I am currently configuring two Aruba 505 IAP's to use RADIUS authentication with our AD. The virtual controller and the server are found in separate VLANs, with the Check Point firewall between them. We observed, using tcp dumps and Wireshark, that the RADIUS packets sent by the controller would travel through the firewall and make it to the server, but the controller would never receive a access allow or deny message from the server.In other words the RADIUS packets sent by the server to the controller were lost, with no logs from the firewall.
To confirm that the controller and server RADIUS configuration were correct, we temporarily moved the AP's and controller to the server network segment to bypass the firewall. When in the same segment the RADIUS authentication was working just fine between them.
Creating an IPSEC tunnel between the controller and server are out of the equation, since the client desires traffic between the two to be visible by the firewall. I have confirmed that the firewall Allows IP Fragments to go through, since I saw that others had this issue with RADIUS.
The controller and server can communicate with each other through the firewall using ping. We are using a 5000 appliance with Gaia OS R80.30.
Any help would be greatly appreciated, thanks!
