Realm: secamb.nhs.uk Full
secamb.nhs.uk/secamb-nhs-uk-0/NRPS: roaming0.govroam.uk
(212.219.190.139) -
Dropping Auth Requests
/
secamb.nhs.uk/secamb-nhs-uk-0/roaming0.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 7.32 ms
- Last State Change
- Thu Jul 3 11:54:09 2025
- Last Check
- Sun Jul 13 13:33:58 2025
- Next Check
- Sun Jul 13 13:43:58 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming0.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:53:47 2025
- Last Check
- Sun Jul 13 13:33:47 2025
- Next Check
- Sun Jul 13 13:43:46 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming0.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Sat Jul 12 12:01:33 2025
- Last Check
- Sun Jul 13 13:31:31 2025
- Next Check
- Sun Jul 13 13:41:31 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming0.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Thu Jul 10 08:44:09 2025
- Last Check
- Sun Jul 13 13:34:08 2025
- Next Check
- Sun Jul 13 13:44:08 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming0.govroam.uk/
Zombie
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Sat Jul 12 12:03:51 2025
- Last Check
- Sun Jul 13 13:33:49 2025
- Next Check
- Sun Jul 13 13:43:49 2025
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
secamb.nhs.uk/secamb-nhs-uk-0/roaming1.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 7.47 ms
- Last State Change
- Thu Jul 3 11:54:31 2025
- Last Check
- Sun Jul 13 13:34:21 2025
- Next Check
- Sun Jul 13 13:44:21 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming1.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:53:47 2025
- Last Check
- Sun Jul 13 13:33:45 2025
- Next Check
- Sun Jul 13 13:43:45 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming1.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Sat Jul 12 12:02:13 2025
- Last Check
- Sun Jul 13 13:32:11 2025
- Next Check
- Sun Jul 13 13:42:11 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming1.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Thu Jul 10 08:44:02 2025
- Last Check
- Sun Jul 13 13:34:00 2025
- Next Check
- Sun Jul 13 13:44:00 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming1.govroam.uk/
Zombie
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Sat Jul 12 12:06:20 2025
- Last Check
- Sun Jul 13 13:36:18 2025
- Next Check
- Sun Jul 13 13:46:18 2025
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
secamb.nhs.uk/secamb-nhs-uk-0/roaming2.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 13.08 ms
- Last State Change
- Thu Jul 3 11:59:46 2025
- Last Check
- Sun Jul 13 13:29:36 2025
- Next Check
- Sun Jul 13 13:39:36 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming2.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:58:47 2025
- Last Check
- Sun Jul 13 13:28:46 2025
- Next Check
- Sun Jul 13 13:38:46 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming2.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Sat Jul 12 12:05:14 2025
- Last Check
- Sun Jul 13 13:35:13 2025
- Next Check
- Sun Jul 13 13:45:13 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming2.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sat Jul 12 23:05:20 2025
- Last Check
- Sun Jul 13 13:35:18 2025
- Next Check
- Sun Jul 13 13:45:18 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming2.govroam.uk/
Zombie
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Sat Jul 12 12:03:13 2025
- Last Check
- Sun Jul 13 13:33:12 2025
- Next Check
- Sun Jul 13 13:43:11 2025
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
secamb.nhs.uk/secamb-nhs-uk-0/roaming3.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 12.61 ms
- Last State Change
- Thu Jul 3 11:58:06 2025
- Last Check
- Sun Jul 13 13:37:56 2025
- Next Check
- Sun Jul 13 13:37:56 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming3.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:58:15 2025
- Last Check
- Sun Jul 13 13:28:14 2025
- Next Check
- Sun Jul 13 13:38:14 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming3.govroam.uk/
Server Shared Secret
- Output
- OK: Good shared secret over last day
- Last State Change
- Sat Jul 12 12:04:46 2025
- Last Check
- Sun Jul 13 13:34:46 2025
- Next Check
- Sun Jul 13 13:44:45 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming3.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sun Jul 13 02:22:15 2025
- Last Check
- Sun Jul 13 13:32:14 2025
- Next Check
- Sun Jul 13 13:42:12 2025
secamb.nhs.uk/secamb-nhs-uk-0/roaming3.govroam.uk/
Zombie
- Output
- CRITICAL: Marked as down within the last day
- Last State Change
- Sat Jul 12 12:05:13 2025
- Last Check
- Sun Jul 13 13:35:11 2025
- Next Check
- Sun Jul 13 13:45:11 2025
- Meaning:
- Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
- Solution:
- An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.
