Realm: scw.xswhealth.nhs.uk Full

scw.xswhealth.nhs.uk/ORPS: scw-xswhealth-nhs-uk-0

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/NRPS: roaming0.govroam.uk (212.219.190.139) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming0.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 8.54 ms
Last State Change: Thu Jul 3 11:54:05 2025
Last Check: Sun Jul 13 14:53:55 2025
Next Check: Sun Jul 13 15:03:55 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming0.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:54:27 2025
Last Check: Sun Jul 13 14:54:26 2025
Next Check: Sun Jul 13 15:04:26 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming0.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Sat Jul 12 19:23:43 2025
Last Check: Sun Jul 13 14:53:42 2025
Next Check: Sun Jul 13 15:03:42 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming0.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Mon Jul 7 12:47:07 2025
Last Check: Sun Jul 13 14:47:06 2025
Next Check: Sun Jul 13 14:57:05 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming0.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 08:54:12 2025
Last Check: Sun Jul 13 14:54:11 2025
Next Check: Sun Jul 13 15:04:11 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/NRPS: roaming1.govroam.uk (212.219.209.43) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming1.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 8.22 ms
Last State Change: Thu Jul 3 11:56:07 2025
Last Check: Sun Jul 13 14:45:57 2025
Next Check: Sun Jul 13 14:55:57 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming1.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:57:29 2025
Last Check: Sun Jul 13 14:47:27 2025
Next Check: Sun Jul 13 14:57:27 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming1.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Sat Jul 12 16:04:42 2025
Last Check: Sun Jul 13 14:54:40 2025
Next Check: Sun Jul 13 15:04:40 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming1.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Thu Jul 10 15:25:48 2025
Last Check: Sun Jul 13 14:45:46 2025
Next Check: Sun Jul 13 14:55:46 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming1.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 12:36:23 2025
Last Check: Sun Jul 13 14:46:22 2025
Next Check: Sun Jul 13 14:56:22 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/NRPS: roaming2.govroam.uk (212.219.247.59) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming2.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 13.35 ms
Last State Change: Thu Jul 3 11:59:41 2025
Last Check: Sun Jul 13 14:49:32 2025
Next Check: Sun Jul 13 14:59:32 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming2.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:56:04 2025
Last Check: Sun Jul 13 14:46:03 2025
Next Check: Sun Jul 13 14:56:03 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming2.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Jul 3 11:55:18 2025
Last Check: Sun Jul 13 14:55:16 2025
Next Check: Sun Jul 13 15:05:16 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming2.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Fri Jul 4 14:33:14 2025
Last Check: Sun Jul 13 14:53:13 2025
Next Check: Sun Jul 13 15:03:12 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming2.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 11:07:21 2025
Last Check: Sun Jul 13 14:47:19 2025
Next Check: Sun Jul 13 14:57:19 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/NRPS: roaming3.govroam.uk (195.194.21.203) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming3.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 13.30 ms
Last State Change: Thu Jul 3 11:56:16 2025
Last Check: Sun Jul 13 14:46:06 2025
Next Check: Sun Jul 13 14:56:06 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming3.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:56:33 2025
Last Check: Sun Jul 13 14:46:32 2025
Next Check: Sun Jul 13 14:56:32 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming3.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Jul 3 12:00:16 2025
Last Check: Sun Jul 13 14:50:16 2025
Next Check: Sun Jul 13 15:00:15 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming3.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Fri Jul 11 17:54:35 2025
Last Check: Sun Jul 13 14:54:34 2025
Next Check: Sun Jul 13 15:04:34 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-0/roaming3.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 09:05:35 2025
Last Check: Sun Jul 13 14:45:33 2025
Next Check: Sun Jul 13 14:55:33 2025

scw.xswhealth.nhs.uk/ORPS: scw-xswhealth-nhs-uk-1

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/NRPS: roaming0.govroam.uk (212.219.190.139) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming0.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 8.79 ms
Last State Change: Thu Jul 3 11:51:42 2025
Last Check: Sun Jul 13 14:51:30 2025
Next Check: Sun Jul 13 15:01:30 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming0.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:54:24 2025
Last Check: Sun Jul 13 14:54:23 2025
Next Check: Sun Jul 13 15:04:23 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming0.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Jul 3 11:54:58 2025
Last Check: Sun Jul 13 14:54:56 2025
Next Check: Sun Jul 13 15:04:56 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming0.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Wed Jul 9 16:40:09 2025
Last Check: Sun Jul 13 14:50:08 2025
Next Check: Sun Jul 13 15:00:07 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming0.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Fri Jul 11 14:01:18 2025
Last Check: Sun Jul 13 14:51:17 2025
Next Check: Sun Jul 13 15:01:17 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/NRPS: roaming1.govroam.uk (212.219.209.43) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming1.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 7.81 ms
Last State Change: Thu Jul 3 11:54:09 2025
Last Check: Sun Jul 13 14:54:00 2025
Next Check: Sun Jul 13 15:04:00 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming1.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:55:30 2025
Last Check: Sun Jul 13 14:55:28 2025
Next Check: Sun Jul 13 14:55:28 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming1.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Sat Jul 12 19:50:19 2025
Last Check: Sun Jul 13 14:50:17 2025
Next Check: Sun Jul 13 15:00:16 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming1.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Thu Jul 10 09:17:39 2025
Last Check: Sun Jul 13 14:47:38 2025
Next Check: Sun Jul 13 14:57:38 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming1.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 09:45:30 2025
Last Check: Sun Jul 13 14:55:28 2025
Next Check: Sun Jul 13 14:55:28 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/NRPS: roaming2.govroam.uk (212.219.247.59) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming2.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 13.41 ms
Last State Change: Thu Jul 3 11:56:45 2025
Last Check: Sun Jul 13 14:46:34 2025
Next Check: Sun Jul 13 14:56:34 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming2.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:57:19 2025
Last Check: Sun Jul 13 14:47:17 2025
Next Check: Sun Jul 13 14:57:17 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming2.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Jul 3 11:56:55 2025
Last Check: Sun Jul 13 14:46:54 2025
Next Check: Sun Jul 13 14:56:54 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming2.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Wed Jul 9 15:25:13 2025
Last Check: Sun Jul 13 14:55:12 2025
Next Check: Sun Jul 13 15:05:12 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming2.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 09:37:20 2025
Last Check: Sun Jul 13 14:47:18 2025
Next Check: Sun Jul 13 14:57:18 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/NRPS: roaming3.govroam.uk (195.194.21.203) - All good

