:20:47 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming1.govroam.uk/ Zombie
Output
CRITICAL: Marked as down within the last day
Last State Change
Tue Jul 1 08:35:08 2025
Last Check
Wed Jul 2 02:15:06 2025
Next Check
Wed Jul 2 02:25:06 2025
Meaning:
Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:
An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/NRPS: roaming2.govroam.uk (212.219.247.59) - All good
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming2.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 5.40 ms
Last State Change
Sun Jun 29 00:28:08 2025
Last Check
Wed Jul 2 02:17:57 2025
Next Check
Wed Jul 2 02:27:57 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming2.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Sun Jun 29 00:27:19 2025
Last Check
Wed Jul 2 02:17:18 2025
Next Check
Wed Jul 2 02:27:18 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming2.govroam.uk/ Server Shared Secret
Output
UNKNOWN: No Data. No logs to check for last day
Last State Change
Sun Jun 29 00:28:47 2025
Last Check
Wed Jul 2 02:16:45 2025
Next Check
Wed Jul 2 02:26:45 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming2.govroam.uk/ Simple Authentication
Output
OK: Return code is as expected, Access-Reject
Last State Change
Sun Jun 29 00:28:42 2025
Last Check
Wed Jul 2 02:18:40 2025
Next Check
Wed Jul 2 02:28:40 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming2.govroam.uk/ Zombie
Output
UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change
Sun Jun 29 00:31:07 2025
Last Check
Wed Jul 2 02:19:05 2025
Next Check
Wed Jul 2 02:29:05 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/NRPS: roaming3.govroam.uk (195.194.21.203) - All good
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming3.govroam.uk/ Ping
Output
PING OK - Packet loss = 0%, RTA = 5.67 ms
Last State Change
Sun Jun 29 00:30:20 2025
Last Check
Wed Jul 2 02:20:10 2025
Next Check
Wed Jul 2 02:30:10 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming3.govroam.uk/ RADIUS Port
Output
OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change
Sun Jun 29 00:30:59 2025
Last Check
Wed Jul 2 02:10:58 2025
Next Check
Wed Jul 2 02:20:57 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming3.govroam.uk/ Server Shared Secret
Output
UNKNOWN: No Data. No logs to check for last day
Last State Change
Sun Jun 29 00:31:32 2025
Last Check
Wed Jul 2 02:19:30 2025
Next Check
Wed Jul 2 02:29:30 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming3.govroam.uk/ Simple Authentication
Output
OK: Return code is as expected, Access-Reject
Last State Change
Mon Jun 30 10:03:15 2025
Last Check
Wed Jul 2 02:13:13 2025
Next Check
Wed Jul 2 02:23:12 2025
cheshiresharedservices.gov.uk/cheshiresharedservices-gov-uk-0/roaming3.govroam.uk/ Zombie
Output
UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change
Sun Jun 29 00:30:42 2025
Last Check
Wed Jul 2 02:18:41 2025
Next Check
Wed Jul 2 02:28:41 2025
Called Station ID Check
Output
WARNING: 100% Missing Called-Station-Id (last: 2025-07-02 01:20:34)
Last State Change
Wed Jul 2 01:25:34 2025
Last Check
Wed Jul 2 02:10:32 2025
Next Check
Wed Jul 2 02:25:32 2025
Meaning:
The Called-Station-ID contains the MAC address of the device the client connects to as well as, potentially, the SSID of the wireless network it connected to. The format of the MAC address is specified in RFC 3580 as 'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all upper case. The SSID should be appended.
Having the Called-Station-ID included in proxied requests makes it possible to ensure that the SSID being broadcast matches the service requirements.
Solution:
Configure your wireless system to provide the CSI in the RFC3580 format.
Calling Station ID Check
Output
WARNING: 100% MAC format wrong, contains lower case (last: 2025-07-02 01:20:34)
Last State Change
Wed Jul 2 01:28:19 2025
Last Check
Wed Jul 2 02:13:16 2025
Next Check
Wed Jul 2 02:28:15 2025
Meaning:
Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
Solution:
Configure your wireless system to use upper case and '-' separated pairs.
Operator Check
Output
OK: 100% Operator-Name present (last: 2025-07-02 01:20:34)
Last State Change
Wed Jul 2 01:27:04 2025
Last Check
Wed Jul 2 02:12:02 2025
Next Check
Wed Jul 2 02:27:00 2025
Realm Syntax Check
Output
OK: 100.0% Good syntax (last: 2025-07-02 01:20:34)
Last State Change
Wed Jul 2 01:26:03 2025
Last Check
Wed Jul 2 02:11:03 2025
Next Check
Wed Jul 2 02:26:01 2025
VLAN Check
Output
OK: 100% No VLAN attr present (last: 2025-07-02 01:20:34)
Last State Change
Wed Jul 2 01:27:38 2025
Last Check
Wed Jul 2 02:12:34 2025
Next Check
Wed Jul 2 02:27:34 2025