secamb.nhs.uk/secamb-nhs-uk-1/roaming0.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 14.20 ms
- Last State Change
- Thu Jul 3 11:54:17 2025
- Last Check
- Sun Jul 13 13:34:07 2025
- Next Check
- Sun Jul 13 13:44:07 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming0.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:54:55 2025
- Last Check
- Sun Jul 13 13:34:54 2025
- Next Check
- Sun Jul 13 13:44:53 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming0.govroam.uk/
Server Shared Secret
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Thu Jul 10 17:09:49 2025
- Last Check
- Sun Jul 13 13:37:48 2025
- Next Check
- Sun Jul 13 13:47:47 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming0.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Sun Jul 13 03:40:38 2025
- Last Check
- Sun Jul 13 13:30:37 2025
- Next Check
- Sun Jul 13 13:40:37 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming0.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Thu Jul 3 11:52:37 2025
- Last Check
- Sun Jul 13 13:30:35 2025
- Next Check
- Sun Jul 13 13:40:35 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming1.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 13.94 ms
- Last State Change
- Thu Jul 3 11:58:36 2025
- Last Check
- Sun Jul 13 13:28:26 2025
- Next Check
- Sun Jul 13 13:38:26 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming1.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:55:55 2025
- Last Check
- Sun Jul 13 13:35:53 2025
- Next Check
- Sun Jul 13 13:45:53 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming1.govroam.uk/
Server Shared Secret
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Thu Jul 3 11:57:39 2025
- Last Check
- Sun Jul 13 13:35:38 2025
- Next Check
- Sun Jul 13 13:45:38 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming1.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Mon Jul 7 12:04:50 2025
- Last Check
- Sun Jul 13 13:34:48 2025
- Next Check
- Sun Jul 13 13:44:48 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming1.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Thu Jul 3 11:55:18 2025
- Last Check
- Sun Jul 13 13:33:17 2025
- Next Check
- Sun Jul 13 13:43:17 2025
secamb.nhs.uk/secamb-nhs-uk-1/NRPS: roaming2.govroam.uk
(212.219.247.59) -
Port 1812 Drop
/
Bad Client Shared Secret
/
Unknown Client
/
secamb.nhs.uk/secamb-nhs-uk-1/roaming2.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 20.22 ms
- Last State Change
- Thu Jul 3 11:57:49 2025
- Last Check
- Sun Jul 13 13:37:39 2025
- Next Check
- Sun Jul 13 13:47:39 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming2.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:56:56 2025
- Last Check
- Sun Jul 13 13:36:55 2025
- Next Check
- Sun Jul 13 13:46:55 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming2.govroam.uk/
Server Shared Secret
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Thu Jul 3 11:57:15 2025
- Last Check
- Sun Jul 13 13:35:13 2025
- Next Check
- Sun Jul 13 13:45:13 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming2.govroam.uk/
Simple Authentication
- Output
- WARNING: Timeout. No response from RADIUS server
- Last State Change
- Thu Jul 3 11:56:24 2025
- Last Check
- Sun Jul 13 13:34:23 2025
- Next Check
- Sun Jul 13 13:44:22 2025
- Meaning:
- An authentication attempt has been made using generic credentials and no response was received. It's expected that a RADIUS server would respond to non-existent credentials with an Access-Reject and if it didn't then there might be a problem. It's not part of the Tech Spec that all requests should be responded to but it's desirable. It would help us keep better track of your system state. However, be aware that all proxied/EAP requests MUST be responded to.
