Realm: wth.nhs.uk Full

wth.nhs.uk/ORPS: wth-nhs-uk-0

wth.nhs.uk/wth-nhs-uk-0/NRPS: roaming0.govroam.uk (212.219.190.139) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-0/roaming0.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 10.21 ms
Last State Change: Fri Feb 6 12:19:24 2026
Last Check: Fri Feb 13 07:19:14 2026
Next Check: Fri Feb 13 07:29:14 2026

wth.nhs.uk/wth-nhs-uk-0/roaming0.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:18:45 2026
Last Check: Fri Feb 13 07:18:43 2026
Next Check: Fri Feb 13 07:28:43 2026

wth.nhs.uk/wth-nhs-uk-0/roaming0.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:20:56 2026
Last Check: Fri Feb 13 07:20:55 2026
Next Check: Fri Feb 13 07:30:55 2026

wth.nhs.uk/wth-nhs-uk-0/roaming0.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Mon Feb 9 08:40:15 2026
Last Check: Fri Feb 13 07:20:12 2026
Next Check: Fri Feb 13 07:30:12 2026

wth.nhs.uk/wth-nhs-uk-0/roaming0.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Fri Feb 6 12:20:22 2026
Last Check: Fri Feb 13 07:18:21 2026
Next Check: Fri Feb 13 07:28:21 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-0/NRPS: roaming1.govroam.uk (212.219.209.43) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-0/roaming1.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 11.15 ms
Last State Change: Fri Feb 6 12:18:17 2026
Last Check: Fri Feb 13 07:18:07 2026
Next Check: Fri Feb 13 07:28:07 2026

wth.nhs.uk/wth-nhs-uk-0/roaming1.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:21:11 2026
Last Check: Fri Feb 13 07:21:09 2026
Next Check: Fri Feb 13 07:31:09 2026

wth.nhs.uk/wth-nhs-uk-0/roaming1.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:19:57 2026
Last Check: Fri Feb 13 07:19:56 2026
Next Check: Fri Feb 13 07:29:56 2026

wth.nhs.uk/wth-nhs-uk-0/roaming1.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Tue Feb 10 11:28:50 2026
Last Check: Fri Feb 13 07:18:48 2026
Next Check: Fri Feb 13 07:28:48 2026

wth.nhs.uk/wth-nhs-uk-0/roaming1.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Wed Feb 11 14:07:11 2026
Last Check: Fri Feb 13 07:27:10 2026
Next Check: Fri Feb 13 07:37:10 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-0/NRPS: roaming2.govroam.uk (212.219.247.59) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-0/roaming2.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 16.21 ms
Last State Change: Fri Feb 6 12:24:33 2026
Last Check: Fri Feb 13 07:24:24 2026
Next Check: Fri Feb 13 07:34:23 2026

wth.nhs.uk/wth-nhs-uk-0/roaming2.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:20:35 2026
Last Check: Fri Feb 13 07:20:34 2026
Next Check: Fri Feb 13 07:30:34 2026

wth.nhs.uk/wth-nhs-uk-0/roaming2.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:22:30 2026
Last Check: Fri Feb 13 07:22:28 2026
Next Check: Fri Feb 13 07:32:28 2026

wth.nhs.uk/wth-nhs-uk-0/roaming2.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Mon Feb 9 16:09:50 2026
Last Check: Fri Feb 13 07:19:47 2026
Next Check: Fri Feb 13 07:29:47 2026

wth.nhs.uk/wth-nhs-uk-0/roaming2.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Wed Feb 11 11:09:22 2026
Last Check: Fri Feb 13 07:19:20 2026
Next Check: Fri Feb 13 07:29:20 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-0/NRPS: roaming3.govroam.uk (195.194.21.203) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-0/roaming3.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 16.46 ms
Last State Change: Fri Feb 6 12:20:53 2026
Last Check: Fri Feb 13 07:20:43 2026
Next Check: Fri Feb 13 07:30:43 2026

wth.nhs.uk/wth-nhs-uk-0/roaming3.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:22:22 2026
Last Check: Fri Feb 13 07:22:20 2026
Next Check: Fri Feb 13 07:32:20 2026

wth.nhs.uk/wth-nhs-uk-0/roaming3.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:23:01 2026
Last Check: Fri Feb 13 07:22:59 2026
Next Check: Fri Feb 13 07:32:59 2026

wth.nhs.uk/wth-nhs-uk-0/roaming3.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Mon Feb 9 08:44:33 2026
Last Check: Fri Feb 13 07:24:30 2026
Next Check: Fri Feb 13 07:34:30 2026

