Forum Discussion

Sero_83363's avatar
Sero_83363
Icon for Nimbostratus rankNimbostratus
Jul 23, 2012

RADIUS Iapp and accounting

Hi

 

 

I am using the RADIUS Iapp with 2 Cisco ACS 5.3 appliances.

 

I am running a Big IP 3090 on 11.2

 

The RADIUS authentication monitor is working OK. But the accounting monitor is failing.

 

Looking at the monitor debug it seems that the RADIUS server never responds to the f5.

 

The RADIUS server shows the following error messages.

 

 

 

11014 RADIUS packet contains invalid attribute(s)

 

 

 

And in the detail

 

 

 

ACSVersion=acs-5.3.0.40-B.839

 

ConfigVersionId=64

 

Device Port=40711

 

RadiusPacketType=AccountingRequest

 

UserName=xxxxxxxxx

 

Protocol=Radius

 

DetailedInfo=AcctSessionId is missing

 

Response={RadiusPacketType=Drop; }

 

Device IP Address=x.x.x.x

 

 

 

 

So it seems that the accountsessionid is not being sent by the f5.

 

Has anyone managed to get this to work Cisco ACS 5.3?

 

 

 

Appreciate any help\advice

 

 

Thanks,

 

 

Andy

 

automation
devops
iApps
management
TMSH
  • Mitra_Kelly_625's avatar
    Mitra_Kelly_625
    Historic F5 Account
    Jul 24, 2012
    This appears to be a problem in the radius-accounting monitor, which this template applies. I have opened a bug on the problem. I don't know that I can think of a workaround for this, since the monitor itself seems to be the problem. I will update this when I get some further information back from the developers.