One could assume that the iPhone doesn't stop communicating during the night long enough for the re-authentication to happen.We have a Windows Network Policy Server setup as the RADIUS server, with Unifi APs providing the WiFi that require AD credentials to connect.

maybe because connections between Airport and NAS are using IP address? That would imply that there's an expected Subject Alternateive Name that I haven't added to the certificate, but I haven't checked what needs to be added. The certificate from the NAS is said to be untrusted (both devices said this) even though it's from LE. But the MacBook needed two goes at adding the network (forgetting the first try) before it worked. When I first connected to this SSID I had to add trust for the certificate from the NAS. There's more info shown in the Network setup stating '802.1X: Default' which I'm assuming is 'any device can connect' and authenticated via EAP-PEAP (MSCHAPv2). Haven't used WPA2 Enterprise authentication before from the MacBook. After waking it, it took longer to re-authentcate, but wouldn't say 30 seconds more like 10-15s. The MacBook was hibernating for much longer. Is there a WPA key regeneration that's causing any issue? Mine is set to 1 day on the Airport. Set Airport's NTP to use the DSM NTP service which cleated out those warnings. Haven't seen any errors in syslog just notices and a couple of warnings. Stopped using the iPhone and 6-7 hours later picked it up and it had the WiFi connection working. The Radius protocol at that time, shows many lines similar to those below: Most of the time the clients get immediate access to Wifi after this action. Most of the time I'm switching off Wifi int the meantime and turn it on again. The client (Android devices) that use the EAP protocol in their settings, take long time until they fully authenticate. This is fairly straightforward and works almost all the time.įor fallback reasons, I'm running a Radius server on my DS916+ as well as on my DS918+, both diskstations are member of my AD of course and both Radius servers are configured in all Unifi AP.įrom time to time, however, I'm facing some login issues with my Wifi. Radius server itself authenticates against my Active Directory on Synology, too. I'm running some Ubiquiti/Unifi access points that are authenticating against Radius server on Synology NAS.

Since package Radius server does not have any dedicated forum I'm posting this here, because it may be related to Synology Directory Server, too.

Radius login incorrect