RCA-2026-03-09-001: NetworkManager EAP-TLS Static IP

Executive Summary

The Domus-Wired-EAP-TLS connection on modestus-razer lost its static IP configuration (10.50.1.106/24) and had only a single DNS server configured, breaking DNS HA. Root cause: connection was configured with ipv4.method auto (DHCP) instead of ipv4.method manual.

Timeline

Time Event

2026-03-09 ~10:00

Noticed resolv.conf only had single DNS (10.50.1.90)

2026-03-09 ~10:05

Investigated nmcli, found Domus-Wired-EAP-TLS down

2026-03-09 ~10:10

Identified missing static IP configuration

2026-03-09 ~10:15

Applied fix with nmcli

2026-03-09 ~10:16

Verified connectivity and DNS HA

Problem Statement

Symptoms

  • cat /etc/resolv.conf showed only nameserver 10.50.1.90 (missing bind-02)

  • Domus-Wired-EAP-TLS connection was down

  • No static IP assigned to EAP-TLS interface

Expected Behavior

  • Static IP: 10.50.1.106/24

  • Gateway: 10.50.1.1 (VyOS VIP)

  • DNS: 10.50.1.90 AND 10.50.1.91 for HA

Metadata

Field Value

RCA ID

RCA-2026-03-09-001

Author

Evan Rosado

Date Created

2026-03-09

Status

Final

Category

Network / 802.1X Authentication