For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Naumin_Dave_144's avatar
Naumin_Dave_144
Icon for Nimbostratus rankNimbostratus
May 09, 2014

APM Two factor Radius Authentication Issue

Hi All, I've setup the F5 APM for one of our client in partition VPN(Partition No:2), which is working fine, but adding two factor authentication is proving to be quite difficult. My access policy flow is: 1. client hit to the AD Auth, where It asks for username and password. 2. Thn after successful attempt, it asks for Radius Authentication to Vasco server. where Vasco generates OTP for particular Listed clients. 3. After entering OTP, it fails to access to the server with error (error: Invalid Server IP(0)/Port(0)). I am using 11.5.0 with hotfix 3 and in configuration i used AAA servers AD, Radius and LDAP and placed all of them in VPN partition. it works fine without Radius server(2nd factor authentication). Issue is only with Radius. Please suggest something. Really appreciated.

 

BIG-IP Access Policy Manager (APM)
design
security

2 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    May 09, 2014

    Can you isolate this to just do radius auth without ad auth? If still the same error chances are this is bug on the partition support. To confirm you can test from the administrative partition(/Common).

     

  • Naumin_Dave_144's avatar
    Naumin_Dave_144
    Icon for Nimbostratus rankNimbostratus
    May 09, 2014

    First of all i wana thank you for ur very relavent comment.I already test with moving all AAA servers in common partition. But I m still facing the same issue. So now I m gona test it with only use of radius server. Nd vl be back with whatever result I vl get. Thank you.