wth.nhs.uk/wth-nhs-uk-0/roaming3.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Wed Feb 11 11:31:10 2026
Last Check: Fri Feb 13 07:21:09 2026
Next Check: Fri Feb 13 07:31:09 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/ORPS: wth-nhs-uk-1

wth.nhs.uk/wth-nhs-uk-1/NRPS: roaming0.govroam.uk (212.219.190.139) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-1/roaming0.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 9.50 ms
Last State Change: Fri Feb 6 12:20:54 2026
Last Check: Fri Feb 13 07:20:44 2026
Next Check: Fri Feb 13 07:30:44 2026

wth.nhs.uk/wth-nhs-uk-1/roaming0.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:17:51 2026
Last Check: Fri Feb 13 07:27:50 2026
Next Check: Fri Feb 13 07:37:50 2026

wth.nhs.uk/wth-nhs-uk-1/roaming0.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:18:16 2026
Last Check: Fri Feb 13 07:18:14 2026
Next Check: Fri Feb 13 07:28:14 2026

wth.nhs.uk/wth-nhs-uk-1/roaming0.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Fri Feb 6 12:21:50 2026
Last Check: Fri Feb 13 07:21:47 2026
Next Check: Fri Feb 13 07:31:47 2026

wth.nhs.uk/wth-nhs-uk-1/roaming0.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Fri Feb 6 12:19:02 2026
Last Check: Fri Feb 13 07:27:01 2026
Next Check: Fri Feb 13 07:37:01 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-1/NRPS: roaming1.govroam.uk (212.219.209.43) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-1/roaming1.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 9.91 ms
Last State Change: Fri Feb 6 12:20:29 2026
Last Check: Fri Feb 13 07:20:19 2026
Next Check: Fri Feb 13 07:30:19 2026

wth.nhs.uk/wth-nhs-uk-1/roaming1.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:18:02 2026
Last Check: Fri Feb 13 07:18:01 2026
Next Check: Fri Feb 13 07:28:01 2026

wth.nhs.uk/wth-nhs-uk-1/roaming1.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Thu Feb 12 17:05:21 2026
Last Check: Fri Feb 13 07:25:20 2026
Next Check: Fri Feb 13 07:35:18 2026

wth.nhs.uk/wth-nhs-uk-1/roaming1.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Sat Feb 7 20:06:37 2026
Last Check: Fri Feb 13 07:26:34 2026
Next Check: Fri Feb 13 07:36:34 2026

wth.nhs.uk/wth-nhs-uk-1/roaming1.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Mon Feb 9 14:40:03 2026
Last Check: Fri Feb 13 07:20:01 2026
Next Check: Fri Feb 13 07:30:01 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-1/NRPS: roaming2.govroam.uk (212.219.247.59) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-1/roaming2.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 16.41 ms
Last State Change: Fri Feb 6 12:21:42 2026
Last Check: Fri Feb 13 07:21:32 2026
Next Check: Fri Feb 13 07:31:32 2026

wth.nhs.uk/wth-nhs-uk-1/roaming2.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:20:58 2026
Last Check: Fri Feb 13 07:20:56 2026
Next Check: Fri Feb 13 07:30:56 2026

wth.nhs.uk/wth-nhs-uk-1/roaming2.govroam.uk/ Server Shared Secret

Output: UNKNOWN: No Data. No logs to check for last day
Last State Change: Fri Feb 6 12:22:05 2026
Last Check: Fri Feb 13 07:20:04 2026
Next Check: Fri Feb 13 07:30:04 2026

wth.nhs.uk/wth-nhs-uk-1/roaming2.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Tue Feb 10 13:42:38 2026
Last Check: Fri Feb 13 07:22:36 2026
Next Check: Fri Feb 13 07:32:36 2026

wth.nhs.uk/wth-nhs-uk-1/roaming2.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Mon Feb 9 14:39:47 2026
Last Check: Fri Feb 13 07:19:45 2026
Next Check: Fri Feb 13 07:29:45 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

wth.nhs.uk/wth-nhs-uk-1/NRPS: roaming3.govroam.uk (195.194.21.203) - Dropping Auth Requests /

wth.nhs.uk/wth-nhs-uk-1/roaming3.govroam.uk/ Ping

Output: PING OK - Packet loss = 0%, RTA = 16.88 ms
Last State Change: Fri Feb 6 12:22:33 2026
Last Check: Fri Feb 13 07:22:23 2026
Next Check: Fri Feb 13 07:32:23 2026

