Eduroam, EAP-TLS and a Dropped Packet Fragment
Students from a visiting school could not get onto eduroam using certificates. The cause turned out to be an ACL in our own network quietly dropping the non-initial fragments of large RADIUS packets.
tag: RADIUS