- Solution:
- Check your RADIUS logs to see what's happening to these requests. The username is 'jisctest' so should stand out. If you can, please ensure that your RADIUS server responds to the requests (with an Access-Reject). Alternatively, enable Status-Server (FreeRADIUS, RADIATOR and radsecproxy support it).
secamb.nhs.uk/secamb-nhs-uk-1/roaming2.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Fri Jul 11 04:56:27 2025
- Last Check
- Sun Jul 13 13:36:26 2025
- Next Check
- Sun Jul 13 13:46:26 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming3.govroam.uk/
Ping
- Output
- PING OK - Packet loss = 0%, RTA = 20.04 ms
- Last State Change
- Thu Jul 3 11:58:07 2025
- Last Check
- Sun Jul 13 13:37:57 2025
- Next Check
- Sun Jul 13 13:37:57 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming3.govroam.uk/
RADIUS Port
- Output
- OK: Port 1812 is probably open, unless there's a DROP firewall
- Last State Change
- Thu Jul 3 11:56:01 2025
- Last Check
- Sun Jul 13 13:35:59 2025
- Next Check
- Sun Jul 13 13:45:59 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming3.govroam.uk/
Server Shared Secret
- Output
- UNKNOWN: No Data. No logs to check for last day
- Last State Change
- Thu Jul 3 12:00:07 2025
- Last Check
- Sun Jul 13 13:28:06 2025
- Next Check
- Sun Jul 13 13:38:06 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming3.govroam.uk/
Simple Authentication
- Output
- OK: Return code is as expected, Access-Reject
- Last State Change
- Fri Jul 11 06:23:46 2025
- Last Check
- Sun Jul 13 13:33:45 2025
- Next Check
- Sun Jul 13 13:43:45 2025
secamb.nhs.uk/secamb-nhs-uk-1/roaming3.govroam.uk/
Zombie
- Output
- UNKNOWN: No Data. No data but not marked as down within the last week
- Last State Change
- Sun Jul 6 05:37:06 2025
- Last Check
- Sun Jul 13 13:37:04 2025
- Next Check
- Sun Jul 13 13:47:04 2025
Called Station ID Check
- Output
- WARNING: 100% Lower case characters in MAC (last: 2025-07-13 11:31:15)
- Last State Change
- Sat Jul 12 11:58:37 2025
- Last Check
- Sun Jul 13 13:28:34 2025
- Next Check
- Sun Jul 13 13:43:33 2025
- Meaning:
-
The Called-Station-ID contains the MAC address of the device the client
connects to as well as, potentially, the SSID of the wireless network it
connected to. The format of the MAC address is specified in RFC
3580 as
'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all
upper case. The SSID should be appended.
Having the Called-Station-ID included in proxied requests makes it possible to ensure that the SSID being broadcast matches the service requirements. - Solution:
- Configure your wireless system to provide the CSI in the RFC3580 format.
Calling Station ID Check
- Output
- WARNING: 100% MAC format wrong, contains lower case (last: 2025-07-13 11:31:15)
- Last State Change
- Sat Jul 12 12:10:25 2025
- Last Check
- Sun Jul 13 13:25:22 2025
- Next Check
- Sun Jul 13 13:40:21 2025
- Meaning:
- Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
- Solution:
- Configure your wireless system to use upper case and '-' separated pairs.
Operator Check
- Output
- OK: 100% Operator-Name present (last: 2025-07-13 11:31:15)
- Last State Change
- Sun Jul 13 11:45:25 2025
- Last Check
- Sun Jul 13 13:30:23 2025
- Next Check
- Sun Jul 13 13:45:23 2025
Realm Syntax Check
- Output
- CRITICAL: 100.0% Realm same as Operator (last: 2025-07-13 11:31:15)
- Last State Change
- Sat Jul 12 12:11:34 2025
- Last Check
- Sun Jul 13 13:26:31 2025
- Next Check
- Sun Jul 13 13:41:31 2025
- Meaning:
- The syntax of a realm proxied does not match what's acceptable. A realm should be in the format of 'realm.tld' or 'something.site.tld' and shouldn't have '..' or start or end with '.', shouldn't contain characters other than '0-9a-zA-Z-.', shouldn't be empty or missing. Since these realms are entered by end-users typos are possible. Obviously the NRPS should never see the site's own realm proxied as that could cause loops.
- Solution:
- Filter out syntactically invalid realms, don't proxy them.
VLAN Check
- Output
- OK: 100% No VLAN attr present (last: 2025-07-13 11:31:15)
- Last State Change
- Sat Jul 12 12:02:41 2025
- Last Check
- Sun Jul 13 13:32:40 2025
- Next Check
- Sun Jul 13 13:47:38 2025