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming3.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 13.80 ms
Last State Change: Thu Jul 3 11:56:41 2025
Last Check: Sun Jul 13 14:46:31 2025
Next Check: Sun Jul 13 14:56:31 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming3.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Thu Jul 3 11:58:58 2025
Last Check: Sun Jul 13 14:48:57 2025
Next Check: Sun Jul 13 14:58:57 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming3.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Jul 3 11:56:47 2025
Last Check: Sun Jul 13 14:46:45 2025
Next Check: Sun Jul 13 14:56:45 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming3.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Fri Jul 11 09:53:35 2025
Last Check: Sun Jul 13 14:53:33 2025
Next Check: Sun Jul 13 15:03:33 2025

scw.xswhealth.nhs.uk/scw-xswhealth-nhs-uk-1/roaming3.govroam.uk/ Zombie

Output: UNKNOWN: No Data. No data but not marked as down within the last week
Last State Change: Sat Jul 12 09:08:18 2025
Last Check: Sun Jul 13 14:48:16 2025
Next Check: Sun Jul 13 14:58:16 2025

Called Station ID Check

Output: WARNING: 100% Lower case characters in MAC (last: 2025-07-13 14:34:50)
Last State Change: Fri Jun 13 10:29:58 2025
Last Check: Sun Jul 13 14:54:55 2025
Next Check: Sun Jul 13 15:09:54 2025

Meaning:: The Called-Station-ID contains the MAC address of the device the client connects to as well as, potentially, the SSID of the wireless network it connected to. The format of the MAC address is specified in RFC 3580 as 'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all upper case. The SSID should be appended.
Having the Called-Station-ID included in proxied requests makes it possible to ensure that the SSID being broadcast matches the service requirements.
Solution:: Configure your wireless system to provide the CSI in the RFC3580 format.

Calling Station ID Check

Output: WARNING: 100% MAC format wrong, contains lower case (last: 2025-07-13 14:34:50)
Last State Change: Tue Jul 1 19:57:30 2025
Last Check: Sun Jul 13 14:42:29 2025
Next Check: Sun Jul 13 14:57:27 2025

Meaning:: Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
Solution:: Configure your wireless system to use upper case and '-' separated pairs.

Operator Check

Output: WARNING: 100% Missing Operator-Name (last: 2025-07-13 14:34:50)
Last State Change: Fri Jun 13 10:32:07 2025
Last Check: Sun Jul 13 14:42:05 2025
Next Check: Sun Jul 13 14:57:03 2025

Meaning:: Operator-Name is missing from RADIUS requests. Operator-Name identifies the site sending the requests and is used by home sites in audit trails and in cases of mis-use.
Solution:: Where possible (FreeRADIUS, radsecproxy, RADIATOR) Operator-Name should be configured to send the site identifier (in the format 1realm.name e.g. 1holby.nhs.uk).

Realm Syntax Check

Output: OK: 100.0% Good syntax (last: 2025-07-13 14:34:50)
Last State Change: Fri Jul 11 12:33:00 2025
Last Check: Sun Jul 13 14:47:57 2025
Next Check: Sun Jul 13 15:02:56 2025

VLAN Check

Output: CRITICAL: 63% Tunnel-Type attr present (last: 2025-07-13 12:40:54). 63% Tunnel-Medium-Type attr present (last: 2025-07-13 12:40:54). 63% Tunnel-Private-Group-ID (last: 2025-07-13 12:40:54)
Last State Change: Fri Jun 13 10:31:15 2025
Last Check: Sun Jul 13 14:41:14 2025
Next Check: Sun Jul 13 14:56:13 2025

Meaning:: Various attributes such as Tunnel-Type, Tunnel-Medium-Type and Tunnel-Private-Group-ID being sent out in responses. The 'Tunnel' attributes are commonly used to instruct wireless controllers which VLAN to place a client in. Thus if these attributes aren't filtered out then one site might be sending these attributes to another site. At best users won't be connected, at worst they'll be placed on an inappropriate VLAN.
Solution:: Apply filters on the RADIUS servers to restrict the attributes to just the set as specified in the Tech Spec. Both outgoing AND incoming packets need the filters applied to them for everyone's protection