Group administrators:
Recent members:
Azure RADIUS servers, ICMP and eduroam UK
eduroam(UK) Test of Basic Network Connectivity to your ORPS
The eduroam UK technical specification mandates that an organisations' ORPS must be PINGable from the three National RADIUS Proxy servers (NRPS) and the eduroam UK support server. This is all part of basic traffic light monitoring (red/amber/green) so we have a 'is the server up?' answer when troubleshooting. (We're moving to Status-Server in-band RADIUS checking where possible, but neither NPS nor ISE (nor previous versions - IAS or ACS) support that.
However, Azure blocks ICMP, so PING is unavailable.
So, because we have dealt with a simiular issue in the past (related to Cisco ACS/ISE appliance hardening), we have leveraged the same solution, instead of PING, we will do a TCP check against port 2002.
So, for your Azure instances, you just need something listening on TCP port 2002 - a basic 'netcat' or 'faucet' process will do. A blank web server if you must...