wth.nhs.uk/wth-nhs-uk-1/roaming3.govroam.uk/ RADIUS Port

Output: OK: Port 1812 is probably open, unless there's a DROP firewall
Last State Change: Fri Feb 6 12:20:40 2026
Last Check: Fri Feb 13 07:20:38 2026
Next Check: Fri Feb 13 07:30:38 2026

wth.nhs.uk/wth-nhs-uk-1/roaming3.govroam.uk/ Server Shared Secret

Output: OK: Good shared secret over last day
Last State Change: Fri Feb 6 12:20:25 2026
Last Check: Fri Feb 13 07:20:24 2026
Next Check: Fri Feb 13 07:30:24 2026

wth.nhs.uk/wth-nhs-uk-1/roaming3.govroam.uk/ Simple Authentication

Output: OK: Return code is as expected, Access-Reject
Last State Change: Fri Feb 6 13:26:14 2026
Last Check: Fri Feb 13 07:26:11 2026
Next Check: Fri Feb 13 07:36:10 2026

wth.nhs.uk/wth-nhs-uk-1/roaming3.govroam.uk/ Zombie

Output: CRITICAL: Marked as down within the last day
Last State Change: Mon Feb 9 08:22:23 2026
Last Check: Fri Feb 13 07:22:21 2026
Next Check: Fri Feb 13 07:32:21 2026

Meaning:: Over the last day, the ORPS has been marked as 'down' by the NRPS. A server is marked as 'down' (or a Zombie) if it doesn't respond to an authentication query within 30s. If the ORPS is serving a Federation then the chances are that one of the Federation members isn't responding to a proxied query. If the ORPS isn't serving a Federation then it's a problem with the local configuration.
Solution:: An independently connected site needs to fix the configuration to ensure that the ORPS is sending a response to ALL auth requests. A Federation Operator nedds to check their logs to determine which members aren't sending responses and help them correct their configuration.

Called Station ID Check

Output: WARNING: 100% Missing Called-Station-Id (last: 2026-02-13 07:20:04)
Last State Change: Tue Feb 3 08:40:12 2026
Last Check: Fri Feb 13 07:20:09 2026
Next Check: Fri Feb 13 07:35:08 2026

Meaning:: The Called-Station-ID contains the MAC address of the device the client connects to as well as, potentially, the SSID of the wireless network it connected to. The format of the MAC address is specified in RFC 3580 as 'XX-XX-XX-XX-XX-XX:SSID' with '-' being the only valid separator and all upper case. The SSID should be appended.
Having the Called-Station-ID included in proxied requests makes it possible to ensure that the SSID being broadcast matches the service requirements.
Solution:: Configure your wireless system to provide the CSI in the RFC3580 format.

Calling Station ID Check

Output: WARNING: 2% MAC format wrong, missing separator (last: 2026-02-13 07:18:10). 97% MAC format wrong, contains lower case (last: 2026-02-13 07:22:10)
Last State Change: Tue Feb 3 08:43:49 2026
Last Check: Fri Feb 13 07:23:46 2026
Next Check: Fri Feb 13 07:38:46 2026

Meaning:: Calling Station ID identifies the device making the connection and RFC 3580 states that the format should be XX-XX-XX-XX-XX-XX (i.e. '-' separated and upper case).
Solution:: Configure your wireless system to use upper case and '-' separated pairs.

Operator Check

Output: WARNING: 100% Missing Operator-Name (last: 2026-02-13 07:22:10)
Last State Change: Tue Feb 3 08:44:44 2026
Last Check: Fri Feb 13 07:24:39 2026
Next Check: Fri Feb 13 07:39:39 2026

Meaning:: Operator-Name is missing from RADIUS requests. Operator-Name identifies the site sending the requests and is used by home sites in audit trails and in cases of mis-use.
Solution:: Where possible (FreeRADIUS, radsecproxy, RADIATOR) Operator-Name should be configured to send the site identifier (in the format 1realm.name e.g. 1holby.nhs.uk).

Realm Syntax Check

Output: OK: 100.0% Good syntax (last: 2026-02-13 07:25:22)
Last State Change: Thu Feb 12 14:55:27 2026
Last Check: Fri Feb 13 07:25:24 2026
Next Check: Fri Feb 13 07:40:24 2026

VLAN Check

Output: OK: 100% No VLAN attr present (last: 2026-02-13 07:26:06)
Last State Change: Tue Feb 3 08:41:07 2026
Last Check: Fri Feb 13 07:26:07 2026
Next Check: Fri Feb 13 07:41:05 2026